$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft File: 5A98F4FF217501200D2C8EBD339154643172DC4A.mft (raw, json) Hash identifier: y0Fj+LZAyHQvHuVitOte8nrbuOpfJVYrNGl9QuFCDzI= Subject key identifier: 10:34:F9:AF:06:A5:D4:93:37:28:4E:CA:B2:23:23:1F:54:CA:34:40 Authority key identifier: 5A:98:F4:FF:21:75:01:20:0D:2C:8E:BD:33:91:54:64:31:72:DC:4A Certificate issuer: /CN=5A98F4FF217501200D2C8EBD339154643172DC4A Certificate serial: 36A76CC34C2AE72039AB5160D052428E60171AE5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft Manifest number: 5C Signing time: Sun 01 Nov 2026 04:33:08 +0000 Manifest this update: Sun 01 Nov 2026 04:28:08 +0000 Manifest next update: Mon 02 Nov 2026 05:08:08 +0000 Files and hashes: 1: 5A98F4FF217501200D2C8EBD339154643172DC4A.crl (hash: XV+KC64pCX+uQBkLuGytJELCjC3jRREDLNIqE4V4EHM=) 2: 3137372e37322e3136342e302f32322d3332203d3e203532383237.roa (hash: FC1ciLDXOmy4Hfkhtgh0quCDc6+iRpZ7mGS1KnfZ/1U=) 3: 323830343a333238383a3a2f33322d313238203d3e203532383237.roa (hash: llTM3ut3XM/mNSGow8HoU0l+2p2gjZmykDeorjkZlF0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.crl rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 05:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a7:6c:c3:4c:2a:e7:20:39:ab:51:60:d0:52:42:8e:60:17:1a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A98F4FF217501200D2C8EBD339154643172DC4A Validity Not Before: Nov 1 04:28:08 2026 GMT Not After : Nov 2 05:08:08 2026 GMT Subject: CN=1034F9AF06A5D49337284ECAB223231F54CA3440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:91:0e:1c:aa:8a:2e:17:ab:56:02:6c:42: be:06:11:3f:94:c8:5e:eb:70:bb:df:2a:40:93:af: 30:63:5e:c1:8c:95:6c:a6:72:fd:d4:de:be:2a:5c: 7c:6f:68:b1:bb:ad:98:19:82:64:34:64:27:0d:51: 9a:4d:f3:71:19:c9:ea:29:1d:9e:3c:06:47:c0:3b: 44:5c:7a:5c:81:8b:9f:4b:1b:ee:e3:55:f0:9e:44: 37:a8:34:6c:03:f2:80:c3:31:64:2e:b2:08:25:7c: d3:d6:9c:fb:f8:f6:22:3e:32:7d:b4:d3:5b:11:22: 73:a5:38:8b:4a:20:da:e3:fa:91:00:69:8d:b6:ea: d6:a7:15:0d:d3:6c:61:2f:7a:81:75:5f:b1:9c:2d: 08:43:de:83:a8:81:38:1b:ae:4b:a8:40:a6:8c:26: 39:09:48:ee:db:20:d6:ad:26:1f:b9:f2:1b:6d:ae: f5:0e:81:bd:43:3d:46:f7:7c:d1:e6:28:43:8b:06: 97:59:66:27:31:d3:11:59:4f:2b:30:07:67:e7:25: 5d:ab:11:bd:d2:ac:76:73:b4:9c:29:1e:9e:a4:bc: e6:6d:66:fd:1d:4b:5b:c7:e0:89:82:12:d8:a3:55: 69:58:13:ca:e6:d2:e0:93:8f:6c:98:79:33:c9:3f: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:F9:AF:06:A5:D4:93:37:28:4E:CA:B2:23:23:1F:54:CA:34:40 X509v3 Authority Key Identifier: keyid:5A:98:F4:FF:21:75:01:20:0D:2C:8E:BD:33:91:54:64:31:72:DC:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:0c:9d:77:08:94:0a:73:9a:67:6b:52:e1:4f:fe:99:8a:47: fc:b0:c5:da:b0:b5:b9:f2:14:35:b2:71:b0:6b:2d:3b:da:b0: e0:29:09:b1:c4:c7:06:80:7c:91:4a:3f:a6:d3:97:ce:ee:d4: 82:70:2b:2b:61:4e:42:f9:29:7e:75:89:db:cf:1e:00:e5:84: 73:7f:f4:ab:cd:0a:e5:9b:8a:5c:e2:cb:e3:2d:5b:ad:ce:85: 41:fb:8f:46:f5:4e:33:f9:c9:21:1e:ad:13:bf:94:26:a1:78: 4e:18:93:32:43:be:c0:d8:15:71:5f:69:37:d1:6d:c3:94:66: 08:6a:7c:d0:ad:ca:50:a0:b5:72:ad:2c:fe:c9:fe:ea:f8:01: d2:72:46:48:df:5e:09:c0:97:43:fc:40:1c:46:11:7c:7e:c5: 5b:5d:a5:02:22:c1:fd:e3:14:f6:bb:f2:c2:2a:41:a0:14:5c: 43:73:65:7f:78:a8:1a:74:33:69:39:90:66:5c:fe:38:89:9b: 2a:d0:0f:ca:cf:ca:b2:46:70:63:16:cf:10:8d:b7:38:4d:68: 6f:1f:de:c5:91:0d:94:61:b9:73:33:86:00:b5:bc:3a:23:b0: b2:0b:0d:ee:1c:e5:8c:12:67:ce:56:36:ca:85:22:a8:dd:e1: 2c:d9:e2:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNqdsw0wq5yA5q1Fg0FJCjmAXGuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE5OEY0RkYyMTc1MDEyMDBEMkM4RUJEMzM5MTU0NjQz MTcyREM0QTAeFw0yNjExMDEwNDI4MDhaFw0yNjExMDIwNTA4MDhaMDMxMTAvBgNV BAMTKDEwMzRGOUFGMDZBNUQ0OTMzNzI4NEVDQUIyMjMyMzFGNTRDQTM0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3JEOHKqKLherVgJsQr4GET+U yF7rcLvfKkCTrzBjXsGMlWymcv3U3r4qXHxvaLG7rZgZgmQ0ZCcNUZpN83EZyeop HZ48BkfAO0RcelyBi59LG+7jVfCeRDeoNGwD8oDDMWQusgglfNPWnPv49iI+Mn20 01sRInOlOItKINrj+pEAaY226tanFQ3TbGEveoF1X7GcLQhD3oOogTgbrkuoQKaM JjkJSO7bINatJh+58httrvUOgb1DPUb3fNHmKEOLBpdZZicx0xFZTyswB2fnJV2r Eb3SrHZztJwpHp6kvOZtZv0dS1vH4ImCEtijVWlYE8rm0uCTj2yYeTPJP6gdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEDT5rwal1JM3KE7KsiMjH1TKNEAwHwYDVR0j BBgwFoAUWpj0/yF1ASANLI69M5FUZDFy3EowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDliOXFOQ0pNcEJqa0dvSnVDM2hndlpWcFV5VFZtZDFTc0xnYmpuem9t dGQvMC81QTk4RjRGRjIxNzUwMTIwMEQyQzhFQkQzMzkxNTQ2NDMxNzJEQzRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBOThGNEZGMjE3NTAxMjAw RDJDOEVCRDMzOTE1NDY0MzE3MkRDNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDliOXFOQ0pNcEJqa0dvSnVDM2hndlpWcFV5VFZtZDFTc0xnYmpuem9tdGQvMC81 QTk4RjRGRjIxNzUwMTIwMEQyQzhFQkQzMzkxNTQ2NDMxNzJEQzRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvAyddwiUCnOaZ2tS4U/+mYpH/LDF2rC1ufIUNbJxsGstO9qw4CkJscTHBoB8 kUo/ptOXzu7UgnArK2FOQvkpfnWJ288eAOWEc3/0q80K5ZuKXOLL4y1brc6FQfuP RvVOM/nJIR6tE7+UJqF4ThiTMkO+wNgVcV9pN9Ftw5RmCGp80K3KUKC1cq0s/sn+ 6vgB0nJGSN9eCcCXQ/xAHEYRfH7FW12lAiLB/eMU9rvywipBoBRcQ3Nlf3ioGnQz aTmQZlz+OImbKtAPys/KskZwYxbPEI23OE1obx/exZENlGG5czOGALW8OiOwsgsN 7hzljBJnzlY2yoUiqN3hLNnibw== -----END CERTIFICATE-----Generated at Sun Nov 1 09:23:29 2026 by rpki-client