$ rpki-client -vvvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft File: 40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft (raw, json) Hash identifier: KWDRzvlFmd0kBTskhfBxXpLgFRmXsn309g+sJdJ+pcs= Subject key identifier: 3B:54:BB:37:75:8C:D0:38:DB:1E:AC:3E:0E:4B:7C:C5:8E:02:AE:BD Authority key identifier: 40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 Certificate issuer: /CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Certificate serial: 4FCF0C664055E356BCECFDD28CDC2BCA7B36683A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft Manifest number: 017B Signing time: Thu 15 Oct 2026 02:30:56 +0000 Manifest this update: Thu 15 Oct 2026 02:25:56 +0000 Manifest next update: Fri 16 Oct 2026 06:02:56 +0000 Files and hashes: 1: 3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (hash: ov7bnN4VFfOv78RIcV1bbIDDw8bG2eYE2dWkYTEJyqw=) 2: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (hash: r0tBAK+QejG6d300vU+MXMRiqOlNZOHdDWhzPvqgs+o=) 3: 323830343a3937303a3a2f33322d3438203d3e20323633303836.roa (hash: Kx05sHTE+LNnP6XO1B5s2Cs3g5EvPwxkW08IslxDSFA=) 4: 40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl (hash: 8E5w2EtSdVDsGho8ia1kEjGVvncaYIfcZ4HcEF7g9BQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Oct 2026 06:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cf:0c:66:40:55:e3:56:bc:ec:fd:d2:8c:dc:2b:ca:7b:36:68:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Validity Not Before: Oct 15 02:25:56 2026 GMT Not After : Oct 16 06:02:56 2026 GMT Subject: CN=3B54BB37758CD038DB1EAC3E0E4B7CC58E02AEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:30:76:ba:84:6a:fa:60:d0:7c:71:ca:91: fe:b8:f4:1d:a2:91:2a:d3:62:1c:fa:fa:0f:a5:af: 71:e9:2f:22:30:e8:f1:b9:a3:3f:af:66:83:57:ab: 76:d2:e7:67:fc:36:5b:80:49:b3:0d:f9:b6:0d:9a: 23:c5:39:9b:4c:d5:83:c3:00:70:ca:e2:4d:a0:a2: e4:15:86:e7:bd:0d:74:25:a3:37:be:fe:fa:a9:87: 92:26:6f:3a:cf:3f:58:f3:3d:ab:5b:97:59:2d:62: 80:b4:cc:c1:e7:6f:d5:16:50:4e:b3:c5:83:a3:3f: ce:38:a5:aa:6f:56:ba:5c:c3:bc:68:7b:08:97:11: 20:f1:ea:a3:8a:9e:ad:f1:83:11:62:eb:f0:88:df: 74:4f:5e:c5:8d:57:08:92:1e:0e:89:a4:e0:e9:05: f5:fd:be:6e:3b:6a:f4:2a:eb:d4:ec:05:79:88:39: 0d:9d:2a:2f:6a:84:2b:61:22:ee:f9:20:2b:af:f1: 67:30:ce:e7:21:64:5f:15:92:01:0f:05:35:78:f1: d3:1a:08:72:66:9a:ab:50:4f:b3:ae:51:cb:64:22: 43:de:71:0f:fc:f3:4a:ab:1a:b7:d2:5a:74:17:59: 3b:98:41:f2:94:15:f2:34:72:2f:6c:1d:79:f5:20: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:BB:37:75:8C:D0:38:DB:1E:AC:3E:0E:4B:7C:C5:8E:02:AE:BD