$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft File: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft (raw, json) Hash identifier: aRBucy32QRJScS4iwj2ymciUwEqoWZXatX9nLuSD3oo= Subject key identifier: 0A:83:57:98:5D:BD:10:2A:88:6A:1F:DB:6F:3D:A0:84:8B:5F:50:43 Authority key identifier: 3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6 Certificate issuer: /CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6 Certificate serial: 659D38F89267A7205985A19519DB2F369C5E4022 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft Manifest number: 37 Signing time: Fri 24 Jul 2026 12:28:33 +0000 Manifest this update: Fri 24 Jul 2026 12:23:33 +0000 Manifest next update: Sat 25 Jul 2026 14:08:33 +0000 Files and hashes: 1: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl (hash: bqqGAoA6mqSk+G1/s6VBf9de7qJx7nvcaw7MG6hBUgM=) 2: 323830343a363137303a3a2f33322d3334203d3e20323639323334.roa (hash: GDWiVyYfYIGnY9YXPjOtHtg7fsHIeEu+qkoct3a9MEM=) 3: 34352e3138322e37362e302f32322d3234203d3e20323639323334.roa (hash: y6WkApazOcWL7P7yXx57R2acGoFqorCQklwtt2CakBE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 14:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9d:38:f8:92:67:a7:20:59:85:a1:95:19:db:2f:36:9c:5e:40:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6 Validity Not Before: Jul 24 12:23:33 2026 GMT Not After : Jul 25 14:08:33 2026 GMT Subject: CN=0A8357985DBD102A886A1FDB6F3DA0848B5F5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:3c:78:44:99:0c:e9:5d:f7:42:cd:68:12: 8f:a3:fc:64:0d:bc:9e:57:83:29:10:3e:b8:87:f6: b9:ad:93:95:53:ab:26:a4:4b:63:98:c8:42:8a:3b: 09:5e:28:f5:37:b5:0a:da:4b:3e:95:32:1f:c1:cd: 37:d7:78:f5:a5:e3:28:20:f1:7e:04:ae:80:d5:e9: cf:20:e9:88:49:fe:6f:95:ed:e6:e8:d4:70:39:81: 30:07:89:47:ba:55:04:49:e9:88:45:30:a1:56:f3: 05:0f:c5:6a:a8:3a:8f:fc:9b:b1:37:05:06:f1:84: 40:79:fd:62:8c:6a:f6:a2:65:1a:f7:2a:2c:a0:37: 3a:9e:c5:af:73:1c:93:14:2b:17:5f:fe:81:a6:d1: 0b:c8:43:30:82:9c:ea:b8:69:23:e9:44:69:06:7f: 77:7f:7f:f6:1f:30:5c:e7:62:51:9f:e5:6e:d9:29: ae:88:b5:8d:17:79:00:2a:6e:c3:44:2e:9b:92:46: d6:c5:32:9f:8b:9f:5e:15:7a:f1:28:7f:5b:67:00: f0:9a:f5:6e:9f:36:9f:bf:c5:ac:88:b5:08:b7:d8: 43:4f:d8:07:69:26:ad:42:93:c3:dd:f4:13:0f:c1: 60:16:56:21:da:95:a4:42:aa:87:0e:8a:b7:62:6e: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:57:98:5D:BD:10:2A:88:6A:1F:DB:6F:3D:A0:84:8B:5F:50:43 X509v3 Authority Key Identifier: keyid:3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:dd:c9:b1:4e:14:eb:cc:0b:3a:a8:65:53:b8:b6:1b:8e:eb: 90:0d:3e:38:9a:f8:7d:2c:8c:46:91:81:76:9e:d1:d4:4b:32: 1d:23:5c:18:e4:fc:9b:89:1d:86:72:55:c7:33:5f:b3:a5:51: b2:f7:7f:3f:7f:90:91:df:4d:17:df:9e:d8:98:b5:a0:21:fc: b0:d5:12:52:c0:df:07:3a:e9:aa:94:c6:eb:b9:a7:87:a6:44: 03:a3:d0:81:7c:be:56:de:c0:ab:74:b1:8d:70:96:93:bf:58: c7:a7:65:e4:ba:3d:fd:57:05:d5:5a:bc:97:f2:24:ca:77:86: 02:25:d6:a8:07:92:cf:f0:2b:76:bd:b1:25:bd:3f:30:56:21: 0c:da:a7:35:18:51:2c:63:42:94:a4:2d:2b:25:84:64:0c:b7: 83:a0:14:92:b3:ac:6f:0b:f6:ee:51:dc:d6:d5:2e:8c:04:c5: fb:3a:90:06:45:b7:72:96:c0:5a:8d:f9:bb:6a:b2:f8:87:92: 72:da:a4:cd:5d:58:85:d1:b0:20:48:d9:79:6f:fb:07:38:9f: 96:60:d5:ad:44:4e:2b:13:eb:5a:39:c4:55:c1:8a:63:24:82: 6d:f5:49:05:8c:85:9c:a6:e3:dc:55:44:c4:7b:99:a5:d2:3c: 62:00:a5:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZZ04+JJnpyBZhaGVGdsvNpxeQCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2OEE5N0IyQzRBMDQ1NEY3OTREQkNCN0Y3MTI4OURC MTcxQTdCNjAeFw0yNjA3MjQxMjIzMzNaFw0yNjA3MjUxNDA4MzNaMDMxMTAvBgNV BAMTKDBBODM1Nzk4NURCRDEwMkE4ODZBMUZEQjZGM0RBMDg0OEI1RjUwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ADx4RJkM6V33Qs1oEo+j/GQN vJ5XgykQPriH9rmtk5VTqyakS2OYyEKKOwleKPU3tQraSz6VMh/BzTfXePWl4ygg 8X4EroDV6c8g6YhJ/m+V7ebo1HA5gTAHiUe6VQRJ6YhFMKFW8wUPxWqoOo/8m7E3 BQbxhEB5/WKMavaiZRr3KiygNzqexa9zHJMUKxdf/oGm0QvIQzCCnOq4aSPpRGkG f3d/f/YfMFznYlGf5W7ZKa6ItY0XeQAqbsNELpuSRtbFMp+Ln14VevEof1tnAPCa 9W6fNp+/xayItQi32ENP2AdpJq1Ck8Pd9BMPwWAWViHalaRCqocOirdibrIvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCoNXmF29ECqIah/bbz2ghItfUEMwHwYDVR0j BBgwFoAUPGipeyxKBFT3lNvLf3EonbFxp7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR UVYvMC8zQzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDNjhBOTdCMkM0QTA0NTRG Nzk0REJDQjdGNzEyODlEQjE3MUE3QjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlRUVYvMC8z QzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARd3JsU4U68wLOqhlU7i2G47rkA0+OJr4fSyMRpGBdp7R1EsyHSNcGOT8m4kd hnJVxzNfs6VRsvd/P3+Qkd9NF9+e2Ji1oCH8sNUSUsDfBzrpqpTG67mnh6ZEA6PQ gXy+Vt7Aq3SxjXCWk79Yx6dl5Lo9/VcF1Vq8l/IkyneGAiXWqAeSz/Ardr2xJb0/ MFYhDNqnNRhRLGNClKQtKyWEZAy3g6AUkrOsbwv27lHc1tUujATF+zqQBkW3cpbA Wo35u2qy+IeSctqkzV1YhdGwIEjZeW/7BziflmDVrUROKxPrWjnEVcGKYySCbfVJ BYyFnKbj3FVExHuZpdI8YgClEQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:56:18 2026 by rpki-client