$ rpki-client -vvvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft File: CD80D41420A0BFC389650757D11352D7D304E5E9.mft (raw, json) Hash identifier: 5cyTj1VUOn0q3+vezjEk85cumulGwYHw60RA9ZoSLok= Subject key identifier: 1C:1E:30:B5:46:80:10:E9:9C:7C:4D:25:D2:81:F3:AA:3E:0C:CD:6E Authority key identifier: CD:80:D4:14:20:A0:BF:C3:89:65:07:57:D1:13:52:D7:D3:04:E5:E9 Certificate issuer: /CN=CD80D41420A0BFC389650757D11352D7D304E5E9 Certificate serial: 22BA33A27256723FCA1F59007C077476F1D320FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD80D41420A0BFC389650757D11352D7D304E5E9.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft Manifest number: DC Signing time: Tue 03 Nov 2026 00:00:21 +0000 Manifest this update: Mon 02 Nov 2026 23:55:21 +0000 Manifest next update: Wed 04 Nov 2026 01:29:21 +0000 Files and hashes: 1: CD80D41420A0BFC389650757D11352D7D304E5E9.crl (hash: UQGLyTqvITrlHpPJi4uZeLEZSrck8yUzj0NETasevtM=) 2: 323830343a333961303a3a2f33322d313238203d3e20323636303430.roa (hash: 5nxaOjf68+E1T6OqRBfcWpo48m+PehG3/wq/7mBuFTc=) 3: 3138362e3139362e3132302e302f32322d3332203d3e20323636303430.roa (hash: VWU5oB2JC7OIkj2oW1WKr4gahRWIiCPw9N2v5qcCQiM=) 4: 34352e342e35322e302f32322d3332203d3e20323636303430.roa (hash: oFsIlLGB5Pghch570AdobuGej/XNl7Fw3kXeYepDVGk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.crl rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD80D41420A0BFC389650757D11352D7D304E5E9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 01:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ba:33:a2:72:56:72:3f:ca:1f:59:00:7c:07:74:76:f1:d3:20:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD80D41420A0BFC389650757D11352D7D304E5E9 Validity Not Before: Nov 2 23:55:21 2026 GMT Not After : Nov 4 01:29:21 2026 GMT Subject: CN=1C1E30B5468010E99C7C4D25D281F3AA3E0CCD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:5d:20:36:96:a6:77:60:4e:3d:42:f6:55: 51:34:39:4e:7c:4c:25:9a:d6:e1:52:3b:a4:90:ce: 72:e4:ba:d3:cf:69:1f:f4:c8:c1:3a:41:03:05:f4: ef:66:01:f1:23:73:4a:e9:d3:6b:d2:88:3d:8b:7a: d5:a0:bf:f7:f2:b8:d0:34:5d:8d:dc:04:0a:5b:1f: ec:64:48:56:42:76:55:4b:82:59:c8:e9:49:50:a6: c6:49:d2:b2:7c:81:5f:e8:2b:d6:e6:63:57:78:63: 16:47:c1:c0:db:0c:12:79:d6:63:32:b0:ac:be:e4: 29:94:db:d5:65:ba:a6:b1:06:28:51:42:ad:0c:b3: 45:ac:98:e5:b5:0d:e1:07:3b:24:0a:f9:3c:91:73: 6f:65:49:ac:e1:0f:64:77:4f:cb:7c:85:53:99:69: 01:07:90:43:b0:a6:8d:01:b7:aa:e0:24:74:0d:e3: 77:eb:bf:c0:ad:ba:5f:13:fc:21:cb:46:cd:e5:93: 12:22:4a:eb:47:16:c8:52:48:4f:89:53:68:f2:eb: 91:cc:68:92:fb:a9:01:a4:84:6e:8f:24:c3:e7:9f: 2e:bb:14:83:be:21:7b:cf:88:8e:28:d1:bf:10:65: 63:bd:eb:2a:46:a1:36:b1:3d:25:fe:67:1a:bc:7f: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1E:30:B5:46:80:10:E9:9C:7C:4D:25:D2:81:F3:AA:3E:0C:CD:6E