X509v3 Authority Key Identifier: keyid:40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7c:4a:e3:c9:17:81:15:33:5e:0a:b2:11:0a:6a:df:50:33: 92:d7:83:fe:40:13:ef:65:6b:41:2a:ac:04:f6:8c:08:db:4a: d5:59:85:d0:7f:2a:49:5c:23:90:4f:e2:de:22:8c:5f:c5:0b: cd:a7:bd:a5:38:1a:2b:2a:97:a3:5f:42:83:92:e2:00:81:09: 0d:e1:44:c4:b5:2e:ed:c4:12:80:48:8f:66:11:bb:b1:29:08: 2d:7c:e0:38:f2:f9:64:0b:c7:ec:3a:81:f1:4f:10:e2:53:a7: a4:ac:41:f8:14:e5:52:32:e4:94:7a:f9:cb:9e:35:a1:76:85: 6c:f8:97:d8:88:77:9d:9e:dc:6d:35:64:68:4a:96:98:87:3a: b2:20:02:04:42:4c:8b:21:34:2c:b4:10:54:0d:0e:a1:9a:95: 62:0b:92:a1:1b:a4:e5:c0:2f:11:22:6f:9f:43:d5:8a:43:30: dd:0b:ad:86:7a:56:3a:a0:93:a5:fc:7c:56:b9:34:bf:d4:20: dc:1d:80:27:2d:0b:0e:ca:0f:ab:0f:8a:a1:6c:05:e4:ac:47: 42:51:52:f0:d6:e6:30:d2:73:73:d4:e3:ac:80:1d:d8:1a:fc: ea:e8:fd:6e:3c:2b:47:76:fc:97:e0:c8:71:55:0e:7f:7d:14: b8:cf:1d:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT88MZkBV41a87P3SjNwryns2aDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBENUMzRjU1QUUwOENGMzBFNDY2ODQ0N0QxQzUxNjhB OTBFN0M3MjAeFw0yNjEwMTUwMjI1NTZaFw0yNjEwMTYwNjAyNTZaMDMxMTAvBgNV BAMTKDNCNTRCQjM3NzU4Q0QwMzhEQjFFQUMzRTBFNEI3Q0M1OEUwMkFFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbjB2uoRq+mDQfHHKkf649B2i kSrTYhz6+g+lr3HpLyIw6PG5oz+vZoNXq3bS52f8NluASbMN+bYNmiPFOZtM1YPD AHDK4k2gouQVhue9DXQloze+/vqph5ImbzrPP1jzPatbl1ktYoC0zMHnb9UWUE6z xYOjP844papvVrpcw7xoewiXESDx6qOKnq3xgxFi6/CI33RPXsWNVwiSHg6JpODp BfX9vm47avQq69TsBXmIOQ2dKi9qhCthIu75ICuv8WcwzuchZF8VkgEPBTV48dMa CHJmmqtQT7OuUctkIkPecQ/880qrGrfSWnQXWTuYQfKUFfI0ci9sHXn1IGmfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO1S7N3WM0DjbHqw+Dkt8xY4Crr0wHwYDVR0j BBgwFoAUQNXD9VrgjPMORmhEfRxRaKkOfHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5 bmQvMC80MEQ1QzNGNTVBRTA4Q0YzMEU0NjY4NDQ3RDFDNTE2OEE5MEU3QzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRDVDM0Y1NUFFMDhDRjMw RTQ2Njg0NDdEMUM1MTY4QTkwRTdDNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5bmQvMC80 MEQ1QzNGNTVBRTA4Q0YzMEU0NjY4NDQ3RDFDNTE2OEE5MEU3QzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyHxK48kXgRUzXgqyEQpq31AzkteD/kAT72VrQSqsBPaMCNtK1VmF0H8qSVwj kE/i3iKMX8ULzae9pTgaKyqXo19Cg5LiAIEJDeFExLUu7cQSgEiPZhG7sSkILXzg OPL5ZAvH7DqB8U8Q4lOnpKxB+BTlUjLklHr5y541oXaFbPiX2Ih3nZ7cbTVkaEqW mIc6siACBEJMiyE0LLQQVA0OoZqVYguSoRuk5cAvESJvn0PVikMw3QuthnpWOqCT pfx8Vrk0v9Qg3B2AJy0LDsoPqw+KoWwF5KxHQlFS8NbmMNJzc9TjrIAd2Br86uj9 bjwrR3b8l+DIcVUOf30UuM8dpA== -----END CERTIFICATE-----Generated at Thu Oct 15 18:34:10 2026 by rpki-client