$ rpki-client -vvvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft File: CC58DAF288CB59CD86B813345628DC535B34879B.mft (raw, json) Hash identifier: pH3SZmP2zaYGLC+ZnsbWxuaHEuHJAyIHKaoMj5uuH9w= Subject key identifier: 03:BD:4C:23:A6:8F:62:5A:09:C4:64:BD:B0:1D:16:7F:CD:5E:43:52 Authority key identifier: CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B Certificate issuer: /CN=CC58DAF288CB59CD86B813345628DC535B34879B Certificate serial: 3DC86AE2A98030F8AF5B08DB05DC9749BB189C51 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft Manifest number: 028E Signing time: Tue 27 Oct 2026 11:31:40 +0000 Manifest this update: Tue 27 Oct 2026 11:26:40 +0000 Manifest next update: Wed 28 Oct 2026 14:30:40 +0000 Files and hashes: 1: 323830343a376163303a3a2f33322d313238203d3e20323731333930.roa (hash: F9KLyQ/ToyryUB5M4TvuNaod0D89wVeJp0XyZYQ+mdE=) 2: 3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa (hash: YKKENE+AjipB95/g9a6cKDxyEyzv3YDkGPlVjb7NSg8=) 3: CC58DAF288CB59CD86B813345628DC535B34879B.crl (hash: +IMezM+ARFkhvwwvuOTWi6/B9++Q2E0WlVccdqm8dKU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 14:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c8:6a:e2:a9:80:30:f8:af:5b:08:db:05:dc:97:49:bb:18:9c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC58DAF288CB59CD86B813345628DC535B34879B Validity Not Before: Oct 27 11:26:40 2026 GMT Not After : Oct 28 14:30:40 2026 GMT Subject: CN=03BD4C23A68F625A09C464BDB01D167FCD5E4352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:0f:e1:d0:e3:ee:01:e1:b9:b5:f5:a9:a5: c3:18:17:47:f0:6a:52:d2:a7:30:0e:a8:1e:03:60: 39:15:fe:db:3b:43:fe:c7:9c:39:1d:a0:b1:66:4f: 5f:d5:3a:ad:e6:77:9e:34:88:8f:55:1e:32:25:e9: ad:7a:dc:ae:62:fa:9c:c0:63:72:4c:70:e7:47:31: 39:c3:24:8a:a8:1b:16:b0:d9:47:02:31:bb:7d:33: 2e:cf:66:4a:df:c6:ec:9b:7f:76:31:49:cd:cd:a6: e3:1b:e9:22:b9:ad:dc:60:f0:0f:b2:75:b2:13:5e: 5f:04:7e:7d:f3:33:17:b3:14:40:76:d2:27:b7:34: ea:56:e8:06:23:05:29:53:23:3a:54:5a:54:41:8a: 5c:0c:bd:92:8c:68:58:83:1e:83:86:69:f5:ea:08: 94:8c:63:37:0a:2d:d6:b5:08:f1:9b:26:4d:1d:3e: ab:cc:34:54:7a:51:56:93:72:49:4f:5e:f2:0d:62: 09:ac:49:bd:57:db:6d:fc:4f:0d:8a:39:b7:90:40: af:f8:65:42:44:49:67:49:72:72:d5:dc:07:66:b4: 45:45:ba:f5:ee:ac:63:bc:34:02:e3:aa:5a:23:36: e8:38:6b:b9:a3:fa:39:5d:3a:5f:5a:90:82:fe:cd: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BD:4C:23:A6:8F:62:5A:09:C4:64:BD:B0:1D:16:7F:CD:5E:43:52 X509v3 Authority Key Identifier: