$ rpki-client -vvvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json) Hash identifier: rvgpf4jFgTxPj+fy/eDWef8lNgrR1lImG+X2QA+qji4= Subject key identifier: 13:1B:40:DD:F3:90:77:25:09:B8:28:2C:63:AA:85:26:DF:E3:4D:F6 Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Certificate serial: 3BA9B72E0361E28B17722822FB122A21893ACE7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft Manifest number: 02A3 Signing time: Sat 31 Oct 2026 12:37:21 +0000 Manifest this update: Sat 31 Oct 2026 12:32:21 +0000 Manifest next update: Sun 01 Nov 2026 15:26:21 +0000 Files and hashes: 1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: EzDRug91ed9lURxrxfWL7Ps3ZXmAzK0nHjeJOV8mUDY=) 2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=) 3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a9:b7:2e:03:61:e2:8b:17:72:28:22:fb:12:2a:21:89:3a:ce:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Validity Not Before: Oct 31 12:32:21 2026 GMT Not After : Nov 1 15:26:21 2026 GMT Subject: CN=131B40DDF390772509B8282C63AA8526DFE34DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:d7:bc:eb:0d:66:90:d8:cd:aa:46:bd:51: b8:7b:e2:61:e5:d7:7b:f3:22:8c:1f:65:72:cc:07: ed:93:bd:5d:8c:6a:59:16:13:4b:9f:2b:97:aa:59: 64:58:6f:72:6f:30:5f:7c:3c:c4:2b:19:73:25:60: 2b:bd:cd:23:a3:74:22:85:c0:dd:c3:35:50:65:7d: f5:f0:cc:48:7e:d5:e3:2c:3b:b5:51:ab:9a:b4:fa: c0:47:a1:a9:6e:82:c5:0c:37:cb:d8:fc:c1:d6:ca: 40:e3:7e:d5:82:f1:83:a4:44:13:f2:63:85:52:56: 1e:cb:c8:92:be:6e:6c:ce:77:cc:1b:36:d2:b0:92: 9a:20:e0:2c:c8:f6:46:c2:b6:71:a1:58:96:aa:68: 5a:63:33:17:66:6c:00:a8:2b:5c:36:38:f8:97:3f: ff:b4:f0:e1:9f:74:e5:d9:20:90:e0:4d:88:f3:6b: 60:da:22:18:69:0b:36:ac:c4:f7:4a:25:3e:3c:cb: 1a:0f:3b:b1:46:b0:14:a8:cf:1b:a5:fc:6a:d3:c1: 4f:3a:43:c0:4d:66:4f:49:b1:8a:a7:d4:2b:66:77: fe:bc:7d:d2:c9:53:d7:9e:9e:1d:c8:ac:67:2e:58: 02:c8:ff:1a:36:8b:e7:f5:6f:35:72:14:0f:3e:04: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1B:40:DD:F3:90:77:25:09:B8:28:2C:63:AA:85:26:DF:E3:4D:F6 X509v3 Authority Key Identifier: keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e0:03:8a:d9:4f:f7:e2:4f:a8:34:e9:1b:30:e6:3a:f6:81: 7d:b8:08:5b:ab:09:75:24:05:7f:55:19:dc:46:f1:b9:a9:9c: b1:dc:9e:5e:55:10:4d:08:d7:39:7d:ce:f7:a1:85:96:32:32: 28:11:5a:2e:9c:38:1c:e0:e1:87:bb:be:84:3f:cc:4b:7a:b8: 26:a3:d2:c0:69:d5:21:c1:7a:8e:76:68:21:fe:0f:99:ed:08: 61:ce:8a:22:7e:74:42:e6:9f:4c:04:d1:7f:8e:cd:c6:05:45: a1:2b:d1:9d:be:32:25:17:30:98:ec:ce:87:f3:0c:ed:f2:46: 08:fd:b7:92:ee:24:fc:8e:f1:1a:1b:6e:de:24:61:20:98:0c: d9:1a:ea:37:96:78:23:18:6e:1f:27:03:2b:09:88:95:3a:84: 24:fe:50:7b:1d:24:80:93:a2:cb:6e:4c:c4:90:06:2f:a3:0f: 27:5e:bd:73:5d:79:12:ef:95:12:c9:8f:f2:ab:2e:8d:58:a4: 47:5d:f2:9f:3f:da:7d:98:a4:2e:d3:af:32:d9:0e:72:cc:54: 22:00:49:78:18:b1:f0:b6:e2:95:78:4c:b2:22:28:b6:88:be: ef:6d:31:b3:ae:37:ab:34:67:45:4e:da:fd:68:e0:21:6c:1c: 06:97:78:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO6m3LgNh4osXcigi+xIqIYk6zn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0 NTU0QkJEQjAeFw0yNjEwMzExMjMyMjFaFw0yNjExMDExNTI2MjFaMDMxMTAvBgNV BAMTKDEzMUI0MERERjM5MDc3MjUwOUI4MjgyQzYzQUE4NTI2REZFMzRERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcV9e86w1mkNjNqka9Ubh74mHl 13vzIowfZXLMB+2TvV2MalkWE0ufK5eqWWRYb3JvMF98PMQrGXMlYCu9zSOjdCKF wN3DNVBlffXwzEh+1eMsO7VRq5q0+sBHoalugsUMN8vY/MHWykDjftWC8YOkRBPy Y4VSVh7LyJK+bmzOd8wbNtKwkpog4CzI9kbCtnGhWJaqaFpjMxdmbACoK1w2OPiX P/+08OGfdOXZIJDgTYjza2DaIhhpCzasxPdKJT48yxoPO7FGsBSozxul/GrTwU86 Q8BNZk9JsYqn1Ctmd/68fdLJU9eenh3IrGcuWALI/xo2i+f1bzVyFA8+BF7JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUExtA3fOQdyUJuCgsY6qFJt/jTfYwHwYDVR0j BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0 OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0OTgvMC9D QUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuuADitlP9+JPqDTpGzDmOvaBfbgIW6sJdSQFf1UZ3EbxuamcsdyeXlUQTQjX OX3O96GFljIyKBFaLpw4HODhh7u+hD/MS3q4JqPSwGnVIcF6jnZoIf4Pme0IYc6K In50QuafTATRf47NxgVFoSvRnb4yJRcwmOzOh/MM7fJGCP23ku4k/I7xGhtu3iRh IJgM2RrqN5Z4IxhuHycDKwmIlTqEJP5Qex0kgJOiy25MxJAGL6MPJ169c115Eu+V EsmP8qsujVikR13ynz/afZikLtOvMtkOcsxUIgBJeBix8LbilXhMsiIotoi+720x s643qzRnRU7a/WjgIWwcBpd49A== -----END CERTIFICATE-----Generated at Sun Nov 1 05:53:13 2026 by rpki-client