$ rpki-client -vvf rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft File: 3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft (raw, json) Hash identifier: bOkLYKVEdBgj5eyAZ+k78zXD46mIbq8TbiJ9eBZqBlw= Subject key identifier: AC:40:1F:42:41:91:E9:85:D9:07:25:CA:87:E0:98:6C:61:06:46:7F Authority key identifier: 3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8 Certificate issuer: /CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8 Certificate serial: 544D6B8E54BF36DE1A0F88B4101E5703714EA193 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft Manifest number: 14 Signing time: Wed 25 Mar 2026 07:17:21 +0000 Manifest this update: Wed 25 Mar 2026 07:12:21 +0000 Manifest next update: Thu 26 Mar 2026 10:12:21 +0000 Files and hashes: 1: 323830343a3534633a3a2f33322d313238203d3e20323632353037.roa (hash: 26Q9UM1CuDv2/YqrUpygKEhJYm/Pl+HmO07pfOy0mag=) 2: 3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl (hash: UxKB1MYcj7wsOL5AoKw5GpfMvt7WMsaYt66YK7JHjAk=) 3: 3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa (hash: vGQ+znXQ06EEYIi6OzTGXWX9lefuFbPbbdXL7um4r80=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 10:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4d:6b:8e:54:bf:36:de:1a:0f:88:b4:10:1e:57:03:71:4e:a1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8 Validity Not Before: Mar 25 07:12:21 2026 GMT Not After : Mar 26 10:12:21 2026 GMT Subject: CN=AC401F424191E985D90725CA87E0986C6106467F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:20:5c:8e:83:27:f0:d0:60:7f:29:d5:b2: 01:f8:d3:2f:17:90:a3:b2:fa:bc:95:a2:ac:83:50: 70:02:d2:6c:a0:9d:fd:4f:ee:fb:16:5c:ce:d1:95: 15:50:49:e2:e3:8f:f3:d4:6c:2c:d0:88:9c:0d:e4: b2:4d:29:06:68:58:28:17:24:1d:46:2e:a8:a9:9f: f6:22:15:59:7b:73:60:c8:7b:91:52:96:2c:70:40: 50:ed:9e:cb:5e:c1:2d:b9:d3:b4:be:4b:4f:d9:9a: 5f:54:21:0e:96:6d:3d:2a:89:b0:6d:84:69:cd:b1: 6e:7f:17:df:a3:87:1b:e2:3e:ce:ee:12:fe:32:a4: 14:63:91:61:87:ed:e2:38:0e:b3:dd:94:f9:96:83: f7:be:c0:69:06:59:f0:c4:a9:fb:51:82:09:80:a8: 95:9d:07:88:2f:9d:f6:4c:c8:63:8b:aa:2f:ae:f7: ee:53:55:7d:d9:77:85:cd:f7:3e:8b:ff:b4:cb:26: 81:87:f5:d5:0b:2a:0a:81:b1:08:3e:5c:da:fc:b8: 4a:34:3e:44:fe:db:06:53:1d:17:11:4a:cd:1c:b6: be:e0:b0:0f:74:28:1a:1f:7a:38:3c:c6:1c:25:10: 83:8a:3a:87:27:58:c1:c1:7d:4c:72:09:22:43:f0: 5e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:1F:42:41:91:E9:85:D9:07:25:CA:87:E0:98:6C:61:06:46:7F X509v3 Authority Key Identifier: keyid:3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:50:80:f4:36:ea:b3:c5:1c:f7:55:ad:6d:83:2c:38:c4:21: 