$ rpki-client -vvvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft File: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft (raw, json) Hash identifier: 2CDJ7FgWxtveX7u+izsHFY387xcRPk4gvTogz17dNX8= Subject key identifier: E6:38:E2:DB:EF:67:6D:D6:9B:30:91:1F:30:A9:1A:D3:FD:C5:12:43 Authority key identifier: 21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 Certificate issuer: /CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Certificate serial: 20375F13ED4D7E6A63DC8632E536717D90C21622 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft Manifest number: E7 Signing time: Mon 02 Nov 2026 10:26:07 +0000 Manifest this update: Mon 02 Nov 2026 10:21:07 +0000 Manifest next update: Tue 03 Nov 2026 11:33:07 +0000 Files and hashes: 1: 3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa (hash: C3+R5TJjILqRWqKKZFKMcGNRlcVwLelyy+SPnF/wG10=) 2: 323830343a6233383a3a2f33322d3438203d3e203532373538.roa (hash: yFx3ehbs6kD1O83Pz1zQ+DNga8Y7rEsJ/HhUCporP4Y=) 3: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl (hash: lp4WLpzFwcIGnKzvxBCCKT4/1nQFAdyh7Gd7WC1jpmU=) 4: 3137372e33382e3138342e302f32312d3234203d3e203532373538.roa (hash: 3GyCzw9okLmCV3Lo5NKPmIHHgFYBF0+I3/BzpS37XJo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 11:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:37:5f:13:ed:4d:7e:6a:63:dc:86:32:e5:36:71:7d:90:c2:16:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Validity Not Before: Nov 2 10:21:07 2026 GMT Not After : Nov 3 11:33:07 2026 GMT Subject: CN=E638E2DBEF676DD69B30911F30A91AD3FDC51243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:ab:f8:02:53:e1:1a:26:02:b1:64:5e:63: 5a:48:ae:b8:78:3a:90:da:68:ff:fe:70:e3:90:c4: d3:77:57:65:73:07:af:10:79:94:d3:f3:d9:2a:e5: b0:21:cf:43:0b:b3:f0:34:69:65:e6:ae:7b:a5:e6: 31:25:c0:c2:85:bb:4e:88:58:11:b9:87:86:cf:25: 86:64:ce:94:43:50:83:27:4a:7d:5d:fe:97:dd:a9: ea:cc:f1:54:83:a7:f3:92:7d:7d:38:ef:20:ae:9a: 6c:49:2b:a6:e3:72:d9:cf:72:ef:e6:62:00:1a:01: e3:0e:10:d0:a6:c1:c8:b9:d7:3e:44:84:24:38:61: 80:4a:25:6f:10:5a:fc:d8:ac:a1:0b:a1:bf:b7:40: 72:6d:22:2b:23:38:77:98:f2:ff:ab:f5:50:dc:e5: d7:fd:e6:dd:38:fd:7a:5f:e5:98:54:bf:69:18:10: e2:89:5a:0d:0d:a6:1a:9f:c0:3a:e9:c9:01:3b:66: 97:d7:3d:c6:54:d4:68:93:49:00:8f:b3:84:ee:8f: 79:b3:ea:b5:02:14:27:ae:e4:ba:8b:16:ac:38:45: de:72:e8:ad:39:37:2b:75:98:bc:ed:aa:dd:c4:e0: 6b:c6:7e:75:0e:cf:86:7f:7e:c9:b7:19:16:ec:34: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:E2:DB:EF:67:6D:D6:9B:30:91:1F:30:A9:1A:D3:FD:C5:12:43 