$ rpki-client -vvvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft File: 0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft (raw, json) Hash identifier: gUfwxtdEOvt+q3Kv6eQeDyMhkpu0Y+HnaTIjOeIN1qw= Subject key identifier: 25:83:27:B4:3E:6E:3C:BE:47:FB:D9:E2:F4:D7:48:0D:33:31:3B:F3 Authority key identifier: 0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25 Certificate issuer: /CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25 Certificate serial: 0D64B6E0044CEC9C42795ED63295262FFED8FCFD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer Subject info access: rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft Manifest number: 0120 Signing time: Wed 28 Oct 2026 00:30:30 +0000 Manifest this update: Wed 28 Oct 2026 00:25:30 +0000 Manifest next update: Thu 29 Oct 2026 03:09:30 +0000 Files and hashes: 1: 3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (hash: l3nrJO/coWCk2btVi8ty94a+NXHnBrCuu5Qscd0iZrI=) 2: 323830343a343338633a3a2f33322d3430203d3e20323632393131.roa (hash: /5QE+TFnPvJPVIuefYfg0yoDGwEnHw27sOYuidLeATw=) 3: 0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl (hash: a5DYz5bzB0Q7dM6lkPvfwiFKLz/s+awJXGCEkpt28v4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 03:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:64:b6:e0:04:4c:ec:9c:42:79:5e:d6:32:95:26:2f:fe:d8:fc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25 Validity Not Before: Oct 28 00:25:30 2026 GMT Not After : Oct 29 03:09:30 2026 GMT Subject: CN=258327B43E6E3CBE47FBD9E2F4D7480D33313BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:28:46:7c:a1:44:03:80:54:de:68:4c:5a: b9:df:b3:f3:5b:1f:08:29:f6:07:bc:52:9c:5d:a3: 19:7b:da:7b:3a:79:d8:9b:4d:f6:e3:f3:e3:f8:1f: 20:c4:9f:39:4a:30:ea:41:59:ec:bc:96:dc:32:ed: 74:ad:f8:5b:0c:93:1b:5d:49:d6:21:4e:6f:28:94: e0:ce:e9:b5:02:ec:ff:82:54:bb:7f:f8:ff:8b:79: d8:22:03:51:7d:c9:0f:6e:c4:9f:5a:29:f5:a2:a8: 1f:89:69:ba:9d:c1:c9:24:15:30:d6:dc:61:dc:83: be:76:2b:61:67:93:cc:a9:d3:01:5a:30:8b:30:22: b0:95:5a:53:f1:20:fc:94:21:3b:53:ee:a4:a2:c9: 6c:1b:81:5a:a5:6d:29:33:90:b0:b9:4f:08:f6:39: 19:29:48:79:f1:22:e4:41:b7:5b:53:65:ce:21:17: b7:8d:71:74:d4:a3:fd:10:3a:9a:03:32:53:7e:bc: 94:49:28:f4:4e:61:98:54:54:a7:f9:ec:df:b7:e3: 7c:98:c0:5b:10:6a:c9:4a:0c:71:ed:f3:68:00:ae: 83:09:7f:2e:4e:cc:77:b4:53:a7:ec:e5:70:01:5b: 4b:46:6d:26:c9:b9:0b:ff:9e:9b:72:e3:f5:e8:74: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:83:27:B4:3E:6E:3C:BE:47:FB:D9:E2:F4:D7:48:0D:33:31:3B:F3 X509v3 Authority Key Identifier: