$ rpki-client -vvf rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.mft File: F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.mft (raw, json) Hash identifier: QDAOTXspAYc2TjzJFZRfstD1o6IIHvV5AwPtgJTuw6Q= Subject key identifier: 9F:CC:2A:AE:07:AC:84:B9:BA:3E:1C:56:AA:36:66:6F:DA:03:92:FA Authority key identifier: F3:BB:EE:7A:0B:2F:4A:53:33:ED:99:5A:4F:CD:3A:B1:FF:2B:72:FA Certificate issuer: /CN=F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA Certificate serial: 20BB942FC12D102FCF1C5DCA754103DBD17EE3E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.mft Manifest number: 47 Signing time: Wed 13 May 2026 12:48:42 +0000 Manifest this update: Wed 13 May 2026 12:43:42 +0000 Manifest next update: Thu 14 May 2026 14:31:42 +0000 Files and hashes: 1: 34352e3137372e3232302e302f32332d3332203d3e20323639303439.roa (hash: rLyjj1Zh2tjz3usWs5ZVGaxZF9bNArXadEvy+9gq66I=) 2: 323830343a356561633a3a2f33342d313238203d3e20323639303439.roa (hash: tmoTbp5u781/1omse0j2m289O3pIqr2ZiMuSPXot5dE=) 3: 34352e3137372e3232322e302f32332d3332203d3e20323639303439.roa (hash: UP6SIOILYpGZXZilGPoxFnT6AF0vhqY1OB4Eyjc+EA4=) 4: F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.crl (hash: RepKPb1ZOB9EqZot6BB9J25oWcxychsXJG3Kh1CmqDU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.crl rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 14:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bb:94:2f:c1:2d:10:2f:cf:1c:5d:ca:75:41:03:db:d1:7e:e3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA Validity Not Before: May 13 12:43:42 2026 GMT Not After : May 14 14:31:42 2026 GMT Subject: CN=9FCC2AAE07AC84B9BA3E1C56AA36666FDA0392FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:64:c2:05:b0:9a:a4:1a:6f:84:bc:4a:90: 49:d0:2f:19:09:37:cb:e4:3c:14:7b:8c:a8:d7:63: c5:1f:fa:91:32:b4:e7:d4:b1:96:c5:26:d0:35:b1: 44:41:19:43:8e:e5:a2:0d:ce:47:bd:a5:cf:7f:10: a2:7f:95:ae:81:59:08:7f:5f:32:36:b4:b4:b1:e9: a9:51:f1:00:cf:f3:23:ca:38:10:d0:b7:24:fa:db: 1c:9a:00:48:69:fc:90:79:65:25:a9:7c:b7:6c:f6: 53:e2:41:da:79:19:0c:56:2f:07:4b:f5:d6:3e:cb: 28:2e:ee:b8:50:e7:df:7f:5e:f9:77:4d:a1:bc:eb: 3a:d6:ea:b0:63:84:36:1c:6b:cf:5c:10:e1:8b:3f: f9:89:16:86:69:8c:f6:7c:a1:7b:fc:33:a4:79:83: ef:96:92:31:d9:7f:e6:20:a6:f5:16:41:40:16:eb: 3b:4f:4b:b5:df:f4:73:57:5f:78:54:e2:af:1a:c6: 79:81:a5:4a:cc:c6:5b:16:a1:93:f7:73:97:dd:b6: 92:17:f9:0e:97:18:fb:01:f5:a6:f2:77:32:c1:e9: 97:b8:10:15:31:62:16:82:8a:5b:ab:c4:2b:de:0e: d3:81:43:31:93:bb:7b:51:44:6d:e0:c3:85:72:55: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CC:2A:AE:07:AC:84:B9:BA:3E:1C:56:AA:36:66:6F:DA:03:92:FA X509v3 Authority Key Identifier: keyid:F3:BB:EE:7A:0B:2F:4A:53:33:ED:99:5A:4F:CD:3A:B1:FF:2B:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/74EFCWkHJfUVQZksZHFeiBhdUM578pwimoCa6CmNotJ8/0/F3BBEE7A0B2F4A5333ED995A4FCD3AB1FF2B72FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5d:a3:47:e4:c1:a2:50:7c:9e:12:cb:d8:6c:7c:8c:35:0b: 08:60:85:d0:5f:e1:15:c4:b9:72:e8:e2:fa:4f:77:28:07:ef: 96:a8:a4:80:f5:c9:d3:3a:a2:b3:09:c3:9e:df:91:ba:19:6d: 38:d1:bf:8d:4b:7b:43:75:92:03:10:d8:ea:03:71:b5:54:76: 9d:b8:2f:07:e7:af:32:fc:ae:c0:47:4c:64:8e:cb:ab:85:e5: 0f:de:c6:b6:91:f8:cc:61:4e:23:6e:ea:7f:07:ec:96:49:db: 07:67:c9:2d:94:ab:e7:cc:96:7d:ef:5c:ff:75:c5:f0:1b:f6: c6:a7:ba:c8:a1:90:13:fc:9a:ef:fb:0a:d0:55:8f:9f:1f:d3: f6:7c:c6:7e:38:fe:ca:41:5a:bd:61:e6:c4:9d:dd:1d:16:0f: 38:50:3f:30:d8:ab:74:9a:b4:e0:df:ad:09:eb:39:8d:59:0c: d3:ed:11:97:03:fd:7e:cd:1c:c8:7a:b5:c9:7b:eb:65:49:f3: b3:9d:42:d8:c7:da:17:c8:4b:e6:2a:65:c2:70:76:9c:d2:a1: f3:ca:92:24:dc:b8:17:1e:ac:eb:aa:ca:c3:27:47:7b:c4:3a: 6c:51:85:0b:8e:1a:c2:4a:ca:a5:a9:2b:de:65:92:8a:99:5e: 86:d2:d2:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUILuUL8EtEC/PHF3KdUED29F+4+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNCQkVFN0EwQjJGNEE1MzMzRUQ5OTVBNEZDRDNBQjFG RjJCNzJGQTAeFw0yNjA1MTMxMjQzNDJaFw0yNjA1MTQxNDMxNDJaMDMxMTAvBgNV BAMTKDlGQ0MyQUFFMDdBQzg0QjlCQTNFMUM1NkFBMzY2NjZGREEwMzkyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh2TCBbCapBpvhLxKkEnQLxkJ N8vkPBR7jKjXY8Uf+pEytOfUsZbFJtA1sURBGUOO5aINzke9pc9/EKJ/la6BWQh/ XzI2tLSx6alR8QDP8yPKOBDQtyT62xyaAEhp/JB5ZSWpfLds9lPiQdp5GQxWLwdL 9dY+yygu7rhQ599/Xvl3TaG86zrW6rBjhDYca89cEOGLP/mJFoZpjPZ8oXv8M6R5 g++WkjHZf+YgpvUWQUAW6ztPS7Xf9HNXX3hU4q8axnmBpUrMxlsWoZP3c5fdtpIX +Q6XGPsB9abydzLB6Ze4EBUxYhaCilurxCveDtOBQzGTu3tRRG3gw4VyVTXXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn8wqrgeshLm6PhxWqjZmb9oDkvowHwYDVR0j BBgwFoAU87vuegsvSlMz7ZlaT806sf8rcvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzRFRkNXa0hKZlVWUVprc1pIRmVpQmhkVU01Nzhwd2ltb0NhNkNtTm90 SjgvMC9GM0JCRUU3QTBCMkY0QTUzMzNFRDk5NUE0RkNEM0FCMUZGMkI3MkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQkJFRTdBMEIyRjRBNTMz M0VEOTk1QTRGQ0QzQUIxRkYyQjcyRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzRFRkNXa0hKZlVWUVprc1pIRmVpQmhkVU01Nzhwd2ltb0NhNkNtTm90SjgvMC9G M0JCRUU3QTBCMkY0QTUzMzNFRDk5NUE0RkNEM0FCMUZGMkI3MkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARl2jR+TBolB8nhLL2Gx8jDULCGCF0F/hFcS5cuji+k93KAfvlqikgPXJ0zqi swnDnt+RuhltONG/jUt7Q3WSAxDY6gNxtVR2nbgvB+evMvyuwEdMZI7Lq4XlD97G tpH4zGFOI27qfwfslknbB2fJLZSr58yWfe9c/3XF8Bv2xqe6yKGQE/ya7/sK0FWP nx/T9nzGfjj+ykFavWHmxJ3dHRYPOFA/MNirdJq04N+tCes5jVkM0+0RlwP9fs0c yHq1yXvrZUnzs51C2MfaF8hL5iplwnB2nNKh88qSJNy4Fx6s66rKwydHe8Q6bFGF C44awkrKpakr3mWSiplehtLSeg== -----END CERTIFICATE-----Generated at Wed May 13 15:12:30 2026 by rpki-client