$ rpki-client -vvvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: TFlIVk6hP5rWPq9E2dfAprLVMN+mIxlKAHd5j2iAUZM= Subject key identifier: 45:DE:D6:FE:D7:FF:D0:70:F7:7D:A1:6E:3B:58:A5:58:EB:BD:62:F8 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 408B8EA5FA4ECD006D7A4D16E82D14014E656CF8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 038F Signing time: Mon 02 Nov 2026 04:59:04 +0000 Manifest this update: Mon 02 Nov 2026 04:54:04 +0000 Manifest next update: Tue 03 Nov 2026 06:35:04 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: g4iS5Qxm4V1hJxGXjUm7bJ+c80vwl3pl0RRMOhIXU5o=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: Igpr/eEDfpr2S2NRVoVT0jP4LmdueC4WB3IqFVZTd2E=) 3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: 29Rj6/B3l6HbsNsu1uogSgIPkOV8cAcfG5IYR+douqk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 06:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8b:8e:a5:fa:4e:cd:00:6d:7a:4d:16:e8:2d:14:01:4e:65:6c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Nov 2 04:54:04 2026 GMT Not After : Nov 3 06:35:04 2026 GMT Subject: CN=45DED6FED7FFD070F77DA16E3B58A558EBBD62F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:b7:9d:e2:49:39:c5:af:0a:9b:52:4e:c4: 05:9c:9b:08:22:9d:9c:d8:51:38:a7:16:f9:9d:2b: c7:07:ee:26:4c:ba:48:08:b6:07:b9:5a:5e:73:b5: f7:93:57:6d:32:9c:a1:b1:06:36:de:31:8b:32:76: ba:c3:77:d5:5f:b9:14:e7:17:bf:ba:58:15:ff:cc: 0a:d6:50:e2:ca:66:8e:47:81:3e:4b:ee:a3:c3:6b: fa:dd:b1:61:d7:6f:cd:60:1b:4d:e9:d6:d5:d0:80: 85:2d:e0:93:34:d4:c8:95:95:6c:ac:72:28:31:20: a9:cf:82:b0:dd:39:57:1a:30:e2:83:1d:39:b4:77: 4a:b7:ff:fe:1a:f3:d3:83:55:44:1f:3f:c8:4d:d9: 8e:81:86:e7:f4:3b:25:f7:f6:33:14:98:f9:aa:5f: 32:f4:a1:28:45:fd:12:1f:08:5b:2d:48:68:6d:ee: 55:c7:79:73:b8:53:43:61:b8:a3:6a:00:eb:c3:33: 2f:c0:6a:4e:12:46:2a:da:7c:5b:65:4f:79:e6:f1: 01:19:51:e9:33:e2:95:8d:b8:7f:7f:22:42:b8:14: d9:74:ea:86:e6:12:95:75:63:19:67:e0:37:af:8d: e2:cf:ff:d1:4f:52:15:b3:a6:f6:47:e7:69:a1:db: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DE:D6:FE:D7:FF:D0:70:F7:7D:A1:6E:3B:58:A5:58:EB:BD:62:F8 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:fa:1b:2c:4f:45:bc:6b:e6:9a:f9:ae:0e:fe:9a:d9:14:b2: 0a:67:48:98:9f:25:a6:7a:c0:12:9d:61:42:54:2d:23:78:41: 95:b6:09:34:a8:b9:11:c2:c2:57:22:bf:fc:e9:7f:57:07:ba: b2:ed:17:57:a7:9c:44:d1:96:2b:8a:1e:b2:36:46:2d:f3:33: e1:77:7a:70:c7:d8:99:46:48:a2:76:ca:4b:0a:90:d8:e7:f1: d7:ba:d5:a1:9a:43:f8:58:db:f0:fa:62:f3:16:e1:3b:44:4a: ab:b3:9f:90:9b:db:99:5e:97:aa:0a:e9:6c:d6:7d:3a:8b:2a: f0:f6:85:61:bf:02:64:b1:41:4a:04:dc:03:65:22:fa:39:fd: b1:b1:bc:91:3e:8c:45:e3:09:60:77:c7:ca:8d:6b:ab:dd:d6: db:7c:9d:f8:a1:00:26:55:c0:06:60:07:0d:0f:4c:29:1d:e8: 1e:08:0e:53:22:25:e2:24:5a:53:18:66:a3:ca:4b:86:5b:97: de:18:69:56:dd:87:57:4a:73:4b:b9:df:fd:55:a9:40:ea:35: 65:f2:15:bd:33:1d:a1:e2:08:21:04:11:42:11:c9:2c:fa:5f: 46:0e:ec:11:71:6b:87:57:74:ef:c5:05:d8:40:cf:3d:39:d6: b6:37:ff:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQIuOpfpOzQBtek0W6C0UAU5lbPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNjExMDIwNDU0MDRaFw0yNjExMDMwNjM1MDRaMDMxMTAvBgNV BAMTKDQ1REVENkZFRDdGRkQwNzBGNzdEQTE2RTNCNThBNTU4RUJCRDYyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSbed4kk5xa8Km1JOxAWcmwgi nZzYUTinFvmdK8cH7iZMukgItge5Wl5ztfeTV20ynKGxBjbeMYsydrrDd9VfuRTn F7+6WBX/zArWUOLKZo5HgT5L7qPDa/rdsWHXb81gG03p1tXQgIUt4JM01MiVlWys cigxIKnPgrDdOVcaMOKDHTm0d0q3//4a89ODVUQfP8hN2Y6Bhuf0OyX39jMUmPmq XzL0oShF/RIfCFstSGht7lXHeXO4U0NhuKNqAOvDMy/Aak4SRirafFtlT3nm8QEZ Uekz4pWNuH9/IkK4FNl06obmEpV1Yxln4DevjeLP/9FPUhWzpvZH52mh27ctAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURd7W/tf/0HD3faFuO1ilWOu9YvgwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw/obLE9FvGvmmvmuDv6a2RSyCmdImJ8lpnrAEp1hQlQtI3hBlbYJNKi5EcLC VyK//Ol/Vwe6su0XV6ecRNGWK4oesjZGLfMz4Xd6cMfYmUZIonbKSwqQ2Ofx17rV oZpD+Fjb8Ppi8xbhO0RKq7OfkJvbmV6XqgrpbNZ9Oosq8PaFYb8CZLFBSgTcA2Ui +jn9sbG8kT6MReMJYHfHyo1rq93W23yd+KEAJlXABmAHDQ9MKR3oHggOUyIl4iRa Uxhmo8pLhluX3hhpVt2HV0pzS7nf/VWpQOo1ZfIVvTMdoeIIIQQRQhHJLPpfRg7s EXFrh1d078UF2EDPPTnWtjf/RA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:20:13 2026 by rpki-client