$ rpki-client -vvvf rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft File: 42CF8AF950150224F27B677F4A1AD4BA306A610F.mft (raw, json) Hash identifier: Q4lxewVNibaGrhfZ5qXNoCP2U1n4vhT1WPc8zslWy28= Subject key identifier: E0:BB:6C:4A:62:F3:39:40:5D:CA:31:5B:50:E5:44:D0:14:96:5D:96 Authority key identifier: 42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F Certificate issuer: /CN=42CF8AF950150224F27B677F4A1AD4BA306A610F Certificate serial: 08A35441569D83E3BE95F13D9C51CAF7FFDBF18A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft Manifest number: FC Signing time: Sat 10 Oct 2026 17:18:46 +0000 Manifest this update: Sat 10 Oct 2026 17:13:46 +0000 Manifest next update: Sun 11 Oct 2026 17:56:46 +0000 Files and hashes: 1: 323830343a393638383a3a2f33322d3332203d3e20323734333431.roa (hash: UdS0smRxzRrN/o++xx+mb89JXMJY5LSywGnNxwY9uM4=) 2: 42CF8AF950150224F27B677F4A1AD4BA306A610F.crl (hash: bmoscKDy0qjvv9zKS4sMQ7+t3Scz78Dtf8vjvIkHFQQ=) 3: 3230312e33332e38342e302f32332d3234203d3e20323734333431.roa (hash: 95qIQvYnJfjKbrID4RzZJKv3odmiEq00ghYPv5iZw7k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 17:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a3:54:41:56:9d:83:e3:be:95:f1:3d:9c:51:ca:f7:ff:db:f1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CF8AF950150224F27B677F4A1AD4BA306A610F Validity Not Before: Oct 10 17:13:46 2026 GMT Not After : Oct 11 17:56:46 2026 GMT Subject: CN=E0BB6C4A62F339405DCA315B50E544D014965D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:0f:bf:a5:05:ef:d1:f0:a9:af:43:7d:a5: 28:4d:cd:01:c5:f1:24:90:e6:ea:aa:e4:5c:11:eb: 20:8e:42:28:9f:34:1e:74:9c:8a:2d:8c:07:f8:1a: cc:99:ec:41:5f:83:75:88:b4:05:f7:74:7d:17:41: f5:9b:c4:9b:cc:9f:10:13:b1:b6:8e:f4:d7:4a:47: e7:35:91:f2:06:cf:ad:76:96:f7:ff:01:60:40:f6: 4f:30:22:2e:33:63:a3:92:70:32:58:94:9e:60:77: b2:3e:5e:ae:26:c5:1b:2f:2c:5b:ac:24:82:df:44: 1e:60:3d:c5:0d:ce:7c:7d:82:97:54:88:3c:10:56: bb:85:79:73:b6:de:b3:f2:3c:c7:c2:52:6d:06:72: d7:dc:da:98:c3:cb:2d:49:e4:2d:f7:0b:b2:2e:a0: 2e:8c:b9:54:b5:d8:fc:b5:9b:cc:9b:4c:3c:ab:9a: c9:07:60:02:27:4b:a5:53:f3:be:20:8a:19:a9:d5: c2:c6:ae:ac:ce:aa:17:86:fa:cf:b8:0f:18:11:36: cd:f1:d7:70:d3:75:e4:59:fa:dd:88:d1:35:70:2e: 6a:a9:63:f2:77:5c:1b:14:99:c9:78:9e:26:7b:d9: 60:23:46:33:53:17:e8:90:52:e0:db:0e:3f:84:c0: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BB:6C:4A:62:F3:39:40:5D:CA:31:5B:50:E5:44:D0:14:96:5D:96 X509v3 