$ rpki-client -vvvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft File: 3D580FBC905909266C331DDA6416C18006A24750.mft (raw, json) Hash identifier: MOuEZHdE4jEn+q51gA5lyFUzArYDFSA3bfe04rMhSKw= Subject key identifier: D1:94:31:65:FE:31:DC:FD:87:C8:E3:6C:33:8A:B6:D4:A9:08:BF:AC Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50 Certificate issuer: /CN=3D580FBC905909266C331DDA6416C18006A24750 Certificate serial: 5BB6015B826250ABD435CBD0F5F3CE01A8FDBD76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer Subject info access: rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft Manifest number: 0255 Signing time: Wed 28 Oct 2026 02:28:07 +0000 Manifest this update: Wed 28 Oct 2026 02:23:07 +0000 Manifest next update: Thu 29 Oct 2026 05:41:07 +0000 Files and hashes: 1: 323830343a363037633a3a2f33322d3332203d3e20323639313730.roa (hash: xmtgnvhU0d2d27uG+3Y+irJ8PO44zg78OlygBX+Lspw=) 2: 34352e3138312e36302e302f32322d3232203d3e20323639313730.roa (hash: dZKVJPCS8gXQUBI5RWK4KaR9xsAkJ91ti+E2kUK+qRs=) 3: 3D580FBC905909266C331DDA6416C18006A24750.crl (hash: z24A5i+MIfcdRU3klVxsLmt1fSxoWLmhibDTxI6/S3Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 05:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b6:01:5b:82:62:50:ab:d4:35:cb:d0:f5:f3:ce:01:a8:fd:bd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750 Validity Not Before: Oct 28 02:23:07 2026 GMT Not After : Oct 29 05:41:07 2026 GMT Subject: CN=D1943165FE31DCFD87C8E36C338AB6D4A908BFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:f9:f5:07:63:cf:08:83:c2:02:01:27:b7: c7:3f:be:5f:60:7d:b7:0c:01:ad:11:fc:37:90:17: 64:da:91:7d:15:7b:12:a4:eb:22:1b:74:6a:98:13: f3:15:49:8a:7e:a2:7a:01:4f:18:0b:b1:a9:ce:4a: 5d:16:a1:f4:e2:83:41:e0:dc:32:cc:c1:8a:e1:31: c9:93:22:d4:37:f7:13:4e:d2:f0:37:c9:df:03:c4: 09:bb:52:8c:fc:0b:03:df:cc:a1:53:6a:60:ca:e6: c2:91:31:61:7b:28:eb:d7:fe:a7:66:9a:8d:16:ee: 29:9e:45:07:e1:db:d5:e6:b8:d6:36:93:cc:5d:c3: 88:c2:c8:f8:57:c6:a5:b7:df:a2:3c:da:06:8a:96: 9a:96:5c:c4:d5:94:6c:41:86:f2:72:26:9d:aa:1b: ca:08:48:24:95:e9:d2:ea:90:bc:41:2e:a8:03:ee: 27:f5:13:01:3d:f2:5e:75:9c:c5:c3:33:24:be:55: 67:45:59:04:0c:b7:6c:32:64:8c:b7:65:db:d0:f5: fe:6d:fd:6a:ed:ec:d5:7b:05:3b:d6:e0:d8:e3:15: 2d:67:bd:28:99:c6:ef:cc:1d:24:13:1d:c9:a9:5e: fa:c7:dc:c6:d5:eb:a7:ec:08:88:b3:3e:a5:cb:7f: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:94:31:65:FE:31:DC:FD:87:C8:E3:6C:33:8A:B6:D4:A9:08:BF:AC X509v3 Authority Key Identifier: keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9b:bf:c4:a5:2b:95:53:82:c1:58:4a:d2:58:77:e0:7b:e2: 