$ rpki-client -vvvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json) Hash identifier: idnhAYjRr+fsgOfwkTm1DH4qVnpG6DBQmtBAYQs6K88= Subject key identifier: BA:57:BD:FD:DB:F9:40:53:BE:89:F6:04:F7:11:C4:79:1A:14:0D:AD Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Certificate serial: 214E7F14EF8D771140F9DFBD72A5C2CBA0F6A605 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft Manifest number: 04CF Signing time: Tue 13 Oct 2026 21:43:50 +0000 Manifest this update: Tue 13 Oct 2026 21:38:50 +0000 Manifest next update: Wed 14 Oct 2026 22:56:50 +0000 Files and hashes: 1: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: 8W2979t4bN8xF2PMa70aJxE6vbXAbgfq6IPIWaZ3wko=) 2: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: pmh4BRCTLaVheNeaFBQFQP/b/r3NgPTQ74DTv+RIp/c=) 3: 323830343a326630383a3a2f33322d3335203d3e20323634383637.roa (hash: Je45+iOjDmMU3Itr5TM40yGfNyfMpywBJO99d15F0+k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 22:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4e:7f:14:ef:8d:77:11:40:f9:df:bd:72:a5:c2:cb:a0:f6:a6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Validity Not Before: Oct 13 21:38:50 2026 GMT Not After : Oct 14 22:56:50 2026 GMT Subject: CN=BA57BDFDDBF94053BE89F604F711C4791A140DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:79:89:93:ab:0e:72:11:b9:a5:ca:d4:37: bd:b5:63:82:de:4d:4a:6e:83:fa:f2:d5:3f:71:ac: 56:56:29:25:3b:b7:c5:06:19:43:d6:3e:08:4d:db: 74:1c:ff:cc:4c:6a:86:b1:87:14:a8:5e:5b:f8:c8: 53:c2:fd:25:2b:a7:f7:05:9a:ba:7f:95:c0:eb:f9: 1c:02:cd:06:96:27:69:f1:d3:1b:f9:a9:62:cf:29: 44:e0:5a:c4:f7:a4:01:36:69:df:dc:5d:ef:9a:98: 4f:7f:7e:2a:ab:55:e4:e3:eb:b4:9c:b8:d5:fc:a5: 55:7d:dc:7a:39:f1:ce:12:e9:ca:cb:2a:bd:76:58: 10:7a:f5:10:f3:0a:e8:fa:a1:c2:3d:4b:71:ec:3f: 5a:64:66:9c:5c:94:6a:ca:e8:d8:81:2f:ba:50:8d: 9b:86:4b:51:42:e7:af:9c:f2:26:77:c0:ac:87:13: 78:ed:17:fe:01:61:1d:92:3e:75:bb:04:67:71:1c: a6:4d:0b:bc:13:6f:59:d0:4d:ec:30:1b:a0:b0:b4: 69:45:ef:ff:5a:e9:4a:d6:b8:71:5d:dd:14:7f:00: 53:62:e7:33:e0:44:80:19:1e:34:c6:fe:16:e5:ca: 79:86:d5:09:ee:3e:35:4e:5e:b2:dc:01:82:45:af: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:57:BD:FD:DB:F9:40:53:BE:89:F6:04:F7:11:C4:79:1A:14:0D:AD X509v3 Authority Key Identifier: keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:33:95:dc:02:2d:61:40:da:9d:f1:b2:b4:54:0c:16:d0: 44:db:51:1f:16:4a:5d:d0:6e:9f:e9:7b:0c:90:5f:0c:92:2a: d5:14:29:bb:bb:bd:6d:21:56:cd:61:80:9c:b2:6c:3c:b0:51: d4:c2:30:8e:c0:ff:7a:cd:97:44:0d:2b:c2:5f:c4:cd:b4:01: 85:a0:10:d2:3b:82:d1:4b:b5:74:41:5f:5b:92:03:fb:77:69: b4:cd:2d:a4:82:a1:82:40:f2:90:59:50:5a:bb:cb:ca:3e:a9: 45:01:3f:67:36:1d:76:4d:53:6f:7f:98:20:78:8b:8e:76:d8: dd:e3:a9:b9:5b:7e:cd:ae:6d:7d:1b:77:8c:e3:ee:22:30:8d: e6:d3:6d:f8:59:71:4f:b6:85:92:29:6d:e0:62:c8:ff:74:79: 8a:e6:71:20:68:10:9d:7f:11:27:a2:7a:9f:26:d7:b4:f4:0d: 43:5e:f5:f6:b7:a6:d3:63:4c:cd:f3:28:0f:30:32:18:32:bf: 21:a4:fa:97:61:15:cf:65:63:8b:93:e0:e4:b1:3d:c7:f4:62: dc:62:cf:35:ff:af:67:f9:9c:75:86:8d:02:4f:d2:9d:ef:3a: 45:fa:ed:22:1c:41:e5:6a:a2:2b:c3:96:5b:ce:4b:64:3f:0f: c6:ca:0f:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIU5/FO+NdxFA+d+9cqXCy6D2pgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG N0YwQUQwNTAeFw0yNjEwMTMyMTM4NTBaFw0yNjEwMTQyMjU2NTBaMDMxMTAvBgNV BAMTKEJBNTdCREZEREJGOTQwNTNCRTg5RjYwNEY3MTFDNDc5MUExNDBEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLXmJk6sOchG5pcrUN721Y4Le TUpug/ry1T9xrFZWKSU7t8UGGUPWPghN23Qc/8xMaoaxhxSoXlv4yFPC/SUrp/cF mrp/lcDr+RwCzQaWJ2nx0xv5qWLPKUTgWsT3pAE2ad/cXe+amE9/fiqrVeTj67Sc uNX8pVV93Ho58c4S6crLKr12WBB69RDzCuj6ocI9S3HsP1pkZpxclGrK6NiBL7pQ jZuGS1FC56+c8iZ3wKyHE3jtF/4BYR2SPnW7BGdxHKZNC7wTb1nQTewwG6CwtGlF 7/9a6UrWuHFd3RR/AFNi5zPgRIAZHjTG/hblynmG1QnuPjVOXrLcAYJFrxnvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUule9/dv5QFO+ifYE9xHEeRoUDa0wHwYDVR0j BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpDMTQvMS9E OEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhaIzldwCLWFA2p3xsrRUDBbQRNtRHxZKXdBun+l7DJBfDJIq1RQpu7u9bSFW zWGAnLJsPLBR1MIwjsD/es2XRA0rwl/EzbQBhaAQ0juC0Uu1dEFfW5ID+3dptM0t pIKhgkDykFlQWrvLyj6pRQE/ZzYddk1Tb3+YIHiLjnbY3eOpuVt+za5tfRt3jOPu IjCN5tNt+FlxT7aFkilt4GLI/3R5iuZxIGgQnX8RJ6J6nybXtPQNQ1719rem02NM zfMoDzAyGDK/IaT6l2EVz2Vji5Pg5LE9x/Ri3GLPNf+vZ/mcdYaNAk/Sne86Rfrt IhxB5WqiK8OWW85LZD8PxsoPEA== -----END CERTIFICATE-----Generated at Wed Oct 14 10:02:06 2026 by rpki-client