$ rpki-client -vvvf rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft File: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft (raw, json) Hash identifier: cfiAFk0Cb+Tqr30MRXDayuwIpqRuCo/u3Xzv1s7OKV8= Subject key identifier: 2F:14:1F:6A:A0:25:04:94:E4:5A:00:0D:FD:58:AA:B8:E9:3F:F5:1D Authority key identifier: 21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 Certificate issuer: /CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Certificate serial: 194EE2F971BFCE373EBB00290ADC762B8B1394B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject info access: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft Manifest number: D2 Signing time: Fri 23 Oct 2026 06:54:08 +0000 Manifest this update: Fri 23 Oct 2026 06:49:08 +0000 Manifest next update: Sat 24 Oct 2026 09:10:08 +0000 Files and hashes: 1: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl (hash: Ch7joj3M7RgB3x5FYzeYjeUPI+lAVYr84cVdJ6b4kDE=) 2: 323830343a366238343a3a2f33322d313238203d3e20323730343035.roa (hash: 2ozPd5FcOpRP8Pf6OP7xrYk6TvnS6a/F3RrN6QnExKo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 24 Oct 2026 09:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4e:e2:f9:71:bf:ce:37:3e:bb:00:29:0a:dc:76:2b:8b:13:94:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Validity Not Before: Oct 23 06:49:08 2026 GMT Not After : Oct 24 09:10:08 2026 GMT Subject: CN=2F141F6AA0250494E45A000DFD58AAB8E93FF51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:87:bb:2c:d8:f0:8e:93:dc:e0:ab:c7:a2: e0:c1:84:50:e4:33:c8:2f:5f:2c:53:46:65:4c:3d: b8:ed:2d:5a:e3:a1:9a:67:d9:0d:d5:d7:50:6c:c2: af:40:7c:a4:3a:d6:e8:74:5c:26:e1:39:bd:8c:bc: 33:b8:e5:67:20:33:dd:e2:0e:61:9e:35:3b:a3:25: e6:9c:e8:83:23:8a:da:85:6b:38:16:a0:86:57:89: 08:dd:04:4f:e3:70:95:11:45:fe:2e:02:03:f1:9e: 19:31:3d:77:b7:e1:66:de:d5:7b:3a:cd:86:56:ca: 46:e7:3d:ab:b1:cc:c5:6a:67:43:9e:29:f0:42:69: bd:4f:da:a3:d9:f1:d4:43:a5:de:d6:54:cb:6d:2e: 69:e0:18:29:25:08:9a:e0:2e:2d:c1:2b:e8:b1:dd: 15:dd:57:a5:b7:40:6c:92:99:4c:4f:e0:dc:99:15: 56:63:60:a0:39:21:f6:b8:95:d9:e3:16:b4:ba:b2: 47:d4:a9:ac:8c:66:11:83:87:6a:67:84:86:51:52: f1:c3:fe:64:41:66:0e:dd:b9:56:d9:50:90:70:6f: 30:55:4c:83:30:e6:09:b4:ea:78:0f:c5:25:c0:a9: b6:95:08:30:65:3c:bf:10:43:41:72:a0:45:1a:07: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:1F:6A:A0:25:04:94:E4:5A:00:0D:FD:58:AA:B8:E9:3F:F5:1D X509v3 Authority Key Identifier: keyid:21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8e:f4:db:d1:92:2a:5d:0f:90:fb:92:01:96:ca:86:9c:4b: be:8d:85:f6:2f:31:1a:e0:15:f0:dd:5e:49:64:31:77:16:71: e2:c5:4c:13:0c:c1:35:2d:fa:2a:2b:c9:b3:91:96:e4:36:c4: 0c:9c:bb:ad:ac:f7:21:cb:8b:ce:22:d9:41:bc:ee:20:21:57: 6f:b1:ad:e3:6b:3a:7a:10:28:58:78:ee:e8:48:9d:86:eb:76: 2d:63:e4:c7:91:8a:6c:37:32:22:61:40:5e:df:c0:6e:6e:19: e2:dc:5a:2e:d9:ac:8f:4c:05:4d:2b:b9:7c:f9:77:0e:3a:af: b4:52:3e:44:84:78:bb:55:be:80:d7:11:95:bc:b1:20:02:a9: 1f:29:d3:46:12:9c:22:62:79:35:4e:ff:a7:83:42:43:e0:7b: 62:61:b5:b3:6f:0f:65:68:77:df:61:b4:36:89:4a:ce:21:57: f0:08:2c:15:2c:4a:65:38:74:8b:f4:e9:1d:12:a8:82:77:12: 7d:79:4e:bb:a0:c8:09:dc:37:6d:47:e4:d5:85:fe:9e:c8:82: 97:62:c3:6b:3b:4c:e9:ed:2b:e1:51:bd:22:df:bf:c2:b0:5a: 47:59:cf:67:94:01:d6:36:72:34:3c:95:d7:49:b6:62:3d:da: 9e:9d:23:09 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUGU7i+XG/zjc+uwApCtx2K4sTlLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYw MjQyNjI5NTAeFw0yNjEwMjMwNjQ5MDhaFw0yNjEwMjQwOTEwMDhaMDMxMTAvBgNV BAMTKDJGMTQxRjZBQTAyNTA0OTRFNDVBMDAwREZENThBQUI4RTkzRkY1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHIe7LNjwjpPc4KvHouDBhFDk M8gvXyxTRmVMPbjtLVrjoZpn2Q3V11Bswq9AfKQ61uh0XCbhOb2MvDO45WcgM93i DmGeNTujJeac6IMjitqFazgWoIZXiQjdBE/jcJURRf4uAgPxnhkxPXe34Wbe1Xs6 zYZWykbnPauxzMVqZ0OeKfBCab1P2qPZ8dRDpd7WVMttLmngGCklCJrgLi3BK+ix 3RXdV6W3QGySmUxP4NyZFVZjYKA5Ifa4ldnjFrS6skfUqayMZhGDh2pnhIZRUvHD /mRBZg7duVbZUJBwbzBVTIMw5gm06ngPxSXAqbaVCDBlPL8QQ0FyoEUaB+z3AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQULxQfaqAlBJTkWgAN/ViquOk/9R0wHwYDVR0j BBgwFoAUISSrcIu/Y4jsgNBsO4+x/wJCYpUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby96cWtvaDRrZk51TERyTHp5N1ZXNFIxeUQ3WWhCb3hjNG9obnZmcEJVN3I4 LzAvMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYwMjQyNjI5NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMTI0QUI3MDhCQkY2Mzg4RUM4 MEQwNkMzQjhGQjFGRjAyNDI2Mjk1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3px a29oNGtmTnVMRHJMenk3Vlc0UjF5RDdZaEJveGM0b2hudmZwQlU3cjgvMC8yMTI0 QUI3MDhCQkY2Mzg4RUM4MEQwNkMzQjhGQjFGRjAyNDI2Mjk1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA MY7029GSKl0PkPuSAZbKhpxLvo2F9i8xGuAV8N1eSWQxdxZx4sVMEwzBNS36KivJ s5GW5DbEDJy7raz3IcuLziLZQbzuICFXb7Gt42s6ehAoWHju6Eidhut2LWPkx5GK bDcyImFAXt/Abm4Z4txaLtmsj0wFTSu5fPl3DjqvtFI+RIR4u1W+gNcRlbyxIAKp HynTRhKcImJ5NU7/p4NCQ+B7YmG1s28PZWh332G0NolKziFX8AgsFSxKZTh0i/Tp HRKogncSfXlOu6DICdw3bUfk1YX+nsiCl2LDaztM6e0r4VG9It+/wrBaR1nPZ5QB 1jZyNDyV10m2Yj3anp0jCQ== -----END CERTIFICATE-----Generated at Fri Oct 23 17:43:58 2026 by rpki-client