$ rpki-client -vvvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft File: 5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft (raw, json) Hash identifier: NwgCOLwVt3qQJcYbqb9p9d26mU2LL+9mvdP/Iy3/9uY= Subject key identifier: CE:25:DA:0E:57:FD:DD:1F:2A:95:0E:A1:B5:CE:3A:2C:02:76:70:F2 Authority key identifier: 5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31 Certificate issuer: /CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431 Certificate serial: 4C4EBCD7AE822653DCD320F2631775F8436B887C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer Subject info access: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft Manifest number: 0107 Signing time: Fri 09 Oct 2026 17:45:17 +0000 Manifest this update: Fri 09 Oct 2026 17:40:17 +0000 Manifest next update: Sat 10 Oct 2026 18:07:17 +0000 Files and hashes: 1: 5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl (hash: +IMvP/HBt1GZY2OxeQw/agy2B7Ys7OYdlVPWlZ9Yzjw=) 2: 3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa (hash: Nx2E96pmc8QSIz8g09X0wid0h7hOK9ofcsFpVIIgKwY=) 3: 323830343a313131633a3a2f33322d313238203d3e203532383138.roa (hash: nL61kmKIt9PdkOrZ3FtsNlPzBXFWEqzyJIqRB8ZmA70=) 4: 3137372e37322e3134382e302f32322d3332203d3e203532383138.roa (hash: mhzpFKcpuzmJ2tEX89PN8O2JOEll7ivqNJiWR/BJufw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Oct 2026 18:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4e:bc:d7:ae:82:26:53:dc:d3:20:f2:63:17:75:f8:43:6b:88:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431 Validity Not Before: Oct 9 17:40:17 2026 GMT Not After : Oct 10 18:07:17 2026 GMT Subject: CN=CE25DA0E57FDDD1F2A950EA1B5CE3A2C027670F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:cb:bc:2c:ed:1d:1a:83:83:ef:4b:2d:d7: e6:3b:c2:3a:08:0f:d3:91:27:98:72:69:33:52:47: c1:8b:da:13:b4:c6:f5:a8:93:3e:75:23:67:e1:f7: 6a:c1:eb:15:8a:52:20:91:61:e7:2d:52:46:6e:cf: 7f:c8:48:87:f3:4b:b8:22:08:b4:77:b3:2a:37:77: 5e:fc:2d:9b:42:cb:7a:83:a0:28:65:24:07:23:2e: bc:15:7e:0b:6a:88:87:8c:dc:b7:c0:50:98:18:eb: 43:01:a4:78:24:9a:e9:fb:99:fc:51:11:a9:05:d1: 6a:24:73:89:8f:e0:49:09:72:ab:b0:e1:74:2b:22: 20:2d:76:e6:fc:5d:2c:ce:e4:84:76:d1:71:84:b1: 3c:91:3a:d3:ce:b3:19:d3:ff:24:22:32:65:ff:0f: a4:6e:bf:4f:e2:99:ab:d1:dc:8a:60:43:fa:46:55: 49:3e:3f:fe:ca:bf:7f:4e:e3:a7:dd:8b:e0:e0:97: 21:98:d7:01:e1:8b:24:c4:14:54:37:b7:7f:f4:18: 3a:88:82:b2:45:f8:e3:85:5a:f0:e2:77:56:07:cb: 21:af:35:ee:93:38:e3:e4:ca:60:f7:83:ae:82:1e: 00:65:43:5d:55:7f:fb:91:9f:74:b9:65:00:f8:9f: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:DA:0E:57:FD:DD:1F:2A:95:0E:A1:B5:CE:3A:2C:02:76:70:F2 