$ rpki-client -vvvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: 1OSN+3adJnWtnwTpGqxojhjR2RRxYAYbbW/5cGvV3z8= Subject key identifier: D0:53:D5:67:1D:B2:D5:75:4F:11:09:65:0C:B6:9D:58:5C:5C:24:51 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 1D436F05163D4E1FF354E72C181383E40515B15E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 02B5 Signing time: Fri 09 Oct 2026 21:53:21 +0000 Manifest this update: Fri 09 Oct 2026 21:48:21 +0000 Manifest next update: Sat 10 Oct 2026 23:09:21 +0000 Files and hashes: 1: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=) 2: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=) 3: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=) 4: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: HMUvV7zjPajC19D/l6bPf7lYPpzRohUphPH+TP2HvFs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Oct 2026 23:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:43:6f:05:16:3d:4e:1f:f3:54:e7:2c:18:13:83:e4:05:15:b1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Oct 9 21:48:21 2026 GMT Not After : Oct 10 23:09:21 2026 GMT Subject: CN=D053D5671DB2D5754F1109650CB69D585C5C2451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:5c:15:26:9a:77:db:b6:39:07:1f:19:bc: be:62:3e:65:c2:3d:a3:f3:4b:e0:11:24:27:88:24: f2:35:5c:fc:fc:86:7d:31:b9:7b:31:6b:77:d6:43: 4d:f9:f6:41:b9:85:2b:96:66:59:9f:4b:43:6e:f4: 0b:b2:45:01:d6:2f:8b:56:e1:c2:94:fc:12:71:91: 83:8b:8b:65:83:d1:11:be:96:b7:fc:31:b2:00:fa: 5e:10:ad:66:35:04:a2:f9:50:fa:a0:15:9b:78:41: 66:cc:e2:38:46:b6:c2:48:0c:a2:01:c5:3c:86:5e: 9d:da:7c:ed:b9:7f:d8:bb:e7:36:1e:23:9c:10:09: 8f:c4:d0:f3:f4:65:5b:9e:ef:b4:f7:f1:9b:72:d9: 60:2f:f0:8b:49:d7:11:d2:fd:90:8d:2a:86:80:13: 04:84:c4:a5:7d:30:58:2b:13:11:91:87:fe:df:50: 86:ec:ba:50:71:92:fd:f1:d1:67:9f:b3:d2:39:04: 74:70:7d:85:50:a2:2d:50:a3:4a:47:24:7f:fa:bb: 60:7b:a8:23:67:8e:c8:e6:90:34:a7:17:de:38:0d: 61:05:ed:43:96:62:f0:2b:19:a2:f0:18:47:68:2c: df:93:e6:97:ac:40:26:80:85:96:0c:71:cc:50:fb: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:53:D5:67:1D:B2:D5:75:4F:11:09:65:0C:B6:9D:58:5C:5C:24:51 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:75:38:73:26:06:be:d9:e1:c6:e9:a1:1d:4c:2f:37:ef:14: cf:ff:1f:67:a5:f0:3d:7f:f2:1a:3b:26:25:e2:af:85:e7:a5: 09:78:4b:05:ba:8d:15:f9:56:36:e2:bc:88:f8:32:4d:b9:02: 10:1f:ce:a6:13:a6:34:47:61:38:dc:64:9c:1b:e9:0f:a3:d8: 58:ad:ca:b2:f3:13:6a:71:18:2a:d9:50:e6:ba:8c:cb:cb:36: cb:d9:67:eb:62:b0:13:56:92:da:e1:f0:3b:74:a1:b0:f7:52: 0d:11:2f:6a:57:a9:54:e6:ee:eb:5b:30:96:27:fc:24:bc:4e: 0c:b5:92:5c:d3:5f:bb:aa:1b:e8:db:20:f8:fe:1a:71:c3:99: 42:b9:af:7a:50:95:af:91:82:32:1c:81:8e:92:33:9d:1f:28: 57:77:35:1f:fe:64:45:3e:26:59:4e:2c:bf:d8:c3:f3:83:f2: d4:c6:14:d4:9b:e1:92:f4:d4:48:d8:8c:0f:76:d4:37:b4:87: d8:f0:6f:1d:59:6c:8f:46:69:67:90:55:23:0f:6d:6d:58:cb: f8:39:30:a0:bd:af:6d:95:de:ef:0f:8f:da:01:f3:3e:a4:30: 86:ca:ff:09:f0:fc:f6:80:2f:69:6d:06:46:43:60:0d:37:a9: cc:e7:9f:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHUNvBRY9Th/zVOcsGBOD5AUVsV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNjEwMDkyMTQ4MjFaFw0yNjEwMTAyMzA5MjFaMDMxMTAvBgNV BAMTKEQwNTNENTY3MURCMkQ1NzU0RjExMDk2NTBDQjY5RDU4NUM1QzI0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFFwVJpp327Y5Bx8ZvL5iPmXC PaPzS+ARJCeIJPI1XPz8hn0xuXsxa3fWQ0359kG5hSuWZlmfS0Nu9AuyRQHWL4tW 4cKU/BJxkYOLi2WD0RG+lrf8MbIA+l4QrWY1BKL5UPqgFZt4QWbM4jhGtsJIDKIB xTyGXp3afO25f9i75zYeI5wQCY/E0PP0ZVue77T38Zty2WAv8ItJ1xHS/ZCNKoaA EwSExKV9MFgrExGRh/7fUIbsulBxkv3x0Wefs9I5BHRwfYVQoi1Qo0pHJH/6u2B7 qCNnjsjmkDSnF944DWEF7UOWYvArGaLwGEdoLN+T5pesQCaAhZYMccxQ+2n7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0FPVZx2y1XVPEQllDLadWFxcJFEwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXXU4cyYGvtnhxumhHUwvN+8Uz/8fZ6XwPX/yGjsmJeKvheelCXhLBbqNFflW NuK8iPgyTbkCEB/OphOmNEdhONxknBvpD6PYWK3KsvMTanEYKtlQ5rqMy8s2y9ln 62KwE1aS2uHwO3ShsPdSDREvalepVObu61swlif8JLxODLWSXNNfu6ob6Nsg+P4a ccOZQrmvelCVr5GCMhyBjpIznR8oV3c1H/5kRT4mWU4sv9jD84Py1MYU1JvhkvTU SNiMD3bUN7SH2PBvHVlsj0ZpZ5BVIw9tbVjL+DkwoL2vbZXe7w+P2gHzPqQwhsr/ CfD89oAvaW0GRkNgDTepzOefjg== -----END CERTIFICATE-----Generated at Sat Oct 10 13:54:08 2026 by rpki-client