keyid:0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ae:5d:30:ba:0b:0b:c3:8e:49:4d:83:c7:09:a5:8b:74:40: e3:3b:fa:07:9d:ce:3d:22:f6:4e:c1:be:9f:f1:6a:b4:08:4f: 11:04:f7:15:cf:a0:58:a1:c3:28:3f:9a:26:64:eb:0e:02:35: 1d:1e:1a:d9:0a:25:e7:7b:83:19:cd:e7:15:f9:7a:e5:63:23: d4:48:18:f3:77:ce:cd:7e:37:be:eb:da:18:39:71:63:3a:5c: 6a:20:81:b6:91:5a:1b:50:b0:2b:15:bf:ae:73:d4:bc:44:8e: 5b:45:93:b0:0d:e0:dc:b7:18:17:d5:7a:d6:3f:bf:ab:f7:31: 5b:57:c8:d4:da:fc:34:50:ca:0d:dc:c9:92:51:ef:f9:cb:f2: 06:b8:15:82:6c:83:19:92:e1:ac:28:44:26:99:e2:a7:9a:bd: fe:59:f7:25:99:97:00:a7:de:98:ad:2e:7a:6b:be:e0:b2:5d: 42:ce:2a:18:73:e7:c8:e0:9c:b0:b3:d3:e6:6a:ad:39:88:45: 5c:20:ff:a4:0c:e3:ea:ce:40:01:b8:f3:1d:91:73:13:a7:10: 5b:d8:78:96:c3:18:9e:04:15:75:6d:ca:af:88:1e:63:2d:38: 41:07:02:5d:d5:d2:de:cf:da:41:59:ef:8b:ce:33:81:e8:e3: b6:dc:71:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDWS24ARM7JxCeV7WMpUmL/7Y/P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyOUY2ODdFNkQ2NkNGQjgyNTBFNjJDN0ZCMENFRjk4 QzlBMkQyNTAeFw0yNjEwMjgwMDI1MzBaFw0yNjEwMjkwMzA5MzBaMDMxMTAvBgNV BAMTKDI1ODMyN0I0M0U2RTNDQkU0N0ZCRDlFMkY0RDc0ODBEMzMzMTNCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwihGfKFEA4BU3mhMWrnfs/Nb Hwgp9ge8Upxdoxl72ns6edibTfbj8+P4HyDEnzlKMOpBWey8ltwy7XSt+FsMkxtd SdYhTm8olODO6bUC7P+CVLt/+P+LedgiA1F9yQ9uxJ9aKfWiqB+JabqdwckkFTDW 3GHcg752K2Fnk8yp0wFaMIswIrCVWlPxIPyUITtT7qSiyWwbgVqlbSkzkLC5Twj2 ORkpSHnxIuRBt1tTZc4hF7eNcXTUo/0QOpoDMlN+vJRJKPROYZhUVKf57N+343yY wFsQaslKDHHt82gAroMJfy5OzHe0U6fs5XABW0tGbSbJuQv/npty4/XodE41AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJYMntD5uPL5H+9ni9NdIDTMxO/MwHwYDVR0j BBgwFoAUDin2h+bWbPuCUOYsf7DO+YyaLSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVp4Wm9DbzYzOXFGbkZqdVp3ZlQzdE50dEJvWUI5ZlhDMU14cmZOeE1u NWcvMC8wRTI5RjY4N0U2RDY2Q0ZCODI1MEU2MkM3RkIwQ0VGOThDOUEyRDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFMjlGNjg3RTZENjZDRkI4 MjUwRTYyQzdGQjBDRUY5OEM5QTJEMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVp4Wm9DbzYzOXFGbkZqdVp3ZlQzdE50dEJvWUI5ZlhDMU14cmZOeE1uNWcvMC8w RTI5RjY4N0U2RDY2Q0ZCODI1MEU2MkM3RkIwQ0VGOThDOUEyRDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALa5dMLoLC8OOSU2Dxwmli3RA4zv6B53OPSL2TsG+n/FqtAhPEQT3Fc+gWKHD KD+aJmTrDgI1HR4a2Qol53uDGc3nFfl65WMj1EgY83fOzX43vuvaGDlxYzpcaiCB tpFaG1CwKxW/rnPUvESOW0WTsA3g3LcYF9V61j+/q/cxW1fI1Nr8NFDKDdzJklHv +cvyBrgVgmyDGZLhrChEJpnip5q9/ln3JZmXAKfemK0uemu+4LJdQs4qGHPnyOCc sLPT5mqtOYhFXCD/pAzj6s5AAbjzHZFzE6cQW9h4lsMYngQVdW3Kr4geYy04QQcC XdXS3s/aQVnvi84zgejjttxx/Q== -----END CERTIFICATE-----Generated at Wed Oct 28 20:39:15 2026 by rpki-client