X509v3 Authority Key Identifier: keyid:5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f3:ec:4b:e2:07:d8:52:3e:3d:6b:6b:a7:b8:76:8b:e1:ac: 31:ec:b7:c5:d3:62:40:71:61:80:a1:c4:ae:fb:7b:39:5f:a4: ba:f7:e4:2a:0b:07:91:7b:23:a2:81:3a:cd:76:b4:3f:5c:02: 76:2c:ee:8e:99:3b:01:5d:fd:7b:e5:84:d5:3d:7d:e2:63:15: cd:af:99:81:73:17:ab:fb:a0:b6:97:66:0b:ae:6f:73:72:43: 5d:5a:b2:8a:cb:c3:b4:90:70:8c:ce:7a:5b:9d:68:3c:81:7d: 79:21:d8:29:f6:3a:00:11:54:13:30:d9:53:e5:dc:8b:c6:85: c1:67:07:43:36:4b:e9:7e:2e:73:f2:43:b3:ce:1e:90:0e:6d: 6d:f3:60:61:e3:f4:8d:04:5b:92:f9:85:1d:69:89:22:4c:2d: 0e:9d:2f:fc:5d:86:67:c5:bc:84:a6:0b:e8:f1:58:ad:57:81: 5a:c0:ab:4b:15:6e:8d:97:36:49:41:20:29:41:6f:3b:f0:ab: 58:e9:fc:6b:59:d3:bd:43:20:33:58:5d:8d:a1:de:9a:75:af: 16:e8:f2:56:97:89:1c:ee:cd:d8:c4:b1:dd:cf:66:e8:51:92: 56:cb:ae:24:d9:94:f1:ba:6d:79:d6:ee:42:05:e8:f4:77:c0: 74:43:1a:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTE68166CJlPc0yDyYxd1+ENriHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGNzNENUNCRDVFQ0Q1NEU1QjQ5NDc0MzBEQUYzNTVE QkE1QzQzMTAeFw0yNjEwMDkxNzQwMTdaFw0yNjEwMTAxODA3MTdaMDMxMTAvBgNV BAMTKENFMjVEQTBFNTdGREREMUYyQTk1MEVBMUI1Q0UzQTJDMDI3NjcwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhE8u8LO0dGoOD70st1+Y7wjoI D9ORJ5hyaTNSR8GL2hO0xvWokz51I2fh92rB6xWKUiCRYectUkZuz3/ISIfzS7gi CLR3syo3d178LZtCy3qDoChlJAcjLrwVfgtqiIeM3LfAUJgY60MBpHgkmun7mfxR EakF0Wokc4mP4EkJcquw4XQrIiAtdub8XSzO5IR20XGEsTyROtPOsxnT/yQiMmX/ D6Ruv0/imavR3IpgQ/pGVUk+P/7Kv39O46fdi+DglyGY1wHhiyTEFFQ3t3/0GDqI grJF+OOFWvDid1YHyyGvNe6TOOPkymD3g66CHgBlQ11Vf/uRn3S5ZQD4n46xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUziXaDlf93R8qlQ6htc46LAJ2cPIwHwYDVR0j BBgwFoAUWvc9XL1ezVTltJR0MNrzVdulxDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2Ey TXIvMC81QUY3M0Q1Q0JENUVDRDU0RTVCNDk0NzQzMERBRjM1NURCQTVDNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjczRDVDQkQ1RUNENTRF NUI0OTQ3NDMwREFGMzU1REJBNUM0MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2EyTXIvMC81 QUY3M0Q1Q0JENUVDRDU0RTVCNDk0NzQzMERBRjM1NURCQTVDNDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPvPsS+IH2FI+PWtrp7h2i+GsMey3xdNiQHFhgKHErvt7OV+kuvfkKgsHkXsj ooE6zXa0P1wCdizujpk7AV39e+WE1T194mMVza+ZgXMXq/ugtpdmC65vc3JDXVqy isvDtJBwjM56W51oPIF9eSHYKfY6ABFUEzDZU+Xci8aFwWcHQzZL6X4uc/JDs84e kA5tbfNgYeP0jQRbkvmFHWmJIkwtDp0v/F2GZ8W8hKYL6PFYrVeBWsCrSxVujZc2 SUEgKUFvO/CrWOn8a1nTvUMgM1hdjaHemnWvFujyVpeJHO7N2MSx3c9m6FGSVsuu JNmU8bptedbuQgXo9HfAdEMang== -----END CERTIFICATE-----Generated at Fri Oct 9 22:42:01 2026 by rpki-client