$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: GvnFZdsDcSWOlPz7wU+gXvl43rMEv6WSE08gWkC9nhQ= Subject key identifier: 56:83:65:A6:69:10:01:A9:23:5B:53:F0:85:C4:06:A7:48:E4:9E:96 Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 108F7BA9C7FEA45A1D6F47997F329691CF26F593 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: A3 Signing time: Wed 13 May 2026 09:55:28 +0000 Manifest this update: Wed 13 May 2026 09:50:28 +0000 Manifest next update: Thu 14 May 2026 12:15:28 +0000 Files and hashes: 1: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) 2: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 3: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: BIQ3yLflZt5zmuFtWISlaiRtHEdC4SIyXX7CRN5R+JU=) 4: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8f:7b:a9:c7:fe:a4:5a:1d:6f:47:99:7f:32:96:91:cf:26:f5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: May 13 09:50:28 2026 GMT Not After : May 14 12:15:28 2026 GMT Subject: CN=568365A6691001A9235B53F085C406A748E49E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:cc:d9:d9:cf:12:5f:53:75:b9:cd:46:bb: 98:a8:1b:1a:3f:66:70:86:e7:5a:8f:e7:d7:ba:34: 1d:5e:b7:b8:7d:9e:4b:d5:07:af:85:3d:79:4c:58: bb:dd:74:8f:54:92:d8:8e:dc:84:78:0f:12:49:42: 68:32:bd:8a:73:ee:88:da:13:7e:4d:fd:71:05:2f: a9:4f:66:41:36:47:d1:b1:ef:c2:98:a2:dd:60:0a: 81:34:59:71:7e:d2:88:6d:c9:5f:c1:23:55:f6:37: 0f:ec:53:1b:58:b2:4c:9e:d7:ef:5f:0c:91:2c:d1: 3c:ee:4e:b8:b3:7b:40:c6:fa:b4:76:73:cb:2d:cd: 08:0e:4e:6d:e2:1a:ad:85:01:83:e6:a7:6d:de:e3: 9b:1e:fd:39:a4:3b:ef:99:12:b8:7b:b4:60:5b:f8: 4b:41:2d:6b:f1:d4:50:20:50:94:cb:cb:b9:8b:82: 21:3b:c9:ec:d7:d7:1b:f0:96:2d:fe:37:b5:4c:85: e0:8a:77:de:33:d7:b8:71:0d:79:01:61:f2:79:1a: d1:53:2b:e7:41:f9:59:a9:29:27:5f:f2:05:45:bd: 7b:05:2c:5e:71:d0:87:05:f9:2c:4c:a3:6e:c9:e7: f0:99:36:8f:5f:94:2c:ee:36:b1:61:64:41:70:e7: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:65:A6:69:10:01:A9:23:5B:53:F0:85:C4:06:A7:48:E4:9E:96 X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9e:c4:bf:b1:38:fc:c7:fd:59:16:6b:97:09:f9:aa:20:b2: 8b:0a:2b:fb:27:18:10:a2:77:0f:d4:b0:e4:23:c7:58:be:ac: 21:e6:3a:2d:3f:a0:57:c9:59:7b:e0:bf:1a:3e:ee:14:52:cd: f6:55:d9:30:79:c3:c7:4f:89:9b:ed:04:9c:89:a7:86:00:73: 7c:41:e8:5f:05:1f:81:00:00:03:3a:a6:42:1b:09:42:92:08: 4d:82:df:33:97:9e:93:10:27:b5:cc:2a:90:9d:d4:6c:fe:da: 6e:93:90:dc:4e:08:f6:df:eb:ac:2a:55:8e:bb:f8:63:37:62: 05:d9:72:c9:a1:b4:56:fc:80:db:14:c3:d3:40:7c:a3:80:13: 81:a0:29:66:39:2a:e1:f4:23:76:94:a3:45:74:f4:80:bb:60: 90:07:16:ae:62:28:94:21:e4:a0:66:c5:1c:b0:fa:2e:d5:b1: b6:af:d9:57:66:cc:c3:35:e0:bf:1e:e8:e0:97:28:89:c2:f8: 6f:a2:f0:58:21:ff:2f:84:0f:16:7f:2f:4e:f5:7f:6c:f8:b0: b5:30:58:ff:d2:0a:a4:79:a5:93:7a:16:96:00:e3:3b:24:5b: 35:ad:3c:ca:63:8a:53:c8:85:a9:f7:e1:fe:47:b5:03:f6:4e: 06:c2:34:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEI97qcf+pFodb0eZfzKWkc8m9ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjA1MTMwOTUwMjhaFw0yNjA1MTQxMjE1MjhaMDMxMTAvBgNV BAMTKDU2ODM2NUE2NjkxMDAxQTkyMzVCNTNGMDg1QzQwNkE3NDhFNDlFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcTczZ2c8SX1N1uc1Gu5ioGxo/ ZnCG51qP59e6NB1et7h9nkvVB6+FPXlMWLvddI9UktiO3IR4DxJJQmgyvYpz7oja E35N/XEFL6lPZkE2R9Gx78KYot1gCoE0WXF+0ohtyV/BI1X2Nw/sUxtYskye1+9f DJEs0TzuTrize0DG+rR2c8stzQgOTm3iGq2FAYPmp23e45se/TmkO++ZErh7tGBb +EtBLWvx1FAgUJTLy7mLgiE7yezX1xvwli3+N7VMheCKd94z17hxDXkBYfJ5GtFT K+dB+VmpKSdf8gVFvXsFLF5x0IcF+SxMo27J5/CZNo9flCzuNrFhZEFw5yA1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVoNlpmkQAakjW1PwhcQGp0jknpYwHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH57Ev7E4/Mf9WRZrlwn5qiCyiwor+ycYEKJ3D9Sw5CPHWL6sIeY6LT+gV8lZ e+C/Gj7uFFLN9lXZMHnDx0+Jm+0EnImnhgBzfEHoXwUfgQAAAzqmQhsJQpIITYLf M5eekxAntcwqkJ3UbP7abpOQ3E4I9t/rrCpVjrv4YzdiBdlyyaG0VvyA2xTD00B8 o4ATgaApZjkq4fQjdpSjRXT0gLtgkAcWrmIolCHkoGbFHLD6LtWxtq/ZV2bMwzXg vx7o4JcoicL4b6LwWCH/L4QPFn8vTvV/bPiwtTBY/9IKpHmlk3oWlgDjOyRbNa08 ymOKU8iFqffh/ke1A/ZOBsI0fA== -----END CERTIFICATE-----Generated at Wed May 13 16:33:16 2026 by rpki-client