$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft File: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft (raw, json) Hash identifier: 4O34HFw0dbQtz3iQPop3tXJ5iEEmzD2c0EKWMT0tLLA= Subject key identifier: 8A:31:24:11:5C:3D:D8:E7:0C:BD:72:35:26:15:38:C7:FE:02:DE:E1 Authority key identifier: 3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6 Certificate issuer: /CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6 Certificate serial: 2FCBA13BAEFF95BB7909F5D86800C1D9B9648998 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft Manifest number: 3D Signing time: Wed 29 Jul 2026 06:15:01 +0000 Manifest this update: Wed 29 Jul 2026 06:10:01 +0000 Manifest next update: Thu 30 Jul 2026 09:21:01 +0000 Files and hashes: 1: 323830343a363137303a3a2f33322d3334203d3e20323639323334.roa (hash: GDWiVyYfYIGnY9YXPjOtHtg7fsHIeEu+qkoct3a9MEM=) 2: 34352e3138322e37362e302f32322d3234203d3e20323639323334.roa (hash: y6WkApazOcWL7P7yXx57R2acGoFqorCQklwtt2CakBE=) 3: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl (hash: QaMtJhB56zcspjd6sY4ijmeShSy+Gk75ZQTA80VNKDk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 30 Jul 2026 09:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cb:a1:3b:ae:ff:95:bb:79:09:f5:d8:68:00:c1:d9:b9:64:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6 Validity Not Before: Jul 29 06:10:01 2026 GMT Not After : Jul 30 09:21:01 2026 GMT Subject: CN=8A3124115C3DD8E70CBD7235261538C7FE02DEE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:01:bb:42:65:d8:cc:5d:da:1f:ca:cd:e0: 40:f7:d0:f7:fc:f7:e8:eb:e7:1d:53:29:f9:e2:43: 32:46:7e:5e:42:81:15:3e:7e:53:a1:15:28:7d:c9: 16:fb:0b:36:bf:cf:9b:0b:3a:3d:bc:4c:31:ac:c7: bf:e4:ed:f5:b6:c2:1d:05:1b:bc:00:a2:7f:86:83: 74:d8:1c:b0:08:63:e0:47:c9:3d:9a:b4:14:78:4f: 7a:87:5f:86:2b:78:e4:78:d0:b8:b1:a3:2d:1c:5d: 0d:9d:08:26:61:6b:c7:a9:10:47:00:9e:b8:9d:57: fe:76:c8:77:92:11:38:99:31:53:14:1a:be:dc:ea: a4:a8:6a:c3:0e:87:98:e4:0c:f4:3c:a4:25:d4:40: 2f:20:a5:39:c1:5e:26:e3:e9:cd:a6:9c:8f:35:ae: d1:78:ab:6b:ad:9c:40:78:f5:c9:af:c6:2f:cc:04: 55:da:f7:c4:56:61:3e:90:ee:79:df:af:7d:1d:94: 7c:0e:a3:eb:2b:f0:92:1f:a0:cf:a7:8b:88:8c:3e: b1:29:d5:f9:04:c6:62:74:a7:9e:8c:c7:54:39:f9: 26:0a:ce:26:55:19:9a:f4:f8:22:f1:95:73:11:da: 14:18:80:57:b0:09:52:eb:11:2b:30:35:29:98:47: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:31:24:11:5C:3D:D8:E7:0C:BD:72:35:26:15:38:C7:FE:02:DE:E1 X509v3 Authority Key Identifier: keyid:3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d3:29:94:4b:20:a5:c0:9e:bf:36:a2:48:93:d6:82:b2:24: 92:a5:c5:fc:ce:a1:96:e5:79:3f:9a:9e:7e:f4:9a:c5:59:78: 0c:57:dc:b5:95:3b:5f:b2:64:23:f6:b2:40:3d:cd:7d:e1:f6: 83:f0:38:5c:38:3d:62:f1:39:0a:e3:66:32:c5:8f:09:94:e0: c5:7d:2b:50:d2:d6:60:2d:6b:c3:64:f2:3a:5e:ad:32:b5:f2: 87:1f:64:a5:9e:91:47:20:16:2b:59:29:5b:fa:6e:e1:cf:39: 22:f7:96:9c:48:94:66:2c:e1:ac:8c:c3:86:03:80:0d:02:a6: be:7a:f1:c3:af:d6:7d:0b:e8:09:94:be:04:59:5a:6f:f0:de: e1:56:b1:cb:29:dc:78:e4:96:78:6b:0f:55:cf:8a:eb:54:7a: 2e:28:83:b3:66:f3:f1:21:2b:d2:d1:2f:82:7e:7f:00:28:6e: 83:08:09:9d:fc:46:33:fe:92:87:b1:e1:5a:ad:a5:ce:c3:fa: 41:10:3a:83:d8:a5:29:03:72:88:e1:d6:42:47:54:bf:e4:12: a3:ed:72:c1:69:08:38:d8:98:10:2d:cd:91:f0:85:a4:c6:d6: 9d:ec:dd:e7:81:da:4d:1c:40:78:df:7b:e3:38:58:28:0a:8c: f4:a8:0f:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL8uhO67/lbt5CfXYaADB2blkiZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2OEE5N0IyQzRBMDQ1NEY3OTREQkNCN0Y3MTI4OURC MTcxQTdCNjAeFw0yNjA3MjkwNjEwMDFaFw0yNjA3MzAwOTIxMDFaMDMxMTAvBgNV BAMTKDhBMzEyNDExNUMzREQ4RTcwQ0JENzIzNTI2MTUzOEM3RkUwMkRFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyQG7QmXYzF3aH8rN4ED30Pf8 9+jr5x1TKfniQzJGfl5CgRU+flOhFSh9yRb7Cza/z5sLOj28TDGsx7/k7fW2wh0F G7wAon+Gg3TYHLAIY+BHyT2atBR4T3qHX4YreOR40Lixoy0cXQ2dCCZha8epEEcA nridV/52yHeSETiZMVMUGr7c6qSoasMOh5jkDPQ8pCXUQC8gpTnBXibj6c2mnI81 rtF4q2utnEB49cmvxi/MBFXa98RWYT6Q7nnfr30dlHwOo+sr8JIfoM+ni4iMPrEp 1fkExmJ0p56Mx1Q5+SYKziZVGZr0+CLxlXMR2hQYgFewCVLrESswNSmYR6oPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUijEkEVw92OcMvXI1JhU4x/4C3uEwHwYDVR0j BBgwFoAUPGipeyxKBFT3lNvLf3EonbFxp7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR UVYvMC8zQzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDNjhBOTdCMkM0QTA0NTRG Nzk0REJDQjdGNzEyODlEQjE3MUE3QjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlRUVYvMC8z QzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGNMplEsgpcCevzaiSJPWgrIkkqXF/M6hluV5P5qefvSaxVl4DFfctZU7X7Jk I/ayQD3NfeH2g/A4XDg9YvE5CuNmMsWPCZTgxX0rUNLWYC1rw2TyOl6tMrXyhx9k pZ6RRyAWK1kpW/pu4c85IveWnEiUZizhrIzDhgOADQKmvnrxw6/WfQvoCZS+BFla b/De4VaxyynceOSWeGsPVc+K61R6LiiDs2bz8SEr0tEvgn5/AChugwgJnfxGM/6S h7HhWq2lzsP6QRA6g9ilKQNyiOHWQkdUv+QSo+1ywWkIONiYEC3NkfCFpMbWnezd 54HaTRxAeN974zhYKAqM9KgPLw== -----END CERTIFICATE-----Generated at Wed Jul 29 10:06:27 2026 by rpki-client