$ rpki-client -vvvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: 6hzxYiQWlm6PjWQwFecWmWPIViwXoqUKmSadqFWAtFc= Subject key identifier: 63:D9:00:5B:B7:C2:A2:C9:6B:91:85:7A:D9:D6:01:B3:A6:D9:4F:02 Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 2FE94AE8A65FF065AAE98FF41AA45136D627D493 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 04E0 Signing time: Tue 27 Oct 2026 10:42:24 +0000 Manifest this update: Tue 27 Oct 2026 10:37:24 +0000 Manifest next update: Wed 28 Oct 2026 12:21:24 +0000 Files and hashes: 1: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: ZcXSvFzjcKdlhbF/D0LSaAI/xEyYHSj7XWyEf2G+oig=) 2: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: 0auflNGtLE/yzccJ9xBKO9mA+cZ5eGWhlEgp/1knKds=) 3: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: DwIT/oWsb5A+NZbd8E9xwGN8upMg4I8VAL0gz3ICWe8=) 4: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: Y3NDMjIUF9HCqpgQ02qbX63g2kp3bwxWFFvyNGmlnns=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 12:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e9:4a:e8:a6:5f:f0:65:aa:e9:8f:f4:1a:a4:51:36:d6:27:d4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: Oct 27 10:37:24 2026 GMT Not After : Oct 28 12:21:24 2026 GMT Subject: CN=63D9005BB7C2A2C96B91857AD9D601B3A6D94F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:84:2b:12:1a:30:b4:54:3f:f3:35:98:9b: 36:b3:b9:f2:9c:c8:b3:50:be:6d:47:b1:c1:a7:ad: 94:d5:3d:f3:a0:64:ab:1b:68:4d:df:80:b1:f2:95: 95:85:cb:2f:7a:77:f6:16:8a:72:5d:83:39:ae:e5: 59:87:67:61:eb:fb:c9:44:0d:f5:29:28:ae:0d:ff: e9:40:55:28:d9:60:7a:d9:b1:3d:08:82:73:07:09: 26:2d:e3:cf:da:2a:0f:64:b0:b1:e9:33:3f:d9:fa: ed:77:81:db:84:07:5f:31:7c:3d:b1:6e:3d:a7:06: f7:4a:b8:5d:39:9e:ec:98:84:27:1b:14:34:85:9e: ff:af:dd:b4:07:63:aa:b0:53:89:9a:48:79:4e:fe: 37:18:43:52:9d:58:0e:8c:8d:27:fe:ec:ef:2e:ab: 32:39:eb:99:86:4d:11:47:4a:ab:c3:7b:ed:64:e8: 10:c8:c0:43:32:5e:73:fa:86:27:1b:72:91:88:c7: 32:41:17:88:53:21:3a:78:a8:b2:21:87:3e:17:a6: 89:2f:37:ef:68:92:63:5c:01:a6:59:cd:a8:57:a0: 48:ef:98:44:ef:0d:36:f1:62:a8:9a:12:27:6e:8d: a1:a9:c8:d4:fc:26:8c:28:ff:53:9d:b7:58:1e:c3: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D9:00:5B:B7:C2:A2:C9:6B:91:85:7A:D9:D6:01:B3:A6:D9:4F:02 X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:50:d7:3f:5f:6a:14:01:7b:1d:76:ea:ad:f2:20:81:c2:a5: cb:1b:af:bb:3a:01:18:50:3d:0e:b0:a8:bd:57:e1:b0:99:91: 30:9c:41:58:a2:cc:de:57:3f:ff:7e:4b:84:54:e5:1f:e5:52: 64:8b:28:3b:c2:0e:05:ec:3b:42:6c:af:5c:6c:87:18:b2:ae: 96:10:c2:0e:c8:0f:b7:08:53:fd:a3:c5:7b:b9:79:fa:83:8f: c9:e0:2c:36:51:4f:a2:87:02:88:7e:56:3a:20:55:31:6a:08: 34:c5:92:10:38:70:6d:43:73:a1:b4:b0:c5:43:5b:fd:73:0a: 3b:b1:63:22:c8:ae:c1:6f:b3:b5:4c:dd:b7:a7:66:8e:c0:ed: e4:a5:54:fa:e8:a4:63:46:7d:54:60:d1:c5:c6:df:6c:4c:bd: dc:bc:2f:7a:d5:63:9f:61:a6:7c:d5:4c:13:3b:97:4e:13:96: 77:a7:eb:fd:16:4a:75:77:04:8d:e8:38:6e:26:d2:77:cb:fb: 37:41:3a:44:93:6a:0a:80:72:77:8f:e8:d7:ec:da:7a:cc:7f: 5c:5d:c8:b4:8e:33:55:c1:21:4f:59:e1:4c:77:5a:c7:fc:c2: fc:1e:a1:6d:4e:4e:ce:e3:bf:7d:b1:9e:29:3b:2b:d6:44:d9: 11:c5:7b:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL+lK6KZf8GWq6Y/0GqRRNtYn1JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNjEwMjcxMDM3MjRaFw0yNjEwMjgxMjIxMjRaMDMxMTAvBgNV BAMTKDYzRDkwMDVCQjdDMkEyQzk2QjkxODU3QUQ5RDYwMUIzQTZEOTRGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqoQrEhowtFQ/8zWYmzazufKc yLNQvm1HscGnrZTVPfOgZKsbaE3fgLHylZWFyy96d/YWinJdgzmu5VmHZ2Hr+8lE DfUpKK4N/+lAVSjZYHrZsT0IgnMHCSYt48/aKg9ksLHpMz/Z+u13gduEB18xfD2x bj2nBvdKuF05nuyYhCcbFDSFnv+v3bQHY6qwU4maSHlO/jcYQ1KdWA6MjSf+7O8u qzI565mGTRFHSqvDe+1k6BDIwEMyXnP6hicbcpGIxzJBF4hTITp4qLIhhz4Xpokv N+9okmNcAaZZzahXoEjvmETvDTbxYqiaEidujaGpyNT8Jowo/1Odt1gew78hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUY9kAW7fCoslrkYV62dYBs6bZTwIwHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAElDXP19qFAF7HXbqrfIggcKlyxuvuzoBGFA9DrCovVfhsJmRMJxBWKLM3lc/ /35LhFTlH+VSZIsoO8IOBew7QmyvXGyHGLKulhDCDsgPtwhT/aPFe7l5+oOPyeAs NlFPoocCiH5WOiBVMWoINMWSEDhwbUNzobSwxUNb/XMKO7FjIsiuwW+ztUzdt6dm jsDt5KVU+uikY0Z9VGDRxcbfbEy93LwvetVjn2GmfNVMEzuXThOWd6fr/RZKdXcE jeg4bibSd8v7N0E6RJNqCoByd4/o1+zaesx/XF3ItI4zVcEhT1nhTHdax/zC/B6h bU5OzuO/fbGeKTsr1kTZEcV7gQ== -----END CERTIFICATE-----Generated at Tue Oct 27 21:56:53 2026 by rpki-client