$ rpki-client -vvvf rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft File: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft (raw, json) Hash identifier: QX2xSd2zpVxBXLf6UEKKfaDui/M8O9SOM4BI9puZNeo= Subject key identifier: 98:CE:B8:4A:8A:DA:2D:B4:BE:92:EC:3E:41:5C:5A:04:F7:D0:C1:29 Authority key identifier: 3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D Certificate issuer: /CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D Certificate serial: 3C9E5D20FA5C325165F5584619A36CA57A144C3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer Subject info access: rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft Manifest number: 0129 Signing time: Sun 18 Oct 2026 00:43:30 +0000 Manifest this update: Sun 18 Oct 2026 00:38:30 +0000 Manifest next update: Mon 19 Oct 2026 00:52:30 +0000 Files and hashes: 1: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl (hash: QdA3M//ou2vWTyocG9ckm6nZBuL17hv9KOHYOaw3pVU=) 2: 323830343a346364303a3a2f33322d313238203d3e20323637333934.roa (hash: HCMSwftiV6KHbBsfvKCGzXC1XeYHSMqJkKiP1AfSuUE=) 3: 34352e3233352e36302e302f32322d3332203d3e20323637333934.roa (hash: oCJUx1Px2xlS32pSsJcbxO3QQMpn/8vImxIQKUEhqMo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 00:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9e:5d:20:fa:5c:32:51:65:f5:58:46:19:a3:6c:a5:7a:14:4c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D Validity Not Before: Oct 18 00:38:30 2026 GMT Not After : Oct 19 00:52:30 2026 GMT Subject: CN=98CEB84A8ADA2DB4BE92EC3E415C5A04F7D0C129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:59:29:fa:4f:5e:88:db:95:55:02:f6:82:e4: 9c:bf:1e:2e:a0:b9:96:a6:6b:d8:40:03:1e:c4:50: 65:43:50:d0:2f:79:69:34:fb:d2:06:b0:bf:b8:6e: 9e:89:05:c4:84:e3:28:19:96:b7:73:fe:3f:84:f0: 2a:1e:30:f0:69:cb:88:c7:eb:d5:19:61:e1:c0:dd: ac:fb:3c:4c:2f:cd:d5:aa:32:bd:70:11:d4:56:f9: 0a:94:fc:97:47:7f:43:6f:bb:02:f4:90:06:f2:dd: 3b:2a:39:f6:88:a5:40:d5:18:e1:d0:3d:dc:67:3c: 52:1a:75:21:21:df:5f:68:48:b2:4b:dd:37:df:d7: bf:57:61:cc:99:08:53:bc:6d:df:a4:29:43:90:cb: 7d:c1:ef:30:ac:e2:47:b6:fb:d7:5a:1a:da:26:5d: 5b:e9:e2:f8:92:ac:44:ac:a3:44:5c:af:09:82:8f: 59:f9:96:c5:7b:24:fd:2f:24:5c:67:13:f7:9b:fa: 2b:50:10:d2:94:61:e9:5d:7b:9e:86:3f:91:5a:89: 81:6b:a0:9c:39:0a:b7:9f:af:70:ea:12:ff:4e:54: 10:a1:b5:49:1c:2f:37:a3:81:e8:34:df:a8:14:ac: 6a:c2:50:f3:ea:27:07:86:b8:68:dd:a9:f3:28:cd: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CE:B8:4A:8A:DA:2D:B4:BE:92:EC:3E:41:5C:5A:04:F7:D0:C1:29 X509v3 Authority Key Identifier: