$ rpki-client -vvvf rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft File: B4EF21A72F48760DE13763E987C39973E33F9FD5.mft (raw, json) Hash identifier: DKMoK2blC0jcOxizd7mKtOYaCgBay3cgs7PDF+PjJNM= Subject key identifier: DF:46:49:7E:FC:F3:6B:E9:44:72:EE:08:64:72:2E:F7:58:5B:22:2A Authority key identifier: B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5 Certificate issuer: /CN=B4EF21A72F48760DE13763E987C39973E33F9FD5 Certificate serial: 34E9530F6F35BE0F1F19038CCE00FA247F27A427 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer Subject info access: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft Manifest number: 0130 Signing time: Mon 02 Nov 2026 21:57:38 +0000 Manifest this update: Mon 02 Nov 2026 21:52:38 +0000 Manifest next update: Wed 04 Nov 2026 01:25:38 +0000 Files and hashes: 1: B4EF21A72F48760DE13763E987C39973E33F9FD5.crl (hash: 3DbcALPXQQ75nthxpK5Hnrdkm8HZsgOTmxLY7Xn1EdI=) 2: 323830343a383231633a3a2f33322d3438203d3e20323732343939.roa (hash: +kHabQZOvFU/JDwfE1vMQqpLNnFf9Liaj3xxBgpIejw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.crl rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 01:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e9:53:0f:6f:35:be:0f:1f:19:03:8c:ce:00:fa:24:7f:27:a4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4EF21A72F48760DE13763E987C39973E33F9FD5 Validity Not Before: Nov 2 21:52:38 2026 GMT Not After : Nov 4 01:25:38 2026 GMT Subject: CN=DF46497EFCF36BE94472EE0864722EF7585B222A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:ca:fa:2a:73:bd:5a:0b:a8:07:35:e1:2e: f2:79:29:c3:82:9a:64:90:2b:a3:a1:5b:7d:65:56: 33:47:8d:23:36:0f:08:49:c2:f6:9e:57:95:f3:b1: 9c:a6:fd:26:9f:86:17:6c:42:4d:c6:e6:8a:99:7e: c0:e5:48:0f:f5:9e:3c:ca:4b:3c:1c:2b:05:20:d2: a0:94:21:15:c3:df:e3:7d:68:33:f2:db:9d:10:82: b0:ee:96:a9:b4:31:59:40:14:7f:c5:ce:ad:41:59: df:e4:34:e6:0a:90:87:95:75:ce:99:8c:e3:59:a6: ea:d0:c3:11:fa:c9:a7:66:49:0b:a6:5d:6b:2d:09: a2:47:0b:19:37:eb:66:d6:38:7e:f6:21:e8:26:ac: 4e:e4:75:fd:94:dc:3d:d9:b5:8e:87:bf:d9:3d:f3: ce:0a:0c:55:79:d1:a5:a7:5e:06:48:10:1c:e7:52: 1c:1b:ee:47:4d:ca:ce:11:5d:34:0d:75:42:c2:d9: 25:3b:5a:36:fc:bd:c0:9c:ac:2b:e1:04:db:7b:0d: 7a:ff:80:a7:5f:53:f6:b7:4b:e1:17:f1:da:b9:0e: 86:b7:b9:cb:a8:dd:e2:4e:19:59:9a:b3:b0:29:c5: 80:23:c1:ac:c1:d3:65:2c:9e:fb:ba:88:e1:06:58: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:46:49:7E:FC:F3:6B:E9:44:72:EE:08:64:72:2E:F7:58:5B:22:2A X509v3 Authority Key Identifier: keyid:B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b2:60:0c:08:d1:70:02:86:2c:58:91:f2:98:76:5f:68:43: 