$ rpki-client -vvvf rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft File: 2A549864E803339874E3627EE1589BC2DA6DE41A.mft (raw, json) Hash identifier: WJkpwm6g0GEnV1LZvr1/txBjd9TQHSjh77EXTGzDdyU= Subject key identifier: 4B:8E:5A:42:48:28:3F:43:8B:90:78:88:78:1B:93:04:02:4C:1C:C7 Authority key identifier: 2A:54:98:64:E8:03:33:98:74:E3:62:7E:E1:58:9B:C2:DA:6D:E4:1A Certificate issuer: /CN=2A549864E803339874E3627EE1589BC2DA6DE41A Certificate serial: 32AA96D92D5C0F56698202E5ACA04941B344D798 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A549864E803339874E3627EE1589BC2DA6DE41A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft Manifest number: 2B Signing time: Mon 02 Nov 2026 14:25:40 +0000 Manifest this update: Mon 02 Nov 2026 14:20:40 +0000 Manifest next update: Tue 03 Nov 2026 16:56:40 +0000 Files and hashes: 1: 323830343a393965633a3a2f33322d3438203d3e20323735383133.roa (hash: yBV+9qCBW7Co3twX6CM1QRHteIY0vIW2wWIKa8smgxI=) 2: 2A549864E803339874E3627EE1589BC2DA6DE41A.crl (hash: e4Bv8fIAwGtpfkcC4MqjrbSKiytyYOuwrRXYIyiid0Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.crl rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A549864E803339874E3627EE1589BC2DA6DE41A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 16:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:aa:96:d9:2d:5c:0f:56:69:82:02:e5:ac:a0:49:41:b3:44:d7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A549864E803339874E3627EE1589BC2DA6DE41A Validity Not Before: Nov 2 14:20:40 2026 GMT Not After : Nov 3 16:56:40 2026 GMT Subject: CN=4B8E5A4248283F438B907888781B9304024C1CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:6f:25:87:c0:22:fc:41:cf:6e:54:4f:4b: 5a:35:dc:50:05:1f:2c:df:c6:d1:08:05:33:ad:32: 77:ea:5a:c0:7c:49:f0:1b:2d:ef:a5:86:a2:66:64: 11:d5:06:3f:ec:e1:6e:91:39:f4:1b:44:64:1c:22: 98:da:72:91:a5:bf:da:0a:ef:56:b6:9e:13:94:d0: 40:07:41:4d:46:68:c8:10:8b:fe:96:bc:8d:ac:38: 80:55:ff:0b:05:6e:e8:74:d0:5e:da:21:5f:dc:25: 22:71:53:5c:64:07:0d:78:8b:f9:40:2d:01:93:d5: 74:03:2b:c7:03:f1:ab:c8:45:3e:a9:8c:70:4e:b2: 39:13:9e:f3:0e:4d:a6:7f:7c:61:59:88:f6:07:cb: 99:2a:59:de:99:89:15:e7:77:df:8c:4d:c9:b1:c0: 9c:70:eb:6c:63:58:d4:1f:24:a8:87:b2:ca:37:b8: ef:ad:09:05:73:f8:5c:96:51:5d:5c:e6:07:d6:9b: 4b:4e:c1:5d:1c:59:16:47:6d:02:d0:86:6d:26:41: 80:51:61:02:a5:64:b5:59:54:45:c7:3d:98:e4:87: 4f:be:83:16:c7:71:c0:dc:1f:35:56:13:13:12:b6: 82:18:39:7c:bb:b9:07:37:42:3c:1c:71:25:03:34: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8E:5A:42:48:28:3F:43:8B:90:78:88:78:1B:93:04:02:4C:1C:C7 X509v3 Authority Key Identifier: