$ rpki-client -vvvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft File: 0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft (raw, json) Hash identifier: 4kZOyed5/KiltDFC/CW7cNCZKEERLgJMVM5okyQwcAU= Subject key identifier: 40:40:47:71:E5:A4:42:5F:97:56:0A:01:CB:20:B7:DD:CC:AD:66:5A Authority key identifier: 0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25 Certificate issuer: /CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25 Certificate serial: 70DA059DC324DB64D2306E54923E29A5580B35BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer Subject info access: rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft Manifest number: 0126 Signing time: Sun 01 Nov 2026 10:46:25 +0000 Manifest this update: Sun 01 Nov 2026 10:41:25 +0000 Manifest next update: Mon 02 Nov 2026 12:44:25 +0000 Files and hashes: 1: 0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl (hash: ZEbYGKDmny7pRubRtgi4Xykm66t9/dPtVi1Wb5jVym0=) 2: 323830343a343338633a3a2f33322d3430203d3e20323632393131.roa (hash: /5QE+TFnPvJPVIuefYfg0yoDGwEnHw27sOYuidLeATw=) 3: 3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (hash: l3nrJO/coWCk2btVi8ty94a+NXHnBrCuu5Qscd0iZrI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 12:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:da:05:9d:c3:24:db:64:d2:30:6e:54:92:3e:29:a5:58:0b:35:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25 Validity Not Before: Nov 1 10:41:25 2026 GMT Not After : Nov 2 12:44:25 2026 GMT Subject: CN=40404771E5A4425F97560A01CB20B7DDCCAD665A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:44:63:d4:3e:80:76:3e:04:f3:20:de:c1:2d: 32:c4:f8:b2:46:5b:a0:49:76:b7:d2:01:f6:3e:93: e5:0c:7e:cf:47:22:19:55:b1:a8:85:a6:a1:a6:c4: 53:b6:c1:6c:ff:c5:53:d7:d8:ae:41:77:ef:c7:5c: 7f:31:7a:e8:a2:d3:5f:4e:f9:7c:ce:78:f2:de:81: ec:05:ee:4c:13:0c:58:63:5a:a6:ac:e4:0b:cb:4f: c7:6e:22:38:ce:59:b3:e1:69:1d:df:31:36:8b:a5: de:ea:d8:39:8e:ed:86:70:c7:85:2c:17:fa:f0:02: 90:89:21:7a:a6:fd:67:9c:2c:c1:b8:fd:85:a4:d4: 64:93:c4:2a:fe:df:a6:43:bb:d4:10:11:3c:27:be: a8:51:31:32:30:ce:af:69:11:d0:c5:f4:f5:e2:33: 65:d5:a2:4c:b9:45:1b:47:0b:e6:cf:ab:0e:73:cf: 8e:35:7e:6f:fd:28:cf:2e:e2:d2:a7:14:c1:74:e8: e0:65:a4:09:61:b8:d9:ad:81:af:f2:b8:aa:0e:9a: 62:ea:08:f9:07:ce:5c:c8:37:fb:a4:77:56:95:93: 03:1b:86:2c:09:3b:fc:23:15:d8:9b:f7:e4:ce:d6: be:34:d7:c0:de:95:f8:90:93:0d:cb:8f:fa:21:e0: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:47:71:E5:A4:42:5F:97:56:0A:01:CB:20:B7:DD:CC:AD:66:5A X509v3 Authority Key Identifier: keyid:0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ea:59:90:56:da:a4:6e:c3:ee:63:2f:3f:d8:b6:9c:00:bf: d7:9d:6d:c0:48:62:c2:1b:8c:67:23:da:76:32:b0:9d:68:aa: 3c:ee:82:ae:2b:9d:65:07:a5:aa:0b:7e:ee:98:e5:40:2a:82: 9b:2d:4f:0e:87:e2:24:12:51:e3:02:25:91:9d:da:7f:9c:86: 21:dd:6c:4b:0b:96:fc:25:0e:f8:3b:d0:ca:cb:cc:5e:cd:c8: 84:29:eb:31:2f:fc:1e:40:ed:ce:3f:66:76:76:01:b0:e0:66: ec:ad:0e:2c:a0:c6:da:a1:30:d9:00:c5:77:08:64:12:36:31: d6:0a:dd:02:6c:bb:89:02:d0:94:93:64:fb:29:54:b4:61:1d: 14:20:c6:69:05:e6:b7:75:2b:af:1c:a6:f5:53:92:a7:dc:49: cc:56:cb:2b:a0:48:fb:ba:58:7d:6c:d6:a7:f4:16:5a:1c:79: ad:66:5d:8b:05:39:67:f1:af:77:c7:f2:3b:42:69:f6:cf:91: 5e:ff:d8:e8:5c:e6:69:42:ec:0c:ee:a8:6d:a4:4d:58:40:91: 2c:3e:25:0c:bb:5d:61:48:d0:31:77:2d:64:e4:89:42:49:cc: 02:29:62:74:af:f8:38:f0:2c:1c:9b:8f:b4:fa:50:e4:10:2b: 4d:26:26:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcNoFncMk22TSMG5Ukj4ppVgLNbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyOUY2ODdFNkQ2NkNGQjgyNTBFNjJDN0ZCMENFRjk4 QzlBMkQyNTAeFw0yNjExMDExMDQxMjVaFw0yNjExMDIxMjQ0MjVaMDMxMTAvBgNV BAMTKDQwNDA0NzcxRTVBNDQyNUY5NzU2MEEwMUNCMjBCN0REQ0NBRDY2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRGPUPoB2PgTzIN7BLTLE+LJG W6BJdrfSAfY+k+UMfs9HIhlVsaiFpqGmxFO2wWz/xVPX2K5Bd+/HXH8xeuii019O +XzOePLegewF7kwTDFhjWqas5AvLT8duIjjOWbPhaR3fMTaLpd7q2DmO7YZwx4Us F/rwApCJIXqm/WecLMG4/YWk1GSTxCr+36ZDu9QQETwnvqhRMTIwzq9pEdDF9PXi M2XVoky5RRtHC+bPqw5zz441fm/9KM8u4tKnFMF06OBlpAlhuNmtga/yuKoOmmLq CPkHzlzIN/ukd1aVkwMbhiwJO/wjFdib9+TO1r4018DelfiQkw3Lj/oh4EYZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQEBHceWkQl+XVgoByyC33cytZlowHwYDVR0j BBgwFoAUDin2h+bWbPuCUOYsf7DO+YyaLSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVp4Wm9DbzYzOXFGbkZqdVp3ZlQzdE50dEJvWUI5ZlhDMU14cmZOeE1u NWcvMC8wRTI5RjY4N0U2RDY2Q0ZCODI1MEU2MkM3RkIwQ0VGOThDOUEyRDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFMjlGNjg3RTZENjZDRkI4 MjUwRTYyQzdGQjBDRUY5OEM5QTJEMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVp4Wm9DbzYzOXFGbkZqdVp3ZlQzdE50dEJvWUI5ZlhDMU14cmZOeE1uNWcvMC8w RTI5RjY4N0U2RDY2Q0ZCODI1MEU2MkM3RkIwQ0VGOThDOUEyRDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIOpZkFbapG7D7mMvP9i2nAC/151twEhiwhuMZyPadjKwnWiqPO6CriudZQel qgt+7pjlQCqCmy1PDofiJBJR4wIlkZ3af5yGId1sSwuW/CUO+DvQysvMXs3IhCnr MS/8HkDtzj9mdnYBsOBm7K0OLKDG2qEw2QDFdwhkEjYx1grdAmy7iQLQlJNk+ylU tGEdFCDGaQXmt3Urrxym9VOSp9xJzFbLK6BI+7pYfWzWp/QWWhx5rWZdiwU5Z/Gv d8fyO0Jp9s+RXv/Y6FzmaULsDO6obaRNWECRLD4lDLtdYUjQMXctZOSJQknMAili dK/4OPAsHJuPtPpQ5BArTSYm+g== -----END CERTIFICATE-----Generated at Mon Nov 2 02:03:09 2026 by rpki-client