97:40:c3:22:4d:b8:c6:05:d1:4a:b8:93:c1:4c:45:87:a1:80: 05:d7:10:1e:1f:9a:77:77:90:ce:f3:bf:02:df:d9:c1:1e:c8: 06:9d:63:26:13:dd:dd:28:c5:74:da:33:22:71:ae:dd:a9:c4: 0c:7b:d9:12:a3:32:20:d0:ba:03:1a:17:8a:e8:67:44:7c:1b: 59:36:1d:e3:02:25:eb:10:4d:3b:38:52:0f:e0:27:10:de:65: 6a:3b:46:aa:e5:f3:a8:91:07:d6:a4:46:b5:66:e1:63:8b:5c: 68:e6:a8:55:c8:46:79:4c:8b:51:71:f3:77:e9:9d:4b:24:13: 3b:28:d4:50:b6:c7:85:41:8a:8a:ea:47:4c:21:d6:8f:f1:61: a8:f0:65:34:d5:89:c4:89:f2:ea:22:c6:12:b0:ce:6b:34:cb: cb:fc:42:aa:af:37:23:c5:d4:a4:76:30:15:5f:dd:99:1d:17: 05:da:1d:1a:de:93:db:cb:8b:92:f4:b9:70:33:7f:91:64:6f: cf:ca:e9:9a:a4:8a:e4:75:36:68:f9:e1:96:d9:af:9b:af:df: 3f:4b:4e:8c:25:86:48:49:38:47:d0:c1:64:c5:62:d1:c1:64: 13:a4:77:cb -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUNOlTD281vg8fGQOMzgD6JH8npCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRFRjIxQTcyRjQ4NzYwREUxMzc2M0U5ODdDMzk5NzNF MzNGOUZENTAeFw0yNjExMDIyMTUyMzhaFw0yNjExMDQwMTI1MzhaMDMxMTAvBgNV BAMTKERGNDY0OTdFRkNGMzZCRTk0NDcyRUUwODY0NzIyRUY3NTg1QjIyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnr8r6KnO9WguoBzXhLvJ5KcOC mmSQK6OhW31lVjNHjSM2DwhJwvaeV5XzsZym/SafhhdsQk3G5oqZfsDlSA/1njzK SzwcKwUg0qCUIRXD3+N9aDPy250QgrDulqm0MVlAFH/Fzq1BWd/kNOYKkIeVdc6Z jONZpurQwxH6yadmSQumXWstCaJHCxk362bWOH72IegmrE7kdf2U3D3ZtY6Hv9k9 884KDFV50aWnXgZIEBznUhwb7kdNys4RXTQNdULC2SU7Wjb8vcCcrCvhBNt7DXr/ gKdfU/a3S+EX8dq5Doa3ucuo3eJOGVmas7ApxYAjwazB02Usnvu6iOEGWH7DAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU30ZJfvzza+lEcu4IZHIu91hbIiowHwYDVR0j BBgwFoAUtO8hpy9Idg3hN2Pph8OZc+M/n9UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9IMzdhbUp3SEozNExZTHJnWGU0RUhMUHJ2Smk0VlFjazVTblJYbnRWM0xo LzAvQjRFRjIxQTcyRjQ4NzYwREUxMzc2M0U5ODdDMzk5NzNFMzNGOUZENS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNEVGMjFBNzJGNDg3NjBERTEz NzYzRTk4N0MzOTk3M0UzM0Y5RkQ1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gz N2FtSndISjM0TFlMcmdYZTRFSExQcnZKaTRWUWNrNVNuUlhudFYzTGgvMC9CNEVG MjFBNzJGNDg3NjBERTEzNzYzRTk4N0MzOTk3M0UzM0Y5RkQ1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA R7JgDAjRcAKGLFiR8ph2X2hDl0DDIk24xgXRSriTwUxFh6GABdcQHh+ad3eQzvO/ At/ZwR7IBp1jJhPd3SjFdNozInGu3anEDHvZEqMyINC6AxoXiuhnRHwbWTYd4wIl 6xBNOzhSD+AnEN5lajtGquXzqJEH1qRGtWbhY4tcaOaoVchGeUyLUXHzd+mdSyQT OyjUULbHhUGKiupHTCHWj/FhqPBlNNWJxIny6iLGErDOazTLy/xCqq83I8XUpHYw FV/dmR0XBdodGt6T28uLkvS5cDN/kWRvz8rpmqSK5HU2aPnhltmvm6/fP0tOjCWG SEk4R9DBZMVi0cFkE6R3yw== -----END CERTIFICATE-----Generated at Tue Nov 3 19:28:44 2026 by rpki-client