$ rpki-client -vvvf rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft File: BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft (raw, json) Hash identifier: ya/WKd+aijV7N9Ia9apav8MEi2iP4axacqk5pURii/Q= Subject key identifier: 42:4C:8C:58:CB:E6:39:3E:DC:25:9E:29:EC:2E:D6:79:8D:49:DA:2D Authority key identifier: BD:4A:3E:82:CA:76:DA:F4:19:C4:41:FB:1A:4A:D4:63:C9:8E:B9:D0 Certificate issuer: /CN=BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0 Certificate serial: 1009753B47D6269EBCE30E8CAD86D4910336B9FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft Manifest number: A2 Signing time: Sun 01 Nov 2026 13:30:52 +0000 Manifest this update: Sun 01 Nov 2026 13:25:52 +0000 Manifest next update: Mon 02 Nov 2026 17:07:52 +0000 Files and hashes: 1: 3136382e302e332e302f32342d3234203d3e20323733343638.roa (hash: TfC81paY2myGU/uQi+X1MDGOPF0bBFR2oM8RSsnl8CU=) 2: BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.crl (hash: h39tojKWeZ2vDGsm/hBX+e0Z6O6z6v8dycIWqyZH7kQ=) 3: 323830343a386631633a3a2f33322d3332203d3e20323733343638.roa (hash: its9+DoXyZzDxwyx2TV5+54HkvXpS6wD80IDMoVCKqY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.crl rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 17:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:09:75:3b:47:d6:26:9e:bc:e3:0e:8c:ad:86:d4:91:03:36:b9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0 Validity Not Before: Nov 1 13:25:52 2026 GMT Not After : Nov 2 17:07:52 2026 GMT Subject: CN=424C8C58CBE6393EDC259E29EC2ED6798D49DA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:ae:a3:f2:69:47:44:4c:99:49:c5:a7:d0: 29:da:fa:3a:1b:d5:56:df:11:ba:45:3e:50:73:21: bb:db:fe:0e:85:f4:6d:28:28:67:6c:7b:b5:5b:61: 35:7d:42:23:e3:27:44:00:c6:a7:95:22:5e:f5:6d: 26:ee:4f:bd:6f:eb:e6:bc:1f:d4:6e:31:c7:f6:b3: 7c:15:1b:55:d0:28:d4:eb:1c:76:19:ab:69:1b:12: 97:a8:ec:56:36:52:98:e7:a3:54:da:08:98:4e:30: f9:df:9b:fe:49:01:50:dd:d6:f7:97:14:91:b4:4e: 9c:6a:69:02:f0:03:f8:f9:19:66:41:3e:59:f0:7c: ae:21:71:3e:6c:e9:22:76:52:db:0b:35:ea:85:7f: 00:bd:16:71:8c:25:3c:2a:03:e4:31:2b:e4:2f:af: 8d:16:00:94:87:b0:b7:ba:64:a9:a2:be:da:f3:f2: b0:ab:d2:d1:a1:b4:8d:f7:8a:84:f0:c0:38:ee:f7: 2c:32:0f:19:2e:f6:67:51:bd:41:d7:76:18:4b:aa: 02:63:b9:e4:f5:7d:d1:d7:2d:ae:d1:13:13:6f:6b: 0b:a5:95:86:d8:dc:cf:e1:db:39:e8:b1:03:bf:05: 60:40:02:07:cd:cb:a3:9f:4e:20:3a:d6:7f:15:c6: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4C:8C:58:CB:E6:39:3E:DC:25:9E:29:EC:2E:D6:79:8D:49:DA:2D X509v3 Authority Key Identifier: