$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: AtErGcFv8lPcZfE4cWPV+/dUpd+RKvCcbXKTwqynjxg= Subject key identifier: 3D:FB:4F:83:47:19:98:E5:97:D3:F0:C7:F4:A9:65:84:6A:61:C3:45 Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 2DD272BD7EF9DB2CFA3272729F6182F52BBC9A98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 03C2 Signing time: Wed 25 Mar 2026 20:48:59 +0000 Manifest this update: Wed 25 Mar 2026 20:43:59 +0000 Manifest next update: Fri 27 Mar 2026 00:03:59 +0000 Files and hashes: 1: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=) 2: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=) 3: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=) 4: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=) 5: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=) 6: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=) 7: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=) 8: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: 4iiu0/JsHUJMxahqSPfAPN6XAa9W7TbHvEpVP69RC2A=) 9: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d2:72:bd:7e:f9:db:2c:fa:32:72:72:9f:61:82:f5:2b:bc:9a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Mar 25 20:43:59 2026 GMT Not After : Mar 27 00:03:59 2026 GMT Subject: CN=3DFB4F83471998E597D3F0C7F4A965846A61C345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:fc:40:10:12:28:23:3f:e9:8c:83:76:75: ef:e6:15:2f:45:64:cb:76:90:9e:40:8e:d6:4d:f2: e9:ac:9a:a3:93:07:aa:96:25:1b:c6:a2:8c:df:77: d2:cb:8b:a5:51:9e:1d:4b:2b:40:03:14:e9:7a:66: 1b:c4:0c:88:6c:af:41:bc:58:2b:f6:99:a0:14:2a: d6:2d:e6:ca:8a:8b:2b:16:ed:9c:b2:37:4a:9c:8c: 04:96:54:11:c3:f7:a4:13:58:6c:3d:8c:1f:93:b0: aa:dc:fe:05:09:73:08:c9:44:b8:f3:71:4a:2b:f5: 30:f2:64:ac:9f:c9:35:db:86:c8:92:64:50:2a:f2: 60:76:0d:0d:38:11:1f:f2:31:95:5f:86:38:4f:b1: 72:fb:0c:71:62:87:1e:9c:fe:59:15:d2:00:e0:f8: 90:26:7e:0b:cc:7c:6c:39:ab:3f:7d:1b:0e:4c:3c: 56:b3:07:f6:1a:10:d1:eb:e9:b7:fd:48:b8:9f:a3: d8:b7:90:cd:2b:be:39:58:1c:a3:5c:a1:91:6a:e2: a9:01:a2:93:18:db:02:2b:77:93:1f:8c:98:c0:67: 43:b4:93:0d:f0:12:f5:f7:64:86:8d:88:5c:c5:ed: c5:1e:60:1b:9f:44:6a:15:e8:46:80:19:0d:ef:31: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FB:4F:83:47:19:98:E5:97:D3:F0:C7:F4:A9:65:84:6A:61:C3:45 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b3:05:36:9d:7b:39:63:6a:fd:8e:e0:8c:95:90:99:08:05: c4:17:39:5f:a8:75:ad:98:e1:a3:16:27:96:b7:fe:a5:27:19: f2:6e:42:27:28:bd:78:09:0c:fb:51:88:cf:72:37:7d:64:33: 8f:44:cf:f8:b1:df:fc:b5:65:ff:1e:8e:16:f2:13:f5:d1:77: 82:26:ac:8e:a7:93:a2:1d:c3:bf:34:1c:96:93:4e:9c:58:b1: de:c7:4c:83:b8:2c:5e:4e:63:91:74:5b:c1:b1:4e:ed:e9:ea: c1:bc:1a:e0:0e:cd:d2:fa:5e:80:77:ec:7b:9d:d1:d0:9f:41: ed:fc:d6:49:96:70:fe:e8:e0:3e:fb:95:f5:2a:73:47:9a:15: ee:42:0f:f4:c9:da:cd:20:9c:e0:10:93:1a:aa:62:9d:a7:ea: 31:e7:53:25:fc:fc:eb:1e:7f:37:68:a4:58:52:dc:2e:b3:70: ac:b3:c4:ae:09:64:f8:cd:93:76:73:cd:f4:36:14:71:3e:da: 01:17:8f:31:e0:30:16:3e:97:aa:82:c6:93:7f:f8:19:27:6f: 37:45:d4:da:0f:6d:91:dc:13:78:a2:86:66:30:a9:c8:a7:39: 70:84:90:67:a2:53:d7:2e:20:ca:d9:f0:60:cd:fa:c4:ed:c8: 8b:99:2b:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULdJyvX752yz6MnJyn2GC9Su8mpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNjAzMjUyMDQzNTlaFw0yNjAzMjcwMDAzNTlaMDMxMTAvBgNV BAMTKDNERkI0RjgzNDcxOTk4RTU5N0QzRjBDN0Y0QTk2NTg0NkE2MUMzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUNfxAEBIoIz/pjIN2de/mFS9F ZMt2kJ5AjtZN8umsmqOTB6qWJRvGoozfd9LLi6VRnh1LK0ADFOl6ZhvEDIhsr0G8 WCv2maAUKtYt5sqKiysW7ZyyN0qcjASWVBHD96QTWGw9jB+TsKrc/gUJcwjJRLjz cUor9TDyZKyfyTXbhsiSZFAq8mB2DQ04ER/yMZVfhjhPsXL7DHFihx6c/lkV0gDg +JAmfgvMfGw5qz99Gw5MPFazB/YaENHr6bf9SLifo9i3kM0rvjlYHKNcoZFq4qkB opMY2wIrd5MfjJjAZ0O0kw3wEvX3ZIaNiFzF7cUeYBufRGoV6EaAGQ3vMd8VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPftPg0cZmOWX0/DH9KllhGphw0UwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbMFNp17OWNq/Y7gjJWQmQgFxBc5X6h1rZjhoxYnlrf+pScZ8m5CJyi9eAkM +1GIz3I3fWQzj0TP+LHf/LVl/x6OFvIT9dF3giasjqeToh3DvzQclpNOnFix3sdM g7gsXk5jkXRbwbFO7enqwbwa4A7N0vpegHfse53R0J9B7fzWSZZw/ujgPvuV9Spz R5oV7kIP9MnazSCc4BCTGqpinafqMedTJfz86x5/N2ikWFLcLrNwrLPErglk+M2T dnPN9DYUcT7aARePMeAwFj6XqoLGk3/4GSdvN0XU2g9tkdwTeKKGZjCpyKc5cISQ Z6JT1y4gytnwYM36xO3Ii5krwQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:01:23 2026 by rpki-client