$ rpki-client -vvvf rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft File: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft (raw, json) Hash identifier: SA0+5TawBMobjjRaqM1YZmfi7OoTpimguwoTF8iwwXg= Subject key identifier: D8:FD:C9:E2:85:B8:C6:8D:29:96:D0:06:E5:EC:5E:8F:51:08:45:1B Authority key identifier: 1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89 Certificate issuer: /CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889 Certificate serial: 1E9E27E276D32915BFD9204026940927BF786976 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer Subject info access: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft Manifest number: 0150 Signing time: Sat 10 Oct 2026 17:54:34 +0000 Manifest this update: Sat 10 Oct 2026 17:49:34 +0000 Manifest next update: Sun 11 Oct 2026 21:46:34 +0000 Files and hashes: 1: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl (hash: ypCM2kB44Ypc3O5n4W6513taR1ZRi3BiAZbBgXJswIE=) 2: 323830343a346233383a3a2f33322d313238203d3e20323637323931.roa (hash: 4n9+0Z63anC+VM9VWNJX02OgNdWS2iW2pYD7o/HJaVw=) 3: 34352e3233332e33362e302f32322d3332203d3e20323637323931.roa (hash: KM+2VaoAciWWLq6WMSLxT0EyCBWagrzP3/WlqQVL/lU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 21:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9e:27:e2:76:d3:29:15:bf:d9:20:40:26:94:09:27:bf:78:69:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889 Validity Not Before: Oct 10 17:49:34 2026 GMT Not After : Oct 11 21:46:34 2026 GMT Subject: CN=D8FDC9E285B8C68D2996D006E5EC5E8F5108451B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:0d:07:5c:05:df:44:3f:e8:e7:8a:9e:f1: 47:1f:bb:da:4a:dc:1a:8e:3b:2e:b8:e4:ad:68:40: fa:fb:76:f3:cf:bc:e1:7e:d9:40:db:26:36:eb:c1: f9:da:fc:c2:fb:e8:e2:f8:92:ad:b8:1a:d7:1f:aa: 3b:7f:47:8c:14:f5:9b:3f:02:47:8d:a2:94:f2:ca: 32:25:8d:9e:c4:33:4e:82:15:95:e7:03:12:ca:31: 01:93:46:91:03:d0:f2:c6:59:ff:6d:f2:08:b1:ba: b4:cb:4b:45:9a:a8:1d:c7:7e:eb:2e:85:98:aa:e5: ff:83:08:13:2c:1c:d0:e1:53:21:ee:a1:1e:22:ea: 4a:1f:5b:04:c4:a9:09:f6:d0:ee:e8:ec:21:37:40: 42:2a:8b:f1:07:75:a8:df:ff:ee:cf:7e:5d:6b:74: b7:37:24:31:f6:ce:24:22:57:51:f4:13:de:51:7b: 86:a6:b9:af:bd:ce:4f:fe:a2:9d:14:0e:3d:4a:46: b1:5b:d8:fc:4d:29:57:32:14:ad:a9:64:dd:6f:d6: e6:e1:57:07:f0:4e:6b:08:5b:8c:3e:01:30:37:76: 58:a4:2e:f2:1e:16:79:ae:1a:05:45:0b:42:cf:26: 10:23:19:ff:68:70:ab:23:2c:05:ae:a0:30:e2:92: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:C9:E2:85:B8:C6:8D:29:96:D0:06:E5:EC:5E:8F:51:08:45:1B X509v3 Authority Key Identifier: