$ rpki-client -vvvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft File: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft (raw, json) Hash identifier: m9nAPORLLNTlq1G60DYFZIyShzKX3xGc4xO48VikrZM= Subject key identifier: 78:18:15:F3:D4:E1:A3:CA:18:EE:87:BA:3A:DA:58:C0:40:44:38:3F Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 Certificate issuer: /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Certificate serial: 1EF52033D7548B840762383DF84EE2249E4C617D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft Manifest number: 0249 Signing time: Wed 28 Oct 2026 09:25:02 +0000 Manifest this update: Wed 28 Oct 2026 09:20:02 +0000 Manifest next update: Thu 29 Oct 2026 11:45:02 +0000 Files and hashes: 1: 323830343a383734303a3a2f33322d313238203d3e203532393036.roa (hash: cDJO7nHN3fWdgvsEXz+g2g/3VmAG4cS96Ha203JzKR4=) 2: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl (hash: YaXo/fxFLpFQimUz4XvmrpfHRawXpM5AQ/j2rpYtYic=) 3: 3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (hash: UpGtTsmBc9GhOW7b8H9qv16xWdfE+CABC8IMGF9KYDg=) 4: 3137372e32332e35362e302f32312d3332203d3e203532393036.roa (hash: i/btyMncOMKStljG0XRGq5KNbZOM594zjFhuy37hOsw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 11:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:20:33:d7:54:8b:84:07:62:38:3d:f8:4e:e2:24:9e:4c:61:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Validity Not Before: Oct 28 09:20:02 2026 GMT Not After : Oct 29 11:45:02 2026 GMT Subject: CN=781815F3D4E1A3CA18EE87BA3ADA58C04044383F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:70:ac:dd:5f:c4:da:21:a4:c1:70:14:a0: f9:a6:f0:79:9b:49:cc:fc:c7:88:07:b0:d9:d3:40: 77:05:1a:48:50:d1:ab:ed:d2:e8:36:5c:cf:a5:3c: fd:09:89:7d:32:f4:73:98:ec:65:3d:7d:d4:8d:2d: 6d:c9:ac:99:12:03:22:77:84:db:4d:cb:51:cd:8b: 7b:3e:92:e8:c6:5b:55:32:c2:e5:64:fa:fe:bc:37: ce:9d:d9:53:e0:7e:0f:bc:09:d2:7a:c9:07:c3:d9: 39:ea:45:0e:a5:d4:ee:6d:3d:0b:54:3e:7f:d4:87: 13:dc:47:31:f3:e7:e7:e2:6a:aa:73:30:60:f6:d1: da:26:b5:fd:ca:4b:f5:d8:c4:77:30:1f:43:57:22: a7:08:43:2e:04:76:56:7e:c9:22:75:92:b0:2c:dc: 4b:92:ce:e7:9c:ba:63:32:7d:19:8d:9b:9a:fd:ac: df:6c:53:86:9b:03:c8:e3:31:10:49:96:76:dd:a5: a8:ce:f0:c8:2e:84:4c:a8:28:92:95:b5:d4:30:4d: 2e:82:2f:92:3a:8e:80:29:1d:c0:5d:e4:51:5b:81: e5:28:06:a2:e9:ce:81:a2:0d:05:71:a3:74:d5:76: c0:56:c2:1e:07:88:e4:0d:64:bd:8f:db:0a:7d:c2: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:18:15:F3:D4:E1:A3:CA:18:EE:87:BA:3A:DA:58:C0:40:44:38:3F X509v3 Authority Key Identifier: keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3e:13:35:b9:87:6c:6b:6a:b2:29:75:d8:01:5d:96:f1:4a: 49:19:00:f5:e8:b4:a0:94:f9:12:8b:c0:c6:04:a0:2a:d3:90: 4d:2f:f1:be:06:3d:4d:f8:3d:70:52:1b:dc:6c:28:24:93:f8: ad:35:2d:68:4b:f4:60:1f:f7:f9:4a:bb:6f:37:db:4e:6a:64: aa:e3:48:d6:ac:c9:a9:f5:0d:b7:0f:94:54:97:8e:d3:1b:9a: 23:52:94:d3:a6:25:0f:40:e8:91:27:b7:c9:56:28:86:6c:28: a0:aa:a1:aa:71:48:a1:ad:05:d2:b7:fd:6d:5f:07:c3:62:68: 62:39:0a:02:04:91:fe:9d:a2:4b:6e:49:df:26:a8:68:69:fa: c0:ad:5e:ca:9c:81:3c:50:bd:da:9e:9d:9c:58:8d:7a:b1:90: 54:65:66:03:71:87:42:80:03:77:bb:71:46:e9:40:3f:f8:39: e9:ea:c9:41:7d:7d:0e:a5:16:b4:6f:80:12:94:a8:1e:e4:d8: cf:2c:20:ac:7c:e8:ed:e9:83:4c:84:af:35:a7:5e:48:2b:b4: 64:8f:fd:08:71:68:a3:d4:1a:57:db:84:5d:ff:c8:90:cc:0a: a3:19:1b:2e:72:f3:33:91:c5:59:e3:a9:bb:7f:91:af:93:13: 07:3f:6e:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHvUgM9dUi4QHYjg9+E7iJJ5MYX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw QTJFQkJCMTAeFw0yNjEwMjgwOTIwMDJaFw0yNjEwMjkxMTQ1MDJaMDMxMTAvBgNV BAMTKDc4MTgxNUYzRDRFMUEzQ0ExOEVFODdCQTNBREE1OEMwNDA0NDM4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYHCs3V/E2iGkwXAUoPmm8Hmb Scz8x4gHsNnTQHcFGkhQ0avt0ug2XM+lPP0JiX0y9HOY7GU9fdSNLW3JrJkSAyJ3 hNtNy1HNi3s+kujGW1UywuVk+v68N86d2VPgfg+8CdJ6yQfD2TnqRQ6l1O5tPQtU Pn/UhxPcRzHz5+fiaqpzMGD20domtf3KS/XYxHcwH0NXIqcIQy4EdlZ+ySJ1krAs 3EuSzuecumMyfRmNm5r9rN9sU4abA8jjMRBJlnbdpajO8MguhEyoKJKVtdQwTS6C L5I6joApHcBd5FFbgeUoBqLpzoGiDQVxo3TVdsBWwh4HiOQNZL2P2wp9whs7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeBgV89Tho8oY7oe6OtpYwEBEOD8wHwYDVR0j BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2 OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1 RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2OGsvMC9D MzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPj4TNbmHbGtqsil12AFdlvFKSRkA9ei0oJT5EovAxgSgKtOQTS/xvgY9Tfg9 cFIb3GwoJJP4rTUtaEv0YB/3+Uq7bzfbTmpkquNI1qzJqfUNtw+UVJeO0xuaI1KU 06YlD0DokSe3yVYohmwooKqhqnFIoa0F0rf9bV8Hw2JoYjkKAgSR/p2iS25J3yao aGn6wK1eypyBPFC92p6dnFiNerGQVGVmA3GHQoADd7txRulAP/g56erJQX19DqUW tG+AEpSoHuTYzywgrHzo7emDTISvNadeSCu0ZI/9CHFoo9QaV9uEXf/IkMwKoxkb LnLzM5HFWeOpu3+Rr5MTBz9uwg== -----END CERTIFICATE-----Generated at Wed Oct 28 13:04:18 2026 by rpki-client