$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft File: 642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json) Hash identifier: RbpunxxTEi+sWZeWz2UpE/FZJz+zQhSf4ZlvPQT5mn0= Subject key identifier: 34:49:69:63:C3:55:99:BC:05:94:27:EB:7A:DC:42:E5:02:EA:E0:05 Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 Certificate issuer: /CN=642D27C2B88FC1E644188313B8DE644A2705C863 Certificate serial: 3FCCCB49376B8083206FBCF63136CF8060F77EDF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft Manifest number: 0402 Signing time: Wed 13 May 2026 08:01:25 +0000 Manifest this update: Wed 13 May 2026 07:56:25 +0000 Manifest next update: Thu 14 May 2026 11:14:25 +0000 Files and hashes: 1: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: sEQcH/MmUdhj4qZeg8tTfa6ACp7O9srZS6WMnAT4oeQ=) 2: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: 3cNdKeqfTwiEo3K1ZkDPpVt0OMOgFIFtS6tZRrGyuA8=) 3: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: T4rr9OkDO8EhAQL9SRbZstAicY+EWmRcmPFPJU30h0M=) 4: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: X0PpyJ+ZkjeFXJjUFcys+L9H6+zRoxLuhwZHnOEhxs0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 11:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cc:cb:49:37:6b:80:83:20:6f:bc:f6:31:36:cf:80:60:f7:7e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863 Validity Not Before: May 13 07:56:25 2026 GMT Not After : May 14 11:14:25 2026 GMT Subject: CN=34496963C35599BC059427EB7ADC42E502EAE005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:e6:84:73:0f:28:b5:d6:43:2d:11:9a:bd: bd:a5:18:26:3c:42:5f:6e:be:d2:7a:62:8b:1a:12: a1:70:30:73:6b:ec:8a:3f:49:59:b6:2d:57:1f:4a: 55:64:f9:69:7d:b0:e4:cf:d0:7a:f2:4e:6f:5c:41: 73:c3:46:77:b8:0e:44:95:24:b2:80:08:3d:b4:17: f0:56:51:b0:bc:2f:1c:e5:0a:26:61:fa:04:36:64: 9d:cf:25:0d:39:ef:c7:a0:ad:47:73:31:0b:85:7b: 07:d1:83:1a:70:db:6d:b5:95:a3:71:b0:bb:e6:e9: 91:19:e2:74:6d:20:d8:02:29:04:6c:b4:d9:ba:22: 6d:7e:71:f8:4e:ce:40:19:0f:56:55:c1:8e:b2:51: 70:76:d1:9b:dc:f7:5f:e6:ba:e6:84:91:f4:b6:c6: f1:ca:ea:db:b9:7e:dc:19:c7:43:c7:c7:0f:99:27: 74:fd:f4:63:60:70:12:af:64:b2:e0:aa:79:be:8e: d5:c3:8c:d8:a4:78:cc:b0:45:f5:9e:99:ce:1f:ea: 0b:07:cb:d2:ca:c0:ba:38:6d:a8:cd:fd:13:1d:12: 7d:76:88:07:98:c6:d1:d4:95:ce:8e:b7:d9:9b:05: 78:ea:34:4a:d9:da:0e:b9:39:50:eb:97:de:da:dc: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:69:63:C3:55:99:BC:05:94:27:EB:7A:DC:42:E5:02:EA:E0:05 X509v3 Authority Key Identifier: keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0d:d5:1f:57:de:5b:9f:d3:05:20:17:c9:0b:8d:de:a2:81: e7:74:fe:2d:df:96:2a:42:0c:d1:e2:97:24:11:c9:87:69:5a: a2:40:c5:e0:c7:c8:1b:c0:04:88:d8:18:cc:b4:2e:fb:bd:c7: 8e:fd:f7:26:ac:51:62:2b:45:54:0f:6a:ad:28:75:a8:58:4b: 82:d3:6e:65:64:af:02:04:57:fe:9c:a0:40:66:81:3a:bc:0b: fa:3f:95:b4:ee:e6:83:b7:95:f9:8e:e0:ab:94:ae:88:4f:45: a6:ea:02:00:47:a6:e5:3b:b7:a2:08:15:cc:0b:db:ad:fc:dd: 11:a8:e9:93:ac:0e:11:20:68:94:58:12:d8:89:48:a3:94:1a: ab:ba:c1:9b:3d:61:f8:3e:95:15:44:1a:e0:03:01:2e:a2:31: 23:03:82:f1:41:6c:c7:f4:ca:72:44:fa:65:23:cc:da:08:85: e2:e9:6f:4d:22:c7:89:ca:de:f4:f6:89:6d:2b:19:d9:ba:a5: da:9c:cb:59:41:e3:f5:55:43:5d:16:c2:01:31:a3:fd:a3:c3: c3:f3:f2:8a:d2:af:26:d9:a9:d4:4d:b1:c3:42:01:99:c1:00: 23:9b:7b:f3:fa:44:64:21:08:d2:8a:79:cd:39:83:47:96:54: b0:34:f8:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP8zLSTdrgIMgb7z2MTbPgGD3ft8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy NzA1Qzg2MzAeFw0yNjA1MTMwNzU2MjVaFw0yNjA1MTQxMTE0MjVaMDMxMTAvBgNV BAMTKDM0NDk2OTYzQzM1NTk5QkMwNTk0MjdFQjdBREM0MkU1MDJFQUUwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHeaEcw8otdZDLRGavb2lGCY8 Ql9uvtJ6YosaEqFwMHNr7Io/SVm2LVcfSlVk+Wl9sOTP0HryTm9cQXPDRne4DkSV JLKACD20F/BWUbC8LxzlCiZh+gQ2ZJ3PJQ0578egrUdzMQuFewfRgxpw2221laNx sLvm6ZEZ4nRtINgCKQRstNm6Im1+cfhOzkAZD1ZVwY6yUXB20Zvc91/muuaEkfS2 xvHK6tu5ftwZx0PHxw+ZJ3T99GNgcBKvZLLgqnm+jtXDjNikeMywRfWemc4f6gsH y9LKwLo4bajN/RMdEn12iAeYxtHUlc6Ot9mbBXjqNErZ2g65OVDrl97a3FoBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNElpY8NVmbwFlCfretxC5QLq4AUwHwYDVR0j BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0 NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82 NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaA3VH1feW5/TBSAXyQuN3qKB53T+Ld+WKkIM0eKXJBHJh2laokDF4MfIG8AE iNgYzLQu+73Hjv33JqxRYitFVA9qrSh1qFhLgtNuZWSvAgRX/pygQGaBOrwL+j+V tO7mg7eV+Y7gq5SuiE9FpuoCAEem5Tu3oggVzAvbrfzdEajpk6wOESBolFgS2IlI o5Qaq7rBmz1h+D6VFUQa4AMBLqIxIwOC8UFsx/TKckT6ZSPM2giF4ulvTSLHicre 9PaJbSsZ2bql2pzLWUHj9VVDXRbCATGj/aPDw/PyitKvJtmp1E2xw0IBmcEAI5t7 8/pEZCEI0op5zTmDR5ZUsDT4uA== -----END CERTIFICATE-----Generated at Wed May 13 18:41:54 2026 by rpki-client