$ rpki-client -vvvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft File: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft (raw, json) Hash identifier: bDxgzTs7piIPMCDiE9+bp9m2EKwMQ6MLFp+p3IzQHGs= Subject key identifier: 7F:09:F9:FA:25:F8:E0:50:31:F6:23:38:7B:FC:A4:F3:A8:ED:DE:2A Authority key identifier: CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7 Certificate issuer: /CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7 Certificate serial: 4C9EDE7D19BFBE617AF6B1ABC1AD3C70EFF25B09 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft Manifest number: 0149 Signing time: Sun 11 Oct 2026 08:48:57 +0000 Manifest this update: Sun 11 Oct 2026 08:43:57 +0000 Manifest next update: Mon 12 Oct 2026 11:11:57 +0000 Files and hashes: 1: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: sHP2ygrqTYTY15dtbi0gTVuddZSIHRSH0IyS1EMxOo4=) 2: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: rqFpRbi2nHQnPx4E/BliB9kjTJF3Fdr2CbPUaChmPDo=) 3: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl (hash: /JHR+0nUGiGSBemD9xiUJQDRAkvs98/TKHHmufQquqY=) 4: 3230302e3139322e3135322e302f32322d3234203d3e203631363133.roa (hash: u/gXstXvaoXswmUY2weSiF3XDVA5+Rjw0+u0Ea1eciY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 11:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9e:de:7d:19:bf:be:61:7a:f6:b1:ab:c1:ad:3c:70:ef:f2:5b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7 Validity Not Before: Oct 11 08:43:57 2026 GMT Not After : Oct 12 11:11:57 2026 GMT Subject: CN=7F09F9FA25F8E05031F623387BFCA4F3A8EDDE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:44:ce:d8:63:1e:a2:8e:a7:8a:ff:d7:c8: b4:13:66:cd:75:37:35:c0:9f:a5:34:b8:3a:41:36: 56:c1:83:6d:e9:5a:27:9c:07:06:5a:78:26:a1:18: 4b:d1:f9:52:6a:e6:d2:11:9f:14:f0:f4:0c:70:fb: 16:59:d5:af:2f:e0:b2:03:57:9e:ef:b7:5a:11:00: 6e:6c:be:c3:b0:b7:98:7a:4f:c8:c4:11:e6:3a:ad: a5:3a:61:b6:b9:40:2a:14:02:fb:8c:65:d4:0f:d8: 15:07:08:65:d6:50:f8:1c:d5:a5:ba:89:d9:97:ee: 84:a4:9e:1c:33:bf:cd:ef:7f:b0:b5:fc:9f:8a:48: 87:3d:9a:5e:cb:49:bc:0f:ab:86:26:e6:8c:b7:78: 8f:33:46:de:bf:fb:1a:81:60:96:aa:a0:a9:d1:ac: 79:13:2b:c0:7b:e0:26:fa:52:a5:f3:63:fc:e4:60: fb:d6:1c:32:2b:1b:d3:ae:10:d4:67:96:c9:b2:25: a0:55:82:2d:be:be:96:44:48:8f:30:f1:e2:b9:ef: 84:63:1d:5f:ce:8f:58:cb:9d:a1:1c:fb:f1:7d:f3: 13:d8:c4:04:d9:c0:ad:ad:4f:ad:11:8e:2e:78:34: a3:96:b1:5c:dc:04:02:3e:83:ee:51:af:90:de:46: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:F9:FA:25:F8:E0:50:31:F6:23:38:7B:FC:A4:F3:A8:ED:DE:2A