$ rpki-client -vvvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.mft File: 624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.mft (raw, json) Hash identifier: d5jU5E7XfyQjhkapmDZzUOAvEGLil6Wr5JJVtqXWA28= Subject key identifier: FA:66:07:C9:06:E8:00:63:BC:F5:8C:68:6B:A7:F2:67:85:79:C8:D3 Authority key identifier: 62:4E:80:68:FC:1A:A1:DB:72:B8:07:D6:FD:5D:7D:1E:A1:DA:83:71 Certificate issuer: /CN=624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371 Certificate serial: 307D72870BEC1FBD9DF54B90DB2CC1A970CC9FCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.mft Manifest number: 5A Signing time: Sat 10 Oct 2026 09:04:06 +0000 Manifest this update: Sat 10 Oct 2026 08:59:06 +0000 Manifest next update: Sun 11 Oct 2026 10:01:06 +0000 Files and hashes: 1: 323830343a356639303a3a2f33322d3634203d3e20323639313039.roa (hash: DeSkk1LNhR6U7sKqJ8XIVIa6pfXSBWaROAv9E1kBT98=) 2: 34352e3137392e36382e302f32322d3332203d3e20323639313039.roa (hash: b+aZPAHjEEKJ1BMmcj3e9Jw+jF8/sRAz+vYuokjqw9A=) 3: 624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.crl (hash: OJCcouftVB0iBVobvBFLYlFqILkjGahUOk+3O0ZYQ7s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.crl rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7d:72:87:0b:ec:1f:bd:9d:f5:4b:90:db:2c:c1:a9:70:cc:9f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371 Validity Not Before: Oct 10 08:59:06 2026 GMT Not After : Oct 11 10:01:06 2026 GMT Subject: CN=FA6607C906E80063BCF58C686BA7F2678579C8D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:2e:71:0b:64:b1:2a:4a:6c:7a:c3:82:02: 87:ff:4d:82:d2:e2:96:e2:20:b3:e2:6b:49:3e:6b: 61:f8:47:84:70:3d:44:81:a2:04:ff:5b:b6:69:92: dc:b1:ad:ba:1c:8c:9d:65:51:92:67:a6:9d:39:cb: 79:94:b4:09:58:58:a0:47:42:39:e7:74:83:9d:77: ad:57:e1:2d:3b:93:ec:d4:5a:c7:e7:db:fd:b2:e4: 24:d2:c2:44:77:bf:1d:8d:3d:5e:a1:80:ac:1c:00: a1:8d:d7:c5:79:69:d4:cb:34:e3:b4:f6:98:c2:d6: 4e:97:bc:29:81:42:53:b3:bf:98:88:a9:b3:30:51: 1b:d2:c7:79:02:33:d8:7e:dd:6c:82:cd:ad:03:f8: 80:c3:4c:f7:a4:df:cc:e9:dc:38:4e:55:39:10:9f: 55:4d:c6:77:52:b7:10:a7:9b:ba:6c:9e:6c:3c:33: 3a:90:e0:ec:e8:91:1b:36:54:86:e3:74:fe:81:09: 06:fe:fd:33:2a:f7:95:03:4c:05:af:ea:8a:d5:0b: ea:f0:fe:71:4b:9a:a7:af:15:34:e5:9d:73:f2:24: 9e:73:94:d8:f4:46:1a:5c:93:bb:00:c5:c8:9f:85: 4e:fb:e7:4a:f5:4c:ca:f1:48:94:b1:56:72:c7:b7: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:66:07:C9:06:E8:00:63:BC:F5:8C:68:6B:A7:F2:67:85:79:C8:D3 X509v3 Authority Key Identifier: