$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft File: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft (raw, json) Hash identifier: focdt1Pwo1ta2vj6CNt57JAfBtM+GNjfBfQD2T71kGI= Subject key identifier: 38:42:03:59:B3:83:3D:7C:2C:85:63:D8:DA:DB:E7:DD:A6:73:2F:4C Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Certificate serial: 583D11B5E1B3061CF73C048C6300F15BF764FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft Manifest number: 017E Signing time: Thu 23 Jul 2026 04:49:41 +0000 Manifest this update: Thu 23 Jul 2026 04:44:41 +0000 Manifest next update: Fri 24 Jul 2026 08:19:41 +0000 Files and hashes: 1: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (hash: Hfp1DucUOLGX558iN8StPvuFHGp7CQRLaXSkygAZbFQ=) 2: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl (hash: YKmlc7H9oixy9XwGq00AistxmuTRLCkTiPbtI05IqB8=) 3: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (hash: ctFV3kPNJK3bV9B3MLschItzKM1ihhzRapNYYOJyJ2c=) 4: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (hash: 70JQRaVTJXwvav8bFTgGxR3IrAOSwj6tnXxST/n7XC0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 08:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3d:11:b5:e1:b3:06:1c:f7:3c:04:8c:63:00:f1:5b:f7:64:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Validity Not Before: Jul 23 04:44:41 2026 GMT Not After : Jul 24 08:19:41 2026 GMT Subject: CN=38420359B3833D7C2C8563D8DADBE7DDA6732F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:1c:67:fd:fa:81:c8:7f:6e:69:2c:9e:49: c9:66:33:54:2b:53:ec:b3:5d:3a:e2:f9:81:78:f9: e4:56:b8:fc:45:82:7c:1d:38:16:80:cd:e0:8c:7a: b1:90:4b:24:35:e3:2b:4f:95:b2:12:c6:d6:8b:02: 7a:20:57:d2:4c:8a:33:93:c7:9d:0d:07:93:4c:d7: d6:96:b7:97:73:a9:34:5f:d7:24:bd:e7:c6:a4:8e: 35:a7:f0:4c:d0:b5:2f:2e:6e:13:48:85:36:ba:13: 02:52:07:7b:0d:01:34:73:42:78:8f:01:74:fd:c3: 0b:6c:ec:54:8a:04:70:c6:7a:58:3a:db:b1:28:cc: a8:2b:8d:bc:60:35:3c:4e:97:46:2f:72:99:1f:e0: 04:58:75:74:47:bc:e6:aa:47:d7:f6:e8:a3:59:7f: 16:dd:4f:5b:c2:6f:46:0b:a0:06:4c:ba:02:04:47: 6f:98:eb:be:41:d4:b7:cc:2d:44:ff:3c:ea:f4:8f: 78:39:fd:83:63:75:f1:0f:76:a8:67:d8:4c:e5:b6: 04:9f:23:19:0f:22:9d:59:b1:33:19:3d:d6:95:32: 27:30:5f:4e:34:00:d4:99:09:5f:d6:d9:59:05:82: 48:5a:3d:0a:78:75:78:fc:14:e3:7a:17:63:37:04: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:03:59:B3:83:3D:7C:2C:85:63:D8:DA:DB:E7:DD:A6:73:2F:4C X509v3 Authority Key Identifier: keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:26:92:9f:43:5a:d6:88:03:6a:31:5a:07:b5:8f:ae:e3:e1: df:9a:e7:be:0e:70:f5:18:ee:b9:9e:99:c9:82:3c:6a:30:98: 88:32:e2:fd:5d:37:f6:f6:2d:f5:73:03:90:aa:df:a1:3e:46: 08:93:75:17:ee:ba:c0:92:9c:c9:63:17:ca:5a:cd:25:5b:cf: eb:ec:3d:af:33:5c:95:00:e8:0e:35:be:24:d0:67:3f:59:72: 42:ea:66:ea:6b:b1:db:cf:f5:7a:dc:f3:13:fb:16:20:08:38: a8:8e:1e:85:f5:c1:9e:b8:dc:09:c0:59:8f:68:54:9d:80:c0: ab:1f:d7:4b:6f:78:00:04:e4:d3:cb:37:72:1a:c3:1b:0f:0b: 4c:fa:53:d2:fd:2f:70:38:28:b3:d5:68:3c:38:d9:d3:48:22: ef:1b:4e:24:0f:56:0b:5a:ba:b8:0e:1b:67:d9:1d:7c:55:14: 61:80:20:2d:05:0a:cb:96:98:89:bc:7b:11:b9:ef:2a:f5:aa: d3:80:47:e5:1f:09:d0:6e:a5:6b:cf:74:37:30:bf:1d:7d:f3: 8f:12:af:fe:e8:54:93:e7:01:71:46:0a:a3:d8:89:5b:4e:41: 69:f2:87:f4:f9:f4:c4:48:da:3c:07:8a:c0:72:2d:1f:b5:5f: d4:36:49:af -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgITWD0RteGzBhz3PASMYwDxW/dk/TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDMzI1NEVGQTVDNEU5RkRBNjc2OEQwMjk0MjQ3REY3MERB QkJFRjIyMB4XDTI2MDcyMzA0NDQ0MVoXDTI2MDcyNDA4MTk0MVowMzExMC8GA1UE AxMoMzg0MjAzNTlCMzgzM0Q3QzJDODU2M0Q4REFEQkU3RERBNjczMkY0QzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGCHGf9+oHIf25pLJ5JyWYzVCtT 7LNdOuL5gXj55Fa4/EWCfB04FoDN4Ix6sZBLJDXjK0+VshLG1osCeiBX0kyKM5PH nQ0Hk0zX1pa3l3OpNF/XJL3nxqSONafwTNC1Ly5uE0iFNroTAlIHew0BNHNCeI8B dP3DC2zsVIoEcMZ6WDrbsSjMqCuNvGA1PE6XRi9ymR/gBFh1dEe85qpH1/boo1l/ Ft1PW8JvRgugBky6AgRHb5jrvkHUt8wtRP886vSPeDn9g2N18Q92qGfYTOW2BJ8j GQ8inVmxMxk91pUyJzBfTjQA1JkJX9bZWQWCSFo9Cnh1ePwU43oXYzcEz6MCAwEA AaOCAlYwggJSMB0GA1UdDgQWBBQ4QgNZs4M9fCyFY9ja2+fdpnMvTDAfBgNVHSME GDAWgBTDJU76XE6f2mdo0ClCR99w2rvvIjAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y ZXBvL1dCWm1nd2ZXdEpweVVTMkp4OEx5SzhhQmQ0Z3ZHUlFTTFhITnE3WGU3SFUv MC9DMzI1NEVGQTVDNEU5RkRBNjc2OEQwMjk0MjQ3REY3MERBQkJFRjIyLmNybDB4 BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMjU0RUZBNUM0RTlGREE2NzY4 RDAyOTQyNDdERjcwREFCQkVGMjIuY2VyMIGcBggrBgEFBQcBCwSBjzCBjDCBiQYI KwYBBQUHMAuGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vV0Ja bWd3Zld0SnB5VVMySng4THlLOGFCZDRndkdSUVNMWEhOcTdYZTdIVS8wL0MzMjU0 RUZBNUM0RTlGREE2NzY4RDAyOTQyNDdERjcwREFCQkVGMjIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAN JpKfQ1rWiANqMVoHtY+u4+Hfmue+DnD1GO65npnJgjxqMJiIMuL9XTf29i31cwOQ qt+hPkYIk3UX7rrAkpzJYxfKWs0lW8/r7D2vM1yVAOgONb4k0Gc/WXJC6mbqa7Hb z/V63PMT+xYgCDiojh6F9cGeuNwJwFmPaFSdgMCrH9dLb3gABOTTyzdyGsMbDwtM +lPS/S9wOCiz1Wg8ONnTSCLvG04kD1YLWrq4Dhtn2R18VRRhgCAtBQrLlpiJvHsR ue8q9arTgEflHwnQbqVrz3Q3ML8dffOPEq/+6FST5wFxRgqj2IlbTkFp8of0+fTE SNo8B4rAci0ftV/UNkmv -----END CERTIFICATE-----Generated at Thu Jul 23 22:00:47 2026 by rpki-client