$ rpki-client -vvvf rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft File: 568D52BF567597DA0E7683B85754EDCC4419B51A.mft (raw, json) Hash identifier: Hvt3EElkUn1frwzrSVDXOeas8v4m8ShGs//EAPHCvzY= Subject key identifier: 8B:A8:FB:8E:13:C6:D4:70:E7:67:58:F9:DB:8A:BA:73:61:6C:4B:C3 Authority key identifier: 56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A Certificate issuer: /CN=568D52BF567597DA0E7683B85754EDCC4419B51A Certificate serial: 19EA51CA88D031BDBC24B43C0C5A73A435189074 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer Subject info access: rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft Manifest number: 0C Signing time: Mon 12 Oct 2026 16:50:47 +0000 Manifest this update: Mon 12 Oct 2026 16:45:47 +0000 Manifest next update: Tue 13 Oct 2026 19:23:47 +0000 Files and hashes: 1: 3138372e33312e3234382e302f32312d3231203d3e20323639303631.roa (hash: MQUBNbd2t9N7y6QEetOBAx8ofH2tS0S4yjbgU0VtcCo=) 2: 3138372e33312e3233392e302f32342d3234203d3e20323639303631.roa (hash: lgN4rSg/kqNGQAudesIGR1h1GMb67r2/kan74M12SBY=) 3: 34352e3137382e3137362e302f32332d3233203d3e20323639303631.roa (hash: vDIGmYpBpjx7Fx3TozDZkjXGpbNz4n58gwix+myBc8Y=) 4: 323830343a356564633a3a2f33322d3332203d3e20323639303631.roa (hash: ysDK11KteMv0E+5j3i9j11WNXRv/2aEYGpb9LHjXvlI=) 5: 34352e3137382e3137382e302f32342d3234203d3e20323639303631.roa (hash: VEnDKbn6fQLm20RM/PlnyKLkNqRXZhoH7Y3Qk1c6mf4=) 6: 568D52BF567597DA0E7683B85754EDCC4419B51A.crl (hash: XZelSsyOJwFmys83+SZUDV5ybMvMpC0h5C+UcJltJvo=) 7: 3138372e33312e3234302e302f32312d3231203d3e20323639303631.roa (hash: nWDhD2LoewSEgA9E4z6x3p24xTauPQz6VapY/U52s+s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 19:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ea:51:ca:88:d0:31:bd:bc:24:b4:3c:0c:5a:73:a4:35:18:90:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568D52BF567597DA0E7683B85754EDCC4419B51A Validity Not Before: Oct 12 16:45:47 2026 GMT Not After : Oct 13 19:23:47 2026 GMT Subject: CN=8BA8FB8E13C6D470E76758F9DB8ABA73616C4BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7d:a8:e1:67:b6:1b:7c:96:9c:a6:6e:7a:c8: 63:a3:10:28:42:c7:ef:26:a2:9a:bf:06:05:7e:80: 9e:6c:55:d6:e5:aa:96:c2:76:c8:90:33:5f:5a:cc: 39:90:7b:a3:4f:2d:25:c7:b8:4b:17:d0:f0:55:2f: db:62:b1:4e:49:9b:61:78:f7:47:6e:e9:cc:1f:d3: d7:0e:52:75:b8:68:19:d5:92:42:f9:b5:eb:17:e3: 4a:1b:aa:6b:66:80:30:b1:58:5d:b3:98:39:05:83: b0:52:01:e5:7d:9d:b7:50:3a:05:c2:55:d3:02:62: 68:b2:38:6c:fe:a9:6c:f3:57:ce:43:43:d7:7b:cf: b9:6a:00:21:23:f0:18:5f:12:8e:2e:03:fa:c9:59: dc:29:40:5f:24:29:2c:49:2b:34:41:6a:63:69:f7: 89:dc:5f:62:f0:dd:5c:6d:54:82:c3:f4:23:b2:16: f0:20:ba:ab:09:90:d5:47:a4:e2:59:79:ae:2a:ca: 39:2c:39:e0:3f:f2:dd:78:73:f4:62:ff:12:1c:31: f9:1e:c7:15:e0:02:ab:17:91:e8:11:e0:45:8f:4e: 35:bd:86:5d:b1:30:11:52:96:bc:91:54:78:a9:32: 