keyid:BD:4A:3E:82:CA:76:DA:F4:19:C4:41:FB:1A:4A:D4:63:C9:8E:B9:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1c:cf:50:02:6a:3f:8b:f6:33:8c:01:3a:36:43:7a:87:a2: c9:aa:ad:d2:4b:79:b7:04:2e:63:48:5e:da:cf:58:cd:34:53: 5c:39:af:83:d7:60:3b:42:5b:17:f8:57:2f:9b:61:5c:ae:4c: 9b:ab:8a:d0:05:dc:fb:89:4c:21:5e:0f:e1:52:30:5d:73:fb: 64:78:ba:0a:c7:40:a2:fe:57:89:72:26:39:a4:4e:36:28:48: f7:8f:01:04:a5:6a:a0:f2:46:0b:ee:d7:a7:ff:d9:0d:15:12: 84:71:75:e6:d5:10:3d:e6:e6:5f:e6:45:d0:2c:e4:88:48:6e: bd:bf:25:0e:d4:ae:1a:51:61:3c:9b:ad:c5:a7:be:62:25:49: 06:00:98:4e:8f:63:c8:d6:62:96:29:cf:d7:35:06:c2:6a:90: c1:29:c1:d0:e9:1c:3a:21:9d:3c:f6:c1:5f:ec:d8:8b:2d:51: 7b:66:b7:03:f3:7b:f0:5f:bd:17:ce:4d:ca:56:73:ed:34:ed: 77:35:8f:80:be:95:63:74:da:49:66:b8:59:27:96:01:3d:28: bc:10:76:b1:a5:e5:37:18:c8:73:67:51:37:50:c3:bf:d1:07: d9:e4:ec:fe:17:b1:4f:59:a4:db:6f:83:32:da:07:dd:27:33: b3:b5:69:2a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEAl1O0fWJp684w6MrYbUkQM2ufswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0QTNFODJDQTc2REFGNDE5QzQ0MUZCMUE0QUQ0NjND OThFQjlEMDAeFw0yNjExMDExMzI1NTJaFw0yNjExMDIxNzA3NTJaMDMxMTAvBgNV BAMTKDQyNEM4QzU4Q0JFNjM5M0VEQzI1OUUyOUVDMkVENjc5OEQ0OURBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5K6j8mlHREyZScWn0Cna+job 1VbfEbpFPlBzIbvb/g6F9G0oKGdse7VbYTV9QiPjJ0QAxqeVIl71bSbuT71v6+a8 H9RuMcf2s3wVG1XQKNTrHHYZq2kbEpeo7FY2Upjno1TaCJhOMPnfm/5JAVDd1veX FJG0TpxqaQLwA/j5GWZBPlnwfK4hcT5s6SJ2UtsLNeqFfwC9FnGMJTwqA+QxK+Qv r40WAJSHsLe6ZKmivtrz8rCr0tGhtI33ioTwwDju9ywyDxku9mdRvUHXdhhLqgJj ueT1fdHXLa7RExNvawullYbY3M/h2znosQO/BWBAAgfNy6OfTiA61n8VxnljAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUQkyMWMvmOT7cJZ4p7C7WeY1J2i0wHwYDVR0j BBgwFoAUvUo+gsp22vQZxEH7GkrUY8mOudAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aWXhxRlRrY1Q4blJEWkxGQzVDZ0gxN2FpTG92Q0s4OTRuV3dCYWpmQUhx LzAvQkQ0QTNFODJDQTc2REFGNDE5QzQ0MUZCMUE0QUQ0NjNDOThFQjlEMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRDRBM0U4MkNBNzZEQUY0MTlD NDQxRkIxQTRBRDQ2M0M5OEVCOUQwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pZ eHFGVGtjVDhuUkRaTEZDNUNnSDE3YWlMb3ZDSzg5NG5Xd0JhamZBSHEvMC9CRDRB M0U4MkNBNzZEQUY0MTlDNDQxRkIxQTRBRDQ2M0M5OEVCOUQwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA OhzPUAJqP4v2M4wBOjZDeoeiyaqt0kt5twQuY0he2s9YzTRTXDmvg9dgO0JbF/hX L5thXK5Mm6uK0AXc+4lMIV4P4VIwXXP7ZHi6CsdAov5XiXImOaRONihI948BBKVq oPJGC+7Xp//ZDRUShHF15tUQPebmX+ZF0CzkiEhuvb8lDtSuGlFhPJutxae+YiVJ BgCYTo9jyNZilinP1zUGwmqQwSnB0OkcOiGdPPbBX+zYiy1Re2a3A/N78F+9F85N ylZz7TTtdzWPgL6VY3TaSWa4WSeWAT0ovBB2saXlNxjIc2dRN1DDv9EH2eTs/hex T1mk22+DMtoH3Sczs7VpKg== -----END CERTIFICATE-----Generated at Mon Nov 2 04:14:32 2026 by rpki-client