$ rpki-client -vvvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: 6CUkEC4JxDcRCgIrAx2T2gQ21FZeGJoQFdjxv+zoAV8= Subject key identifier: A5:6B:62:5B:AB:62:29:0C:8E:38:4F:51:BB:6D:2C:23:11:2E:5D:FE Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 1E949E7688014316C7E77E22B015005C47AD83EB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 04D1 Signing time: Fri 16 Oct 2026 01:22:09 +0000 Manifest this update: Fri 16 Oct 2026 01:17:09 +0000 Manifest next update: Sat 17 Oct 2026 03:51:09 +0000 Files and hashes: 1: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=) 2: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: ehWpQ9o/kZgF5vi/U36kHWAcVfSolQS4g+0M1A98RzA=) 3: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: SRQnVJ5yuFckLEqoRUuvzBokza8wspe76dz42Qqm4zo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Oct 2026 03:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:94:9e:76:88:01:43:16:c7:e7:7e:22:b0:15:00:5c:47:ad:83:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Oct 16 01:17:09 2026 GMT Not After : Oct 17 03:51:09 2026 GMT Subject: CN=A56B625BAB62290C8E384F51BB6D2C23112E5DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:7a:d5:3a:c5:37:bc:e5:59:85:6b:d5:04: d9:a1:99:c1:26:3d:93:2b:f7:e7:ce:7f:23:d1:e7: 92:83:4a:4c:14:1e:31:f8:27:32:25:a9:c8:eb:54: 79:2e:b4:fa:f5:d9:da:cf:8d:a9:ef:32:74:5b:92: e5:03:1b:bd:34:22:14:6a:e8:8e:b0:f2:15:07:00: 86:93:32:5c:58:68:9e:47:02:b1:5f:52:58:55:20: e3:ca:32:65:20:f9:04:2d:b4:22:80:95:7e:ec:eb: 72:a4:96:9d:9f:5e:3f:38:e7:23:d6:65:e5:6e:9d: 62:52:4c:dd:29:98:c1:f3:83:76:22:f8:3b:cc:b2: 74:9e:35:ab:88:d3:a1:30:01:a9:a0:8e:e5:79:9f: b4:a0:d7:a8:a4:59:8e:6c:c5:c7:9b:0e:f7:f2:9a: 9f:42:f8:ed:25:1c:22:75:0c:b1:df:21:af:98:5c: 1c:6c:38:57:8c:69:99:44:87:58:43:51:49:98:a8: 6e:1c:38:17:b7:27:9a:d4:91:fc:ef:82:68:87:6b: 86:30:eb:c4:8a:4d:3c:79:c6:b3:84:af:ff:c5:ea: 7e:17:b6:88:cd:58:7d:f8:86:f6:4c:57:10:f0:72: 97:9c:e7:1e:d9:99:51:46:1e:6e:2f:54:e8:f7:d9: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6B:62:5B:AB:62:29:0C:8E:38:4F:51:BB:6D:2C:23:11:2E:5D:FE X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:7c:65:56:27:e4:f4:da:19:43:e7:83:7f:93:01:e6:31:73: 01:72:4a:15:96:1c:69:97:27:ac:04:4d:96:d9:f0:9b:32:b4: 67:cc:18:25:d1:c2:57:72:56:b8:26:5b:b1:c3:fd:25:bc:62: 53:72:44:cb:2e:24:b8:fb:35:83:67:98:e7:7d:9d:94:a0:bd: 4a:b6:4c:b8:91:98:0e:12:27:b0:2c:8f:ac:be:f2:41:86:62: d6:7b:a6:27:01:da:04:d0:e4:2d:e6:1f:d9:12:32:db:52:77: 27:77:2a:ab:7a:d2:67:75:aa:e9:e7:d4:17:c6:71:db:7b:af: e6:e3:65:63:46:fc:1f:91:1b:47:c3:7e:7e:65:99:9f:ed:8e: 86:2c:48:1c:b1:ed:10:1a:cd:46:8f:e8:c3:24:13:cf:70:f5: f8:86:71:d9:f5:a8:97:c5:0e:e1:10:5c:6c:83:da:9a:a5:a8: ed:3d:35:2f:b6:24:47:fe:11:8d:74:1f:8c:bf:8d:07:da:b0: c5:7a:3d:45:fd:8b:c9:74:3f:1b:de:46:a6:a0:63:63:c7:51: 5f:8e:6b:41:84:5a:c2:a8:90:b5:a8:45:8c:d6:94:12:4d:f1: 22:c4:25:e2:6f:77:78:9f:71:ab:4a:2d:d7:e1:ce:d7:94:74: a3:82:0d:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHpSedogBQxbH534isBUAXEetg+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNjEwMTYwMTE3MDlaFw0yNjEwMTcwMzUxMDlaMDMxMTAvBgNV BAMTKEE1NkI2MjVCQUI2MjI5MEM4RTM4NEY1MUJCNkQyQzIzMTEyRTVERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmXrVOsU3vOVZhWvVBNmhmcEm PZMr9+fOfyPR55KDSkwUHjH4JzIlqcjrVHkutPr12drPjanvMnRbkuUDG700IhRq 6I6w8hUHAIaTMlxYaJ5HArFfUlhVIOPKMmUg+QQttCKAlX7s63Kklp2fXj845yPW ZeVunWJSTN0pmMHzg3Yi+DvMsnSeNauI06EwAamgjuV5n7Sg16ikWY5sxcebDvfy mp9C+O0lHCJ1DLHfIa+YXBxsOFeMaZlEh1hDUUmYqG4cOBe3J5rUkfzvgmiHa4Yw 68SKTTx5xrOEr//F6n4XtojNWH34hvZMVxDwcpec5x7ZmVFGHm4vVOj32dYjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpWtiW6tiKQyOOE9Ru20sIxEuXf4wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAunxlVifk9NoZQ+eDf5MB5jFzAXJKFZYcaZcnrARNltnwmzK0Z8wYJdHCV3JW uCZbscP9JbxiU3JEyy4kuPs1g2eY532dlKC9SrZMuJGYDhInsCyPrL7yQYZi1num JwHaBNDkLeYf2RIy21J3J3cqq3rSZ3Wq6efUF8Zx23uv5uNlY0b8H5EbR8N+fmWZ n+2OhixIHLHtEBrNRo/owyQTz3D1+IZx2fWol8UO4RBcbIPamqWo7T01L7YkR/4R jXQfjL+NB9qwxXo9Rf2LyXQ/G95GpqBjY8dRX45rQYRawqiQtahFjNaUEk3xIsQl 4m93eJ9xq0ot1+HO15R0o4INgQ== -----END CERTIFICATE-----Generated at Fri Oct 16 11:49:20 2026 by rpki-client