$ rpki-client -vvvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: lAMFZaOiZBMHqhcQ7dUBfkWIJov782eLL3SLBakEiCg= Subject key identifier: D5:6E:C8:D9:03:A2:76:BF:71:22:FB:03:9F:3E:66:56:EE:54:44:87 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 1845EBBB4C696ABF98A606092502807F1126C45C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 04C7 Signing time: Sat 17 Oct 2026 11:20:21 +0000 Manifest this update: Sat 17 Oct 2026 11:15:21 +0000 Manifest next update: Sun 18 Oct 2026 14:17:21 +0000 Files and hashes: 1: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=) 2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=) 3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=) 4: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: FcqmWtPmFsyvEKd/D3AUTvidk03tYD1/poldGROQ4sw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 Oct 2026 14:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:45:eb:bb:4c:69:6a:bf:98:a6:06:09:25:02:80:7f:11:26:c4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Oct 17 11:15:21 2026 GMT Not After : Oct 18 14:17:21 2026 GMT Subject: CN=D56EC8D903A276BF7122FB039F3E6656EE544487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3b:5e:98:c7:fa:b4:24:e6:0d:ac:cc:46:2a: f5:d5:b6:93:52:10:c2:ae:99:05:14:13:ab:65:e3: b3:24:f8:60:c6:31:1d:ca:1c:39:06:d7:a0:44:4a: 9a:0b:eb:d6:13:8e:9c:78:e4:72:9a:95:4b:a3:e5: b0:3c:21:af:7c:9b:7a:a5:e9:b8:54:be:a0:cd:08: 33:d6:8c:20:06:34:b2:2d:fe:a4:79:53:e4:57:d0: 84:bd:6f:d3:f6:e0:16:9d:21:7e:5c:7c:15:55:bf: 8d:87:c6:9d:ad:7e:b7:43:c7:3c:0f:55:34:a7:28: 9d:ac:3c:cf:15:00:ec:24:b1:93:b3:38:3f:f7:10: c3:9e:97:01:a2:25:42:d3:fa:b3:3a:d5:16:2e:43: 3a:38:a9:34:10:e6:f0:14:79:70:c0:74:28:97:6e: 58:5e:01:4d:b7:56:5b:73:8a:5f:31:7e:40:df:de: 18:6b:ef:02:d8:dc:16:a7:71:32:47:04:52:b2:49: 28:df:ae:90:bc:2e:47:7b:62:7d:35:b6:8c:a9:df: 57:44:62:3c:c7:bf:18:fb:b6:e7:7c:1f:fe:d6:7b: 46:fb:8f:e1:bd:e4:dc:e3:c3:44:0c:a1:cd:04:ca: c0:60:48:66:4c:f5:d0:c3:88:a6:a7:d8:e1:38:19: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:C8:D9:03:A2:76:BF:71:22:FB:03:9F:3E:66:56:EE:54:44:87 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:07:31:45:42:d8:65:b9:14:dc:d4:3c:fe:f3:4f:7e:49:4e: b3:02:80:0e:45:d6:cf:bc:c1:9f:62:bf:ef:91:29:f0:79:c2: b7:87:60:ce:2f:76:f3:55:2a:52:23:01:7a:4b:65:58:5b:4b: d8:ef:4f:7b:ba:10:1c:5e:e8:dc:eb:bf:0d:ae:df:71:73:0a: dc:c3:b4:ea:06:19:6a:8d:39:83:45:5c:ad:74:eb:11:85:e0: 53:75:5c:8f:9e:cf:75:9c:b3:bf:ba:ce:43:ef:5e:2c:e1:79: c5:37:e1:cb:cb:51:c7:51:b8:9b:d4:73:e3:db:75:91:4e:c0: fd:8f:42:15:0b:b3:ba:2d:23:b6:59:c0:1b:03:3a:69:90:4f: bd:ce:f6:e9:15:f5:2a:53:79:7d:61:a1:74:a9:84:f0:9c:40: 46:46:02:e1:cb:0d:8c:5a:cb:b9:d1:99:a2:94:69:82:e2:c1: 45:1b:90:80:dc:d4:78:48:2a:1f:86:39:17:a2:76:25:b4:3a: a5:9d:a5:b2:38:a4:0b:0e:30:e3:62:23:8a:0c:e6:41:25:fa: b9:90:c7:94:2a:d2:b8:59:bc:bd:5f:3a:bb:5b:b2:ce:91:29: 29:f4:f3:07:20:62:2e:0a:df:b4:01:3c:f6:21:14:ae:33:75: b0:1f:e3:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGEXru0xpar+YpgYJJQKAfxEmxFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNjEwMTcxMTE1MjFaFw0yNjEwMTgxNDE3MjFaMDMxMTAvBgNV BAMTKEQ1NkVDOEQ5MDNBMjc2QkY3MTIyRkIwMzlGM0U2NjU2RUU1NDQ0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuO16Yx/q0JOYNrMxGKvXVtpNS EMKumQUUE6tl47Mk+GDGMR3KHDkG16BESpoL69YTjpx45HKalUuj5bA8Ia98m3ql 6bhUvqDNCDPWjCAGNLIt/qR5U+RX0IS9b9P24BadIX5cfBVVv42Hxp2tfrdDxzwP VTSnKJ2sPM8VAOwksZOzOD/3EMOelwGiJULT+rM61RYuQzo4qTQQ5vAUeXDAdCiX blheAU23Vltzil8xfkDf3hhr7wLY3BancTJHBFKySSjfrpC8Lkd7Yn01toyp31dE YjzHvxj7tud8H/7We0b7j+G95Nzjw0QMoc0EysBgSGZM9dDDiKan2OE4GadBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1W7I2QOidr9xIvsDnz5mVu5URIcwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQcxRULYZbkU3NQ8/vNPfklOswKADkXWz7zBn2K/75Ep8HnCt4dgzi9281Uq UiMBektlWFtL2O9Pe7oQHF7o3Ou/Da7fcXMK3MO06gYZao05g0VcrXTrEYXgU3Vc j57PdZyzv7rOQ+9eLOF5xTfhy8tRx1G4m9Rz49t1kU7A/Y9CFQuzui0jtlnAGwM6 aZBPvc726RX1KlN5fWGhdKmE8JxARkYC4csNjFrLudGZopRpguLBRRuQgNzUeEgq H4Y5F6J2JbQ6pZ2lsjikCw4w42IjigzmQSX6uZDHlCrSuFm8vV86u1uyzpEpKfTz ByBiLgrftAE89iEUrjN1sB/jAA== -----END CERTIFICATE-----Generated at Sun Oct 18 07:53:29 2026 by rpki-client