$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json) Hash identifier: YgLCphOc/WwlVvlvqn1wnV3ZUyvivMEg1ZJKd+G0JF0= Subject key identifier: 9D:74:F9:D0:7E:25:0D:67:6B:BE:71:E0:06:27:1B:44:95:29:EE:9E Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 Certificate issuer: /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Certificate serial: 16636477CCFBA04FBAC8E9A5F0EE36E3111E9714 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft Manifest number: D3 Signing time: Thu 23 Jul 2026 10:39:12 +0000 Manifest this update: Thu 23 Jul 2026 10:34:12 +0000 Manifest next update: Fri 24 Jul 2026 13:15:12 +0000 Files and hashes: 1: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: 1wRcO3/FXA4Nkv/JkYl9I0x9bbRHosSfhUwr/i+BEUw=) 2: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=) 3: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 13:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:63:64:77:cc:fb:a0:4f:ba:c8:e9:a5:f0:ee:36:e3:11:1e:97:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Validity Not Before: Jul 23 10:34:12 2026 GMT Not After : Jul 24 13:15:12 2026 GMT Subject: CN=9D74F9D07E250D676BBE71E006271B449529EE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:bc:f1:9a:e6:96:1a:34:af:79:f5:aa:0e: 07:ae:57:2b:d5:98:60:61:df:4b:4a:fe:b6:e8:51: 3a:1d:7a:d3:f2:75:50:5d:10:c9:07:54:63:e4:9b: f5:0a:c0:b9:c9:b5:ab:35:52:5a:a4:2a:87:7a:59: 99:73:b4:ae:44:84:77:32:b2:f2:e2:d6:2f:40:db: ef:41:f6:c1:24:d2:47:62:a7:33:3b:ae:de:2d:51: e9:28:56:9e:1c:a8:64:e1:14:5d:c7:3c:de:c0:5f: be:33:55:5f:40:f4:a8:d5:27:42:8c:eb:53:fe:ba: 53:be:c9:a2:7e:d6:28:12:dc:d1:6d:5c:30:e6:f1: da:34:8b:dd:03:d3:dd:fd:e6:7b:e4:33:3e:8d:64: 1e:69:04:4b:fd:00:fd:1f:7f:be:17:b6:d0:b8:88: 05:82:06:f3:4c:e0:00:f5:48:8e:42:93:d1:16:f4: 57:49:0a:e5:d3:d6:8c:5f:2d:00:54:65:45:37:2d: f3:1b:2e:5e:2c:65:9e:98:cc:91:da:08:1e:f1:21: 0c:56:25:cb:ca:6f:2a:cc:c8:24:e6:ae:d4:da:eb: ff:1e:32:0a:1c:82:0c:90:ea:47:82:f2:5a:c5:84: 79:b5:10:66:61:31:ca:4e:68:08:b0:9e:ff:f7:b6: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:74:F9:D0:7E:25:0D:67:6B:BE:71:E0:06:27:1B:44:95:29:EE:9E X509v3 Authority Key Identifier: keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ac:d4:d8:6a:3e:56:45:87:40:5c:cd:50:df:a4:49:af:4d: de:a6:90:17:3c:d1:bf:46:8d:7f:1b:b4:93:3a:f2:83:ee:ca: 19:54:eb:32:93:91:50:d0:2d:5d:b4:0e:f4:73:9e:a1:7e:9a: 44:78:4b:52:83:2e:a2:20:f4:dd:ef:80:0b:16:75:41:a5:4b: 8c:9f:8f:64:73:cb:8f:80:c9:7b:7e:69:37:4a:09:47:e8:dc: 8d:3c:56:52:fb:c8:fe:94:4f:12:f9:b5:e7:b6:a2:4f:fd:56: ad:47:03:d5:a5:cb:cf:c6:b7:85:c8:37:6d:9f:80:b1:8d:4d: 36:d1:cf:a6:74:85:70:68:5c:0c:5b:1a:63:c1:51:fb:61:59: 19:f7:8c:42:27:b0:4a:7c:89:a6:7b:00:87:62:e8:b2:a0:5e: 2b:72:af:f4:64:3e:06:5b:9b:ec:97:a4:63:98:dc:bb:4a:cc: e4:80:ee:b3:75:42:86:f8:b0:e6:0f:1e:22:53:60:a4:a2:6b: 7a:a4:59:d5:54:7c:97:91:a3:1a:c9:af:c9:2b:44:ff:8b:90: 44:7d:bc:c0:b4:0a:d2:45:38:c3:72:bb:f5:25:16:23:bb:15: e9:ae:2a:96:c3:84:62:46:d9:f1:74:e0:b7:05:f8:b5:ed:5c: a5:9c:01:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFmNkd8z7oE+6yOml8O424xEelxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGQUM0MURCMTJFNjkyNEUyMjJDRDZDODQwN0U3RjYw NEU2REVDODAeFw0yNjA3MjMxMDM0MTJaFw0yNjA3MjQxMzE1MTJaMDMxMTAvBgNV BAMTKDlENzRGOUQwN0UyNTBENjc2QkJFNzFFMDA2MjcxQjQ0OTUyOUVFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MrzxmuaWGjSvefWqDgeuVyvV mGBh30tK/rboUTodetPydVBdEMkHVGPkm/UKwLnJtas1UlqkKod6WZlztK5EhHcy svLi1i9A2+9B9sEk0kdipzM7rt4tUekoVp4cqGThFF3HPN7AX74zVV9A9KjVJ0KM 61P+ulO+yaJ+1igS3NFtXDDm8do0i90D09395nvkMz6NZB5pBEv9AP0ff74XttC4 iAWCBvNM4AD1SI5Ck9EW9FdJCuXT1oxfLQBUZUU3LfMbLl4sZZ6YzJHaCB7xIQxW JcvKbyrMyCTmrtTa6/8eMgocggyQ6keC8lrFhHm1EGZhMcpOaAiwnv/3trklAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnXT50H4lDWdrvnHgBicbRJUp7p4wHwYDVR0j BBgwFoAUOvrEHbEuaSTiIs1shAfn9gTm3sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFI YWQvMC8zQUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkFDNDFEQjEyRTY5MjRF MjIyQ0Q2Qzg0MDdFN0Y2MDRFNkRFQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFIYWQvMC8z QUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIKzU2Go+VkWHQFzNUN+kSa9N3qaQFzzRv0aNfxu0kzryg+7KGVTrMpORUNAt XbQO9HOeoX6aRHhLUoMuoiD03e+ACxZ1QaVLjJ+PZHPLj4DJe35pN0oJR+jcjTxW UvvI/pRPEvm157aiT/1WrUcD1aXLz8a3hcg3bZ+AsY1NNtHPpnSFcGhcDFsaY8FR +2FZGfeMQiewSnyJpnsAh2LosqBeK3Kv9GQ+Blub7JekY5jcu0rM5IDus3VChviw 5g8eIlNgpKJreqRZ1VR8l5GjGsmvyStE/4uQRH28wLQK0kU4w3K79SUWI7sV6a4q lsOEYkbZ8XTgtwX4te1cpZwBjA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:09:35 2026 by rpki-client