keyid:3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c5:bf:91:1a:83:cc:94:25:59:bc:5b:45:9d:25:f0:33:48: 70:1c:4c:fa:0f:89:e6:91:90:25:70:03:15:61:ef:8b:1e:95: 7c:98:07:f2:76:1c:96:0f:d8:ae:9d:c4:e7:70:0e:51:84:c0: 8c:c3:23:da:70:4f:da:8c:d7:67:23:89:d5:71:70:d1:93:ec: 9a:64:c3:2a:e9:b4:d5:97:6c:da:b7:8f:56:1a:58:83:14:23: 8f:43:4b:b6:1a:77:b4:7c:b7:40:91:fd:49:d2:b1:0c:b7:3e: 7b:bb:21:d9:ff:a2:a9:b8:3c:f1:8e:8f:d6:6a:84:4a:4e:36: b5:75:3c:54:53:b0:d3:12:73:e4:fa:1d:4f:77:f9:6e:d5:94: 97:75:91:22:5b:a6:40:aa:eb:f1:ab:d7:10:87:78:e9:97:46: 6d:87:69:95:f2:36:13:d1:70:7e:9e:0d:f6:4f:86:d3:00:c4: ad:f1:91:42:00:39:48:c6:f5:b8:bf:9b:ba:17:d2:86:75:22: 27:74:ed:19:0b:0f:4d:b5:9c:5e:00:40:c2:d1:d8:89:0b:bf: 11:fe:3b:52:ae:c7:d1:6f:48:c5:4a:71:97:fd:c7:4c:7f:9f: e8:ea:a9:39:6c:13:99:3b:03:4e:d5:b6:e2:0a:40:30:d1:4c: a7:d7:9f:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPJ5dIPpcMlFl9VhGGaNspXoUTD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FBOTYzMjQ0QTZBNUIzRTgyMUI4OUZBRjVFNDgzQTMw NkEzRTk2RDAeFw0yNjEwMTgwMDM4MzBaFw0yNjEwMTkwMDUyMzBaMDMxMTAvBgNV BAMTKDk4Q0VCODRBOEFEQTJEQjRCRTkyRUMzRTQxNUM1QTA0RjdEMEMxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLWSn6T16I25VVAvaC5Jy/Hi6g uZama9hAAx7EUGVDUNAveWk0+9IGsL+4bp6JBcSE4ygZlrdz/j+E8CoeMPBpy4jH 69UZYeHA3az7PEwvzdWqMr1wEdRW+QqU/JdHf0NvuwL0kAby3TsqOfaIpUDVGOHQ PdxnPFIadSEh319oSLJL3Tff179XYcyZCFO8bd+kKUOQy33B7zCs4ke2+9daGtom XVvp4viSrESso0RcrwmCj1n5lsV7JP0vJFxnE/eb+itQENKUYelde56GP5FaiYFr oJw5Crefr3DqEv9OVBChtUkcLzejgeg036gUrGrCUPPqJweGuGjdqfMozfrXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmM64SoraLbS+kuw+QVxaBPfQwSkwHwYDVR0j BBgwFoAUOqljJEpqWz6CG4n69eSDowaj6W0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUR1anByUzVrVFdoemtHbjhLdFF6d25QNnBmS2RqWGZ2R05jblVuVFdY Q2UvMC8zQUE5NjMyNDRBNkE1QjNFODIxQjg5RkFGNUU0ODNBMzA2QTNFOTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQTk2MzI0NEE2QTVCM0U4 MjFCODlGQUY1RTQ4M0EzMDZBM0U5NkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUR1anByUzVrVFdoemtHbjhLdFF6d25QNnBmS2RqWGZ2R05jblVuVFdYQ2UvMC8z QUE5NjMyNDRBNkE1QjNFODIxQjg5RkFGNUU0ODNBMzA2QTNFOTZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ8W/kRqDzJQlWbxbRZ0l8DNIcBxM+g+J5pGQJXADFWHvix6VfJgH8nYclg/Y rp3E53AOUYTAjMMj2nBP2ozXZyOJ1XFw0ZPsmmTDKum01Zds2rePVhpYgxQjj0NL thp3tHy3QJH9SdKxDLc+e7sh2f+iqbg88Y6P1mqESk42tXU8VFOw0xJz5PodT3f5 btWUl3WRIlumQKrr8avXEId46ZdGbYdplfI2E9Fwfp4N9k+G0wDErfGRQgA5SMb1 uL+buhfShnUiJ3TtGQsPTbWcXgBAwtHYiQu/Ef47Uq7H0W9IxUpxl/3HTH+f6Oqp OWwTmTsDTtW24gpAMNFMp9ef8A== -----END CERTIFICATE-----Generated at Sun Oct 18 07:22:46 2026 by rpki-client