$ rpki-client -vvvf rpki-repo.registro.br/repo/HN7uu57FCPWRnj5isNb51DuoG5eMufT5Jatxjkjdo1pa/0/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.mft File: 43F5059E8393A1D37C46E67F1BD2AE00899E0B83.mft (raw, json) Hash identifier: A2VuQfxdXJ6EQl2Vn3/ybmlx+wUvsvEwTeYex6Rq3qE= Subject key identifier: D8:3F:F8:D9:DA:44:F2:83:02:5A:F1:9F:72:70:86:E7:80:B1:69:20 Authority key identifier: 43:F5:05:9E:83:93:A1:D3:7C:46:E6:7F:1B:D2:AE:00:89:9E:0B:83 Certificate issuer: /CN=43F5059E8393A1D37C46E67F1BD2AE00899E0B83 Certificate serial: 1206938C66CB31BE234D725EF19DECD5E9905768 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.cer Subject info access: rsync://rpki-repo.registro.br/repo/HN7uu57FCPWRnj5isNb51DuoG5eMufT5Jatxjkjdo1pa/0/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.mft Manifest number: 22 Signing time: Mon 19 Oct 2026 16:20:30 +0000 Manifest this update: Mon 19 Oct 2026 16:15:30 +0000 Manifest next update: Tue 20 Oct 2026 16:51:30 +0000 Files and hashes: 1: 323830343a383732383a3a2f33322d3332203d3e20323732363931.roa (hash: QXpXZCyOS6duR9n5l1GGPv5JZXtO2CaQrBxQ3vhfc3A=) 2: 43F5059E8393A1D37C46E67F1BD2AE00899E0B83.crl (hash: wq9edwUKJAExohFZDf6TOXWhtvCtSTXaAQScCqs89ps=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HN7uu57FCPWRnj5isNb51DuoG5eMufT5Jatxjkjdo1pa/0/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.crl rsync://rpki-repo.registro.br/repo/HN7uu57FCPWRnj5isNb51DuoG5eMufT5Jatxjkjdo1pa/0/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 Oct 2026 16:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:06:93:8c:66:cb:31:be:23:4d:72:5e:f1:9d:ec:d5:e9:90:57:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F5059E8393A1D37C46E67F1BD2AE00899E0B83 Validity Not Before: Oct 19 16:15:30 2026 GMT Not After : Oct 20 16:51:30 2026 GMT Subject: CN=D83FF8D9DA44F283025AF19F727086E780B16920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:e3:fb:af:e3:3c:cd:cb:56:9c:5c:b0:99: d8:67:0e:6e:1d:d3:91:22:58:ce:0d:e5:a6:01:fc: 2b:9f:a7:31:44:0a:1a:c3:6e:de:1b:0a:e8:6b:e7: 6b:53:d9:29:3b:73:6f:63:28:24:69:cb:af:14:4b: 25:a2:b1:9e:81:e5:f2:0a:8c:9e:3f:8b:4f:97:ae: b3:dd:a0:bb:d0:91:a3:13:d2:5b:58:36:b7:a1:94: 42:65:ee:e4:23:98:cb:9b:31:ce:b2:56:d6:71:56: d9:84:7b:be:b6:05:48:ad:b0:7f:4b:f8:a0:66:b1: e6:d9:6f:f0:3b:1c:96:14:9f:31:32:3f:bc:9b:55: 39:68:76:52:dc:d1:ae:6b:1c:d7:75:b3:9d:26:8f: 1d:55:86:93:20:5b:96:71:da:4b:d1:d3:af:f2:29: 24:ed:f7:7c:6e:a3:b5:bb:00:1b:54:44:c1:c5:b0: b0:92:67:49:ca:92:95:98:0a:e6:ea:f1:0b:b8:ce: 62:fe:ff:ae:b9:0b:0f:d8:95:d0:dc:d4:0f:dd:58: d5:07:79:2d:af:42:ba:64:74:dc:5e:a6:54:c1:07: f3:78:fb:d7:82:31:4e:01:ad:b4:48:59:eb:ba:58: c9:26:2a:10:4c:5d:3e:b6:be:a0:ea:00:1d:22:1c: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3F:F8:D9:DA:44:F2:83:02:5A:F1:9F:72:70:86:E7:80:B1:69:20 X509v3 Authority Key Identifier: keyid:43:F5:05:9E:83:93:A1:D3:7C:46:E6:7F:1B:D2:AE:00:89:9E:0B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HN7uu57FCPWRnj5isNb51DuoG5eMufT5Jatxjkjdo1pa/0/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HN7uu57FCPWRnj5isNb51DuoG5eMufT5Jatxjkjdo1pa/0/43F5059E8393A1D37C46E67F1BD2AE00899E0B83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e8:5f:c0:50:a9:f8:ed:e8:af:ca:67:0c:1a:e0:6d:ae:31: c4:04:e0:ff:f1:c1:87:94:31:66:f9:61:94:a0:45:46:74:ab: 9b:82:b7:d4:24:13:c1:4e:da:ff:c6:2d:c8:ac:6e:18:9b:ec: d6:c4:73:c0:1e:fb:12:d7:a8:7a:16:ac:5f:c7:41:fd:15:5d: a5:0c:7e:40:c4:65:02:cd:d4:e2:f7:60:f1:33:f4:b4:e1:d7: 9c:6b:d4:4a:4e:15:3e:19:91:0b:f7:84:eb:0c:75:7d:6d:99: 27:1c:1a:68:9b:5e:6a:ee:56:6d:4d:2f:a3:7a:04:5c:82:ef: bf:2f:19:c0:23:98:5d:64:a4:37:55:ff:77:25:38:15:1f:7c: ca:da:cd:6c:f2:4f:18:e7:6d:56:fb:32:12:c4:a7:01:88:ae: de:35:f2:3f:76:12:8b:81:c3:e6:d6:55:20:2d:ce:dc:1c:09: 3e:b4:84:9a:56:17:21:a9:5b:8d:26:f5:50:05:9e:b3:81:3f: a3:40:50:bd:72:a2:46:39:ef:53:3a:1c:36:c0:3a:88:27:c7: b0:8c:67:5c:2a:e1:c4:47:42:b2:49:3f:da:ed:28:56:0a:0c: 37:a1:87:80:1e:e9:0f:3e:15:87:f7:b2:f6:68:66:f0:4c:c8: df:d4:8b:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEgaTjGbLMb4jTXJe8Z3s1emQV2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGNTA1OUU4MzkzQTFEMzdDNDZFNjdGMUJEMkFFMDA4 OTlFMEI4MzAeFw0yNjEwMTkxNjE1MzBaFw0yNjEwMjAxNjUxMzBaMDMxMTAvBgNV BAMTKEQ4M0ZGOEQ5REE0NEYyODMwMjVBRjE5RjcyNzA4NkU3ODBCMTY5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXouP7r+M8zctWnFywmdhnDm4d 05EiWM4N5aYB/CufpzFEChrDbt4bCuhr52tT2Sk7c29jKCRpy68USyWisZ6B5fIK jJ4/i0+XrrPdoLvQkaMT0ltYNrehlEJl7uQjmMubMc6yVtZxVtmEe762BUitsH9L +KBmsebZb/A7HJYUnzEyP7ybVTlodlLc0a5rHNd1s50mjx1VhpMgW5Zx2kvR06/y KSTt93xuo7W7ABtURMHFsLCSZ0nKkpWYCubq8Qu4zmL+/665Cw/YldDc1A/dWNUH eS2vQrpkdNxeplTBB/N4+9eCMU4BrbRIWeu6WMkmKhBMXT62vqDqAB0iHOOtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2D/42dpE8oMCWvGfcnCG54CxaSAwHwYDVR0j BBgwFoAUQ/UFnoOTodN8RuZ/G9KuAImeC4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE43dXU1N0ZDUFdSbmo1aXNOYjUxRHVvRzVlTXVmVDVKYXR4amtqZG8x cGEvMC80M0Y1MDU5RTgzOTNBMUQzN0M0NkU2N0YxQkQyQUUwMDg5OUUwQjgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjUwNTlFODM5M0ExRDM3 QzQ2RTY3RjFCRDJBRTAwODk5RTBCODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE43dXU1N0ZDUFdSbmo1aXNOYjUxRHVvRzVlTXVmVDVKYXR4amtqZG8xcGEvMC80 M0Y1MDU5RTgzOTNBMUQzN0M0NkU2N0YxQkQyQUUwMDg5OUUwQjgzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHuhfwFCp+O3or8pnDBrgba4xxATg//HBh5QxZvlhlKBFRnSrm4K31CQTwU7a /8YtyKxuGJvs1sRzwB77EteoehasX8dB/RVdpQx+QMRlAs3U4vdg8TP0tOHXnGvU Sk4VPhmRC/eE6wx1fW2ZJxwaaJteau5WbU0vo3oEXILvvy8ZwCOYXWSkN1X/dyU4 FR98ytrNbPJPGOdtVvsyEsSnAYiu3jXyP3YSi4HD5tZVIC3O3BwJPrSEmlYXIalb jSb1UAWes4E/o0BQvXKiRjnvUzocNsA6iCfHsIxnXCrhxEdCskk/2u0oVgoMN6GH gB7pDz4Vh/ey9mhm8EzI39SL1Q== -----END CERTIFICATE-----Generated at Tue Oct 20 09:00:48 2026 by rpki-client