$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft File: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json) Hash identifier: T/KmZSN/6Q+FRfyLH0ERTEVnwyTN6f+OvtxYdcdt5dY= Subject key identifier: 8A:F5:2D:79:79:8B:7F:67:6F:C7:CA:78:71:B6:36:E8:43:05:19:22 Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F Certificate issuer: /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Certificate serial: 4317DFC9AFDCB9443D33E5570674235BD12C2433 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft Manifest number: E8 Signing time: Wed 13 May 2026 12:11:47 +0000 Manifest this update: Wed 13 May 2026 12:06:47 +0000 Manifest next update: Thu 14 May 2026 16:02:47 +0000 Files and hashes: 1: 323830343a393663383a3a2f33322d3438203d3e20323734333539.roa (hash: r9ehMvK9WF6GKjJBopb+wu5KC0PRaqLjucxj5Cw0zkw=) 2: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: Jv+TMYIplrDVLjfAuIHltfCbMDBscTclbNX5pL6ygss=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:17:df:c9:af:dc:b9:44:3d:33:e5:57:06:74:23:5b:d1:2c:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Validity Not Before: May 13 12:06:47 2026 GMT Not After : May 14 16:02:47 2026 GMT Subject: CN=8AF52D79798B7F676FC7CA7871B636E843051922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:0a:e9:3a:5b:9b:40:41:d5:19:a4:19:80: 2a:81:ba:e7:aa:43:b6:e7:8d:32:de:df:61:66:b8: b4:3a:21:d3:40:9c:6a:72:87:c2:8b:f4:63:43:33: 68:f9:33:e1:80:d4:ee:74:8d:d9:5b:ab:33:70:b8: 1a:11:de:92:3b:51:90:f9:a7:80:34:cb:df:d1:3f: 77:c0:76:26:32:cc:6d:d4:9e:38:1a:12:d3:64:1f: 49:49:cd:a1:34:57:76:07:82:fd:40:05:3b:d0:7d: f8:81:d1:54:a1:86:99:12:34:a3:b5:ce:b7:c4:7d: fe:90:e5:d7:fb:d5:ca:b7:c7:34:ab:64:ab:9e:fd: 3e:f7:e1:ce:c4:a1:a9:ff:29:f6:a7:ec:3c:ca:7c: c1:ec:30:bd:f1:72:62:08:60:fc:60:bd:cc:5d:c3: 5d:1f:bb:1d:5d:c7:4e:43:58:c0:b9:87:7b:71:d3: fe:b9:83:06:86:58:7d:4b:0d:ff:c5:d4:47:30:95: 14:b3:d0:b5:cb:b7:f1:f7:67:5f:e5:e9:cb:ca:0b: 74:6a:c2:a6:96:f5:58:28:60:03:91:60:b1:22:96: 79:95:8a:57:e3:86:bf:51:94:0c:d3:21:99:aa:07: fd:fb:62:ef:c5:09:8a:b9:08:77:2c:dc:ce:b9:16: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:2D:79:79:8B:7F:67:6F:C7:CA:78:71:B6:36:E8:43:05:19:22 X509v3 Authority Key Identifier: keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:65:b0:dd:3c:76:b6:02:73:75:6a:4f:01:6a:74:8b:af:6c: 30:39:6a:8e:a8:9d:61:db:c6:c9:0c:22:6b:ba:4c:76:a7:88: 84:b4:c6:fc:7c:c8:cd:a8:1f:31:94:78:15:56:da:51:33:42: bb:c8:a3:2c:fc:30:26:5e:aa:27:8a:17:1a:2a:ef:f6:5d:1a: dc:20:27:77:64:46:2d:ec:c1:67:68:a4:c7:2d:53:09:c8:8b: 57:45:ff:14:b5:51:e0:9e:dc:3d:c7:e0:04:3e:ab:f9:a7:fd: 14:dd:5d:8a:79:af:50:98:73:8f:81:1b:4c:31:52:9c:d1:47: f5:e1:94:c4:9c:fc:a9:49:aa:28:a6:89:97:44:a3:32:c3:3b: 73:9b:7b:17:94:ef:3a:db:cb:7e:95:3c:1d:a8:48:44:8f:cd: 28:a7:b3:c2:bf:6b:99:d6:25:e3:ec:dc:df:6f:20:38:b2:8b: 1a:45:37:76:2e:c4:5a:79:55:06:b3:f9:40:2a:b4:8d:94:f4: 8c:40:ee:93:1d:15:83:01:37:29:0a:2b:6b:46:95:ce:9d:65: 28:71:ea:69:41:56:aa:c0:dd:ef:b0:07:5f:06:ef:d5:d6:9c: 8f:15:db:6b:09:ef:37:4d:4b:d2:7f:c8:17:75:bb:9e:fb:6e: 32:a5:7f:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQxffya/cuUQ9M+VXBnQjW9EsJDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3 OTEwRjgzRjAeFw0yNjA1MTMxMjA2NDdaFw0yNjA1MTQxNjAyNDdaMDMxMTAvBgNV BAMTKDhBRjUyRDc5Nzk4QjdGNjc2RkM3Q0E3ODcxQjYzNkU4NDMwNTE5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKwrpOlubQEHVGaQZgCqBuueq Q7bnjTLe32FmuLQ6IdNAnGpyh8KL9GNDM2j5M+GA1O50jdlbqzNwuBoR3pI7UZD5 p4A0y9/RP3fAdiYyzG3UnjgaEtNkH0lJzaE0V3YHgv1ABTvQffiB0VShhpkSNKO1 zrfEff6Q5df71cq3xzSrZKue/T734c7Eoan/Kfan7DzKfMHsML3xcmIIYPxgvcxd w10fux1dx05DWMC5h3tx0/65gwaGWH1LDf/F1EcwlRSz0LXLt/H3Z1/l6cvKC3Rq wqaW9VgoYAORYLEilnmVilfjhr9RlAzTIZmqB/37Yu/FCYq5CHcs3M65Fo8jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUivUteXmLf2dvx8p4cbY26EMFGSIwHwYDVR0j BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4 NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1JtWWEvMC8z QTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkGWw3Tx2tgJzdWpPAWp0i69sMDlqjqidYdvGyQwia7pMdqeIhLTG/HzIzagf MZR4FVbaUTNCu8ijLPwwJl6qJ4oXGirv9l0a3CAnd2RGLezBZ2ikxy1TCciLV0X/ FLVR4J7cPcfgBD6r+af9FN1dinmvUJhzj4EbTDFSnNFH9eGUxJz8qUmqKKaJl0Sj MsM7c5t7F5TvOtvLfpU8HahIRI/NKKezwr9rmdYl4+zc328gOLKLGkU3di7EWnlV BrP5QCq0jZT0jEDukx0VgwE3KQora0aVzp1lKHHqaUFWqsDd77AHXwbv1dacjxXb awnvN01L0n/IF3W7nvtuMqV/zg== -----END CERTIFICATE-----Generated at Wed May 13 15:52:12 2026 by rpki-client