05:99:84:da:90:b5:42:82:23:be:2a:44:a6:40:c4: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A8:FB:8E:13:C6:D4:70:E7:67:58:F9:DB:8A:BA:73:61:6C:4B:C3 X509v3 Authority Key Identifier: keyid:56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:79:4e:25:f8:b5:4b:a7:ab:8b:8c:22:7f:47:78:be:74:f5: 9c:04:9b:70:ea:f5:80:f4:65:fc:bc:51:2a:c4:76:00:8f:62: 55:e2:7d:f1:b4:6e:8a:29:26:8e:c8:7d:02:a1:a8:5d:38:e1: 6d:95:25:18:bd:64:93:5d:cd:b8:49:51:f4:3b:27:78:d5:29: ee:ff:53:12:21:01:24:23:17:ed:62:ed:46:96:28:b4:20:b2: 76:b3:d9:e4:a2:c5:5f:92:58:18:a1:cb:0f:82:c0:41:2d:6d: 2e:3c:89:f1:1b:0d:dd:ab:f1:6c:0d:34:86:7d:58:47:5b:ab: 49:bc:d8:7b:0b:68:9f:cc:b6:a4:ec:32:7f:02:f0:de:38:20: b2:1d:22:1a:56:81:89:60:8e:39:f1:9a:ec:af:82:f7:87:60: 95:1b:ed:31:2d:c2:7a:b4:56:04:48:fe:48:3d:4d:85:9a:c2: 38:4e:c2:8a:d5:f0:70:a7:4e:5e:92:ac:a8:58:9a:58:0f:b5: 18:32:ac:ee:e9:90:2c:42:12:3d:78:cd:62:e1:13:1b:29:9f: fe:48:ff:fb:a7:9a:7f:b8:76:f0:2c:b4:90:ba:f9:1d:b3:b9: 62:9b:48:53:d9:9f:ff:32:03:57:02:21:53:f7:b6:fc:f1:11: d8:fe:e0:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGepRyojQMb28JLQ8DFpzpDUYkHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY4RDUyQkY1Njc1OTdEQTBFNzY4M0I4NTc1NEVEQ0M0 NDE5QjUxQTAeFw0yNjEwMTIxNjQ1NDdaFw0yNjEwMTMxOTIzNDdaMDMxMTAvBgNV BAMTKDhCQThGQjhFMTNDNkQ0NzBFNzY3NThGOURCOEFCQTczNjE2QzRCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyfajhZ7YbfJacpm56yGOjEChC x+8mopq/BgV+gJ5sVdblqpbCdsiQM19azDmQe6NPLSXHuEsX0PBVL9tisU5Jm2F4 90du6cwf09cOUnW4aBnVkkL5tesX40obqmtmgDCxWF2zmDkFg7BSAeV9nbdQOgXC VdMCYmiyOGz+qWzzV85DQ9d7z7lqACEj8BhfEo4uA/rJWdwpQF8kKSxJKzRBamNp 94ncX2Lw3VxtVILD9COyFvAguqsJkNVHpOJZea4qyjksOeA/8t14c/Ri/xIcMfke xxXgAqsXkegR4EWPTjW9hl2xMBFSlryRVHipMgWZhNqQtUKCI74qRKZAxC9fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi6j7jhPG1HDnZ1j524q6c2FsS8MwHwYDVR0j BBgwFoAUVo1Sv1Z1l9oOdoO4V1TtzEQZtRowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkZXM0U3Ym1xTDl0bk11em9vMmFBZnZSOXJGSFhYTHdwVzNpcWNraFcz YVovMC81NjhENTJCRjU2NzU5N0RBMEU3NjgzQjg1NzU0RURDQzQ0MTlCNTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OEQ1MkJGNTY3NTk3REEw RTc2ODNCODU3NTRFRENDNDQxOUI1MUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkZXM0U3Ym1xTDl0bk11em9vMmFBZnZSOXJGSFhYTHdwVzNpcWNraFczYVovMC81 NjhENTJCRjU2NzU5N0RBMEU3NjgzQjg1NzU0RURDQzQ0MTlCNTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArHlOJfi1S6eri4wif0d4vnT1nASbcOr1gPRl/LxRKsR2AI9iVeJ98bRuiikm jsh9AqGoXTjhbZUlGL1kk13NuElR9DsneNUp7v9TEiEBJCMX7WLtRpYotCCydrPZ 5KLFX5JYGKHLD4LAQS1tLjyJ8RsN3avxbA00hn1YR1urSbzYewton8y2pOwyfwLw 3jggsh0iGlaBiWCOOfGa7K+C94dglRvtMS3CerRWBEj+SD1NhZrCOE7CitXwcKdO XpKsqFiaWA+1GDKs7umQLEISPXjNYuETGymf/kj/+6eaf7h28Cy0kLr5HbO5YptI U9mf/zIDVwIhU/e2/PER2P7gaQ== -----END CERTIFICATE-----Generated at Tue Oct 13 10:21:36 2026 by rpki-client