Authority Key Identifier: keyid:42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:42:2a:da:1e:c2:56:2f:22:5b:8e:f2:96:67:d5:c3:3a:04: b2:97:46:51:a0:75:ce:7f:55:5b:0a:69:b2:3a:3e:f6:1b:ef: 05:76:a5:c5:17:1b:be:e7:c5:db:2d:b2:20:66:47:ef:c0:64: 64:e1:68:b1:91:58:91:6f:55:a6:97:4b:55:1d:ab:03:a9:96: dd:a5:56:41:86:ef:4f:74:c1:12:a6:2a:2b:bb:d2:15:1c:fb: 87:47:a6:0e:01:af:a8:31:39:7e:66:f0:e9:a6:a6:50:45:f9: 2c:7b:cd:41:ea:9c:86:da:33:fe:22:a1:f6:86:c4:82:8c:84: 44:8d:a6:1c:9e:99:b7:d7:41:36:ed:2f:33:c9:d6:89:26:df: e5:c6:5d:fe:41:b7:d6:5b:b0:1c:93:e1:94:a1:9c:10:f3:12: f6:bd:b7:97:42:e7:51:e1:b3:f3:39:67:19:13:80:3b:3b:66: ec:4c:58:64:ea:b0:fe:47:b3:a9:0f:1e:fb:af:f8:fb:be:bd: b6:1d:6f:2d:47:08:71:a8:00:82:8c:92:fc:6f:dc:d6:58:9f: 20:d7:74:e3:70:ad:2a:c9:20:f5:a6:9c:d3:0b:8b:c9:84:7f: df:8c:15:aa:1e:af:a5:bc:b8:fa:54:2a:e8:17:81:44:d4:9e: 1e:55:31:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCKNUQVadg+O+lfE9nFHK9//b8YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRjhBRjk1MDE1MDIyNEYyN0I2NzdGNEExQUQ0QkEz MDZBNjEwRjAeFw0yNjEwMTAxNzEzNDZaFw0yNjEwMTExNzU2NDZaMDMxMTAvBgNV BAMTKEUwQkI2QzRBNjJGMzM5NDA1RENBMzE1QjUwRTU0NEQwMTQ5NjVEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLw+/pQXv0fCpr0N9pShNzQHF 8SSQ5uqq5FwR6yCOQiifNB50nIotjAf4GsyZ7EFfg3WItAX3dH0XQfWbxJvMnxAT sbaO9NdKR+c1kfIGz612lvf/AWBA9k8wIi4zY6OScDJYlJ5gd7I+Xq4mxRsvLFus JILfRB5gPcUNznx9gpdUiDwQVruFeXO23rPyPMfCUm0Gctfc2pjDyy1J5C33C7Iu oC6MuVS12Py1m8ybTDyrmskHYAInS6VT874gihmp1cLGrqzOqheG+s+4DxgRNs3x 13DTdeRZ+t2I0TVwLmqpY/J3XBsUmcl4niZ72WAjRjNTF+iQUuDbDj+EwJe1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4LtsSmLzOUBdyjFbUOVE0BSWXZYwHwYDVR0j BBgwFoAUQs+K+VAVAiTye2d/ShrUujBqYQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25G dUwvMC80MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0Y4QUY5NTAxNTAyMjRG MjdCNjc3RjRBMUFENEJBMzA2QTYxMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25GdUwvMC80 MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkIq2h7CVi8iW47ylmfVwzoEspdGUaB1zn9VWwppsjo+9hvvBXalxRcbvufF 2y2yIGZH78BkZOFosZFYkW9VppdLVR2rA6mW3aVWQYbvT3TBEqYqK7vSFRz7h0em DgGvqDE5fmbw6aamUEX5LHvNQeqchtoz/iKh9obEgoyERI2mHJ6Zt9dBNu0vM8nW iSbf5cZd/kG31luwHJPhlKGcEPMS9r23l0LnUeGz8zlnGROAOztm7ExYZOqw/kez qQ8e+6/4+769th1vLUcIcagAgoyS/G/c1lifINd043CtKskg9aac0wuLyYR/34wV qh6vpby4+lQq6BeBRNSeHlUx2w== -----END CERTIFICATE-----Generated at Sun Oct 11 08:01:10 2026 by rpki-client