$ rpki-client -vvvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft File: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft (raw, json) Hash identifier: f78KtU+bA9FEF7cs3215DH1Xy7WafFzGb6wHzdz4roQ= Subject key identifier: 86:B5:2C:27:23:B9:33:16:15:96:8E:C7:23:C1:5C:68:02:CE:D7:1B Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Certificate serial: 2AE602338F78CD2DB8B71E5AE66689808BF846AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft Manifest number: 01E7 Signing time: Sat 10 Oct 2026 04:38:44 +0000 Manifest this update: Sat 10 Oct 2026 04:33:44 +0000 Manifest next update: Sun 11 Oct 2026 07:05:44 +0000 Files and hashes: 1: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (hash: DO6ySDbWySorxVzVMLFxnhEIRp6TTSUotVllni5udx8=) 2: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl (hash: PZHZD2Zp1Q49GxsnGFTqBhh92KEUBU3ISKfFdkzLO5s=) 3: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (hash: C7/9+m1YIlhBftVB5dzjuceg8M8Yy+vkJQsnSTe4oqQ=) 4: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (hash: qQOGNfZnT5mffxdqeHtNkr7ht2U7Y54CEV4WxsAyLn8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 07:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e6:02:33:8f:78:cd:2d:b8:b7:1e:5a:e6:66:89:80:8b:f8:46:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Validity Not Before: Oct 10 04:33:44 2026 GMT Not After : Oct 11 07:05:44 2026 GMT Subject: CN=86B52C2723B9331615968EC723C15C6802CED71B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:07:b6:d7:1f:0f:52:11:ac:22:44:06:67: 61:14:29:5e:67:ea:aa:15:78:47:ca:01:46:c0:02: 0c:9b:3f:fe:89:32:a1:84:11:b9:0d:de:c1:c4:39: e8:09:69:52:85:b3:b6:40:d8:db:af:da:51:8e:b4: 7b:04:bf:df:e4:3e:ad:f1:9e:37:93:08:61:8d:97: 17:66:a7:7b:3e:c3:ce:b4:5a:2a:2a:41:73:b4:6a: 5a:29:c6:42:df:a3:14:ea:47:62:93:46:13:cf:62: 48:a7:84:0b:27:a3:ee:dd:ef:46:53:ad:bf:cc:4f: f6:25:da:0c:e8:ea:ae:d4:a9:00:08:2f:ad:65:79: 3f:2d:fb:08:32:21:a0:d9:66:d7:0a:f0:af:81:6e: a8:d8:e2:d9:96:25:1b:9a:0d:57:bd:e5:ab:57:4e: 20:73:46:3c:f8:5e:6b:79:d2:ed:f8:2c:e0:81:b3: 82:c6:0d:08:ff:5a:62:1e:d0:4a:21:12:69:55:f7: d1:8f:2a:50:95:50:85:3d:af:bf:41:72:e1:f3:6b: ae:68:30:d7:ab:f1:6f:e7:9f:14:91:09:9a:1a:b6: ad:b3:d6:4a:95:3b:3d:7e:4d:01:47:fe:04:82:cb: 5a:3e:82:f1:4e:cc:f8:45:f3:83:77:c6:be:ad:2c: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B5:2C:27:23:B9:33:16:15:96:8E:C7:23:C1:5C:68:02:CE:D7:1B X509v3 Authority Key Identifier: keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:16:d4:a5:ca:c3:36:2e:26:7d:d2:e4:0c:be:2e:9b:2d:ea: 48:bc:a5:14:f7:e5:43:6a:a9:d9:36:d4:f4:40:c3:7d:2a:14: 41:61:18:c3:50:7e:8d:9f:2d:07:2f:af:c8:eb:eb:17:99:96: 56:ea:aa:d4:07:3d:28:0c:0c:ba:d0:5d:08:ca:73:da:e8:52: c5:39:e9:c0:6a:f1:fa:57:f7:9c:2e:d6:4c:11:69:7f:78:07: 39:9e:58:52:e3:5a:e2:23:11:ec:55:1b:29:8f:2a:dd:35:3c: 99:59:53:bc:a5:a3:c0:ea:ff:4d:d6:40:8f:ac:8b:38:f8:ed: 12:f9:f4:8a:da:f4:af:a9:1b:d5:06:a0:ac:7a:d1:cb:41:20: e5:79:1e:e2:fe:54:d5:7a:79:7b:6e:6c:8e:08:62:4e:6d:81: 49:af:40:9f:1a:34:e9:a9:13:98:42:c1:03:46:b1:02:fb:8e: b3:e4:f0:78:da:8d:e6:7c:0a:a3:88:54:83:bd:5b:4a:c4:88: c5:e3:96:9f:39:ce:4b:48:a1:ee:74:4f:33:90:48:70:da:95: 28:ee:4c:a9:dd:e1:2b:87:d4:32:d5:a3:ed:db:22:c7:bf:49: 7d:16:62:d1:2c:86:31:30:16:33:b9:93:8b:61:f7:1d:25:f1: ba:c3:d9:14 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKuYCM494zS24tx5a5maJgIv4Rq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBE QUJCRUYyMjAeFw0yNjEwMTAwNDMzNDRaFw0yNjEwMTEwNzA1NDRaMDMxMTAvBgNV BAMTKDg2QjUyQzI3MjNCOTMzMTYxNTk2OEVDNzIzQzE1QzY4MDJDRUQ3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQPge21x8PUhGsIkQGZ2EUKV5n 6qoVeEfKAUbAAgybP/6JMqGEEbkN3sHEOegJaVKFs7ZA2Nuv2lGOtHsEv9/kPq3x njeTCGGNlxdmp3s+w860WioqQXO0alopxkLfoxTqR2KTRhPPYkinhAsno+7d70ZT rb/MT/Yl2gzo6q7UqQAIL61leT8t+wgyIaDZZtcK8K+BbqjY4tmWJRuaDVe95atX TiBzRjz4Xmt50u34LOCBs4LGDQj/WmIe0EohEmlV99GPKlCVUIU9r79BcuHza65o MNer8W/nnxSRCZoatq2z1kqVOz1+TQFH/gSCy1o+gvFOzPhF84N3xr6tLHQNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUhrUsJyO5MxYVlo7HI8FcaALO1xswHwYDVR0j BBgwFoAUwyVO+lxOn9pnaNApQkffcNq77yIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV LzAvQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBEQUJCRUYyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMzI1NEVGQTVDNEU5RkRBNjc2 OEQwMjk0MjQ3REY3MERBQkJFRjIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dC Wm1nd2ZXdEpweVVTMkp4OEx5SzhhQmQ0Z3ZHUlFTTFhITnE3WGU3SFUvMC9DMzI1 NEVGQTVDNEU5RkRBNjc2OEQwMjk0MjQ3REY3MERBQkJFRjIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA rhbUpcrDNi4mfdLkDL4umy3qSLylFPflQ2qp2TbU9EDDfSoUQWEYw1B+jZ8tBy+v yOvrF5mWVuqq1Ac9KAwMutBdCMpz2uhSxTnpwGrx+lf3nC7WTBFpf3gHOZ5YUuNa 4iMR7FUbKY8q3TU8mVlTvKWjwOr/TdZAj6yLOPjtEvn0itr0r6kb1QagrHrRy0Eg 5Xke4v5U1Xp5e25sjghiTm2BSa9Anxo06akTmELBA0axAvuOs+TweNqN5nwKo4hU g71bSsSIxeOWnznOS0ih7nRPM5BIcNqVKO5Mqd3hK4fUMtWj7dsix79JfRZi0SyG MTAWM7mTi2H3HSXxusPZFA== -----END CERTIFICATE-----Generated at Sat Oct 10 14:58:01 2026 by rpki-client