$ rpki-client -vvvf rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft File: 3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft (raw, json) Hash identifier: iIdQ+DnJSrDYgIEH6Qj3VFRTZ693hEF7Zx3Jq+0o8eI= Subject key identifier: 28:E9:A1:B9:BB:17:EF:B2:96:73:EC:0B:2E:52:32:82:C0:85:C5:AA Authority key identifier: 3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C Certificate issuer: /CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C Certificate serial: 385B6C688E5EAB18CE6176B3190A77F444E1618A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft Manifest number: 53 Signing time: Mon 12 Oct 2026 19:53:03 +0000 Manifest this update: Mon 12 Oct 2026 19:48:03 +0000 Manifest next update: Tue 13 Oct 2026 23:04:03 +0000 Files and hashes: 1: 3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl (hash: kdl3zafBeQXj8osY1/iY/o35I7W9OO57lUqXa5BgCnE=) 2: 3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa (hash: XXMZhbwCsivmtOgGXLArWNOWpvHiLPPdn/1WsXjVjk4=) 3: 3137372e31312e3234382e302f32322d3332203d3e20323632383935.roa (hash: 07qs4L8Myly+DEr8zZxs5v8eyoftQyYz9Fjxc3C8NJE=) 4: AS262895.asa (hash: uxsgGY7Z6ZY/9yWuPlSiGhghZh27JenjUsEXSsAmvxU=) 5: 323830343a3339343a3a2f33322d3536203d3e20323632383935.roa (hash: 0XSOacmINjale6H+zbavzX7fRxB5GyQaLZNJ+OmI0xs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 23:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5b:6c:68:8e:5e:ab:18:ce:61:76:b3:19:0a:77:f4:44:e1:61:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C Validity Not Before: Oct 12 19:48:03 2026 GMT Not After : Oct 13 23:04:03 2026 GMT Subject: CN=28E9A1B9BB17EFB29673EC0B2E523282C085C5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:26:f4:21:8e:45:fd:95:bd:83:55:aa:19: 1a:d6:e7:f9:e2:6d:d7:59:c4:5d:32:96:c5:73:6f: 31:40:4e:20:b5:de:26:d4:d6:88:c8:67:78:b9:33: b6:7c:eb:31:ce:1a:24:e8:47:e0:71:62:69:7b:93: f6:5c:93:df:98:ac:62:53:56:5d:65:73:76:1a:47: ed:8e:50:99:0c:1f:08:4a:81:76:96:18:38:42:8f: 8e:17:35:be:07:82:73:b3:ec:a7:68:2d:51:3b:c8: b6:f8:8e:34:84:78:1f:2a:17:f7:3d:a6:81:02:5d: 55:4c:df:f8:c0:fd:76:9d:2c:53:95:4b:15:fa:44: bc:74:67:99:38:92:8e:5a:59:fc:37:ae:e1:8b:1f: 4b:b6:fe:e1:ee:40:b8:c3:0f:8f:b3:73:66:a3:b4: bd:1c:40:f9:3a:77:e1:e6:55:c7:03:ec:dc:01:9c: 20:c7:d6:dc:45:82:54:6d:9c:49:b3:06:a3:ee:9f: df:fd:b5:21:ec:19:8d:09:c6:fa:de:8f:a5:7a:55: a6:b1:95:e7:2f:12:d7:da:38:5f:b1:8e:39:3e:30: a2:9a:c1:6a:61:90:8f:15:e6:25:be:a3:94:94:7c: e6:18:40:10:7d:b1:51:b1:f6:9d:9d:eb:46:4e:b6: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:A1:B9:BB:17:EF:B2:96:73:EC:0B:2E:52:32:82:C0:85:C5:AA X509v3 Authority Key