$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft File: 3668F23708FFBF0EE157A9A924E8295BA896F33D.mft (raw, json) Hash identifier: rwaH9GdGHdpZQ6In9XyM6oF8Kt14vFnEjEJSxuU1Hqw= Subject key identifier: 5B:8B:87:23:E0:9E:EE:B0:79:26:F1:11:B4:D7:70:BD:98:DA:C6:3E Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D Certificate issuer: /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D Certificate serial: 634CE08DF05599ED5C5CE9F3654729E281D13767 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft Manifest number: 4E Signing time: Wed 25 Mar 2026 14:06:44 +0000 Manifest this update: Wed 25 Mar 2026 14:01:44 +0000 Manifest next update: Thu 26 Mar 2026 17:01:44 +0000 Files and hashes: 1: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: K+lZkEM4v6sJ/Jk0Z8elzm60jida0+XHfBI9QU5wKa0=) 2: 3668F23708FFBF0EE157A9A924E8295BA896F33D.crl (hash: G1wWwLREDKUpDVqaU/uBmMjUC8HV1RT4Yg1VDI/JZFM=) 3: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: oCPIOmoYwqZXDm5OOelB6GxaBTbNHz/pae+0Bvycpx0=) 4: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 1O+rv6XlvbPZca5WvayM1LDM2sBBx6xsJcsb7KU/kII=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 17:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:e0:8d:f0:55:99:ed:5c:5c:e9:f3:65:47:29:e2:81:d1:37:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D Validity Not Before: Mar 25 14:01:44 2026 GMT Not After : Mar 26 17:01:44 2026 GMT Subject: CN=5B8B8723E09EEEB07926F111B4D770BD98DAC63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:39:8d:ca:b8:ea:e4:20:b9:6a:2c:2a:6a: ac:73:b3:a7:27:86:a5:95:61:86:f0:83:be:a0:c6: 25:e4:d3:37:a9:0f:06:09:de:5a:a5:36:dc:3d:ab: df:e3:63:7b:9a:4c:f2:91:59:a6:b1:f1:6b:57:88: c7:82:30:63:1a:76:1a:ac:06:a3:f7:43:0e:6c:7c: 43:ba:6e:fa:34:97:78:2c:35:76:f1:3a:b8:92:b4: e2:c9:83:d6:c7:64:70:e1:6a:75:cc:17:21:7b:9e: b4:ca:03:5a:58:bc:25:65:37:05:f6:eb:7b:32:f0: 1b:4f:0a:db:f5:a8:93:2c:24:49:14:cc:22:b0:1c: 8e:d4:9f:23:e4:22:60:b9:57:38:ab:91:9f:7d:06: 28:1c:ce:5e:87:81:b8:a6:53:67:86:16:57:8b:68: 67:a1:a3:57:7b:6c:82:3b:cd:81:23:c8:72:ce:ed: ff:7a:a7:47:bb:c0:6b:e4:91:a0:c8:c2:ad:c5:ce: 9c:0c:b2:91:87:ee:bf:6c:12:bf:6e:91:c6:5a:6b: 82:50:e0:63:ba:42:b7:4b:90:4b:40:64:ae:7d:8d: 60:b6:11:6c:53:0d:0a:f4:52:4c:30:7f:79:9c:7f: bb:d6:aa:42:c6:49:3e:d4:14:ba:03:49:74:bf:f6: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:87:23:E0:9E:EE:B0:79:26:F1:11:B4:D7:70:BD:98:DA:C6:3E X509v3 Authority Key Identifier: keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:4f:9c:b6:f5:d6:28:56:6a:8e:b5:6c:83:73:64:87:54: 63:46:b6:43:41:c6:36:6d:6c:a9:ac:3e:84:27:0c:5a:cb:98: 22:33:84:fd:99:f2:77:da:82:4e:94:fa:bf:d1:2b:e9:07:e7: ea:0f:b3:d9:ce:56:1f:c6:2b:56:04:95:c1:fa:80:50:3e:2b: 0d:42:c7:38:13:28:81:3a:ea:28:1e:da:73:c7:9c:23:f8:7f: 09:33:c6:80:34:c0:98:a3:47:64:4f:39:b6:1f:c4:ff:b4:80: 4a:fd:63:b3:c4:dc:61:d0:04:fa:5b:b5:c4:30:66:5d:43:06: 73:0a:57:a6:e2:67:e0:23:32:6b:e2:eb:46:d8:2a:88:1d:f3: e2:e6:9c:13:65:94:b5:c1:c7:84:d6:10:76:c3:9e:60:5c:d0: 01:ab:ef:be:53:ee:f3:d4:1d:1f:0a:31:0b:06:ba:a1:ea:4e: 6f:f0:7a:55:2a:46:c8:00:47:62:c5:e6:84:f8:d8:9e:2e:5d: 57:fe:d0:59:08:bb:6b:b7:7b:7b:60:a6:26:f0:7c:ca:bf:15: dd:78:54:34:99:43:be:0e:75:3e:0a:f8:6c:40:be:d3:a8:23: 56:60:83:d0:c6:1c:09:a3:9f:c1:3a:8b:9c:17:e6:be:65:02: fc:30:98:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY0zgjfBVme1cXOnzZUcp4oHRN2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY2OEYyMzcwOEZGQkYwRUUxNTdBOUE5MjRFODI5NUJB ODk2RjMzRDAeFw0yNjAzMjUxNDAxNDRaFw0yNjAzMjYxNzAxNDRaMDMxMTAvBgNV BAMTKDVCOEI4NzIzRTA5RUVFQjA3OTI2RjExMUI0RDc3MEJEOThEQUM2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4TmNyrjq5CC5aiwqaqxzs6cn hqWVYYbwg76gxiXk0zepDwYJ3lqlNtw9q9/jY3uaTPKRWaax8WtXiMeCMGMadhqs BqP3Qw5sfEO6bvo0l3gsNXbxOriStOLJg9bHZHDhanXMFyF7nrTKA1pYvCVlNwX2 63sy8BtPCtv1qJMsJEkUzCKwHI7UnyPkImC5VzirkZ99Bigczl6HgbimU2eGFleL aGeho1d7bII7zYEjyHLO7f96p0e7wGvkkaDIwq3FzpwMspGH7r9sEr9ukcZaa4JQ 4GO6QrdLkEtAZK59jWC2EWxTDQr0Ukwwf3mcf7vWqkLGST7UFLoDSXS/9sNBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW4uHI+Ce7rB5JvERtNdwvZjaxj4wHwYDVR0j BBgwFoAUNmjyNwj/vw7hV6mpJOgpW6iW8z0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu S1QvMC8zNjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2NjhGMjM3MDhGRkJGMEVF MTU3QTlBOTI0RTgyOTVCQTg5NkYzM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMC8z NjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIWJPnLb11ihWao61bINzZIdUY0a2Q0HGNm1sqaw+hCcMWsuYIjOE/Znyd9qC TpT6v9Er6Qfn6g+z2c5WH8YrVgSVwfqAUD4rDULHOBMogTrqKB7ac8ecI/h/CTPG gDTAmKNHZE85th/E/7SASv1js8TcYdAE+lu1xDBmXUMGcwpXpuJn4CMya+LrRtgq iB3z4uacE2WUtcHHhNYQdsOeYFzQAavvvlPu89QdHwoxCwa6oepOb/B6VSpGyABH YsXmhPjYni5dV/7QWQi7a7d7e2CmJvB8yr8V3XhUNJlDvg51Pgr4bEC+06gjVmCD 0MYcCaOfwTqLnBfmvmUC/DCYhg== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:22 2026 by rpki-client