$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft File: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json) Hash identifier: 6ukwD74Y67BTvQRMtudp656SvIeBz1Z0ZYFBBTCH6CA= Subject key identifier: 9C:73:EF:82:6C:1D:43:DC:F5:F2:E8:A5:81:AB:1B:16:19:3F:F8:2D Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 Certificate issuer: /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Certificate serial: 3A61A5F8EF744B33B3B3A74216C264F158E7857F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject info access: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft Manifest number: 018D Signing time: Thu 26 Mar 2026 11:45:26 +0000 Manifest this update: Thu 26 Mar 2026 11:40:26 +0000 Manifest next update: Fri 27 Mar 2026 13:54:26 +0000 Files and hashes: 1: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=) 2: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=) 3: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: CQHMzUlShfqkm5AzPPK9rizvBEbHb06TX4DucIKhRVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 13:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:61:a5:f8:ef:74:4b:33:b3:b3:a7:42:16:c2:64:f1:58:e7:85:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Validity Not Before: Mar 26 11:40:26 2026 GMT Not After : Mar 27 13:54:26 2026 GMT Subject: CN=9C73EF826C1D43DCF5F2E8A581AB1B16193FF82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:fe:3e:94:08:99:ca:25:e7:57:a9:23:81: ee:4d:10:a9:51:da:9f:2e:9c:fc:12:cf:3b:3d:cc: 01:c7:5a:3b:43:9c:c7:00:80:d3:5a:f1:86:78:67: 80:30:c9:dc:61:74:ad:95:07:a0:a6:84:f0:22:53: 74:27:70:26:05:67:58:da:a9:e5:82:b1:46:01:de: 1b:b6:49:4c:33:35:23:92:47:4b:40:cd:89:87:d0: 76:a1:f9:42:2b:ee:f1:88:7f:63:2d:ae:02:9b:1a: 28:ea:51:00:e8:0b:03:6b:d3:55:8a:f9:86:e2:17: 70:9a:68:d3:ca:05:0a:b1:ea:41:5e:6f:90:bc:6b: 3e:fa:ff:94:d3:ef:14:53:9c:67:c3:df:42:3c:80: 41:de:8e:a5:7f:62:b4:04:f1:47:e2:56:61:46:28: 17:91:a5:5c:b2:57:51:25:9a:86:60:9f:d8:7d:eb: b0:c8:d5:45:01:92:41:52:df:cc:ff:bf:0c:0d:25: 63:79:f3:8c:70:d7:11:e1:83:0d:90:2c:b1:21:28: ca:c4:7f:df:fa:d5:de:bb:d7:d4:51:88:36:6d:4a: 04:16:7a:fa:55:6f:df:ea:c2:83:23:ec:61:05:12: 05:e5:af:c3:6f:53:a6:53:ca:a3:b1:77:de:1b:60: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:EF:82:6C:1D:43:DC:F5:F2:E8:A5:81:AB:1B:16:19:3F:F8:2D X509v3 Authority Key Identifier: keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e3:42:10:c3:a7:2e:dd:09:7a:eb:f0:fa:b4:d7:1e:07:04: f4:d1:30:16:44:66:81:74:84:98:a9:84:0a:10:a7:eb:89:29: d4:1f:f1:01:53:44:b6:21:fb:11:20:87:bf:73:98:f8:f5:04: ee:bc:2f:08:3f:4d:71:e3:89:89:38:80:3a:be:62:96:95:b6: 5c:c6:3e:e4:58:e4:90:10:cb:5b:f5:60:a0:95:68:47:53:82: 48:af:a3:9c:50:24:69:5d:3b:e7:60:cd:e1:64:18:73:61:cc: 28:07:b5:86:1b:19:91:5b:41:d2:8b:1a:cb:51:0b:a1:65:e0: 86:95:fb:03:e5:93:38:8c:b0:9a:86:0b:93:40:3f:9e:64:7c: 39:ac:28:0c:57:0f:66:81:d9:ae:d2:8c:7d:fd:e1:5d:40:74: 48:d6:eb:e3:d4:11:2e:26:e2:d6:20:31:93:3a:04:9b:e6:7c: 4d:b0:0a:2b:76:47:5b:b1:ea:3b:40:25:e1:af:98:84:ea:25: 84:d1:f0:22:3e:9e:1c:41:32:3e:72:f4:66:88:ae:84:56:38: dc:00:9d:6f:40:94:6a:7d:d6:c3:67:ad:18:68:b9:c1:ab:72: b1:30:33:e2:3d:bf:93:f6:ed:b1:47:e2:f9:38:76:87:dd:7d: 67:88:d4:0b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUOmGl+O90SzOzs6dCFsJk8VjnhX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1 QjVBQTQwNzAeFw0yNjAzMjYxMTQwMjZaFw0yNjAzMjcxMzU0MjZaMDMxMTAvBgNV BAMTKDlDNzNFRjgyNkMxRDQzRENGNUYyRThBNTgxQUIxQjE2MTkzRkY4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84P4+lAiZyiXnV6kjge5NEKlR 2p8unPwSzzs9zAHHWjtDnMcAgNNa8YZ4Z4AwydxhdK2VB6CmhPAiU3QncCYFZ1ja qeWCsUYB3hu2SUwzNSOSR0tAzYmH0Hah+UIr7vGIf2MtrgKbGijqUQDoCwNr01WK +YbiF3CaaNPKBQqx6kFeb5C8az76/5TT7xRTnGfD30I8gEHejqV/YrQE8UfiVmFG KBeRpVyyV1ElmoZgn9h967DI1UUBkkFS38z/vwwNJWN584xw1xHhgw2QLLEhKMrE f9/61d6719RRiDZtSgQWevpVb9/qwoMj7GEFEgXlr8NvU6ZTyqOxd94bYDz5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUnHPvgmwdQ9z18uilgasbFhk/+C0wHwYDVR0j BBgwFoAUMySh1yxcAZHaG0e4v9G8hFtapAcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ldFNMVm54eDUyWG0xdkdLdVhOazRiclBFblJHRTNWUVFFN3FVYjZFcFFK LzAvMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1QjVBQTQwNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzI0QTFENzJDNUMwMTkxREEx QjQ3QjhCRkQxQkM4NDVCNUFBNDA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2V0 U0xWbnh4NTJYbTF2R0t1WE5rNGJyUEVuUkdFM1ZRUUU3cVViNkVwUUovMC8zMzI0 QTFENzJDNUMwMTkxREExQjQ3QjhCRkQxQkM4NDVCNUFBNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA t+NCEMOnLt0Jeuvw+rTXHgcE9NEwFkRmgXSEmKmEChCn64kp1B/xAVNEtiH7ESCH v3OY+PUE7rwvCD9NceOJiTiAOr5ilpW2XMY+5FjkkBDLW/VgoJVoR1OCSK+jnFAk aV0752DN4WQYc2HMKAe1hhsZkVtB0osay1ELoWXghpX7A+WTOIywmoYLk0A/nmR8 OawoDFcPZoHZrtKMff3hXUB0SNbr49QRLibi1iAxkzoEm+Z8TbAKK3ZHW7HqO0Al 4a+YhOolhNHwIj6eHEEyPnL0ZoiuhFY43ACdb0CUan3Ww2etGGi5watysTAz4j2/ k/btsUfi+Th2h919Z4jUCw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:20 2026 by rpki-client