keyid:62:4E:80:68:FC:1A:A1:DB:72:B8:07:D6:FD:5D:7D:1E:A1:DA:83:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/624E8068FC1AA1DB72B807D6FD5D7D1EA1DA8371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:68:94:01:5e:60:e3:fa:bd:8e:fa:d6:af:ea:a1:52:54:40: 20:88:d8:bd:34:ca:02:23:c6:6d:5a:2e:b8:f3:fe:16:d6:3e: 62:37:42:81:a2:1d:0b:e2:ae:87:9f:ae:b5:c1:6e:bd:34:36: 03:f0:08:2a:c3:83:a5:f0:29:7a:c7:68:94:1d:bb:a5:19:f4: 46:ad:36:e4:86:2b:f2:76:c3:96:4f:e4:42:28:97:b5:f4:e9: 9a:ae:36:7e:07:cb:f6:1c:89:a0:dc:84:6e:a3:d3:58:90:a3: 97:b6:6a:fb:b5:5f:66:a4:b0:b0:73:2e:83:3d:30:0d:e6:3e: 5d:ff:c5:38:67:f3:89:5a:22:37:5c:50:e1:62:30:1c:1e:0c: 6a:85:9a:b8:9e:e7:22:cc:d0:53:e1:c5:63:c2:fc:ef:a8:1d: b4:09:0c:28:54:07:18:cc:22:24:06:c5:e4:44:69:a5:b1:ed: 4d:8c:56:c0:27:a8:b0:47:76:41:5e:22:14:6c:85:1e:47:18: 5d:5e:fb:0c:c6:db:3d:fd:74:dc:ca:14:ec:bb:84:e2:c4:7c: 3d:bf:51:74:e6:bf:27:42:31:37:89:24:db:f5:3d:71:f1:99: b2:8f:34:98:67:8e:48:57:3f:43:f5:9e:ba:01:9b:0b:4f:b4: ad:cb:aa:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMH1yhwvsH72d9UuQ2yzBqXDMn8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0RTgwNjhGQzFBQTFEQjcyQjgwN0Q2RkQ1RDdEMUVB MURBODM3MTAeFw0yNjEwMTAwODU5MDZaFw0yNjEwMTExMDAxMDZaMDMxMTAvBgNV BAMTKEZBNjYwN0M5MDZFODAwNjNCQ0Y1OEM2ODZCQTdGMjY3ODU3OUM4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVy5xC2SxKkpsesOCAof/TYLS 4pbiILPia0k+a2H4R4RwPUSBogT/W7ZpktyxrbocjJ1lUZJnpp05y3mUtAlYWKBH QjnndIOdd61X4S07k+zUWsfn2/2y5CTSwkR3vx2NPV6hgKwcAKGN18V5adTLNOO0 9pjC1k6XvCmBQlOzv5iIqbMwURvSx3kCM9h+3WyCza0D+IDDTPek38zp3DhOVTkQ n1VNxndStxCnm7psnmw8MzqQ4OzokRs2VIbjdP6BCQb+/TMq95UDTAWv6orVC+rw /nFLmqevFTTlnXPyJJ5zlNj0Rhpck7sAxcifhU7750r1TMrxSJSxVnLHt/wjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+mYHyQboAGO89Yxoa6fyZ4V5yNMwHwYDVR0j BBgwFoAUYk6AaPwaodtyuAfW/V19HqHag3EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3Rnox ZFQvMC82MjRFODA2OEZDMUFBMURCNzJCODA3RDZGRDVEN0QxRUExREE4MzcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNEU4MDY4RkMxQUExREI3 MkI4MDdENkZENUQ3RDFFQTFEQTgzNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3RnoxZFQvMC82 MjRFODA2OEZDMUFBMURCNzJCODA3RDZGRDVEN0QxRUExREE4MzcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVWiUAV5g4/q9jvrWr+qhUlRAIIjYvTTKAiPGbVouuPP+FtY+YjdCgaIdC+Ku h5+utcFuvTQ2A/AIKsODpfApesdolB27pRn0Rq025IYr8nbDlk/kQiiXtfTpmq42 fgfL9hyJoNyEbqPTWJCjl7Zq+7VfZqSwsHMugz0wDeY+Xf/FOGfziVoiN1xQ4WIw HB4MaoWauJ7nIszQU+HFY8L876gdtAkMKFQHGMwiJAbF5ERppbHtTYxWwCeosEd2 QV4iFGyFHkcYXV77DMbbPf103MoU7LuE4sR8Pb9RdOa/J0IxN4kk2/U9cfGZso80 mGeOSFc/Q/WeugGbC0+0rcuqAg== -----END CERTIFICATE-----Generated at Sat Oct 10 18:36:29 2026 by rpki-client