$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json) Hash identifier: f8xNQESWNOlyt4NqY5NbjUZSSHLnos0F+YwS6GGwnfE= Subject key identifier: 33:C2:83:ED:A5:D5:DD:4C:9A:C7:CB:06:9C:6E:B6:32:09:37:40:05 Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Certificate serial: 2F7072C801D6540AAA0D234E32A9F71C0B268001 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft Manifest number: E3 Signing time: Thu 26 Mar 2026 05:13:30 +0000 Manifest this update: Thu 26 Mar 2026 05:08:30 +0000 Manifest next update: Fri 27 Mar 2026 07:04:30 +0000 Files and hashes: 1: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=) 2: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: v71TJOrZ7jBqlsagFG6UXJjzL5j3TAIZI1NU1TU89G4=) 3: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 07:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:70:72:c8:01:d6:54:0a:aa:0d:23:4e:32:a9:f7:1c:0b:26:80:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Validity Not Before: Mar 26 05:08:30 2026 GMT Not After : Mar 27 07:04:30 2026 GMT Subject: CN=33C283EDA5D5DD4C9AC7CB069C6EB63209374005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:1f:7a:fd:36:c1:e4:0c:b7:4b:8c:02:2b: 52:ea:2e:82:76:8c:c8:99:08:45:df:07:80:4c:b6: da:bd:3a:6d:a9:21:1f:c1:dd:d7:05:51:2e:ac:f2: 2e:66:83:61:4d:6f:8f:a2:8e:95:82:69:d4:03:8d: c3:ec:6b:ae:66:0b:74:1a:27:61:1e:a7:d2:98:8d: 92:61:e0:2b:da:53:7c:e2:9e:de:bf:5f:99:41:69: d0:c6:3e:94:37:3d:d7:1a:b7:5e:15:5f:5f:f3:8e: 6e:8e:c3:4d:41:d3:db:61:f5:f2:28:bd:7a:a4:ae: 2d:f9:e6:6f:d2:f6:3d:e9:c3:5a:0f:d6:af:c8:cc: 6b:d5:8a:41:15:5a:27:f3:f4:33:36:e9:65:ba:1e: 4b:cd:82:e4:f3:51:a2:8e:a5:18:a5:0e:31:7c:a2: 57:2b:c8:f3:75:9f:7e:0f:5b:b3:7d:f1:07:e6:0a: f1:40:8a:ab:df:5e:9d:2a:d1:d2:bf:72:18:84:5c: 3e:76:7a:7d:f2:2d:8c:3d:b6:37:8c:8c:8f:5d:92: 77:7a:60:d6:0b:0d:6b:3d:27:ee:96:e6:d0:bb:45: 4a:bd:30:c5:0e:c5:3d:e7:c8:10:0f:8a:61:46:03: 7e:b1:85:cc:1a:1a:08:82:84:bd:68:83:b4:20:27: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:83:ED:A5:D5:DD:4C:9A:C7:CB:06:9C:6E:B6:32:09:37:40:05 X509v3 Authority Key Identifier: keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f5:2f:76:aa:13:12:8f:74:be:b5:73:da:01:e7:83:44:63: 49:fd:1b:b7:5f:06:bd:03:cd:68:c3:47:2c:2c:85:0c:3b:69: b1:33:e4:ef:3d:43:92:16:95:5e:06:9e:bd:ca:26:b3:7d:cd: 47:52:10:74:45:b6:bf:de:b4:6e:0a:21:01:31:92:8e:93:f1: ec:ee:5e:31:c8:74:2e:a4:a5:d9:a5:0d:2a:99:0c:be:ad:4c: 37:c7:35:56:02:c0:2b:84:24:cd:1d:8f:f7:3d:41:25:82:65: 16:19:6c:3c:46:48:e0:ba:c2:2e:b0:d4:89:5f:d5:11:4b:f5: 04:21:29:17:b7:e1:b4:57:4b:7d:c2:8d:c2:6a:44:3f:95:d5: d7:32:71:10:fb:74:03:14:ec:a3:51:05:28:56:29:a2:a8:30: ef:e0:42:7b:1b:f3:91:19:25:b3:f0:19:19:ba:e8:44:a2:68: 83:40:78:4c:88:85:af:5b:ed:86:cb:ea:13:90:ec:5c:a3:96: c8:10:ce:8e:00:70:7d:0a:d7:0f:61:fb:3f:14:df:0a:d3:36: 50:b3:8c:9b:57:4e:e5:32:7a:d8:38:7f:47:81:76:bf:b3:9d: 67:a6:c1:17:54:53:43:e2:3d:d7:89:4c:99:f5:6f:62:9f:7d: 89:5a:b4:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL3ByyAHWVAqqDSNOMqn3HAsmgAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjVEQkYyOThBQkFBNEY4MDlBNkZENzM1MkJFRjkx RkM3ODU4NTAeFw0yNjAzMjYwNTA4MzBaFw0yNjAzMjcwNzA0MzBaMDMxMTAvBgNV BAMTKDMzQzI4M0VEQTVENURENEM5QUM3Q0IwNjlDNkVCNjMyMDkzNzQwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgR96/TbB5Ay3S4wCK1LqLoJ2 jMiZCEXfB4BMttq9Om2pIR/B3dcFUS6s8i5mg2FNb4+ijpWCadQDjcPsa65mC3Qa J2Eep9KYjZJh4CvaU3zint6/X5lBadDGPpQ3Pdcat14VX1/zjm6Ow01B09th9fIo vXqkri355m/S9j3pw1oP1q/IzGvVikEVWifz9DM26WW6HkvNguTzUaKOpRilDjF8 olcryPN1n34PW7N98QfmCvFAiqvfXp0q0dK/chiEXD52en3yLYw9tjeMjI9dknd6 YNYLDWs9J+6W5tC7RUq9MMUOxT3nyBAPimFGA36xhcwaGgiChL1og7QgJ91PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM8KD7aXV3Uyax8sGnG62Mgk3QAUwHwYDVR0j BBgwFoAUqjtdvymKuqT4Cab9c1K++R/HhYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVF dEovMC9BQTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I1REJGMjk4QUJBQTRG ODA5QTZGRDczNTJCRUY5MUZDNzg1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC9B QTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAePUvdqoTEo90vrVz2gHng0RjSf0bt18GvQPNaMNHLCyFDDtpsTPk7z1DkhaV Xgaevcoms33NR1IQdEW2v960bgohATGSjpPx7O5eMch0LqSl2aUNKpkMvq1MN8c1 VgLAK4QkzR2P9z1BJYJlFhlsPEZI4LrCLrDUiV/VEUv1BCEpF7fhtFdLfcKNwmpE P5XV1zJxEPt0AxTso1EFKFYpoqgw7+BCexvzkRkls/AZGbroRKJog0B4TIiFr1vt hsvqE5DsXKOWyBDOjgBwfQrXD2H7PxTfCtM2ULOMm1dO5TJ62Dh/R4F2v7OdZ6bB F1RTQ+I914lMmfVvYp99iVq0dw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:50 2026 by rpki-client