$ rpki-client -vvvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: hpqEw83J1X8xnHYk9QaPvhzuZw1g770LzxV3C8l74q4= Subject key identifier: 19:99:FA:A4:6F:5D:E2:A7:29:5B:5B:3A:9A:2D:CE:29:99:73:BA:21 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 39CB57489315A2F292B964E7093D433FA0C6D348 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 03FA Signing time: Sat 17 Oct 2026 20:52:32 +0000 Manifest this update: Sat 17 Oct 2026 20:47:32 +0000 Manifest next update: Mon 19 Oct 2026 00:27:32 +0000 Files and hashes: 1: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: NNhqesOFQFJuwzPZxvI8OtYsxpbCXDj9PSEQUW/ai0Q=) 2: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: qUZAUAGhz6hlK+aoaELY0C44cE8pjcedkOt4BGEpeLo=) 3: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: Zl/SWTd+bE1o8xBgsbLYEVMI0YrdwQeK1shPKK0Otxk=) 4: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: dNRDVgkmpnC//hRpzQRA5a/qFUCnzfHoFDFz26GVecU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 00:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cb:57:48:93:15:a2:f2:92:b9:64:e7:09:3d:43:3f:a0:c6:d3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Oct 17 20:47:32 2026 GMT Not After : Oct 19 00:27:32 2026 GMT Subject: CN=1999FAA46F5DE2A7295B5B3A9A2DCE299973BA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:50:ee:40:8a:00:b2:df:f0:5e:dd:46:f0:53: df:55:04:66:46:07:e9:2f:f3:e4:32:2f:42:1a:62: a1:18:f0:ba:9b:05:44:dc:a6:60:3e:b9:97:37:2b: 27:91:5d:c5:62:1e:e0:0c:65:30:4f:1c:ce:59:fa: 58:d7:93:fe:c6:e6:68:d5:fc:07:42:e8:5a:ce:33: a5:14:1c:f9:54:55:1b:1d:c8:25:2c:4e:c7:22:6f: 19:79:ad:b0:07:90:a9:6e:37:0b:9c:bc:8a:56:45: ff:a0:4b:9f:63:67:ef:b4:4d:3f:3d:aa:68:b5:1a: 0d:6a:5e:d6:34:b8:bd:20:0a:66:4f:2f:3c:1e:0b: 95:7f:04:07:6b:75:83:5a:3b:2f:06:04:5f:07:6f: 79:4c:35:90:4c:6f:69:8d:da:4c:c7:a7:89:90:57: 1e:aa:d4:9f:ff:f1:67:2d:61:fa:25:50:19:05:d7: ba:8d:6e:37:81:1a:a7:90:d2:d7:7d:b4:5d:b8:fd: be:41:33:d6:2d:fc:1d:a4:18:6a:24:93:6f:3c:82: 91:5d:f5:b3:51:53:00:e4:9b:5a:cc:b2:59:27:70: 5c:c5:e1:c7:90:78:0a:31:d5:98:4d:26:55:89:e9: d9:18:fd:b5:e6:e4:f7:8f:e5:92:4c:78:4c:c2:96: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:99:FA:A4:6F:5D:E2:A7:29:5B:5B:3A:9A:2D:CE:29:99:73:BA:21 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:87:e6:d4:da:a7:fa:15:fd:d0:ee:a9:8e:1e:bf:95:b2:2c: 0b:08:08:89:35:03:41:0f:36:39:3c:39:03:07:21:13:9a:cb: 5b:17:2c:b4:7b:2c:ee:08:2b:f9:11:04:39:1c:ae:3f:17:db: 3b:1b:72:37:a2:eb:7a:4d:8e:bb:b2:e6:b2:09:cd:0e:cd:7d: 99:a2:ad:46:e8:ef:4f:a3:aa:0b:3c:e8:a0:b2:92:8c:2b:4c: c0:f7:24:3a:20:20:f4:13:65:ce:db:40:12:01:c6:c5:2d:aa: 55:57:90:6c:a3:ec:92:df:44:08:02:78:2f:9b:bc:15:33:3b: de:73:7a:60:29:d5:4e:21:ab:7b:f0:8f:36:02:44:7a:f0:e7: 4c:a1:6f:f2:f5:71:fc:98:f1:cb:f8:09:d1:f0:94:f4:b5:ae: 87:74:8c:d5:26:b5:79:8e:a2:60:81:5f:90:8f:af:c4:7d:b5: 61:54:11:08:0d:ae:54:67:b6:fb:6b:9a:a6:b1:6f:68:3d:04: d2:10:d6:43:44:7e:f6:22:42:8a:f6:09:38:57:14:df:9a:aa: 79:68:0e:e2:39:08:61:fc:05:7c:a2:38:c2:63:77:df:91:7d: 0b:cb:60:4a:0f:66:de:71:3a:09:a6:b3:27:16:c3:b7:35:f9: f0:b8:20:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOctXSJMVovKSuWTnCT1DP6DG00gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNjEwMTcyMDQ3MzJaFw0yNjEwMTkwMDI3MzJaMDMxMTAvBgNV BAMTKDE5OTlGQUE0NkY1REUyQTcyOTVCNUIzQTlBMkRDRTI5OTk3M0JBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1UO5AigCy3/Be3UbwU99VBGZG B+kv8+QyL0IaYqEY8LqbBUTcpmA+uZc3KyeRXcViHuAMZTBPHM5Z+ljXk/7G5mjV /AdC6FrOM6UUHPlUVRsdyCUsTscibxl5rbAHkKluNwucvIpWRf+gS59jZ++0TT89 qmi1Gg1qXtY0uL0gCmZPLzweC5V/BAdrdYNaOy8GBF8Hb3lMNZBMb2mN2kzHp4mQ Vx6q1J//8WctYfolUBkF17qNbjeBGqeQ0td9tF24/b5BM9Yt/B2kGGokk288gpFd 9bNRUwDkm1rMslkncFzF4ceQeAox1ZhNJlWJ6dkY/bXm5PeP5ZJMeEzCltIBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGZn6pG9d4qcpW1s6mi3OKZlzuiEwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4fm1Nqn+hX90O6pjh6/lbIsCwgIiTUDQQ82OTw5AwchE5rLWxcstHss7ggr +REEORyuPxfbOxtyN6Lrek2Ou7LmsgnNDs19maKtRujvT6OqCzzooLKSjCtMwPck OiAg9BNlzttAEgHGxS2qVVeQbKPskt9ECAJ4L5u8FTM73nN6YCnVTiGre/CPNgJE evDnTKFv8vVx/Jjxy/gJ0fCU9LWuh3SM1Sa1eY6iYIFfkI+vxH21YVQRCA2uVGe2 +2uaprFvaD0E0hDWQ0R+9iJCivYJOFcU35qqeWgO4jkIYfwFfKI4wmN335F9C8tg Sg9m3nE6CaazJxbDtzX58Lggtw== -----END CERTIFICATE-----Generated at Sun Oct 18 13:16:13 2026 by rpki-client