keyid:2A:54:98:64:E8:03:33:98:74:E3:62:7E:E1:58:9B:C2:DA:6D:E4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A549864E803339874E3627EE1589BC2DA6DE41A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0f:ba:f5:64:71:bd:66:de:f0:7b:6d:de:02:83:48:e0:88: fc:1d:c7:d8:8d:0a:81:ca:0e:89:ea:69:ba:d6:1a:7b:bd:09: 68:76:14:bd:08:6d:10:63:3b:6e:18:f9:8d:54:da:d4:0c:a9: 43:00:fd:aa:f0:3a:bb:53:b9:85:6f:e4:72:6c:64:a2:f3:9e: 2d:b4:da:77:dd:12:2a:d9:61:5e:ac:7a:70:e4:4b:8c:cb:e5: 69:1e:bc:d1:05:98:4b:64:9f:d9:2a:9a:b0:a2:a8:27:cc:cf: 25:71:fa:cb:dc:10:0d:71:4d:13:09:ce:30:ae:75:84:bc:45: 7d:4a:3f:76:4b:5a:7e:66:32:4f:b3:9e:37:c8:78:0a:d3:2c: 01:f1:07:6d:6d:a7:f1:d3:f3:ba:18:8c:03:fb:2a:99:49:df: fe:76:ca:c5:b5:46:61:5e:24:6c:d6:ea:6f:83:8f:bd:7c:59: 40:98:f8:6d:67:23:dc:dd:a3:2b:fe:13:21:3d:99:34:56:c7: fe:4d:b1:da:54:56:4c:0d:5d:4e:52:79:d6:16:c1:b1:e0:18: d6:29:33:92:51:dd:0c:5c:2c:2d:7a:6a:e4:90:d2:3e:71:94: dd:93:60:de:8c:ac:e8:11:38:03:73:1c:2b:30:2a:31:b3:b8: 38:34:ff:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMqqW2S1cD1ZpggLlrKBJQbNE15gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NDk4NjRFODAzMzM5ODc0RTM2MjdFRTE1ODlCQzJE QTZERTQxQTAeFw0yNjExMDIxNDIwNDBaFw0yNjExMDMxNjU2NDBaMDMxMTAvBgNV BAMTKDRCOEU1QTQyNDgyODNGNDM4QjkwNzg4ODc4MUI5MzA0MDI0QzFDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Em8lh8Ai/EHPblRPS1o13FAF HyzfxtEIBTOtMnfqWsB8SfAbLe+lhqJmZBHVBj/s4W6ROfQbRGQcIpjacpGlv9oK 71a2nhOU0EAHQU1GaMgQi/6WvI2sOIBV/wsFbuh00F7aIV/cJSJxU1xkBw14i/lA LQGT1XQDK8cD8avIRT6pjHBOsjkTnvMOTaZ/fGFZiPYHy5kqWd6ZiRXnd9+MTcmx wJxw62xjWNQfJKiHsso3uO+tCQVz+FyWUV1c5gfWm0tOwV0cWRZHbQLQhm0mQYBR YQKlZLVZVEXHPZjkh0++gxbHccDcHzVWExMStoIYOXy7uQc3QjwccSUDNAPbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS45aQkgoP0OLkHiIeBuTBAJMHMcwHwYDVR0j BBgwFoAUKlSYZOgDM5h042J+4Vibwtpt5BowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pQS1BKRm0ydnlQYnVZamtjUFgxS1lFM0M4c3N6OWdodVg0WkVGSEdY c2YvMC8yQTU0OTg2NEU4MDMzMzk4NzRFMzYyN0VFMTU4OUJDMkRBNkRFNDFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNTQ5ODY0RTgwMzMzOTg3 NEUzNjI3RUUxNTg5QkMyREE2REU0MUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pQS1BKRm0ydnlQYnVZamtjUFgxS1lFM0M4c3N6OWdodVg0WkVGSEdYc2YvMC8y QTU0OTg2NEU4MDMzMzk4NzRFMzYyN0VFMTU4OUJDMkRBNkRFNDFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiw+69WRxvWbe8Htt3gKDSOCI/B3H2I0KgcoOiepputYae70JaHYUvQhtEGM7 bhj5jVTa1AypQwD9qvA6u1O5hW/kcmxkovOeLbTad90SKtlhXqx6cORLjMvlaR68 0QWYS2Sf2SqasKKoJ8zPJXH6y9wQDXFNEwnOMK51hLxFfUo/dktafmYyT7OeN8h4 CtMsAfEHbW2n8dPzuhiMA/sqmUnf/nbKxbVGYV4kbNbqb4OPvXxZQJj4bWcj3N2j K/4TIT2ZNFbH/k2x2lRWTA1dTlJ51hbBseAY1ikzklHdDFwsLXpq5JDSPnGU3ZNg 3oys6BE4A3McKzAqMbO4ODT/QA== -----END CERTIFICATE-----Generated at Tue Nov 3 06:12:46 2026 by rpki-client