$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: Ubuu7/3lKD4iHeyg0S2xa1oJFv107aCQVx+zJTH9eQ8= Subject key identifier: 88:D7:36:0A:6B:6B:7C:92:7B:90:B7:B7:1F:94:7A:5A:EA:C8:D5:F4 Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 458FBEFE1E2DC1DC10BC0DB83CCB36E7A1222428 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 03A1 Signing time: Thu 26 Mar 2026 21:36:05 +0000 Manifest this update: Thu 26 Mar 2026 21:31:05 +0000 Manifest next update: Fri 27 Mar 2026 23:35:05 +0000 Files and hashes: 1: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: itp1f3i7gGi+V7uFXWJrzm5p2TVrB6ZW9/COe0+nykY=) 2: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 3CdM6OUDEZWJ518SMSTwfbfOY5QN9myILPsVeWNTcyk=) 3: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: fd+XLqforU4yBuBhkQfIlmPGl0AMEonZfKP9r8oqZMI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 23:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8f:be:fe:1e:2d:c1:dc:10:bc:0d:b8:3c:cb:36:e7:a1:22:24:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Mar 26 21:31:05 2026 GMT Not After : Mar 27 23:35:05 2026 GMT Subject: CN=88D7360A6B6B7C927B90B7B71F947A5AEAC8D5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:db:e0:c9:e2:01:9a:34:b5:50:a2:59:c7: ad:d5:99:a2:6a:e4:90:b1:d7:52:92:91:fd:17:02: 4d:f6:8c:ff:2a:78:c4:1d:cf:f8:fa:86:98:00:2a: 81:fd:06:4e:53:c3:97:55:8b:54:28:13:60:f5:23: d3:50:e2:d3:3b:46:cc:40:44:9c:f6:42:71:9e:f9: f6:ec:d1:f7:54:c0:59:52:6d:8b:f2:9c:df:bc:a6: 95:66:03:31:7f:d8:45:96:23:ee:59:22:d4:09:5e: 2a:3c:97:90:09:d0:fc:50:bb:d5:0a:9b:b2:51:a7: e4:5d:66:9a:91:79:80:ed:2e:d6:a7:7c:69:94:87: e2:6c:d9:51:d5:a8:ba:70:24:68:11:3b:b9:b5:e7: 10:49:55:09:8e:c5:b9:0d:ad:fb:98:a8:2d:f1:8d: 79:9e:28:d8:e7:30:ac:73:2d:a9:94:11:46:35:4e: 2b:1d:79:09:52:8d:1a:44:ae:f2:0e:f3:bd:98:cb: f2:d6:ee:e8:e6:d7:1c:76:dc:9e:75:6c:90:68:28: 42:27:67:6f:d8:40:3c:21:0e:be:7b:b9:7f:2b:d3: 16:49:ad:ca:6d:3e:af:a0:82:8b:af:57:8f:85:8b: 49:fa:09:dc:b6:e0:81:e2:6a:8f:53:22:60:42:ca: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D7:36:0A:6B:6B:7C:92:7B:90:B7:B7:1F:94:7A:5A:EA:C8:D5:F4 X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:65:d7:84:9d:5b:4a:9b:34:1b:a4:93:2a:8e:41:a6:dc:f2: e2:70:df:5e:e8:22:0a:7b:c6:31:c9:e8:7a:d4:d3:f2:de:85: 14:d3:05:79:86:58:22:51:00:43:4c:0c:01:b3:ee:c3:e6:3b: a5:2c:05:84:30:b5:f8:a9:db:63:b5:e8:3e:ce:1c:cb:36:eb: c1:7c:57:64:7c:02:9f:e9:d3:36:62:e4:1c:d6:48:34:d3:36: dc:ee:9a:f5:81:f9:db:bc:ec:ed:47:8d:2f:64:93:5d:c1:fe: 3d:01:ce:75:a4:79:4d:e2:6b:04:44:54:a9:5a:7c:83:25:39: ba:a6:55:de:19:f6:da:ab:db:3f:05:3d:2d:60:ee:bc:d1:c1: d9:0f:80:d3:44:4a:7b:3c:19:5e:b3:24:6b:a7:ca:07:8b:56: 81:b9:80:49:b0:78:ef:8a:89:54:28:5b:e4:8e:4c:a8:f0:c6: 01:8b:78:8b:27:08:25:bc:7b:9b:cb:70:30:37:bf:7b:9b:d5: 02:b6:59:9c:6a:89:21:95:b1:87:73:d1:8b:0b:cd:71:1f:f0: 47:22:5e:d4:af:06:c7:83:36:8a:b1:46:64:7c:31:c1:d1:6d: 28:40:1e:52:ef:1f:26:46:e7:cc:f0:ad:54:57:0b:ca:44:f6: 5b:ed:f0:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURY++/h4twdwQvA24PMs256EiJCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNjAzMjYyMTMxMDVaFw0yNjAzMjcyMzM1MDVaMDMxMTAvBgNV BAMTKDg4RDczNjBBNkI2QjdDOTI3QjkwQjdCNzFGOTQ3QTVBRUFDOEQ1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ydvgyeIBmjS1UKJZx63VmaJq 5JCx11KSkf0XAk32jP8qeMQdz/j6hpgAKoH9Bk5Tw5dVi1QoE2D1I9NQ4tM7RsxA RJz2QnGe+fbs0fdUwFlSbYvynN+8ppVmAzF/2EWWI+5ZItQJXio8l5AJ0PxQu9UK m7JRp+RdZpqReYDtLtanfGmUh+Js2VHVqLpwJGgRO7m15xBJVQmOxbkNrfuYqC3x jXmeKNjnMKxzLamUEUY1TisdeQlSjRpErvIO872Yy/LW7ujm1xx23J51bJBoKEIn Z2/YQDwhDr57uX8r0xZJrcptPq+ggouvV4+Fi0n6Cdy24IHiao9TImBCyuJfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiNc2CmtrfJJ7kLe3H5R6WurI1fQwHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEGXXhJ1bSps0G6STKo5Bptzy4nDfXugiCnvGMcnoetTT8t6FFNMFeYZYIlEA Q0wMAbPuw+Y7pSwFhDC1+KnbY7XoPs4cyzbrwXxXZHwCn+nTNmLkHNZINNM23O6a 9YH527zs7UeNL2STXcH+PQHOdaR5TeJrBERUqVp8gyU5uqZV3hn22qvbPwU9LWDu vNHB2Q+A00RKezwZXrMka6fKB4tWgbmASbB474qJVChb5I5MqPDGAYt4iycIJbx7 m8twMDe/e5vVArZZnGqJIZWxh3PRiwvNcR/wRyJe1K8Gx4M2irFGZHwxwdFtKEAe Uu8fJkbnzPCtVFcLykT2W+3w/A== -----END CERTIFICATE-----Generated at Fri Mar 27 01:03:10 2026 by rpki-client