$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: cje/gUk32AGttWuqwWlnGGilRPrj6FzEWDnUPL4zMKM= Subject key identifier: 3D:62:AE:5F:25:8E:AC:BF:C3:F1:17:D4:55:66:8A:EB:81:34:78:AD Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 1708574E507C87C9756029728EF7FBF6D7E2CE84 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 013F Signing time: Wed 13 May 2026 11:59:00 +0000 Manifest this update: Wed 13 May 2026 11:54:00 +0000 Manifest next update: Thu 14 May 2026 12:46:00 +0000 Files and hashes: 1: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: NiwcV1eTB7zrHmvffnpfvuvYscsZXrlmyCXPxn/the8=) 2: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) 3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) 4: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:08:57:4e:50:7c:87:c9:75:60:29:72:8e:f7:fb:f6:d7:e2:ce:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: May 13 11:54:00 2026 GMT Not After : May 14 12:46:00 2026 GMT Subject: CN=3D62AE5F258EACBFC3F117D455668AEB813478AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:d2:77:80:a5:2c:31:7d:15:a7:47:92:c7: 05:cd:56:2a:f7:89:35:c0:22:81:ad:14:95:d3:e7: b7:29:a9:01:36:46:78:18:60:90:6d:8f:48:90:26: dd:8e:0c:67:f1:af:7e:80:05:ed:59:1c:91:8a:4e: 0c:fb:8b:e9:52:9a:7b:c2:75:92:29:9b:cf:47:b6: bb:59:57:8f:1f:21:e8:eb:dd:b8:f1:e7:23:65:92: 94:fb:88:34:98:0b:bf:a9:1e:71:1a:6a:68:f2:2b: 3b:54:c9:f3:be:bf:a8:54:25:f6:11:f6:95:36:2b: 4c:1a:4b:56:2a:7d:25:10:ca:d5:f5:20:14:c2:49: c0:07:f9:99:41:91:11:ad:8f:e7:38:7c:e9:ce:29: be:23:46:c3:98:95:e4:de:fe:2c:bf:c0:a6:fa:06: 37:04:00:6b:89:55:99:a7:b4:8c:4b:2e:23:d1:a2: 7b:a3:b0:c3:f9:c1:5f:47:dc:5b:60:84:87:1d:b0: 58:d5:4a:08:f4:cb:3c:9d:4e:e4:6e:0b:89:99:40: 3b:f3:59:b4:22:46:d1:0e:f0:4a:b8:05:db:a2:e5: 11:0d:f7:44:ef:72:11:be:c8:1d:49:25:34:11:5a: ce:a9:eb:20:76:6e:ee:e7:63:9e:1a:d0:c1:ef:68: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:62:AE:5F:25:8E:AC:BF:C3:F1:17:D4:55:66:8A:EB:81:34:78:AD X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3e:89:9d:2e:b8:be:17:ae:af:78:fa:32:56:f8:78:34:ed: 97:3b:bc:56:72:dc:b6:24:64:6a:39:40:43:53:2b:43:7b:da: 9e:0a:c4:bb:85:a6:88:ef:38:d6:2a:1a:10:8e:c2:53:31:27: 3e:c1:10:08:7f:09:45:9c:9e:01:5e:d0:0a:37:7f:b1:38:36: 7c:09:ea:9d:61:9d:81:3d:4b:5c:0c:25:c8:4a:3d:71:76:e5: e5:7c:55:d7:84:16:04:53:98:60:e7:1b:96:1a:fb:a1:92:67: cb:a6:d0:72:d9:68:a1:af:20:51:57:d6:d8:4e:ee:ce:48:f1: 5b:1c:e8:c0:ea:ab:10:1b:74:84:f7:d4:49:53:31:bb:d4:32: ff:40:8e:9d:b0:72:a4:e7:91:17:2a:92:50:3e:07:cc:fa:5a: 04:cf:e0:e7:01:d6:3d:28:95:9d:b2:19:82:5c:87:ad:b7:d9: 13:95:b2:c5:c8:b0:1a:4c:57:ba:3a:6e:a9:2b:79:47:8a:fe: 61:e3:45:8b:72:17:27:5a:24:fd:7f:30:84:7c:c3:01:01:04: 41:86:32:6c:e3:8c:87:97:8b:3f:76:ab:15:57:d0:4a:b7:21: ed:aa:19:e7:f5:26:e6:4e:68:36:c6:2f:22:82:f0:0d:b0:97: 89:cd:06:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFwhXTlB8h8l1YClyjvf79tfizoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNjA1MTMxMTU0MDBaFw0yNjA1MTQxMjQ2MDBaMDMxMTAvBgNV BAMTKDNENjJBRTVGMjU4RUFDQkZDM0YxMTdENDU1NjY4QUVCODEzNDc4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zdJ3gKUsMX0Vp0eSxwXNVir3 iTXAIoGtFJXT57cpqQE2RngYYJBtj0iQJt2ODGfxr36ABe1ZHJGKTgz7i+lSmnvC dZIpm89HtrtZV48fIejr3bjx5yNlkpT7iDSYC7+pHnEaamjyKztUyfO+v6hUJfYR 9pU2K0waS1YqfSUQytX1IBTCScAH+ZlBkRGtj+c4fOnOKb4jRsOYleTe/iy/wKb6 BjcEAGuJVZmntIxLLiPRonujsMP5wV9H3FtghIcdsFjVSgj0yzydTuRuC4mZQDvz WbQiRtEO8Eq4Bdui5REN90TvchG+yB1JJTQRWs6p6yB2bu7nY54a0MHvaLfHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPWKuXyWOrL/D8RfUVWaK64E0eK0wHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFj6JnS64vheur3j6Mlb4eDTtlzu8VnLctiRkajlAQ1MrQ3vangrEu4WmiO84 1ioaEI7CUzEnPsEQCH8JRZyeAV7QCjd/sTg2fAnqnWGdgT1LXAwlyEo9cXbl5XxV 14QWBFOYYOcblhr7oZJny6bQctlooa8gUVfW2E7uzkjxWxzowOqrEBt0hPfUSVMx u9Qy/0COnbBypOeRFyqSUD4HzPpaBM/g5wHWPSiVnbIZglyHrbfZE5WyxciwGkxX ujpuqSt5R4r+YeNFi3IXJ1ok/X8whHzDAQEEQYYybOOMh5eLP3arFVfQSrch7aoZ 5/Um5k5oNsYvIoLwDbCXic0GXA== -----END CERTIFICATE-----Generated at Wed May 13 19:07:42 2026 by rpki-client