keyid:1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:70:b8:76:3d:fd:b0:55:3b:e1:a0:a6:21:a6:b4:7b:ce: 53:c7:1d:10:67:1e:50:bf:e4:2a:62:72:07:8f:a2:80:34:a8: ac:ba:1e:85:70:c5:d4:f2:93:34:aa:13:f8:d7:8d:25:28:30: b1:e3:89:8e:82:da:2f:84:b0:13:bd:3a:e2:8c:42:d1:de:96: 93:9c:2e:32:a3:d5:f0:34:68:95:c1:65:3a:d6:06:04:0f:58: e0:5d:7b:ef:f5:ec:88:bc:f6:52:a9:e0:69:cf:24:1a:7c:40: 5a:22:07:b0:e3:a2:fa:2a:7e:67:ef:23:10:68:f6:fb:9e:62: 5d:14:9d:c2:44:86:72:a8:b5:82:ce:bb:a9:bc:1b:63:e9:ef: 6f:ae:23:56:4e:4a:ac:10:21:d2:12:d6:2b:0d:35:dc:4e:3a: 51:3b:78:d7:a7:31:00:ee:7d:b7:48:cb:96:7f:9b:48:42:2e: f7:36:2e:96:88:da:69:c1:ea:87:0c:9f:4a:b7:6d:d2:9b:81: 61:7f:4f:93:72:ea:b8:1d:71:ee:0e:fb:9b:98:8e:a8:85:96: 9f:41:bc:e5:cb:3a:5a:1a:71:bd:dd:39:f6:5a:e9:8d:0e:1c: 4f:bc:0f:f8:20:25:e3:f8:7e:9a:fa:8a:5a:cf:6d:78:6e:bd: fe:f0:2d:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHp4n4nbTKRW/2SBAJpQJJ794aXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVGMjFEOEUzM0RGMDY2NkREREE4OTBBMkNFMUFFQzhB Q0VFODg4OTAeFw0yNjEwMTAxNzQ5MzRaFw0yNjEwMTEyMTQ2MzRaMDMxMTAvBgNV BAMTKEQ4RkRDOUUyODVCOEM2OEQyOTk2RDAwNkU1RUM1RThGNTEwODQ1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhg0HXAXfRD/o54qe8Ucfu9pK 3BqOOy645K1oQPr7dvPPvOF+2UDbJjbrwfna/ML76OL4kq24Gtcfqjt/R4wU9Zs/ AkeNopTyyjIljZ7EM06CFZXnAxLKMQGTRpED0PLGWf9t8gixurTLS0WaqB3Hfusu hZiq5f+DCBMsHNDhUyHuoR4i6kofWwTEqQn20O7o7CE3QEIqi/EHdajf/+7Pfl1r dLc3JDH2ziQiV1H0E95Re4amua+9zk/+op0UDj1KRrFb2PxNKVcyFK2pZN1v1ubh VwfwTmsIW4w+ATA3dlikLvIeFnmuGgVFC0LPJhAjGf9ocKsjLAWuoDDikrD9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2P3J4oW4xo0pltAG5exej1EIRRswHwYDVR0j BBgwFoAUHvIdjjPfBmbd2okKLOGuyKzuiIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2NLS3Iyb2d1VmlhWGRYbXBGVllBVjZhUFBLVUNwekdLZ3FWaWZlVk1Y MVYvMC8xRUYyMUQ4RTMzREYwNjY2REREQTg5MEEyQ0UxQUVDOEFDRUU4ODg5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFRjIxRDhFMzNERjA2NjZE RERBODkwQTJDRTFBRUM4QUNFRTg4ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2NLS3Iyb2d1VmlhWGRYbXBGVllBVjZhUFBLVUNwekdLZ3FWaWZlVk1YMVYvMC8x RUYyMUQ4RTMzREYwNjY2REREQTg5MEEyQ0UxQUVDOEFDRUU4ODg5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgmRwuHY9/bBVO+GgpiGmtHvOU8cdEGceUL/kKmJyB4+igDSorLoehXDF1PKT NKoT+NeNJSgwseOJjoLaL4SwE7064oxC0d6Wk5wuMqPV8DRolcFlOtYGBA9Y4F17 7/XsiLz2Uqngac8kGnxAWiIHsOOi+ip+Z+8jEGj2+55iXRSdwkSGcqi1gs67qbwb Y+nvb64jVk5KrBAh0hLWKw013E46UTt416cxAO59t0jLln+bSEIu9zYulojaacHq hwyfSrdt0puBYX9Pk3LquB1x7g77m5iOqIWWn0G85cs6Whpxvd059lrpjQ4cT7wP +CAl4/h+mvqKWs9teG69/vAtyA== -----END CERTIFICATE-----Generated at Sun Oct 11 07:38:24 2026 by rpki-client