$ rpki-client -vvvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.mft File: 96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.mft (raw, json) Hash identifier: bKe58dEccTqS12TawUXqh9dRTL0zMZMNHb+ga6uFmY8= Subject key identifier: 8A:DF:52:7D:9E:68:57:3A:D7:2D:B1:44:8A:6E:2B:0F:D8:2F:11:90 Authority key identifier: 96:DB:E9:0E:8A:60:54:2D:04:3F:B3:67:D6:0D:CE:4A:CA:C2:B1:A5 Certificate issuer: /CN=96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5 Certificate serial: 67179D9DC08180A79C250418D5A59B8720C6B842 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.mft Manifest number: CD Signing time: Sat 31 Oct 2026 07:31:05 +0000 Manifest this update: Sat 31 Oct 2026 07:26:05 +0000 Manifest next update: Sun 01 Nov 2026 11:13:05 +0000 Files and hashes: 1: 3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (hash: uhP4SjS0mBh9yr4PiqO/OCZ1NqHHVRRKPfPz5y0hZTw=) 2: 96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.crl (hash: pQ+gnaG2I4Lv7B+6FcE6oZ8YZ0vclVoUB3F0zt8wLoI=) 3: 323830343a376638383a3a2f33322d3438203d3e20323731363934.roa (hash: 4OTS8eWfumGdBs1rXXxjS0w6u+YiGvyx6i6qQSG7HNA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.crl rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 11:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:17:9d:9d:c0:81:80:a7:9c:25:04:18:d5:a5:9b:87:20:c6:b8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5 Validity Not Before: Oct 31 07:26:05 2026 GMT Not After : Nov 1 11:13:05 2026 GMT Subject: CN=8ADF527D9E68573AD72DB1448A6E2B0FD82F1190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:58:99:24:7a:46:f7:9e:5b:33:47:c1:f0: 26:2d:c4:3a:5f:fe:2f:fa:37:60:79:70:cf:6d:df: 3d:b0:43:25:92:56:05:2b:cd:ad:af:b0:d9:5a:0c: c1:4d:8e:fc:90:a5:cd:89:38:9c:58:70:72:76:ea: ea:1f:5d:11:86:a9:96:f5:1e:61:20:5b:40:4e:e8: 55:77:eb:3c:9d:fc:8d:c5:43:1f:b0:fd:63:c5:0d: 12:a4:12:80:30:b6:7c:ec:ca:25:6c:ea:88:f2:9b: 62:43:9e:01:6e:22:f8:76:12:9a:4e:66:40:7a:e2: ea:a0:5d:4b:03:eb:49:9f:4a:af:c4:72:71:0c:7a: d2:54:89:db:b0:fb:9a:47:77:8f:cc:2a:29:75:22: 7c:2f:b2:19:70:d7:1c:54:0f:54:85:01:06:48:49: e5:c3:3d:31:5e:7a:59:9b:1c:90:ad:fe:07:c7:43: 07:97:ad:3d:86:e1:2e:68:9c:d1:9e:c8:4f:89:95: 23:97:e0:15:09:8c:3f:86:ba:bb:19:c0:80:8b:13: 97:46:82:3d:48:d4:a8:1d:dc:6c:e6:7b:4c:f2:24: 61:ee:3c:1b:3e:9a:86:d8:f6:9a:8a:62:83:57:5c: a7:88:56:6e:97:b0:86:48:36:8f:79:0c:6e:e5:40: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DF:52:7D:9E:68:57:3A:D7:2D:B1:44:8A:6E:2B:0F:D8:2F:11:90 X509v3 Authority Key Identifier: keyid:96:DB:E9:0E:8A:60:54:2D:04:3F:B3:67:D6:0D:CE:4A:CA:C2:B1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/96DBE90E8A60542D043FB367D60DCE4ACAC2B1A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d0:f1:75:49:11:35:37:a5:11:64:1f:50:40:19:99:a4:c3: f2:0b:35:b4:52:f1:54:f8:a1:74:7f:21:bf:be:5a:b5:bf:45: a0:9a:0d:76:02:63:9d:47:54:1d:35:36:0d:55:4e:8c:32:f2: 12:55:15:14:1f:ec:92:fa:b7:fe:96:9d:cc:40:df:66:54:65: e9:9e:0a:0a:53:b8:c3:cc:da:1d:1e:51:6b:5b:15:0e:03:f6: f9:8f:4d:30:18:a2:34:06:f5:f6:da:3f:44:b6:de:cd:74:d0: bd:72:b2:9b:9a:60:9a:c6:5d:9a:87:fa:1a:49:52:e2:a1:58: d1:34:66:2a:f0:fc:4d:ff:56:2a:e2:cd:6c:2d:2f:ee:2b:51: b5:2f:f5:c3:a1:8d:64:84:fc:11:b8:06:ad:82:bd:3d:cf:ca: 20:5f:f7:1b:2b:f9:b4:6d:7f:c2:bf:08:ea:35:b3:91:39:7b: 14:08:a0:06:bd:97:68:e2:4d:a0:8a:a2:57:de:15:fb:8f:e0: b4:e4:10:0f:f1:c8:40:89:40:af:dc:f6:cd:6e:d8:40:72:75: eb:6f:94:c9:72:b2:99:53:bb:f7:40:2f:3b:3f:e8:2b:12:32: 2a:b1:c2:da:45:53:58:56:a3:15:eb:50:ee:c9:38:85:91:3c: b2:9a:01:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZxedncCBgKecJQQY1aWbhyDGuEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZEQkU5MEU4QTYwNTQyRDA0M0ZCMzY3RDYwRENFNEFD QUMyQjFBNTAeFw0yNjEwMzEwNzI2MDVaFw0yNjExMDExMTEzMDVaMDMxMTAvBgNV BAMTKDhBREY1MjdEOUU2ODU3M0FENzJEQjE0NDhBNkUyQjBGRDgyRjExOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/1iZJHpG955bM0fB8CYtxDpf /i/6N2B5cM9t3z2wQyWSVgUrza2vsNlaDMFNjvyQpc2JOJxYcHJ26uofXRGGqZb1 HmEgW0BO6FV36zyd/I3FQx+w/WPFDRKkEoAwtnzsyiVs6ojym2JDngFuIvh2EppO ZkB64uqgXUsD60mfSq/EcnEMetJUiduw+5pHd4/MKil1Inwvshlw1xxUD1SFAQZI SeXDPTFeelmbHJCt/gfHQweXrT2G4S5onNGeyE+JlSOX4BUJjD+GursZwICLE5dG gj1I1Kgd3Gzme0zyJGHuPBs+mobY9pqKYoNXXKeIVm6XsIZINo95DG7lQJvHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUit9SfZ5oVzrXLbFEim4rD9gvEZAwHwYDVR0j BBgwFoAUltvpDopgVC0EP7Nn1g3OSsrCsaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1Jm eTQvMC85NkRCRTkwRThBNjA1NDJEMDQzRkIzNjdENjBEQ0U0QUNBQzJCMUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2REJFOTBFOEE2MDU0MkQw NDNGQjM2N0Q2MERDRTRBQ0FDMkIxQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1JmeTQvMC85 NkRCRTkwRThBNjA1NDJEMDQzRkIzNjdENjBEQ0U0QUNBQzJCMUE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE9DxdUkRNTelEWQfUEAZmaTD8gs1tFLxVPihdH8hv75atb9FoJoNdgJjnUdU HTU2DVVOjDLyElUVFB/skvq3/padzEDfZlRl6Z4KClO4w8zaHR5Ra1sVDgP2+Y9N MBiiNAb19to/RLbezXTQvXKym5pgmsZdmof6GklS4qFY0TRmKvD8Tf9WKuLNbC0v 7itRtS/1w6GNZIT8EbgGrYK9Pc/KIF/3Gyv5tG1/wr8I6jWzkTl7FAigBr2XaOJN oIqiV94V+4/gtOQQD/HIQIlAr9z2zW7YQHJ162+UyXKymVO790AvOz/oKxIyKrHC 2kVTWFajFetQ7sk4hZE8spoB8A== -----END CERTIFICATE-----Generated at Sun Nov 1 01:59:05 2026 by rpki-client