$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft File: 3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json) Hash identifier: GRFpBoD1xTJtiLM61Td2FkdSNSSZr4inEPlgRkts+ow= Subject key identifier: D3:A4:F3:C0:67:B2:7C:D8:32:79:7E:64:07:9F:4F:74:AD:CA:61:D1 Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52 Certificate issuer: /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052 Certificate serial: 1FA051F6F269F1DBB6F83A21856FE9FAD23AF85B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft Manifest number: 0372 Signing time: Thu 26 Mar 2026 14:52:52 +0000 Manifest this update: Thu 26 Mar 2026 14:47:52 +0000 Manifest next update: Fri 27 Mar 2026 15:59:52 +0000 Files and hashes: 1: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: spAyhkGjuBNP2zEIUTDLtN/IEf7CJVmrsLGKeK3QbZM=) 2: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: hgbebWRxJH711YUS+ZshiJSddOzcAmuyU3X5EXPVldc=) 3: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: NqhfBzzkflXOkmAf/nTysHuXQoPOG+JDouKUSrUYXrA=) 4: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: Ax4GFW+ZgDBWbEqakOBkeW9VThd7RRswN4RG5fl4FpQ=) 5: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (hash: 6j/YM1iWE1stiYo/1xSZmbaSx9cwVBwCyvj6K025FBY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a0:51:f6:f2:69:f1:db:b6:f8:3a:21:85:6f:e9:fa:d2:3a:f8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052 Validity Not Before: Mar 26 14:47:52 2026 GMT Not After : Mar 27 15:59:52 2026 GMT Subject: CN=D3A4F3C067B27CD832797E64079F4F74ADCA61D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:24:9c:3a:55:5d:96:e0:a3:13:8d:00:fc: ce:a1:77:3a:26:5f:65:5f:25:51:a2:ed:f1:ae:a9: 86:19:8f:91:b6:7e:74:1b:f1:80:53:d7:7d:08:ef: c0:b9:0a:d6:fb:21:74:d8:0f:bb:19:a0:94:f3:a4: ce:0f:3b:6b:c6:f7:f2:7e:76:71:1c:ef:83:55:2d: 77:53:82:75:65:75:59:63:d3:56:c9:7f:e3:69:a5: 8f:26:95:cd:48:2d:4f:14:b9:c0:6b:60:5c:17:64: db:c5:f3:03:ff:4b:3b:a1:23:47:b5:fb:44:f4:6c: c1:0b:b7:a0:77:03:03:42:87:af:ac:4d:a9:45:78: 50:9d:e2:0c:0b:27:87:eb:e0:42:75:d5:11:50:2b: dd:b8:53:fd:e0:dc:61:9b:30:d0:80:f9:cc:96:b1: 1a:22:83:6a:33:26:50:2e:9f:26:12:6f:bf:42:00: 6b:0a:2c:8f:08:85:4b:44:2c:c9:77:df:8c:4b:f0: d4:41:eb:2a:06:b5:57:72:d6:bd:11:e3:fd:27:c9: 99:fe:66:b7:32:b1:3e:55:4b:5e:2b:c6:8f:15:43: 87:84:c8:bb:6f:05:5f:32:ce:74:44:a1:87:93:69: 07:e8:d0:92:76:ec:3a:4a:42:61:05:40:56:32:53: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:F3:C0:67:B2:7C:D8:32:79:7E:64:07:9F:4F:74:AD:CA:61:D1 X509v3 Authority Key Identifier: keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b2:c3:e6:d5:c1:fe:95:79:39:0b:96:6d:44:43:f0:2a:4c: 89:d9:ff:0e:d7:45:7d:50:27:ca:19:8b:92:8f:19:98:70:d2: c4:fe:73:4a:f1:5c:58:66:46:30:07:00:cb:0b:dc:c8:12:bc: 54:37:bb:dc:c9:c8:b6:8d:20:af:8d:0c:fb:d1:e6:6c:7e:4f: 6f:be:1c:72:26:3b:f5:24:f0:54:41:7e:5f:28:79:08:29:d4: 15:84:f0:a8:69:c7:9d:5c:25:90:3f:82:1b:f4:d7:87:89:2a: 8c:82:92:c6:05:5d:a2:a2:16:6c:3e:eb:c8:ec:6b:c7:3a:1f: 84:c3:c7:72:c8:56:97:97:61:82:e6:7d:a6:36:80:35:25:6f: 19:aa:37:6d:59:1d:16:5d:57:fa:dd:7d:26:56:cf:a0:f7:74: db:f3:33:37:56:d5:d6:66:d1:7d:b4:0a:f0:87:f0:98:c9:09: fb:00:34:45:87:5e:39:56:90:b9:b4:07:ba:b9:b4:b0:bd:23: ac:59:60:86:83:d0:8b:2b:35:8a:b2:eb:49:fd:d4:7d:07:7b: b5:12:e2:4a:5a:3a:54:9b:ce:0e:d7:14:ca:b1:dc:96:0d:55: 06:6e:54:52:58:1c:0f:02:45:41:c8:2f:e6:7e:b2:6b:e7:d4: 31:81:5b:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH6BR9vJp8du2+DohhW/p+tI6+FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgz QzdBNjA1MjAeFw0yNjAzMjYxNDQ3NTJaFw0yNjAzMjcxNTU5NTJaMDMxMTAvBgNV BAMTKEQzQTRGM0MwNjdCMjdDRDgzMjc5N0U2NDA3OUY0Rjc0QURDQTYxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECyScOlVdluCjE40A/M6hdzom X2VfJVGi7fGuqYYZj5G2fnQb8YBT130I78C5Ctb7IXTYD7sZoJTzpM4PO2vG9/J+ dnEc74NVLXdTgnVldVlj01bJf+NppY8mlc1ILU8UucBrYFwXZNvF8wP/SzuhI0e1 +0T0bMELt6B3AwNCh6+sTalFeFCd4gwLJ4fr4EJ11RFQK924U/3g3GGbMNCA+cyW sRoig2ozJlAunyYSb79CAGsKLI8IhUtELMl334xL8NRB6yoGtVdy1r0R4/0nyZn+ ZrcysT5VS14rxo8VQ4eEyLtvBV8yznREoYeTaQfo0JJ27DpKQmEFQFYyU38RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU06TzwGeyfNgyeX5kB59PdK3KYdEwHwYDVR0j BBgwFoAUPH+nTN/x5HUkeWAmcvJqiDx6YFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5 ZHQvMC8zQzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0ZBNzRDREZGMUU0NzUy NDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5ZHQvMC8z QzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwLLD5tXB/pV5OQuWbURD8CpMidn/DtdFfVAnyhmLko8ZmHDSxP5zSvFcWGZG MAcAywvcyBK8VDe73MnIto0gr40M+9HmbH5Pb74cciY79STwVEF+Xyh5CCnUFYTw qGnHnVwlkD+CG/TXh4kqjIKSxgVdoqIWbD7ryOxrxzofhMPHcshWl5dhguZ9pjaA NSVvGao3bVkdFl1X+t19JlbPoPd02/MzN1bV1mbRfbQK8IfwmMkJ+wA0RYdeOVaQ ubQHurm0sL0jrFlghoPQiys1irLrSf3UfQd7tRLiSlo6VJvODtcUyrHclg1VBm5U UlgcDwJFQcgv5n6ya+fUMYFbQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:08:02 2026 by rpki-client