99:b5:34:6b:29:df:cb:ef:90:4a:15:04:14:b7:cb:05:74:86: 77:5e:b2:f5:f0:9f:65:04:4f:0a:91:22:b2:e3:dc:06:d2:9e: 53:f0:f9:1c:ac:1d:97:c9:0e:4e:e1:6c:85:77:fd:03:e0:c3: c2:13:7a:51:b8:09:14:b2:35:01:2d:e7:85:8e:6f:df:6d:16: b5:df:b9:da:92:e5:82:68:59:56:f6:d7:48:b5:4e:e5:c5:af: 69:f6:b6:1d:27:ce:82:13:f3:58:de:fe:8a:99:11:93:94:b4: be:7a:f5:3d:28:5f:69:96:93:ff:7b:3b:f4:12:da:30:d9:0a: b8:08:69:cf:c2:6f:58:e8:b7:4a:eb:f7:f2:86:99:ec:6c:cb: 30:6e:7e:87:2f:d5:73:6f:8e:87:9e:39:4d:7c:9e:c7:d5:04: 4c:ac:74:f2:52:d4:b8:dd:b4:71:30:5f:61:16:63:31:a8:74: 0a:45:8d:4c:95:bb:35:1f:03:bf:0e:1b:ef:69:a2:63:81:fa: fb:4e:da:14:84:8d:83:96:fa:ca:a3:67:c8:58:62:8f:ba:48: ce:28:54:ea:ed:4b:96:8e:46:a7:f1:d9:26:a7:25:30:5b:e8: eb:6e:87:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVE1rjlS/Nt4aD4i0EB5XA3FOoZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FFM0VERDQ2RjYwNTAzOUZEQUNDQUEzMTMyREI2OTE1 QkIyQThEODAeFw0yNjAzMjUwNzEyMjFaFw0yNjAzMjYxMDEyMjFaMDMxMTAvBgNV BAMTKEFDNDAxRjQyNDE5MUU5ODVEOTA3MjVDQTg3RTA5ODZDNjEwNjQ2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+viBcjoMn8NBgfynVsgH40y8X kKOy+ryVoqyDUHAC0mygnf1P7vsWXM7RlRVQSeLjj/PUbCzQiJwN5LJNKQZoWCgX JB1GLqipn/YiFVl7c2DIe5FSlixwQFDtnstewS2507S+S0/Zml9UIQ6WbT0qibBt hGnNsW5/F9+jhxviPs7uEv4ypBRjkWGH7eI4DrPdlPmWg/e+wGkGWfDEqftRggmA qJWdB4gvnfZMyGOLqi+u9+5TVX3Zd4XN9z6L/7TLJoGH9dULKgqBsQg+XNr8uEo0 PkT+2wZTHRcRSs0ctr7gsA90KBofejg8xhwlEIOKOocnWMHBfUxyCSJD8F5NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrEAfQkGR6YXZByXKh+CYbGEGRn8wHwYDVR0j BBgwFoAUOuPt1G9gUDn9rMqjEy22kVuyqNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1I4ODdOc3l4dGpCUnAyZFg0ZzY3ZHVIaTJUVWFrMkNrVGZ0YmZwZXBw a3MvMS8zQUUzRURENDZGNjA1MDM5RkRBQ0NBQTMxMzJEQjY5MTVCQjJBOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRTNFREQ0NkY2MDUwMzlG REFDQ0FBMzEzMkRCNjkxNUJCMkE4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1I4ODdOc3l4dGpCUnAyZFg0ZzY3ZHVIaTJUVWFrMkNrVGZ0YmZwZXBwa3MvMS8z QUUzRURENDZGNjA1MDM5RkRBQ0NBQTMxMzJEQjY5MTVCQjJBOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdVCA9Dbqs8Uc91WtbYMsOMQhmbU0aynfy++QShUEFLfLBXSGd16y9fCfZQRP CpEisuPcBtKeU/D5HKwdl8kOTuFshXf9A+DDwhN6UbgJFLI1AS3nhY5v320Wtd+5 2pLlgmhZVvbXSLVO5cWvafa2HSfOghPzWN7+ipkRk5S0vnr1PShfaZaT/3s79BLa MNkKuAhpz8JvWOi3Suv38oaZ7GzLMG5+hy/Vc2+Oh545TXyex9UETKx08lLUuN20 cTBfYRZjMah0CkWNTJW7NR8Dvw4b72miY4H6+07aFISNg5b6yqNnyFhij7pIzihU 6u1Llo5Gp/HZJqclMFvo626Hnw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:18:16 2026 by rpki-client