X509v3 Authority Key Identifier: keyid:21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fc:15:f5:9d:d6:91:ce:52:33:b5:03:e4:fd:eb:7c:4a:2c: a3:e7:45:e1:78:d2:5f:5a:22:c6:c1:f8:4c:44:ae:05:ef:cc: a4:81:35:3a:46:30:47:41:30:8f:93:41:20:a8:0a:d0:51:1e: b0:f3:2a:c6:5f:84:cd:d2:79:42:46:55:3e:0a:6c:c3:f8:ce: fb:35:7f:88:94:40:15:3d:68:e9:35:57:c1:4a:29:d9:0f:e1: e4:1e:f4:95:75:a5:a8:18:ed:1e:90:f6:b3:37:af:94:cb:72: 83:9f:8d:d2:f9:f7:28:03:79:96:fd:62:d5:54:07:18:b7:ab: 77:bc:d2:81:de:45:6d:9c:05:3a:ac:fd:75:93:fb:fa:b1:72: fd:ee:44:ec:16:8b:4a:4e:df:94:94:19:0e:1f:12:99:07:4e: 8b:4e:b0:ce:55:f8:54:16:22:66:78:b0:43:7f:db:99:77:78: 75:86:4d:84:06:cb:97:9b:b6:5b:02:45:0f:d8:3e:85:d1:a0: 3b:b6:2e:a9:e2:a0:ea:41:f1:64:0f:82:9c:4f:ba:da:b2:3d: 2d:58:72:0a:a9:2d:a2:82:fa:27:48:eb:2f:68:7e:db:20:42: 62:8a:75:dc:ba:a1:f3:98:05:8f:e6:19:88:df:ec:ac:76:01: 8b:f1:5b:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIDdfE+1Nfmpj3IYy5TZxfZDCFiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1OUEyQTYwNzk1NkQzOTkyNzFDREM2QTNBQzFFODA2 MTdGRUVFMTAeFw0yNjExMDIxMDIxMDdaFw0yNjExMDMxMTMzMDdaMDMxMTAvBgNV BAMTKEU2MzhFMkRCRUY2NzZERDY5QjMwOTExRjMwQTkxQUQzRkRDNTEyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbqv4AlPhGiYCsWReY1pIrrh4 OpDaaP/+cOOQxNN3V2VzB68QeZTT89kq5bAhz0MLs/A0aWXmrnul5jElwMKFu06I WBG5h4bPJYZkzpRDUIMnSn1d/pfdqerM8VSDp/OSfX047yCummxJK6bjctnPcu/m YgAaAeMOENCmwci51z5EhCQ4YYBKJW8QWvzYrKELob+3QHJtIisjOHeY8v+r9VDc 5df95t04/Xpf5ZhUv2kYEOKJWg0NphqfwDrpyQE7ZpfXPcZU1GiTSQCPs4Tuj3mz 6rUCFCeu5LqLFqw4Rd5y6K05Nyt1mLztqt3E4GvGfnUOz4Z/fsm3GRbsNIxLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5jji2+9nbdabMJEfMKka0/3FEkMwHwYDVR0j BBgwFoAUIVmipgeVbTmScc3Go6wegGF/7uEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1 c2gvMC8yMTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxNTlBMkE2MDc5NTZEMzk5 MjcxQ0RDNkEzQUMxRTgwNjE3RkVFRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMC8y MTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE/wV9Z3Wkc5SM7UD5P3rfEoso+dF4XjSX1oixsH4TESuBe/MpIE1OkYwR0Ew j5NBIKgK0FEesPMqxl+EzdJ5QkZVPgpsw/jO+zV/iJRAFT1o6TVXwUop2Q/h5B70 lXWlqBjtHpD2szevlMtyg5+N0vn3KAN5lv1i1VQHGLerd7zSgd5FbZwFOqz9dZP7 +rFy/e5E7BaLSk7flJQZDh8SmQdOi06wzlX4VBYiZniwQ3/bmXd4dYZNhAbLl5u2 WwJFD9g+hdGgO7YuqeKg6kHxZA+CnE+62rI9LVhyCqktooL6J0jrL2h+2yBCYop1 3Lqh85gFj+YZiN/srHYBi/FbHQ== -----END CERTIFICATE-----Generated at Mon Nov 2 14:21:48 2026 by rpki-client