$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft File: 42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json) Hash identifier: tZGA7WZyd7Yt/8hHk/bSIezq27s/F6FAWvbunTkOyKs= Subject key identifier: 28:5B:31:0E:47:01:82:AF:76:62:0D:D6:48:AD:5B:99:2E:31:7A:FD Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 Certificate issuer: /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Certificate serial: 7686760C6FD49F05E0E18F5D330484E1F6E4CC16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft Manifest number: B3 Signing time: Thu 26 Mar 2026 00:57:56 +0000 Manifest this update: Thu 26 Mar 2026 00:52:56 +0000 Manifest next update: Fri 27 Mar 2026 03:18:56 +0000 Files and hashes: 1: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=) 2: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: 9wrzLrHXRZQvqpTBe5DeOs3MqTQhJmZj4XbNjGyiqSM=) 3: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 03:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:86:76:0c:6f:d4:9f:05:e0:e1:8f:5d:33:04:84:e1:f6:e4:cc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Validity Not Before: Mar 26 00:52:56 2026 GMT Not After : Mar 27 03:18:56 2026 GMT Subject: CN=285B310E470182AF76620DD648AD5B992E317AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:0d:36:ad:9e:c8:81:1b:2f:6c:87:34:45: 30:41:c0:d4:0f:84:5b:ab:d4:96:61:3c:3a:84:b8: 8c:ee:cf:da:be:45:b7:fd:87:06:64:35:aa:f1:81: c0:af:4c:27:f9:b9:c3:54:60:19:c6:2b:2a:d5:99: dc:62:f0:81:57:bf:08:2e:a0:75:6c:23:01:00:ce: ed:51:c3:d9:8b:e1:8d:a7:01:67:a2:01:aa:8b:1c: bf:62:b3:9d:d9:42:0e:69:a1:df:63:ac:a5:31:2d: ea:81:1b:b5:a2:42:43:ff:22:b8:60:f8:4b:17:12: 54:b6:0c:54:55:5a:01:ff:58:03:db:61:27:c4:6e: 32:a7:c3:18:fe:e7:11:ac:76:e3:c6:9a:52:35:5d: e9:8d:3f:8c:8c:69:d2:47:45:2a:66:79:d9:fe:c3: 76:5f:a9:b7:d8:c3:42:b6:7f:24:70:a4:3a:14:7a: ab:35:04:81:06:0f:07:03:b5:8e:32:d4:c2:fc:b6: 83:30:46:e9:e4:9a:9a:a0:33:f7:5b:59:1d:88:72: d7:ff:31:c6:33:49:77:c8:75:a2:fe:20:b7:69:50: 02:85:38:7f:8b:56:7a:9c:65:ad:2b:cc:ee:ce:d8: 65:42:85:b6:b0:97:db:a7:e9:9d:24:8e:b5:cf:bf: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5B:31:0E:47:01:82:AF:76:62:0D:D6:48:AD:5B:99:2E:31:7A:FD X509v3 Authority Key Identifier: keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:3a:aa:d4:3c:a6:03:b5:aa:c4:56:2b:7b:d6:34:2c:89: 90:4d:9f:0c:11:1a:d4:9f:87:34:2b:9b:16:6a:55:13:b9:d3: db:a8:a5:ab:2e:06:25:4c:9c:4f:5f:19:9e:16:01:eb:fc:90: dd:d0:cb:29:03:17:36:8c:21:ba:43:37:e5:0c:84:bc:42:ca: c1:a8:7d:86:78:08:3c:1d:cf:f7:29:72:a3:05:20:c6:c9:ff: 49:d4:13:9f:1d:01:8a:20:4a:7b:a2:88:65:fc:b2:91:d1:7b: 7f:90:b3:8e:cc:29:72:b5:68:b8:be:b9:8d:1d:de:e3:1c:bc: 69:13:ce:db:e2:5b:b8:5f:7c:53:26:13:81:9e:0d:39:e6:58: 26:3e:fd:67:d4:dc:e8:3a:72:d8:15:9f:2e:24:da:de:d0:30: bb:f0:b4:39:13:e0:d7:dd:bb:f6:05:5e:8a:a0:61:dc:25:b0: 66:cf:65:cb:a7:73:01:f9:74:ef:37:74:a0:45:87:ae:dc:17: cb:ff:0a:4b:33:d8:3c:3a:65:c9:08:f8:1e:91:e6:23:4d:da: d5:c4:6c:d0:bd:a3:14:2a:f7:b2:df:28:48:76:10:6d:63:ef: 37:3f:25:98:d7:a1:16:bf:e0:d8:6c:2e:74:5e:0e:90:98:61: fa:a7:ba:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdoZ2DG/UnwXg4Y9dMwSE4fbkzBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDREQ0NTRCM0U4NjcwQzI2QTU4MDU2QTY5RkU5NTJE OEM1MzNGMzAeFw0yNjAzMjYwMDUyNTZaFw0yNjAzMjcwMzE4NTZaMDMxMTAvBgNV BAMTKDI4NUIzMTBFNDcwMTgyQUY3NjYyMERENjQ4QUQ1Qjk5MkUzMTdBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7Q02rZ7IgRsvbIc0RTBBwNQP hFur1JZhPDqEuIzuz9q+Rbf9hwZkNarxgcCvTCf5ucNUYBnGKyrVmdxi8IFXvwgu oHVsIwEAzu1Rw9mL4Y2nAWeiAaqLHL9is53ZQg5pod9jrKUxLeqBG7WiQkP/Irhg +EsXElS2DFRVWgH/WAPbYSfEbjKnwxj+5xGsduPGmlI1XemNP4yMadJHRSpmedn+ w3ZfqbfYw0K2fyRwpDoUeqs1BIEGDwcDtY4y1ML8toMwRunkmpqgM/dbWR2Ictf/ McYzSXfIdaL+ILdpUAKFOH+LVnqcZa0rzO7O2GVChbawl9un6Z0kjrXPv2uZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKFsxDkcBgq92Yg3WSK1bmS4xev0wHwYDVR0j BBgwFoAUQs3UVLPoZwwmpYBWpp/pUtjFM/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdU UDgvMC80MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0RENDU0QjNFODY3MEMy NkE1ODA1NkE2OUZFOTUyRDhDNTMzRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdUUDgvMC80 MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXY6qtQ8pgO1qsRWK3vWNCyJkE2fDBEa1J+HNCubFmpVE7nT26ilqy4GJUyc T18ZnhYB6/yQ3dDLKQMXNowhukM35QyEvELKwah9hngIPB3P9ylyowUgxsn/SdQT nx0BiiBKe6KIZfyykdF7f5CzjswpcrVouL65jR3e4xy8aRPO2+JbuF98UyYTgZ4N OeZYJj79Z9Tc6Dpy2BWfLiTa3tAwu/C0ORPg19279gVeiqBh3CWwZs9ly6dzAfl0 7zd0oEWHrtwXy/8KSzPYPDplyQj4HpHmI03a1cRs0L2jFCr3st8oSHYQbWPvNz8l mNehFr/g2GwudF4OkJhh+qe6Sw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:24 2026 by rpki-client