$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft File: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json) Hash identifier: 4eheZjHOzEa3Ez2IY78VJduUtCcIqMWCNvDD/Om+KGI= Subject key identifier: 8C:A7:02:58:05:3B:02:6A:5C:8C:D1:A5:1B:A0:3C:76:FC:07:1B:70 Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F Certificate issuer: /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Certificate serial: 6AA615E9F4B950F62E928C9E7B879981E877FC80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft Manifest number: A3 Signing time: Thu 26 Mar 2026 00:31:47 +0000 Manifest this update: Thu 26 Mar 2026 00:26:47 +0000 Manifest next update: Fri 27 Mar 2026 00:58:47 +0000 Files and hashes: 1: 323830343a393663383a3a2f33322d313238203d3e20323734333539.roa (hash: Ytqo8wa3MR5Sf7KXr1wl+CjQS/odKyL/1MiNLCin5fk=) 2: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: B6YAJwlMCHHDPFoKP4uRnpWeZfLWlPsqgJr1XIgCyII=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a6:15:e9:f4:b9:50:f6:2e:92:8c:9e:7b:87:99:81:e8:77:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Validity Not Before: Mar 26 00:26:47 2026 GMT Not After : Mar 27 00:58:47 2026 GMT Subject: CN=8CA70258053B026A5C8CD1A51BA03C76FC071B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:65:b2:d0:87:ed:3f:6e:72:6e:bf:77:33: fb:68:73:d1:f0:be:e6:7f:1f:a9:82:c1:a9:47:47: 45:83:80:57:39:0e:69:f5:13:9f:c5:f4:be:43:ba: d1:d1:ff:36:84:d1:81:81:30:b8:d9:33:c7:cb:39: 34:68:0c:7d:e4:55:79:3a:00:e6:7e:8f:7f:58:3e: 63:ec:16:bd:1d:12:dc:d5:34:3f:27:43:b1:7b:0e: f3:d3:5d:6e:3b:f3:29:2b:1f:32:c6:54:76:13:88: 7f:28:f7:cd:2f:47:b5:ce:d1:ed:c9:56:a6:27:3b: 4f:1c:2a:ed:27:b2:63:da:c4:b3:62:a7:ed:93:51: dd:6d:bb:c6:f1:b2:dd:3c:69:59:76:e9:15:d7:13: e8:06:92:18:7c:40:71:b7:79:de:37:df:45:83:f3: c5:27:21:fa:1f:f9:53:34:32:79:80:3d:7d:f4:69: 43:31:8c:23:fe:9f:7e:52:82:67:5f:5b:c9:72:a7: 9a:17:09:15:94:7f:b8:36:48:a0:00:e0:09:29:8b: 28:8d:46:3d:69:e0:a9:5a:3d:c7:7b:99:70:e8:0e: f0:65:d3:e2:31:27:11:80:98:c0:f2:15:94:e7:4d: cd:da:5c:82:55:f7:78:c2:f9:66:91:b0:55:68:79: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A7:02:58:05:3B:02:6A:5C:8C:D1:A5:1B:A0:3C:76:FC:07:1B:70 X509v3 Authority Key Identifier: keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:54:46:46:a2:8a:2f:de:89:72:e5:44:72:ef:8c:c6:a2:8d: 75:a3:30:6c:c5:2b:2b:49:c5:b4:21:83:71:f0:06:83:83:9c: 9a:19:c8:f5:29:09:dd:ca:91:46:47:d4:a4:b3:9f:99:83:9c: 2c:bb:ab:c2:ba:5c:f3:c7:d9:4e:61:3c:12:7f:63:05:d0:0c: 94:58:ba:87:bc:90:df:36:2d:12:de:ee:e8:e4:b4:8c:53:0a: ea:57:d9:8d:64:04:25:b7:cc:a9:50:05:86:b1:74:b5:e9:69: bf:1b:78:82:68:58:f0:74:9c:e2:52:ea:c3:2f:8e:ec:03:3a: 81:00:37:81:f6:5d:ed:44:32:92:42:1a:30:d2:90:70:80:1a: d3:80:98:72:e8:bf:88:3c:97:c8:cd:58:5f:76:0c:73:0e:6e: 0e:72:80:f4:07:19:b1:07:b4:86:29:7a:01:5a:ab:62:51:93: ce:43:77:b3:12:c2:89:16:b5:70:83:68:ff:5c:36:8d:d0:02: b4:43:e8:fd:24:8a:8d:6c:0d:9d:f9:43:99:c3:10:ad:ca:71: ef:9a:ee:7b:ad:66:65:8b:a6:6c:3a:ea:43:f5:f5:da:6a:61: cd:f5:f3:85:a3:50:52:15:94:cc:1b:92:80:83:83:9c:88:ae: d9:67:f3:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaqYV6fS5UPYukoyee4eZgeh3/IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3 OTEwRjgzRjAeFw0yNjAzMjYwMDI2NDdaFw0yNjAzMjcwMDU4NDdaMDMxMTAvBgNV BAMTKDhDQTcwMjU4MDUzQjAyNkE1QzhDRDFBNTFCQTAzQzc2RkMwNzFCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mWWy0IftP25ybr93M/toc9Hw vuZ/H6mCwalHR0WDgFc5Dmn1E5/F9L5DutHR/zaE0YGBMLjZM8fLOTRoDH3kVXk6 AOZ+j39YPmPsFr0dEtzVND8nQ7F7DvPTXW478ykrHzLGVHYTiH8o980vR7XO0e3J VqYnO08cKu0nsmPaxLNip+2TUd1tu8bxst08aVl26RXXE+gGkhh8QHG3ed4330WD 88UnIfof+VM0MnmAPX30aUMxjCP+n35SgmdfW8lyp5oXCRWUf7g2SKAA4AkpiyiN Rj1p4KlaPcd7mXDoDvBl0+IxJxGAmMDyFZTnTc3aXIJV93jC+WaRsFVoeQPvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjKcCWAU7AmpcjNGlG6A8dvwHG3AwHwYDVR0j BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4 NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1JtWWEvMC8z QTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjVRGRqKKL96JcuVEcu+MxqKNdaMwbMUrK0nFtCGDcfAGg4OcmhnI9SkJ3cqR RkfUpLOfmYOcLLurwrpc88fZTmE8En9jBdAMlFi6h7yQ3zYtEt7u6OS0jFMK6lfZ jWQEJbfMqVAFhrF0telpvxt4gmhY8HSc4lLqwy+O7AM6gQA3gfZd7UQykkIaMNKQ cIAa04CYcui/iDyXyM1YX3YMcw5uDnKA9AcZsQe0hil6AVqrYlGTzkN3sxLCiRa1 cINo/1w2jdACtEPo/SSKjWwNnflDmcMQrcpx75rue61mZYumbDrqQ/X12mphzfXz haNQUhWUzBuSgIODnIiu2Wfzlw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:28 2026 by rpki-client