$ rpki-client -vvvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft File: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft (raw, json) Hash identifier: JEpiUQ+scVrRG80DEo7InWE5pdXg4cVdk+q105g5o/E= Subject key identifier: 08:D5:43:AA:E4:68:D9:A4:B2:11:0F:7F:D0:53:59:3E:FE:D1:4D:10 Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 Certificate issuer: /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Certificate serial: 19ABCB7A759AB17B596236A8C1472F5B41737E61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft Manifest number: 0208 Signing time: Wed 28 Oct 2026 19:30:46 +0000 Manifest this update: Wed 28 Oct 2026 19:25:46 +0000 Manifest next update: Thu 29 Oct 2026 19:31:46 +0000 Files and hashes: 1: 34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa (hash: ByvyHfqGYTJf1bSYBbyXSJIAcofEpU2XhOSKWNyOW70=) 2: 34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (hash: zKJHXomjbG11hXTXWK+zI7c4ggaM8sH52gaDFlrNBY4=) 3: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl (hash: BF8PnMYWoleIaeaEuJaEcqJkLMBKI2OlIFq7b4HleBk=) 4: 323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (hash: UhVYsVh0UQJp3UVHCPuuZSR4dFaVj49upwmtiQ0GydY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 19:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:cb:7a:75:9a:b1:7b:59:62:36:a8:c1:47:2f:5b:41:73:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Validity Not Before: Oct 28 19:25:46 2026 GMT Not After : Oct 29 19:31:46 2026 GMT Subject: CN=08D543AAE468D9A4B2110F7FD053593EFED14D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d6:d9:8a:62:d8:89:e0:84:0e:ca:05:ad:8d: b8:97:e5:c6:e8:f7:ae:4f:74:81:f7:e4:3a:06:d3: 8e:38:45:28:86:68:8f:c5:dc:5a:70:f7:84:c5:f8: 3c:14:31:5f:a0:00:82:02:2d:0f:36:4a:de:71:89: 06:6c:f4:08:db:8e:e0:14:72:71:f1:fe:4b:39:39: ac:d0:2d:e3:03:de:05:8d:8d:a1:b0:cc:de:e0:00: 5d:df:60:32:bb:21:f0:e3:00:e9:62:e0:4f:45:f6: 43:a8:f0:ac:ac:da:82:83:4a:45:63:c5:d8:6f:c5: 00:b0:8b:e2:50:5f:18:ae:6b:04:60:14:7c:eb:60: 79:08:15:68:ce:e0:d7:65:b2:7b:ea:8c:b4:1d:59: e5:b0:ab:16:84:b3:6e:c8:16:d6:17:3f:b8:b0:0d: fa:b6:52:a4:91:45:7d:cb:2f:44:9c:94:f6:be:12: 77:99:63:b3:73:3e:b9:11:6d:91:9d:83:d3:94:16: ce:42:28:4d:19:f2:55:42:7d:35:70:13:0a:03:d5: 2e:26:0f:4a:e4:4c:4f:d5:39:3e:4f:23:1d:67:98: 30:53:1e:d7:96:9b:56:21:5b:f6:48:e1:53:41:d9: f9:ab:ad:de:72:fe:ed:9a:5d:75:1b:a0:ff:63:7b: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D5:43:AA:E4:68:D9:A4:B2:11:0F:7F:D0:53:59:3E:FE:D1:4D:10 X509v3 Authority Key Identifier: keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b3:1f:de:90:a7:cb:2a:c0:75:20:9c:1b:a8:8e:9f:80:ce: f1:cd:69:bc:6f:d4:94:3d:63:bf:1b:8b:1f:2f:d1:c4:f7:2c: ec:c5:ef:bd:51:b4:26:bd:f5:a6:3e:41:da:37:54:88:f5:6b: 95:74:4a:66:5e:d3:b8:15:11:41:49:c0:65:7b:3a:9c:af:61: 9f:08:48:e1:24:03:bc:0f:07:da:48:05:b6:55:9c:42:73:d1: 81:41:a6:91:52:55:a2:5d:8a:bb:a9:0c:db:39:ef:2c:59:ee: cc:50:41:50:e1:71:ee:4e:12:a1:13:7d:1f:9f:29:8c:9c:a8: 03:38:56:c2:d2:03:03:7b:11:6e:c3:bf:3f:2a:52:c1:ee:e9: 48:f8:b2:9b:e4:f9:20:82:1e:35:9b:13:dc:af:13:ce:74:e6: 3c:6e:88:44:3e:13:49:fc:3e:f5:01:d3:33:03:c9:a4:97:7c: 5a:ec:d6:27:2b:aa:03:c4:c2:02:aa:25:a0:ed:57:d3:66:20: c4:97:7c:d8:10:e1:1f:7e:be:cc:92:1f:e4:92:d0:a6:2f:7f: 73:ae:1b:c3:91:f3:94:a3:d4:0a:be:3a:28:35:23:42:9d:7c: 87:81:26:74:cc:1e:0b:16:60:0f:ca:dc:be:c4:05:4b:5b:b2: dd:48:8a:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGavLenWasXtZYjaowUcvW0FzfmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFNURFQjI4RkIxQjc3QzU2MjFBNDhEMzMwMzQ5REIw N0QxRDNGODAeFw0yNjEwMjgxOTI1NDZaFw0yNjEwMjkxOTMxNDZaMDMxMTAvBgNV BAMTKDA4RDU0M0FBRTQ2OEQ5QTRCMjExMEY3RkQwNTM1OTNFRkVEMTREMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD41tmKYtiJ4IQOygWtjbiX5cbo 965PdIH35DoG0444RSiGaI/F3Fpw94TF+DwUMV+gAIICLQ82St5xiQZs9AjbjuAU cnHx/ks5OazQLeMD3gWNjaGwzN7gAF3fYDK7IfDjAOli4E9F9kOo8Kys2oKDSkVj xdhvxQCwi+JQXxiuawRgFHzrYHkIFWjO4NdlsnvqjLQdWeWwqxaEs27IFtYXP7iw Dfq2UqSRRX3LL0SclPa+EneZY7NzPrkRbZGdg9OUFs5CKE0Z8lVCfTVwEwoD1S4m D0rkTE/VOT5PIx1nmDBTHteWm1YhW/ZI4VNB2fmrrd5y/u2aXXUboP9je6ipAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCNVDquRo2aSyEQ9/0FNZPv7RTRAwHwYDVR0j BBgwFoAUquXeso+xt3xWIaSNMwNJ2wfR0/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGpr czYvMC9BQUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBRTVERUIyOEZCMUI3N0M1 NjIxQTQ4RDMzMDM0OURCMDdEMUQzRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGprczYvMC9B QUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7Mf3pCnyyrAdSCcG6iOn4DO8c1pvG/UlD1jvxuLHy/RxPcs7MXvvVG0Jr31 pj5B2jdUiPVrlXRKZl7TuBURQUnAZXs6nK9hnwhI4SQDvA8H2kgFtlWcQnPRgUGm kVJVol2Ku6kM2znvLFnuzFBBUOFx7k4SoRN9H58pjJyoAzhWwtIDA3sRbsO/PypS we7pSPiym+T5IIIeNZsT3K8TznTmPG6IRD4TSfw+9QHTMwPJpJd8WuzWJyuqA8TC AqoloO1X02YgxJd82BDhH36+zJIf5JLQpi9/c64bw5HzlKPUCr46KDUjQp18h4Em dMweCxZgD8rcvsQFS1uy3UiKAg== -----END CERTIFICATE-----Generated at Thu Oct 29 06:05:16 2026 by rpki-client