$ rpki-client -vvvf rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft File: BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft (raw, json) Hash identifier: XpVN5+XqhT2QaNIKLXYn9VlcLyWL9RkxI2IQHIsGwk8= Subject key identifier: 7F:15:47:06:76:ED:4C:4C:DF:B8:D0:30:B5:8E:C2:36:13:39:19:D6 Authority key identifier: BF:9D:E8:FB:49:F6:31:4B:6E:D2:E7:AC:94:3C:9C:BF:93:B4:A8:25 Certificate issuer: /CN=BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825 Certificate serial: 6FADBCD308A980F9D257984A14A1404C6FBE4958 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft Manifest number: 5A Signing time: Mon 02 Nov 2026 20:49:34 +0000 Manifest this update: Mon 02 Nov 2026 20:44:34 +0000 Manifest next update: Tue 03 Nov 2026 22:15:34 +0000 Files and hashes: 1: BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.crl (hash: hNDZ9Bmyk63QNFqp05qTFfdTQCMybcFoXiM+OP/erhI=) 2: 323830343a396135343a3a2f33322d3438203d3e20323735383339.roa (hash: w4fmcd/oFaeU1aWb+YPywmu31gjrfkKRW3/g1hiTTfI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.crl rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 22:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ad:bc:d3:08:a9:80:f9:d2:57:98:4a:14:a1:40:4c:6f:be:49:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825 Validity Not Before: Nov 2 20:44:34 2026 GMT Not After : Nov 3 22:15:34 2026 GMT Subject: CN=7F15470676ED4C4CDFB8D030B58EC236133919D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:36:6e:13:8e:2d:ae:68:07:cd:0f:c7:d7: 7f:d9:57:0a:a4:80:fd:a3:87:14:2b:a2:60:77:01: 15:05:00:3d:05:a1:41:e9:ce:9f:f9:13:b6:13:7e: 3e:60:3e:1e:f1:cd:7c:ec:0a:5e:fd:b7:12:ac:3c: a7:52:2f:79:2f:86:bd:91:b7:f0:6f:d1:dd:13:ff: e0:ea:95:91:53:ff:37:a7:5a:d3:2f:d7:b8:37:98: 0e:00:25:47:1f:ab:c0:ad:a9:ab:c9:52:24:46:ae: 3d:ef:46:d0:fb:da:2c:41:e0:c9:0e:a0:8f:81:ad: 26:46:6f:87:db:23:1b:72:49:f9:35:52:98:48:73: 65:67:14:3a:1e:79:2a:b3:7d:f1:55:ad:c7:bc:14: 3b:11:34:f1:50:86:b2:84:c3:f1:75:a5:dd:a1:97: 40:14:e8:74:6a:30:1b:46:23:ec:86:80:4e:88:9c: 63:a8:80:8f:b3:b3:2e:04:f6:d9:7b:04:77:4f:e8: 52:cc:7e:88:27:2c:0d:9b:65:55:52:cd:2c:b5:ba: 72:ca:88:3e:ca:12:1d:ec:4a:cd:6e:4e:77:22:4a: ba:40:56:0d:eb:a3:47:36:8d:d1:cf:2d:bf:df:df: 86:a9:ad:b0:1a:8c:6e:44:10:5c:31:fd:e6:8a:9d: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:15:47:06:76:ED:4C:4C:DF:B8:D0:30:B5:8E:C2:36:13:39:19:D6 X509v3 Authority Key Identifier: keyid:BF:9D:E8:FB:49:F6:31:4B:6E:D2:E7:AC:94:3C:9C:BF:93:B4:A8:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1c:f1:ee:e0:77:3e:2c:b6:39:e2:55:60:45:f9:93:c9:24: b2:60:43:62:a9:ac:85:b6:70:ba:7c:cf:42:c0:40:ae:95:8b: 50:a7:c9:2e:e5:4e:14:f8:86:f6:b4:9f:e0:3d:d5:d8:25:20: 0c:bf:a7:8e:2a:c8:4d:40:40:85:6f:c7:8e:82:d3:e5:7f:db: 7e:1b:6b:58:14:cc:11:5d:5e:f7:2a:ff:df:01:00:b5:73:d0: 06:a2:76:b9:bd:ad:26:72:ba:e3:f7:00:ad:e1:9d:a4:6a:16: 9d:4e:97:1a:f9:f3:26:e4:3b:8b:12:cb:4c:c7:43:0e:31:78: e5:64:65:51:ac:af:db:cb:47:1f:e5:ab:09:09:8e:d4:f7:10: 9f:f8:c1:89:10:07:51:96:99:c3:5d:57:0f:7b:9b:af:7d:03: 3d:b4:d6:f2:43:80:da:3e:00:ff:7f:f0:c2:2f:2c:50:0f:bb: c5:5f:fa:f3:a1:cf:68:1e:a2:bb:10:09:8f:7d:22:c0:9e:dc: b5:6a:2c:00:30:76:a7:9d:fe:4f:41:9f:79:d1:1a:9f:87:ce: ad:b9:5d:2f:60:66:0a:07:85:f7:b5:98:8b:af:b2:c0:e9:37: 96:f5:82:11:e3:4e:8a:04:16:dd:5d:b7:42:4e:38:55:fa:31: 46:d7:46:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb6280wipgPnSV5hKFKFATG++SVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5REU4RkI0OUY2MzE0QjZFRDJFN0FDOTQzQzlDQkY5 M0I0QTgyNTAeFw0yNjExMDIyMDQ0MzRaFw0yNjExMDMyMjE1MzRaMDMxMTAvBgNV BAMTKDdGMTU0NzA2NzZFRDRDNENERkI4RDAzMEI1OEVDMjM2MTMzOTE5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoDZuE44trmgHzQ/H13/ZVwqk gP2jhxQromB3ARUFAD0FoUHpzp/5E7YTfj5gPh7xzXzsCl79txKsPKdSL3kvhr2R t/Bv0d0T/+DqlZFT/zenWtMv17g3mA4AJUcfq8CtqavJUiRGrj3vRtD72ixB4MkO oI+BrSZGb4fbIxtySfk1UphIc2VnFDoeeSqzffFVrce8FDsRNPFQhrKEw/F1pd2h l0AU6HRqMBtGI+yGgE6InGOogI+zsy4E9tl7BHdP6FLMfognLA2bZVVSzSy1unLK iD7KEh3sSs1uTnciSrpAVg3ro0c2jdHPLb/f34aprbAajG5EEFwx/eaKnemFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfxVHBnbtTEzfuNAwtY7CNhM5GdYwHwYDVR0j BBgwFoAUv53o+0n2MUtu0ueslDycv5O0qCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGp1NGJBck1YTURwM2thR3RNeWQ2RlJud2ltd2o0encyYUVGbWhtcEhV VnIvMC9CRjlERThGQjQ5RjYzMTRCNkVEMkU3QUM5NDNDOUNCRjkzQjRBODI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGOURFOEZCNDlGNjMxNEI2 RUQyRTdBQzk0M0M5Q0JGOTNCNEE4MjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGp1NGJBck1YTURwM2thR3RNeWQ2RlJud2ltd2o0encyYUVGbWhtcEhVVnIvMC9C RjlERThGQjQ5RjYzMTRCNkVEMkU3QUM5NDNDOUNCRjkzQjRBODI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQRzx7uB3Piy2OeJVYEX5k8kksmBDYqmshbZwunzPQsBArpWLUKfJLuVOFPiG 9rSf4D3V2CUgDL+njirITUBAhW/HjoLT5X/bfhtrWBTMEV1e9yr/3wEAtXPQBqJ2 ub2tJnK64/cAreGdpGoWnU6XGvnzJuQ7ixLLTMdDDjF45WRlUayv28tHH+WrCQmO 1PcQn/jBiRAHUZaZw11XD3ubr30DPbTW8kOA2j4A/3/wwi8sUA+7xV/686HPaB6i uxAJj30iwJ7ctWosADB2p53+T0GfedEan4fOrbldL2BmCgeF97WYi6+ywOk3lvWC EeNOigQW3V23Qk44VfoxRtdGGw== -----END CERTIFICATE-----Generated at Tue Nov 3 08:43:10 2026 by rpki-client