keyid:CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ba:d1:49:6e:e0:35:6a:65:0e:26:a4:a2:70:97:7e:a3:99: 25:b5:12:f3:43:dd:bd:90:30:9c:db:7d:29:2c:d5:6e:57:be: d8:a0:2b:e4:19:2f:f0:c2:d1:bb:05:d4:80:e9:3d:fc:de:fc: 5f:97:00:05:58:b6:e0:93:19:a6:d4:32:52:d3:0a:07:06:02: 39:7e:32:88:ab:81:65:ac:f0:d1:ac:10:10:fe:28:1a:c9:95: 7d:e2:a3:30:aa:70:07:03:36:fe:81:66:dd:33:5e:fe:bb:29: ef:9c:57:aa:19:d2:cb:0e:bc:fe:0e:0d:f0:09:10:3f:a4:6f: 4d:6d:67:db:48:17:b1:d7:9e:d1:7f:fa:38:a2:27:ff:ff:09: 1f:26:f7:98:82:8f:41:69:d9:11:3b:3c:76:96:51:53:1b:df: fb:c2:f1:4b:ef:f6:a5:05:f4:04:72:75:77:83:8a:9c:65:1d: 69:93:0a:e0:7b:5d:ce:f7:18:63:4a:31:b5:0e:42:29:ee:ac: 66:d2:51:a4:98:73:d2:03:52:31:3f:b9:51:61:bb:f3:32:29: 47:26:85:af:6f:f4:68:b8:53:44:32:44:c9:70:de:48:3b:a7: 85:10:21:ce:a1:d2:96:b9:7f:ef:7d:bf:4a:6b:93:bd:59:55: be:2c:6d:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPchq4qmAMPivWwjbBdyXSbsYnFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M1OERBRjI4OENCNTlDRDg2QjgxMzM0NTYyOERDNTM1 QjM0ODc5QjAeFw0yNjEwMjcxMTI2NDBaFw0yNjEwMjgxNDMwNDBaMDMxMTAvBgNV BAMTKDAzQkQ0QzIzQTY4RjYyNUEwOUM0NjRCREIwMUQxNjdGQ0Q1RTQzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxQ/h0OPuAeG5tfWppcMYF0fw alLSpzAOqB4DYDkV/ts7Q/7HnDkdoLFmT1/VOq3md540iI9VHjIl6a163K5i+pzA Y3JMcOdHMTnDJIqoGxaw2UcCMbt9My7PZkrfxuybf3YxSc3NpuMb6SK5rdxg8A+y dbITXl8Efn3zMxezFEB20ie3NOpW6AYjBSlTIzpUWlRBilwMvZKMaFiDHoOGafXq CJSMYzcKLda1CPGbJk0dPqvMNFR6UVaTcklPXvINYgmsSb1X2238Tw2KObeQQK/4 ZUJESWdJcnLV3AdmtEVFuvXurGO8NALjqlojNug4a7mj+jldOl9akIL+zSYdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA71MI6aPYloJxGS9sB0Wf81eQ1IwHwYDVR0j BBgwFoAUzFja8ojLWc2GuBM0VijcU1s0h5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxy VmUvMC9DQzU4REFGMjg4Q0I1OUNEODZCODEzMzQ1NjI4REM1MzVCMzQ4NzlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNThEQUYyODhDQjU5Q0Q4 NkI4MTMzNDU2MjhEQzUzNUIzNDg3OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxyVmUvMC9D QzU4REFGMjg4Q0I1OUNEODZCODEzMzQ1NjI4REM1MzVCMzQ4NzlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAibrRSW7gNWplDiakonCXfqOZJbUS80PdvZAwnNt9KSzVble+2KAr5Bkv8MLR uwXUgOk9/N78X5cABVi24JMZptQyUtMKBwYCOX4yiKuBZazw0awQEP4oGsmVfeKj MKpwBwM2/oFm3TNe/rsp75xXqhnSyw68/g4N8AkQP6RvTW1n20gXsdee0X/6OKIn //8JHyb3mIKPQWnZETs8dpZRUxvf+8LxS+/2pQX0BHJ1d4OKnGUdaZMK4HtdzvcY Y0oxtQ5CKe6sZtJRpJhz0gNSMT+5UWG78zIpRyaFr2/0aLhTRDJEyXDeSDunhRAh zqHSlrl/732/SmuTvVlVvixtcQ== -----END CERTIFICATE-----Generated at Tue Oct 27 23:13:50 2026 by rpki-client