$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft File: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft (raw, json) Hash identifier: TG7gH6im1/wsEfjC3hrpukVVDasdH6ysPKiAAnD3GwE= Subject key identifier: 4D:4B:F5:33:7D:F9:7E:97:C1:47:B2:32:BE:BF:EF:E2:F4:67:A5:71 Authority key identifier: 3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8 Certificate issuer: /CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8 Certificate serial: 4B338DDC4B7C92BC603A4058411949BC48EC784C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft Manifest number: DB Signing time: Thu 26 Mar 2026 18:43:17 +0000 Manifest this update: Thu 26 Mar 2026 18:38:17 +0000 Manifest next update: Fri 27 Mar 2026 20:19:17 +0000 Files and hashes: 1: 323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (hash: 3Ghujwd9UJr9rmn+1oBjDbpHtaxE8dNt1tzIlqfBhgM=) 2: 3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa (hash: j+FV69/njmj4oFmPt6kSnXyQbUS03CHA/8u11POeSL8=) 3: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl (hash: Z8YVr7cl3D+0I/b6Hl8KUeupWWLaDiWB6cgI+4PvVQ8=) 4: 3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (hash: 7vlAhbb3FI7QyEjtwP0+o0wEbBe10eFGaDw+xDEygn0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 20:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:33:8d:dc:4b:7c:92:bc:60:3a:40:58:41:19:49:bc:48:ec:78:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8 Validity Not Before: Mar 26 18:38:17 2026 GMT Not After : Mar 27 20:19:17 2026 GMT Subject: CN=4D4BF5337DF97E97C147B232BEBFEFE2F467A571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:fc:84:7f:1f:4e:25:01:d3:92:2c:33:4f: 67:40:e9:43:ac:a0:c6:d7:88:36:1d:91:ec:bf:55: e4:6b:a0:eb:9d:3d:06:6a:44:c4:6c:71:44:db:97: e7:0d:dd:d4:88:49:ca:51:17:9d:5b:61:95:94:b0: a1:ff:96:d3:2a:74:53:ba:b7:22:55:ef:48:94:29: f8:31:db:32:5f:b7:d9:73:c3:02:de:d1:48:fe:b1: 6d:46:84:23:f7:fc:e0:c1:31:c5:b1:fb:02:3c:03: 1b:9e:53:9a:31:de:97:b3:dc:a3:6a:91:36:6a:72: a2:ec:f5:97:43:5e:75:4b:b9:01:f7:bc:f0:01:fe: 50:c8:64:63:08:e7:09:dc:1b:ab:71:b3:eb:95:c6: 33:c1:3a:a1:73:12:7f:9a:78:1b:16:c4:03:53:e5: 8d:21:0a:94:c8:b1:e2:89:02:a5:25:52:8e:2d:4f: bc:82:d1:9c:ca:b8:de:83:02:d8:f2:2e:7d:15:1a: 13:73:73:e4:b1:12:12:d7:50:ae:33:3d:a7:5c:aa: 2c:f1:92:50:c8:9d:0c:b0:2e:de:59:56:6d:26:33: ad:ba:51:c4:91:32:15:71:55:9d:36:1d:88:be:2d: e3:2c:fb:bb:f7:80:51:a7:2d:5c:b0:fb:cd:24:0f: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4B:F5:33:7D:F9:7E:97:C1:47:B2:32:BE:BF:EF:E2:F4:67:A5:71 X509v3 Authority Key Identifier: keyid:3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e4:1e:7c:52:ac:c2:51:9d:90:f4:51:00:01:c6:a7:2f:b6: 61:4f:07:59:e4:56:79:82:e1:da:98:ff:9a:67:86:6b:c0:07: 74:3d:86:ad:bf:28:58:af:b1:20:11:69:de:a0:30:e5:68:64: cc:d7:40:ed:45:83:1a:9c:44:aa:08:a8:13:31:ba:1d:a0:ca: 44:2c:5d:78:02:7b:27:7e:40:a9:d6:8a:2d:9b:d3:73:cd:d1: 18:df:8e:ef:1b:81:b3:3a:32:af:52:46:7f:ca:32:00:b9:04: aa:ee:d6:73:10:f3:ae:c1:ca:68:d1:b1:59:67:a0:9a:a4:1f: 7d:97:f2:43:0a:69:80:5e:ce:be:4d:73:4f:8f:1f:7a:75:11: aa:b8:e9:f6:88:5b:f1:16:1c:94:7f:21:b1:d2:61:cd:71:5d: 34:f6:2c:1f:70:0a:08:3d:05:c3:49:6c:2d:c2:7f:43:49:22: 28:c1:eb:76:ce:60:33:a9:83:0a:ad:2f:4a:4f:91:0b:72:15: 63:69:35:1a:74:ec:8f:e1:d5:7d:4b:67:23:ef:4a:be:b1:56: 59:ff:67:ea:76:de:74:68:ee:e0:34:72:4e:3b:38:94:fe:96: 82:85:3f:51:2e:7c:b9:c6:d0:e9:95:bc:61:cd:69:4d:75:05: a5:d9:69:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSzON3Et8krxgOkBYQRlJvEjseEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0NTE5Qzc3NjlFMDg5RjdEMDUzMjcwMDNDNkE1MEU5 MkI4QzBCODAeFw0yNjAzMjYxODM4MTdaFw0yNjAzMjcyMDE5MTdaMDMxMTAvBgNV BAMTKDRENEJGNTMzN0RGOTdFOTdDMTQ3QjIzMkJFQkZFRkUyRjQ2N0E1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTfyEfx9OJQHTkiwzT2dA6UOs oMbXiDYdkey/VeRroOudPQZqRMRscUTbl+cN3dSIScpRF51bYZWUsKH/ltMqdFO6 tyJV70iUKfgx2zJft9lzwwLe0Uj+sW1GhCP3/ODBMcWx+wI8AxueU5ox3pez3KNq kTZqcqLs9ZdDXnVLuQH3vPAB/lDIZGMI5wncG6txs+uVxjPBOqFzEn+aeBsWxANT 5Y0hCpTIseKJAqUlUo4tT7yC0ZzKuN6DAtjyLn0VGhNzc+SxEhLXUK4zPadcqizx klDInQywLt5ZVm0mM626UcSRMhVxVZ02HYi+LeMs+7v3gFGnLVyw+80kD051AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTUv1M335fpfBR7Iyvr/v4vRnpXEwHwYDVR0j BBgwFoAUPUUZx3aeCJ99BTJwA8alDpK4wLgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0t0SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdh TUgvMC8zRDQ1MTlDNzc2OUUwODlGN0QwNTMyNzAwM0M2QTUwRTkyQjhDMEI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDUxOUM3NzY5RTA4OUY3 RDA1MzI3MDAzQzZBNTBFOTJCOEMwQjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0t0SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdhTUgvMC8z RDQ1MTlDNzc2OUUwODlGN0QwNTMyNzAwM0M2QTUwRTkyQjhDMEI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjuQefFKswlGdkPRRAAHGpy+2YU8HWeRWeYLh2pj/mmeGa8AHdD2Grb8oWK+x IBFp3qAw5WhkzNdA7UWDGpxEqgioEzG6HaDKRCxdeAJ7J35AqdaKLZvTc83RGN+O 7xuBszoyr1JGf8oyALkEqu7WcxDzrsHKaNGxWWegmqQffZfyQwppgF7Ovk1zT48f enURqrjp9ohb8RYclH8hsdJhzXFdNPYsH3AKCD0Fw0lsLcJ/Q0kiKMHrds5gM6mD Cq0vSk+RC3IVY2k1GnTsj+HVfUtnI+9KvrFWWf9n6nbedGju4DRyTjs4lP6WgoU/ US58ucbQ6ZW8Yc1pTXUFpdlpZg== -----END CERTIFICATE-----Generated at Fri Mar 27 01:04:42 2026 by rpki-client