$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft File: 3668F23708FFBF0EE157A9A924E8295BA896F33D.mft (raw, json) Hash identifier: mkwBZxHfp9+zuJ+qe4T9K0reY4yv7wf6hoKLKTB7sZI= Subject key identifier: 41:CB:4A:77:0C:54:B9:EA:C6:CB:78:5A:CB:15:D3:7A:69:D0:0C:3D Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D Certificate issuer: /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D Certificate serial: 48FFBED6DBA4327BEFB6A6098D54CF52A60C9552 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft Manifest number: 8E Signing time: Wed 13 May 2026 00:38:46 +0000 Manifest this update: Wed 13 May 2026 00:33:46 +0000 Manifest next update: Thu 14 May 2026 02:58:46 +0000 Files and hashes: 1: 3668F23708FFBF0EE157A9A924E8295BA896F33D.crl (hash: PIdv1G0T1Pxv/pLP6h94riIlsCw9ayQd8tzcy0yeyNU=) 2: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 1O+rv6XlvbPZca5WvayM1LDM2sBBx6xsJcsb7KU/kII=) 3: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: K+lZkEM4v6sJ/Jk0Z8elzm60jida0+XHfBI9QU5wKa0=) 4: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: oCPIOmoYwqZXDm5OOelB6GxaBTbNHz/pae+0Bvycpx0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 02:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ff:be:d6:db:a4:32:7b:ef:b6:a6:09:8d:54:cf:52:a6:0c:95:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D Validity Not Before: May 13 00:33:46 2026 GMT Not After : May 14 02:58:46 2026 GMT Subject: CN=41CB4A770C54B9EAC6CB785ACB15D37A69D00C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:a9:32:c2:4b:ff:e4:66:ec:36:6b:37:c4: 7c:70:83:6f:47:ff:88:0c:9d:24:4b:59:96:1c:5f: d1:ae:27:dd:f9:3c:92:01:06:88:80:75:62:09:9a: f0:aa:8c:c1:fa:1b:d5:4b:25:34:42:0c:a8:5f:ab: 1d:00:ab:41:12:bf:1d:ed:d7:da:20:6e:59:98:23: 7e:db:65:91:40:b3:7f:eb:ae:09:b1:65:cd:ab:68: 73:6d:5f:b1:65:10:c0:70:d3:8f:04:b9:3f:d1:8c: 5b:6e:46:b6:aa:4f:79:73:d3:77:b0:b1:8b:94:09: f0:2f:82:60:8d:78:a3:98:95:7e:1d:f5:b1:d2:14: 8f:c9:62:47:c0:54:d3:25:b4:37:71:26:7e:f7:e5: 21:73:01:73:e6:e8:fc:eb:61:39:03:18:37:dc:0a: ad:a2:6c:75:bb:3e:81:f7:c1:7a:d2:60:ac:d7:69: b9:e3:d1:ea:e5:6c:cb:f8:ae:99:20:c3:f2:f5:53: ca:bf:01:ea:2c:e9:4a:7c:4d:52:9c:d3:46:44:2b: 04:61:a2:64:4f:7c:26:d1:43:0f:20:4f:f5:bf:5b: 9c:0d:35:23:11:9b:d7:f1:55:40:2a:e6:79:4d:fc: 61:94:91:33:df:d9:69:54:40:8f:c9:66:06:14:cf: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:4A:77:0C:54:B9:EA:C6:CB:78:5A:CB:15:D3:7A:69:D0:0C:3D