$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft File: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft (raw, json) Hash identifier: pbjgXxZCKqDAsojPAYhmTpGW1Jn/YWTRfCr5GWxF4/U= Subject key identifier: 1A:3F:A5:DB:56:EF:B2:0C:FF:7C:03:A1:76:E4:A4:AA:9F:55:7C:D2 Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 Certificate issuer: /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Certificate serial: 385AEE34A6B0BD84C5AC16CF409E8835FED04EF6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft Manifest number: 016A Signing time: Wed 13 May 2026 08:24:28 +0000 Manifest this update: Wed 13 May 2026 08:19:28 +0000 Manifest next update: Thu 14 May 2026 11:51:28 +0000 Files and hashes: 1: 323830343a383734303a3a2f33322d313238203d3e203532393036.roa (hash: kfImCG2TW2PZqgdH+xcKUqqX56025AHMhP+JY16ulkg=) 2: 3137372e32332e35362e302f32312d3332203d3e203532393036.roa (hash: jrnwbKnlRj9X3EB+DFy9Z/5ZbRMcHXbOntOJWDZ8eCc=) 3: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl (hash: zNPTiZ3oL6wrB3tgLimhWy6+vA/v0OnQ6IPPPBupfVQ=) 4: 3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (hash: mv3/jFMH/WFk97h2YglLXFAx04FlpcG2tngzh8QwfNw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 11:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5a:ee:34:a6:b0:bd:84:c5:ac:16:cf:40:9e:88:35:fe:d0:4e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Validity Not Before: May 13 08:19:28 2026 GMT Not After : May 14 11:51:28 2026 GMT Subject: CN=1A3FA5DB56EFB20CFF7C03A176E4A4AA9F557CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:e6:ee:47:dd:b3:82:9c:a6:74:41:87:99: d1:53:fb:bb:ef:9f:b1:20:ec:93:58:ac:94:0f:57: 72:c5:70:bf:45:10:32:38:20:f9:44:99:a6:44:4f: 12:2a:b7:c8:9d:d4:33:b8:cd:76:40:73:2d:05:79: 44:76:6a:84:60:7b:80:70:d4:38:18:52:51:9f:c5: 82:eb:4a:9d:10:00:cb:94:92:1b:2e:23:ff:98:db: d4:98:48:50:94:36:e0:c4:3a:9c:b4:10:69:53:bd: f9:84:91:56:ad:b2:c0:b0:14:db:ac:77:ec:cd:d7: bb:68:a5:cb:c1:bc:7e:d8:9f:44:18:a1:a8:3a:58: b1:76:43:bb:cb:4f:5b:ec:0e:5a:c9:f0:df:6e:3a: 2a:10:b7:a5:40:b1:a1:cd:a1:c0:91:91:0e:ed:65: 58:7d:f4:78:3a:b6:cd:52:9b:1f:a6:d5:86:e5:ab: ed:19:6d:4f:6e:6d:46:70:6d:8a:96:0b:34:4f:b3: 40:93:9a:e5:82:a4:65:ba:1e:77:ef:1a:2e:0c:d6: fa:45:b6:ae:41:d8:32:07:b7:4d:a1:40:46:ed:b7: 3f:b6:30:53:18:7a:d2:39:75:f2:ef:ef:81:fb:ea: 57:7a:79:85:a3:c2:0f:c9:a4:ab:65:39:fe:ec:9b: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:A5:DB:56:EF:B2:0C:FF:7C:03:A1:76:E4:A4:AA:9F:55:7C:D2 X509v3 Authority Key Identifier: keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9e:0d:17:10:b8:a5:f0:a8:ff:b4:ae:bb:7f:d4:19:58:e4: 4d:d9:85:65:a2:fe:cb:8d:00:83:f8:a8:78:3a:a4:e0:48:4e: 62:8c:d2:6e:f8:44:8b:47:72:43:8d:13:fc:0e:25:ab:a9:b3: fb:2a:a4:00:27:bf:f1:b4:2e:89:cd:ba:a0:20:66:62:1e:08: 38:4d:8c:3e:55:8c:43:94:21:ff:a3:1d:62:8d:8d:ed:68:85: de:d8:78:f6:4c:18:f4:8e:a6:ea:a4:85:02:f3:b5:d4:bc:c1: 22:47:c6:fe:76:d4:d1:52:db:33:cd:fe:a3:39:43:87:5b:96: 02:8d:53:b8:55:ac:2d:6b:e4:27:7e:1d:61:81:4c:07:91:d7: 52:f1:c8:25:b2:19:9c:ce:5e:dc:91:04:e6:c3:38:12:a9:24: 2d:77:ca:36:c7:8b:11:71:1e:a3:55:27:db:2d:ee:29:1c:bf: 1e:10:c0:57:d2:83:0a:bb:1e:a9:13:05:18:34:c3:be:17:ce: c8:c3:f4:e0:39:13:24:4c:11:52:8e:7d:58:2b:e2:6b:8a:d3: c1:5d:88:cd:f5:38:d9:c2:b8:b5:4d:76:26:2f:7d:76:6f:c6: b6:e0:b9:96:31:ae:92:33:87:35:77:97:b7:1e:bb:4a:cf:74: b2:57:52:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOFruNKawvYTFrBbPQJ6INf7QTvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw QTJFQkJCMTAeFw0yNjA1MTMwODE5MjhaFw0yNjA1MTQxMTUxMjhaMDMxMTAvBgNV BAMTKDFBM0ZBNURCNTZFRkIyMENGRjdDMDNBMTc2RTRBNEFBOUY1NTdDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSo+buR92zgpymdEGHmdFT+7vv n7Eg7JNYrJQPV3LFcL9FEDI4IPlEmaZETxIqt8id1DO4zXZAcy0FeUR2aoRge4Bw 1DgYUlGfxYLrSp0QAMuUkhsuI/+Y29SYSFCUNuDEOpy0EGlTvfmEkVatssCwFNus d+zN17topcvBvH7Yn0QYoag6WLF2Q7vLT1vsDlrJ8N9uOioQt6VAsaHNocCRkQ7t ZVh99Hg6ts1Smx+m1Yblq+0ZbU9ubUZwbYqWCzRPs0CTmuWCpGW6HnfvGi4M1vpF tq5B2DIHt02hQEbttz+2MFMYetI5dfLv74H76ld6eYWjwg/JpKtlOf7sm3wVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGj+l21bvsgz/fAOhduSkqp9VfNIwHwYDVR0j BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2 OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1 RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2OGsvMC9D MzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl54NFxC4pfCo/7Suu3/UGVjkTdmFZaL+y40Ag/ioeDqk4EhOYozSbvhEi0dy Q40T/A4lq6mz+yqkACe/8bQuic26oCBmYh4IOE2MPlWMQ5Qh/6MdYo2N7WiF3th4 9kwY9I6m6qSFAvO11LzBIkfG/nbU0VLbM83+ozlDh1uWAo1TuFWsLWvkJ34dYYFM B5HXUvHIJbIZnM5e3JEE5sM4EqkkLXfKNseLEXEeo1Un2y3uKRy/HhDAV9KDCrse qRMFGDTDvhfOyMP04DkTJEwRUo59WCvia4rTwV2IzfU42cK4tU12Ji99dm/GtuC5 ljGukjOHNXeXtx67Ss90sldSOg== -----END CERTIFICATE-----Generated at Wed May 13 19:05:57 2026 by rpki-client