$ rpki-client -vvvf rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft File: B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft (raw, json) Hash identifier: YVVhPyGZ1LoQundC08H6uDiRj/mForpi0jtHu8ZRGIE= Subject key identifier: 40:3E:5E:D6:E8:EF:BE:25:29:1B:8B:BB:E8:F8:01:CD:F9:13:A5:C2 Authority key identifier: B7:0D:34:D8:F1:E4:1A:31:22:93:67:E0:B9:1B:23:AE:F8:E5:06:3C Certificate issuer: /CN=B70D34D8F1E41A31229367E0B91B23AEF8E5063C Certificate serial: 062A9DD46CE70961DF6E55D787A8201032F862E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer Subject info access: rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft Manifest number: 0134 Signing time: Sat 17 Oct 2026 15:39:04 +0000 Manifest this update: Sat 17 Oct 2026 15:34:04 +0000 Manifest next update: Sun 18 Oct 2026 15:40:04 +0000 Files and hashes: 1: 323830343a313730343a3a2f33322d313238203d3e20323633313136.roa (hash: yQifKgwLmgHLoVMmW2pFehkn6Gn7QJQjanrRHs0jZKM=) 2: B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl (hash: elyPTbXXP2Y5IUMaa8RxfH+3RIblDMKrFEIRKqDLKFw=) 3: 3137372e3138342e3232302e302f32322d3332203d3e20323633313136.roa (hash: BXbqVPMTgztMyTh2wlrBrPwexbSnf8UnBFNLA7VJNpY=) 4: 3137392e3130392e382e302f32312d3332203d3e20323633313136.roa (hash: WL+UlzcI514Yz0Ir9XAaGH3VcZtH+N4BWEzytaiBO8Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 Oct 2026 15:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2a:9d:d4:6c:e7:09:61:df:6e:55:d7:87:a8:20:10:32:f8:62:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70D34D8F1E41A31229367E0B91B23AEF8E5063C Validity Not Before: Oct 17 15:34:04 2026 GMT Not After : Oct 18 15:40:04 2026 GMT Subject: CN=403E5ED6E8EFBE25291B8BBBE8F801CDF913A5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:05:0a:8b:e4:b0:75:b0:e3:b6:e0:f6:d6: aa:c2:c2:65:8f:bb:84:28:fa:b2:13:09:64:ae:5f: 74:cd:8a:2d:4c:96:de:2c:68:57:58:b8:3e:95:9f: 3c:a4:6e:69:47:0e:a0:98:65:47:74:d2:b6:ca:0d: 83:4d:10:b4:24:88:91:f6:ef:79:9b:f4:cd:df:02: 83:ad:2d:5b:5f:51:c0:ef:1d:63:7b:9d:62:7e:b0: 0a:65:fe:b7:c7:7f:f7:90:ad:67:06:fa:3f:7c:71: 3f:fc:6f:e3:9f:57:da:a0:dd:84:73:2d:fd:ac:39: 64:5f:01:08:c5:7d:2b:07:81:25:ca:75:bf:34:11: 5a:6f:b2:da:88:08:b5:eb:f5:b1:7c:8e:98:49:2b: 1d:b0:c6:89:e4:5a:ec:1d:92:98:11:e7:ec:07:e0: 61:c6:4a:fa:1f:1f:64:e2:73:48:63:9e:b3:8b:93: d9:80:b8:45:32:26:65:e0:e3:24:3a:de:c7:6b:60: cd:a9:53:f2:f7:f9:1a:a7:cb:e0:6c:49:1d:7c:43: 00:6a:e3:fa:68:78:72:27:e2:63:52:ee:df:17:05: 32:42:68:9e:1e:72:4e:e7:30:48:6c:47:60:03:3e: b7:f8:9f:2e:1b:8d:70:fa:0a:14:8f:dd:03:c5:98: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3E:5E:D6:E8:EF:BE:25:29:1B:8B:BB:E8:F8:01:CD:F9:13:A5:C2 X509v3 Authority