Identifier: keyid:3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:10:09:39:f9:b1:2f:ef:32:f2:74:e8:ee:6e:56:5a:ec:b8: e8:04:02:99:fb:bf:d3:d0:34:8c:09:96:b0:02:4b:31:20:7e: 22:ea:fc:11:7b:c5:c0:82:56:28:fe:61:11:0f:69:54:cf:87: 66:1f:e1:1f:e9:f4:e6:98:62:b7:1f:9f:c1:d9:f6:e0:bd:46: 24:e4:05:fe:93:a1:51:5f:38:41:42:76:33:88:1b:5c:a7:4e: 9d:ce:b1:87:97:fb:6c:fd:74:7a:7e:01:69:4c:9c:97:6b:e0: 33:26:95:0a:66:e1:4d:95:dc:5b:92:40:cf:75:54:a0:99:76: b9:79:ef:2f:75:f1:2a:49:77:ed:69:63:c8:e5:76:bc:8a:fc: 4b:c6:d5:52:39:dc:76:4d:7b:0c:8a:83:fe:ed:de:bf:51:e6: 61:76:ad:8b:0d:60:54:1d:31:e9:29:95:4d:1d:72:2f:56:a5: aa:a5:ff:1a:d6:9b:07:17:7b:dd:50:32:17:51:5d:ce:a7:3a: 77:57:fd:d1:39:12:58:ba:d0:0b:1f:5b:0c:8f:8c:00:c1:f9: 12:f0:f9:93:03:21:a6:32:1b:11:7e:19:54:25:c2:0a:b9:e7: 85:3b:4d:b4:83:02:8e:e3:c4:76:f2:a4:75:99:0d:55:0b:57: 21:37:d8:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOFtsaI5eqxjOYXazGQp39EThYYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCNENCN0ZBMEY1MkQwQ0QyOTc3MEVDQ0YxRTZBRUY1 RTA3MTg4QzAeFw0yNjEwMTIxOTQ4MDNaFw0yNjEwMTMyMzA0MDNaMDMxMTAvBgNV BAMTKDI4RTlBMUI5QkIxN0VGQjI5NjczRUMwQjJFNTIzMjgyQzA4NUM1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOHCb0IY5F/ZW9g1WqGRrW5/ni bddZxF0ylsVzbzFATiC13ibU1ojIZ3i5M7Z86zHOGiToR+BxYml7k/Zck9+YrGJT Vl1lc3YaR+2OUJkMHwhKgXaWGDhCj44XNb4HgnOz7KdoLVE7yLb4jjSEeB8qF/c9 poECXVVM3/jA/XadLFOVSxX6RLx0Z5k4ko5aWfw3ruGLH0u2/uHuQLjDD4+zc2aj tL0cQPk6d+HmVccD7NwBnCDH1txFglRtnEmzBqPun9/9tSHsGY0Jxvrej6V6Vaax lecvEtfaOF+xjjk+MKKawWphkI8V5iW+o5SUfOYYQBB9sVGx9p2d60ZOtibrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKOmhubsX77KWc+wLLlIygsCFxaowHwYDVR0j BBgwFoAUPrTLf6D1LQzSl3Dszx5q714HGIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTN5dWJoYmROWTlIc2phQTZTamVYV0pMak1NTFJzWVBtUE1NV29ja1Ra a0MvMC8zRUI0Q0I3RkEwRjUyRDBDRDI5NzcwRUNDRjFFNkFFRjVFMDcxODhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFQjRDQjdGQTBGNTJEMENE Mjk3NzBFQ0NGMUU2QUVGNUUwNzE4OEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTN5dWJoYmROWTlIc2phQTZTamVYV0pMak1NTFJzWVBtUE1NV29ja1Raa0MvMC8z RUI0Q0I3RkEwRjUyRDBDRDI5NzcwRUNDRjFFNkFFRjVFMDcxODhDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPhAJOfmxL+8y8nTo7m5WWuy46AQCmfu/09A0jAmWsAJLMSB+Iur8EXvFwIJW KP5hEQ9pVM+HZh/hH+n05phitx+fwdn24L1GJOQF/pOhUV84QUJ2M4gbXKdOnc6x h5f7bP10en4BaUycl2vgMyaVCmbhTZXcW5JAz3VUoJl2uXnvL3XxKkl37WljyOV2 vIr8S8bVUjncdk17DIqD/u3ev1HmYXatiw1gVB0x6SmVTR1yL1alqqX/GtabBxd7 3VAyF1Fdzqc6d1f90TkSWLrQCx9bDI+MAMH5EvD5kwMhpjIbEX4ZVCXCCrnnhTtN tIMCjuPEdvKkdZkNVQtXITfY/g== -----END CERTIFICATE-----Generated at Tue Oct 13 08:29:31 2026 by rpki-client