X509v3 Authority Key Identifier: keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b8:dd:20:ce:8b:4e:eb:16:4b:c8:9d:58:ab:23:bd:44:1d: 36:20:2e:c5:e2:8b:57:7e:4a:da:86:7b:ff:ef:d9:0a:72:73: 23:a0:f6:16:17:a8:83:96:fc:dc:64:1b:1d:da:44:a4:25:82: 43:c5:c4:1d:d4:b5:61:b6:db:06:7b:ec:b5:1e:8b:94:05:62: 8e:5f:5e:9b:d6:95:8a:4b:40:c6:99:81:a0:4b:da:1b:83:f8: b5:7c:1a:b1:60:5f:6d:92:cb:5a:c7:05:a3:ae:78:9d:7f:d5: 94:d6:96:b4:0f:de:b1:77:95:2a:af:e6:f7:62:5f:38:59:f2: 1c:cb:98:6a:79:05:84:c4:d2:55:10:0d:4e:a9:29:10:79:7d: 9d:09:53:85:53:9e:9c:3b:a5:21:0d:14:01:bf:0a:22:9f:40: dd:bc:e7:30:35:37:f0:f3:dd:ce:04:83:d6:a0:e7:3e:cb:34: 70:d1:70:12:dc:b7:6d:5c:ab:eb:4b:68:1c:d9:d4:7f:28:60: 6e:b4:47:7e:a7:1d:e0:ae:4f:4b:ae:79:8d:7c:1d:ce:f2:cc: d1:38:e8:02:cc:dd:fd:97:81:2a:2a:1a:8e:f3:a3:d2:92:19: f1:e2:6c:2b:5f:27:3f:99:e3:f2:6f:95:e7:1c:43:2b:54:2e: 71:81:97:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSP++1tukMnvvtqYJjVTPUqYMlVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY2OEYyMzcwOEZGQkYwRUUxNTdBOUE5MjRFODI5NUJB ODk2RjMzRDAeFw0yNjA1MTMwMDMzNDZaFw0yNjA1MTQwMjU4NDZaMDMxMTAvBgNV BAMTKDQxQ0I0QTc3MEM1NEI5RUFDNkNCNzg1QUNCMTVEMzdBNjlEMDBDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTakywkv/5GbsNms3xHxwg29H /4gMnSRLWZYcX9GuJ935PJIBBoiAdWIJmvCqjMH6G9VLJTRCDKhfqx0Aq0ESvx3t 19ogblmYI37bZZFAs3/rrgmxZc2raHNtX7FlEMBw048EuT/RjFtuRraqT3lz03ew sYuUCfAvgmCNeKOYlX4d9bHSFI/JYkfAVNMltDdxJn735SFzAXPm6PzrYTkDGDfc Cq2ibHW7PoH3wXrSYKzXabnj0erlbMv4rpkgw/L1U8q/Aeos6Up8TVKc00ZEKwRh omRPfCbRQw8gT/W/W5wNNSMRm9fxVUAq5nlN/GGUkTPf2WlUQI/JZgYUz9R3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQctKdwxUuerGy3hayxXTemnQDD0wHwYDVR0j BBgwFoAUNmjyNwj/vw7hV6mpJOgpW6iW8z0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu S1QvMC8zNjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2NjhGMjM3MDhGRkJGMEVF MTU3QTlBOTI0RTgyOTVCQTg5NkYzM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMC8z NjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkrjdIM6LTusWS8idWKsjvUQdNiAuxeKLV35K2oZ7/+/ZCnJzI6D2Fheog5b8 3GQbHdpEpCWCQ8XEHdS1YbbbBnvstR6LlAVijl9em9aViktAxpmBoEvaG4P4tXwa sWBfbZLLWscFo654nX/VlNaWtA/esXeVKq/m92JfOFnyHMuYankFhMTSVRANTqkp EHl9nQlThVOenDulIQ0UAb8KIp9A3bznMDU38PPdzgSD1qDnPss0cNFwEty3bVyr 60toHNnUfyhgbrRHfqcd4K5PS655jXwdzvLM0TjoAszd/ZeBKioajvOj0pIZ8eJs K18nP5nj8m+V5xxDK1QucYGXHg== -----END CERTIFICATE-----Generated at Wed May 13 16:49:25 2026 by rpki-client