Key Identifier: keyid:B7:0D:34:D8:F1:E4:1A:31:22:93:67:E0:B9:1B:23:AE:F8:E5:06:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7a:d4:8e:4b:9e:a5:a2:d9:97:93:f7:90:e6:35:27:2b:53: 87:65:d8:84:ab:e2:38:a5:2d:d1:5e:ca:ad:05:f4:a1:48:49: 98:ce:1b:d7:6f:9d:bc:10:01:00:e7:0c:5f:cb:97:25:bc:16: c5:f3:95:00:c2:70:f9:85:c3:b0:b1:be:46:63:c0:81:e0:df: 65:a1:5d:5a:9d:f5:89:d1:29:cf:2c:a0:1b:c7:7c:17:90:54: d2:57:9a:66:3c:e6:80:34:df:e0:da:12:12:3a:fd:7d:a8:f4: 8c:98:74:45:ed:06:b5:ed:5e:db:0f:d4:84:5b:ba:f8:57:4a: 06:67:36:81:a1:73:e4:8e:36:3d:a5:fd:da:c7:7a:cc:e0:17: 6a:62:6e:ab:2b:b6:d8:3b:10:33:d2:09:43:e2:44:d2:80:5e: 43:07:16:41:38:3a:82:5e:3c:d9:74:cc:d1:d8:09:93:c6:1e: c6:d5:98:77:a6:97:c5:9b:87:b9:3e:5c:16:e4:88:da:72:72: 48:d6:7a:9c:6f:96:18:4f:9f:ec:7b:99:8a:d8:a7:2c:84:4a: 08:e5:20:6b:f1:8d:81:df:ec:cd:65:c6:49:65:22:7e:19:a9: 7f:98:2f:19:53:3d:7c:44:df:7e:40:9c:85:01:51:3e:45:60: a2:df:01:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBiqd1GznCWHfblXXh6ggEDL4YugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRDM0RDhGMUU0MUEzMTIyOTM2N0UwQjkxQjIzQUVG OEU1MDYzQzAeFw0yNjEwMTcxNTM0MDRaFw0yNjEwMTgxNTQwMDRaMDMxMTAvBgNV BAMTKDQwM0U1RUQ2RThFRkJFMjUyOTFCOEJCQkU4RjgwMUNERjkxM0E1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylwUKi+SwdbDjtuD21qrCwmWP u4Qo+rITCWSuX3TNii1Mlt4saFdYuD6VnzykbmlHDqCYZUd00rbKDYNNELQkiJH2 73mb9M3fAoOtLVtfUcDvHWN7nWJ+sApl/rfHf/eQrWcG+j98cT/8b+OfV9qg3YRz Lf2sOWRfAQjFfSsHgSXKdb80EVpvstqICLXr9bF8jphJKx2wxonkWuwdkpgR5+wH 4GHGSvofH2Tic0hjnrOLk9mAuEUyJmXg4yQ63sdrYM2pU/L3+Rqny+BsSR18QwBq 4/poeHIn4mNS7t8XBTJCaJ4eck7nMEhsR2ADPrf4ny4bjXD6ChSP3QPFmAyzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQD5e1ujvviUpG4u76PgBzfkTpcIwHwYDVR0j BBgwFoAUtw002PHkGjEik2fguRsjrvjlBjwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHpSY1V2enJCMmJkMTlnZVR1VmY3UDhnSGdVVjNCemJkdEhUM1VIc1Mx cWovMC9CNzBEMzREOEYxRTQxQTMxMjI5MzY3RTBCOTFCMjNBRUY4RTUwNjNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MEQzNEQ4RjFFNDFBMzEy MjkzNjdFMEI5MUIyM0FFRjhFNTA2M0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHpSY1V2enJCMmJkMTlnZVR1VmY3UDhnSGdVVjNCemJkdEhUM1VIc1MxcWovMC9C NzBEMzREOEYxRTQxQTMxMjI5MzY3RTBCOTFCMjNBRUY4RTUwNjNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT3rUjkuepaLZl5P3kOY1JytTh2XYhKviOKUt0V7KrQX0oUhJmM4b12+dvBAB AOcMX8uXJbwWxfOVAMJw+YXDsLG+RmPAgeDfZaFdWp31idEpzyygG8d8F5BU0lea ZjzmgDTf4NoSEjr9faj0jJh0Re0Gte1e2w/UhFu6+FdKBmc2gaFz5I42PaX92sd6 zOAXamJuqyu22DsQM9IJQ+JE0oBeQwcWQTg6gl482XTM0dgJk8YextWYd6aXxZuH uT5cFuSI2nJySNZ6nG+WGE+f7HuZitinLIRKCOUga/GNgd/szWXGSWUifhmpf5gv GVM9fETffkCchQFRPkVgot8BLA== -----END CERTIFICATE-----Generated at Sun Oct 18 02:41:44 2026 by rpki-client