X509v3 Authority Key Identifier: keyid:CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f0:f3:68:20:4d:bf:e4:89:a2:bc:6b:44:76:23:61:2c:ce: f3:77:ac:81:15:fe:51:94:74:21:ae:ac:fd:bd:c1:aa:7e:0f: c8:82:ed:3a:0a:74:a8:ee:55:0b:95:89:b4:a4:05:64:91:68: 2a:9c:82:8d:07:15:cf:1b:e1:60:76:9c:4b:ca:fe:38:93:54: a3:89:ed:4b:96:d9:2e:e1:fa:15:52:92:9c:c3:62:60:f4:20: e4:10:99:57:d8:4e:81:5b:92:bf:2f:4f:14:a4:ba:8d:6b:20: cb:ef:39:d2:e1:9b:8a:a4:23:ad:82:c3:9b:a5:bd:1b:6a:c5: 87:91:3f:bd:5d:46:d9:38:60:48:24:4d:31:4a:19:2f:2c:c8: e7:c8:8c:a5:8e:c8:2b:b1:9e:81:b8:c6:b5:ff:2a:bc:c6:ef: 49:a1:2b:1d:a1:c5:27:26:e6:a3:53:d2:59:ee:37:a6:5e:27: cc:51:57:15:18:74:40:10:06:b4:57:0a:64:3d:90:1c:af:fd: c1:26:03:d9:9c:60:96:2b:46:36:b0:8f:e6:47:c0:54:c3:92: 9e:ad:64:bc:ea:21:23:04:e0:4c:90:e7:0a:a5:2a:3d:03:c8: a1:62:2e:31:cc:c1:c6:c6:a0:b8:d5:5b:4e:5e:bc:6e:66:68: 54:a0:e4:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTJ7efRm/vmF69rGrwa08cO/yWwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UzQzIwN0U2Q0VDQjk0QzhCQkNCNjZDMkM1QjMxQjI5 RkEyMjBCNzAeFw0yNjEwMTEwODQzNTdaFw0yNjEwMTIxMTExNTdaMDMxMTAvBgNV BAMTKDdGMDlGOUZBMjVGOEUwNTAzMUY2MjMzODdCRkNBNEYzQThFRERFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPkTO2GMeoo6niv/XyLQTZs11 NzXAn6U0uDpBNlbBg23pWiecBwZaeCahGEvR+VJq5tIRnxTw9Axw+xZZ1a8v4LID V57vt1oRAG5svsOwt5h6T8jEEeY6raU6Yba5QCoUAvuMZdQP2BUHCGXWUPgc1aW6 idmX7oSknhwzv83vf7C1/J+KSIc9ml7LSbwPq4Ym5oy3eI8zRt6/+xqBYJaqoKnR rHkTK8B74Cb6UqXzY/zkYPvWHDIrG9OuENRnlsmyJaBVgi2+vpZESI8w8eK574Rj HV/Oj1jLnaEc+/F98xPYxATZwK2tT60Rji54NKOWsVzcBAI+g+5Rr5DeRnN7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfwn5+iX44FAx9iM4e/yk86jt3iowHwYDVR0j BBgwFoAUzjwgfmzsuUyLvLZsLFsxsp+iILcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU d1QvMC9DRTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFM0MyMDdFNkNFQ0I5NEM4 QkJDQjY2QzJDNUIzMUIyOUZBMjIwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhUd1QvMC9D RTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlvDzaCBNv+SJorxrRHYjYSzO83esgRX+UZR0Ia6s/b3Bqn4PyILtOgp0qO5V C5WJtKQFZJFoKpyCjQcVzxvhYHacS8r+OJNUo4ntS5bZLuH6FVKSnMNiYPQg5BCZ V9hOgVuSvy9PFKS6jWsgy+850uGbiqQjrYLDm6W9G2rFh5E/vV1G2ThgSCRNMUoZ LyzI58iMpY7IK7GegbjGtf8qvMbvSaErHaHFJybmo1PSWe43pl4nzFFXFRh0QBAG tFcKZD2QHK/9wSYD2ZxglitGNrCP5kfAVMOSnq1kvOohIwTgTJDnCqUqPQPIoWIu MczBxsaguNVbTl68bmZoVKDkEg== -----END CERTIFICATE-----Generated at Sun Oct 11 16:42:42 2026 by rpki-client