$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json) Hash identifier: D2vjhI5h+e8uw5pwrrFSd5ELhVHZ7klx9X94VlnWtuQ= Subject key identifier: FE:CD:F3:FD:E4:AB:A7:3E:9F:BE:E2:B6:E6:32:5E:E4:04:9C:60:94 Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 Certificate issuer: /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Certificate serial: 19B15D5714A3C1357E09E289092A1FE83C0BC723 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft Manifest number: 35 Signing time: Thu 26 Mar 2026 12:11:38 +0000 Manifest this update: Thu 26 Mar 2026 12:06:38 +0000 Manifest next update: Fri 27 Mar 2026 13:12:38 +0000 Files and hashes: 1: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=) 2: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: 3KIKbpwc4iMXCpc0rMjJ+PPZ3F+qo7BdTRdaO24s2XY=) 3: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 13:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b1:5d:57:14:a3:c1:35:7e:09:e2:89:09:2a:1f:e8:3c:0b:c7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Validity Not Before: Mar 26 12:06:38 2026 GMT Not After : Mar 27 13:12:38 2026 GMT Subject: CN=FECDF3FDE4ABA73E9FBEE2B6E6325EE4049C6094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:73:02:cb:5c:1c:73:a9:eb:6c:d4:01:e9: a4:cf:23:55:e3:e9:fe:7d:e5:0e:4b:dd:ff:6b:57: 75:00:74:2d:8a:b9:84:f6:7c:c2:44:b8:65:f2:d1: d1:48:c2:c5:53:9e:00:3b:57:cc:43:d1:50:a1:b4: 5a:67:6d:be:97:f2:b8:62:f1:13:a3:dc:19:38:fc: a8:8e:fc:e0:25:78:2a:38:6b:36:18:ae:93:25:04: 9e:db:e5:ee:5c:13:e3:34:d2:68:95:67:4a:9f:83: 29:e5:82:c4:fc:6b:84:6c:f0:11:8f:ae:0a:cf:2e: d9:d0:1b:c9:ee:d0:dd:e3:e8:aa:cc:0c:b4:cd:64: 0f:51:46:8b:08:81:28:45:ac:2a:79:36:1f:71:00: a6:b5:aa:92:b5:ff:62:69:2d:09:44:a4:51:49:5e: 6a:e1:bb:2c:9d:62:16:79:25:ff:53:c8:8d:c1:d9: 0c:e2:a0:cc:3c:8d:a9:18:71:dc:fa:a7:21:a3:03: ed:5d:d6:74:f7:4c:1f:0d:b0:6c:14:b2:15:67:03: 20:59:da:36:c0:db:a0:63:05:58:5f:48:77:ed:42: d7:97:e3:2f:07:30:03:c9:13:4e:81:b9:7a:dd:f7: 12:38:3c:69:b9:72:a0:fa:f2:0c:7c:e1:6c:b4:ef: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:F3:FD:E4:AB:A7:3E:9F:BE:E2:B6:E6:32:5E:E4:04:9C:60:94 X509v3 Authority Key Identifier: keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:23:0a:93:c0:ca:90:62:a7:14:0f:87:2d:6e:6d:12:2b:74: 2a:b8:22:bc:44:5b:a7:84:77:4b:02:95:f8:b4:87:19:ea:c2: 25:81:19:d6:64:7c:02:23:da:0e:b0:a8:2f:91:39:0f:3c:7b: 8e:47:ff:51:38:1e:b3:d9:05:a8:ba:2b:25:8e:d4:03:6c:ed: 61:3b:cb:41:18:55:47:63:43:b0:78:e1:04:f4:5e:b7:1d:02: 18:4a:d5:ab:e2:f8:6a:20:71:ea:24:45:29:ee:61:89:24:1f: 87:d0:c6:15:84:89:fc:5d:af:f6:9f:ad:55:57:2d:e0:5f:60: 5f:77:76:f8:de:5f:18:94:9e:2a:ba:7b:e8:21:3b:1e:c3:66: 46:59:fb:88:93:c6:cb:d6:df:ea:85:b2:d1:59:fc:b6:22:da: 52:d9:b7:71:2a:89:2a:06:57:3d:f4:ab:c5:b5:41:ef:68:60: 3e:d8:56:1c:87:73:78:2e:82:c4:fd:f0:61:f6:3e:d5:f2:37: 97:a1:14:db:63:39:88:40:af:e2:33:3e:bb:31:d7:eb:0c:cf: 5a:39:89:60:18:26:e5:18:43:2e:71:84:5d:a0:a1:0c:43:90: 27:79:36:92:50:de:0a:2b:37:2f:04:4a:a9:06:00:ab:a0:1d: a5:60:c9:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGbFdVxSjwTV+CeKJCSof6DwLxyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGQUM0MURCMTJFNjkyNEUyMjJDRDZDODQwN0U3RjYw NEU2REVDODAeFw0yNjAzMjYxMjA2MzhaFw0yNjAzMjcxMzEyMzhaMDMxMTAvBgNV BAMTKEZFQ0RGM0ZERTRBQkE3M0U5RkJFRTJCNkU2MzI1RUU0MDQ5QzYwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54XMCy1wcc6nrbNQB6aTPI1Xj 6f595Q5L3f9rV3UAdC2KuYT2fMJEuGXy0dFIwsVTngA7V8xD0VChtFpnbb6X8rhi 8ROj3Bk4/KiO/OAleCo4azYYrpMlBJ7b5e5cE+M00miVZ0qfgynlgsT8a4Rs8BGP rgrPLtnQG8nu0N3j6KrMDLTNZA9RRosIgShFrCp5Nh9xAKa1qpK1/2JpLQlEpFFJ XmrhuyydYhZ5Jf9TyI3B2QzioMw8jakYcdz6pyGjA+1d1nT3TB8NsGwUshVnAyBZ 2jbA26BjBVhfSHftQteX4y8HMAPJE06BuXrd9xI4PGm5cqD68gx84Wy074opAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/s3z/eSrpz6fvuK25jJe5AScYJQwHwYDVR0j BBgwFoAUOvrEHbEuaSTiIs1shAfn9gTm3sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFI YWQvMC8zQUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkFDNDFEQjEyRTY5MjRF MjIyQ0Q2Qzg0MDdFN0Y2MDRFNkRFQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFIYWQvMC8z QUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdSMKk8DKkGKnFA+HLW5tEit0KrgivERbp4R3SwKV+LSHGerCJYEZ1mR8AiPa DrCoL5E5Dzx7jkf/UTges9kFqLorJY7UA2ztYTvLQRhVR2NDsHjhBPRetx0CGErV q+L4aiBx6iRFKe5hiSQfh9DGFYSJ/F2v9p+tVVct4F9gX3d2+N5fGJSeKrp76CE7 HsNmRln7iJPGy9bf6oWy0Vn8tiLaUtm3cSqJKgZXPfSrxbVB72hgPthWHIdzeC6C xP3wYfY+1fI3l6EU22M5iECv4jM+uzHX6wzPWjmJYBgm5RhDLnGEXaChDEOQJ3k2 klDeCis3LwRKqQYAq6AdpWDJqg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:54 2026 by rpki-client