X509v3 Authority Key Identifier: keyid:CD:80:D4:14:20:A0:BF:C3:89:65:07:57:D1:13:52:D7:D3:04:E5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD80D41420A0BFC389650757D11352D7D304E5E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e7:92:f3:1f:9d:97:42:60:2e:34:1b:db:1b:90:4e:31:4d: fd:0b:4f:bf:27:3d:51:1c:a8:74:08:5e:ae:03:b7:3f:82:d9: bf:f4:db:42:02:66:ef:39:8d:4a:ac:07:82:2d:a5:7d:89:f8: 3c:42:88:0b:f7:ef:6d:e3:01:6b:bc:b3:3d:29:e5:48:7b:d2: 9a:df:05:3e:38:42:ff:dc:ea:9b:09:7f:04:cb:ff:5b:5f:b8: 2f:26:e3:d6:5a:99:4d:f0:cd:39:bd:8c:72:95:85:8c:c5:d7: 3c:e7:8e:2c:67:11:ad:1e:f1:e3:8b:2c:52:be:5d:71:9a:06: b6:7e:9c:eb:7c:67:f0:c7:2c:50:71:99:2d:4f:da:c5:45:55: 68:5d:7b:28:44:01:81:f6:7b:45:f9:94:f7:64:4c:8b:e5:23: 24:88:01:fc:48:d6:f8:ad:0c:43:e7:62:27:34:e9:1b:54:2f: 32:74:6f:08:2c:ad:53:45:3e:5c:fe:d7:9a:6f:2d:fd:a3:3d: 9a:4a:72:ac:24:45:09:60:f8:a6:36:52:32:f2:58:20:bc:4c: ba:40:66:07:89:6b:0a:51:ee:2a:5a:26:79:77:55:5a:80:23: a5:b4:b6:6d:90:6a:2e:b7:d0:cd:24:e9:96:2d:21:e7:4b:a8: d2:3b:23:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIrozonJWcj/KH1kAfAd0dvHTIP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4MEQ0MTQyMEEwQkZDMzg5NjUwNzU3RDExMzUyRDdE MzA0RTVFOTAeFw0yNjExMDIyMzU1MjFaFw0yNjExMDQwMTI5MjFaMDMxMTAvBgNV BAMTKDFDMUUzMEI1NDY4MDEwRTk5QzdDNEQyNUQyODFGM0FBM0UwQ0NENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9V0gNpamd2BOPUL2VVE0OU58 TCWa1uFSO6SQznLkutPPaR/0yME6QQMF9O9mAfEjc0rp02vSiD2LetWgv/fyuNA0 XY3cBApbH+xkSFZCdlVLglnI6UlQpsZJ0rJ8gV/oK9bmY1d4YxZHwcDbDBJ51mMy sKy+5CmU29VluqaxBihRQq0Ms0WsmOW1DeEHOyQK+TyRc29lSazhD2R3T8t8hVOZ aQEHkEOwpo0Bt6rgJHQN43frv8Ctul8T/CHLRs3lkxIiSutHFshSSE+JU2jy65HM aJL7qQGkhG6PJMPnny67FIO+IXvPiI4o0b8QZWO96ypGoTaxPSX+Zxq8f+3ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHB4wtUaAEOmcfE0l0oHzqj4MzW4wHwYDVR0j BBgwFoAUzYDUFCCgv8OJZQdX0RNS19ME5ekwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3 UlEvMi9DRDgwRDQxNDIwQTBCRkMzODk2NTA3NTdEMTEzNTJEN0QzMDRFNUU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEODBENDE0MjBBMEJGQzM4 OTY1MDc1N0QxMTM1MkQ3RDMwNEU1RTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3UlEvMi9D RDgwRDQxNDIwQTBCRkMzODk2NTA3NTdEMTEzNTJEN0QzMDRFNUU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtueS8x+dl0JgLjQb2xuQTjFN/QtPvyc9URyodAhergO3P4LZv/TbQgJm7zmN SqwHgi2lfYn4PEKIC/fvbeMBa7yzPSnlSHvSmt8FPjhC/9zqmwl/BMv/W1+4Lybj 1lqZTfDNOb2McpWFjMXXPOeOLGcRrR7x44ssUr5dcZoGtn6c63xn8McsUHGZLU/a xUVVaF17KEQBgfZ7RfmU92RMi+UjJIgB/EjW+K0MQ+diJzTpG1QvMnRvCCytU0U+ XP7Xmm8t/aM9mkpyrCRFCWD4pjZSMvJYILxMukBmB4lrClHuKlomeXdVWoAjpbS2 bZBqLrfQzSTpli0h50uo0jsj1A== -----END CERTIFICATE-----Generated at Tue Nov 3 03:54:08 2026 by rpki-client