5a:7c:52:66:b4:e8:1f:2b:28:9e:6a:77:a9:d1:ec:57:13:2a: 9e:d2:0b:c3:eb:65:f4:75:95:98:5b:78:36:45:89:46:65:47: 15:9b:40:d1:51:b2:f8:20:a4:3b:d3:6d:7d:ba:77:c4:84:fa: df:08:ea:fc:cd:4c:b6:a6:0c:05:58:5d:1d:e7:ce:f7:28:6e: 98:9b:ae:bf:fd:0f:70:7d:d3:a6:5e:a8:53:c9:f3:e7:35:d0: 70:a6:a3:cf:dc:5b:5c:94:11:e4:8f:c7:1b:18:34:8c:0b:13: be:ce:bd:a1:2c:5f:56:95:4f:80:35:0c:c5:bf:ea:62:98:1a: ef:05:c3:f8:9f:8a:80:6e:57:24:61:17:ab:ec:01:dc:36:26: c0:96:13:f9:04:0b:d4:88:ec:88:78:99:04:20:ae:68:8e:df: b7:32:09:95:a6:7e:db:82:9d:5d:19:d2:2b:e3:ca:3e:3c:a9: 21:46:06:a5:a0:f1:1a:6d:85:03:0d:62:ea:95:7a:6c:4c:5a: 6d:a9:1a:eb:c9:3a:99:a0:36:5f:43:0e:3e:c3:72:13:6e:35: b8:72:5b:80:8c:0f:0b:b0:95:b4:ba:ec:f3:e2:8e:cf:be:55: c2:0e:af:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW7YBW4JiUKvUNcvQ9fPOAaj9vXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1ODBGQkM5MDU5MDkyNjZDMzMxRERBNjQxNkMxODAw NkEyNDc1MDAeFw0yNjEwMjgwMjIzMDdaFw0yNjEwMjkwNTQxMDdaMDMxMTAvBgNV BAMTKEQxOTQzMTY1RkUzMURDRkQ4N0M4RTM2QzMzOEFCNkQ0QTkwOEJGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEf/n1B2PPCIPCAgEnt8c/vl9g fbcMAa0R/DeQF2TakX0VexKk6yIbdGqYE/MVSYp+onoBTxgLsanOSl0WofTig0Hg 3DLMwYrhMcmTItQ39xNO0vA3yd8DxAm7Uoz8CwPfzKFTamDK5sKRMWF7KOvX/qdm mo0W7imeRQfh29XmuNY2k8xdw4jCyPhXxqW336I82gaKlpqWXMTVlGxBhvJyJp2q G8oISCSV6dLqkLxBLqgD7if1EwE98l51nMXDMyS+VWdFWQQMt2wyZIy3ZdvQ9f5t /Wrt7NV7BTvW4NjjFS1nvSiZxu/MHSQTHcmpXvrH3MbV66fsCIizPqXLf5F5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0ZQxZf4x3P2HyONsM4q21KkIv6wwHwYDVR0j BBgwFoAUPVgPvJBZCSZsMx3aZBbBgAaiR1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFhoU25icnJvTURwTlRmUVMxdVV6UUNZTXZweFpNcnFDQU56REo0QmdO anYvMC8zRDU4MEZCQzkwNTkwOTI2NkMzMzFEREE2NDE2QzE4MDA2QTI0NzUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTgwRkJDOTA1OTA5MjY2 QzMzMUREQTY0MTZDMTgwMDZBMjQ3NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFhoU25icnJvTURwTlRmUVMxdVV6UUNZTXZweFpNcnFDQU56REo0QmdOanYvMC8z RDU4MEZCQzkwNTkwOTI2NkMzMzFEREE2NDE2QzE4MDA2QTI0NzUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt5u/xKUrlVOCwVhK0lh34HviWnxSZrToHysonmp3qdHsVxMqntILw+tl9HWV mFt4NkWJRmVHFZtA0VGy+CCkO9Ntfbp3xIT63wjq/M1MtqYMBVhdHefO9yhumJuu v/0PcH3Tpl6oU8nz5zXQcKajz9xbXJQR5I/HGxg0jAsTvs69oSxfVpVPgDUMxb/q Ypga7wXD+J+KgG5XJGEXq+wB3DYmwJYT+QQL1IjsiHiZBCCuaI7ftzIJlaZ+24Kd XRnSK+PKPjypIUYGpaDxGm2FAw1i6pV6bExabaka68k6maA2X0MOPsNyE241uHJb gIwPC7CVtLrs8+KOz75Vwg6vcA== -----END CERTIFICATE-----Generated at Wed Oct 28 19:46:47 2026 by rpki-client