$ rpki-client -vvvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: GJvehcwxnc7yFe7xmKqNgrcdaz/Oeo/Kr7m1R+it0R4= Subject key identifier: 65:5D:5F:EE:79:00:BE:5B:E9:D7:F9:32:3E:A3:15:91:0D:E9:C1:BF Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 31BE5136B1EABDA04D0E6C2E4CE898D4BE6606FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 03BF Signing time: Sun 01 Nov 2026 11:37:22 +0000 Manifest this update: Sun 01 Nov 2026 11:32:22 +0000 Manifest next update: Mon 02 Nov 2026 11:48:22 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: +jEdDp9EA7lRTIzWzVNW9syn95exciZtXmWtHnuIP8k=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: BH4RdzVxsIZVcns7bYvUjz3Ohk0KnWGV9hCStMsz0gk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 11:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:be:51:36:b1:ea:bd:a0:4d:0e:6c:2e:4c:e8:98:d4:be:66:06:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Nov 1 11:32:22 2026 GMT Not After : Nov 2 11:48:22 2026 GMT Subject: CN=655D5FEE7900BE5BE9D7F9323EA315910DE9C1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:5e:fd:82:a4:17:7c:62:66:a1:49:f4:6b: 84:87:34:3c:35:45:24:34:f6:e8:20:0b:4f:56:1a: a5:8e:a6:d4:a8:96:90:8a:ab:10:a2:c2:d0:cb:b0: 6c:29:6a:2c:dc:75:6f:4b:32:23:3d:71:78:18:39: 1c:f6:dd:ba:40:a3:1b:54:52:eb:b5:b5:c4:c0:1a: fb:1e:94:71:3e:e3:09:f0:69:a8:df:ea:80:75:d9: eb:30:17:45:0f:5a:9d:6e:5a:44:ee:79:f0:36:cf: ad:3a:da:e6:10:da:46:fb:e7:dc:30:37:cf:ed:56: 0d:c1:70:fc:29:bd:74:c9:8c:c5:da:fe:d0:22:27: 07:97:ac:84:87:74:1e:c0:6e:af:2f:1a:92:16:b9: b0:2b:85:9c:e2:8d:e0:8f:5a:d5:a1:af:f3:72:eb: 58:0c:3e:a3:88:c6:bb:c7:c4:e1:41:43:9d:14:1d: 92:12:e6:65:6c:04:28:ff:24:dc:8a:49:da:23:fb: 1a:bd:d9:59:bd:b7:c3:2f:37:b9:2d:84:10:56:d2: 7c:f0:c4:a7:3d:10:d7:ab:c7:8f:bb:01:1c:3a:87: 2b:11:dc:fc:f0:a5:4b:5d:f8:12:6f:cf:aa:45:76: 10:d3:72:c1:a0:2f:36:1b:bc:73:f8:f2:b3:42:82: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5D:5F:EE:79:00:BE:5B:E9:D7:F9:32:3E:A3:15:91:0D:E9:C1:BF X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:79:90:62:b1:14:26:ea:9a:2e:10:10:6c:78:a8:97:79:37: fb:b5:c1:a4:cd:74:b6:1b:ee:f6:01:c3:36:aa:d9:8d:d5:06: dd:58:ea:e9:3e:11:bb:87:c5:6e:f0:69:48:c6:25:68:05:6e: f8:62:12:a8:6b:2a:d0:97:24:ca:dd:c4:16:b6:46:2a:56:a0: 6e:16:93:e4:16:8e:ff:55:e6:50:63:e3:65:e1:72:9e:60:75: c6:dd:0c:75:00:4f:0c:81:49:d8:27:28:86:35:c7:a1:c9:18: 22:c8:2b:fb:41:b3:e0:ba:b0:e7:bc:cc:1b:0a:ea:47:48:a1: 4a:9a:b9:55:90:fd:58:bb:f1:57:ef:31:a1:ee:43:2f:79:d3: 5b:e3:ca:1a:8b:87:8c:a7:98:e7:8d:ab:9b:3e:6a:05:6f:7f: 66:d7:7e:6e:80:bb:a3:72:b8:93:0b:13:ce:61:04:f0:6f:a9: 66:61:30:1d:29:52:41:a5:f8:a4:96:c1:29:6f:e8:28:87:5e: 2a:cf:ff:4a:20:e5:94:f7:98:40:cb:33:58:17:47:1b:9f:15: db:00:44:ae:eb:e1:14:0b:fa:6d:79:95:6b:70:ef:ae:ae:52: 15:87:70:d6:b6:d8:15:49:a7:53:62:e6:65:61:a0:de:8c:4a: 38:01:50:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMb5RNrHqvaBNDmwuTOiY1L5mBvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjExMDExMTMyMjJaFw0yNjExMDIxMTQ4MjJaMDMxMTAvBgNV BAMTKDY1NUQ1RkVFNzkwMEJFNUJFOUQ3RjkzMjNFQTMxNTkxMERFOUMxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOV79gqQXfGJmoUn0a4SHNDw1 RSQ09uggC09WGqWOptSolpCKqxCiwtDLsGwpaizcdW9LMiM9cXgYORz23bpAoxtU Uuu1tcTAGvselHE+4wnwaajf6oB12eswF0UPWp1uWkTuefA2z6062uYQ2kb759ww N8/tVg3BcPwpvXTJjMXa/tAiJweXrISHdB7Abq8vGpIWubArhZzijeCPWtWhr/Ny 61gMPqOIxrvHxOFBQ50UHZIS5mVsBCj/JNyKSdoj+xq92Vm9t8MvN7kthBBW0nzw xKc9ENerx4+7ARw6hysR3PzwpUtd+BJvz6pFdhDTcsGgLzYbvHP48rNCgowlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZV1f7nkAvlvp1/kyPqMVkQ3pwb8wHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFnmQYrEUJuqaLhAQbHiol3k3+7XBpM10thvu9gHDNqrZjdUG3Vjq6T4Ru4fF bvBpSMYlaAVu+GISqGsq0Jckyt3EFrZGKlagbhaT5BaO/1XmUGPjZeFynmB1xt0M dQBPDIFJ2CcohjXHockYIsgr+0Gz4Lqw57zMGwrqR0ihSpq5VZD9WLvxV+8xoe5D L3nTW+PKGouHjKeY542rmz5qBW9/Ztd+boC7o3K4kwsTzmEE8G+pZmEwHSlSQaX4 pJbBKW/oKIdeKs//SiDllPeYQMszWBdHG58V2wBEruvhFAv6bXmVa3Dvrq5SFYdw 1rbYFUmnU2LmZWGg3oxKOAFQvw== -----END CERTIFICATE-----Generated at Mon Nov 2 06:47:33 2026 by rpki-client