$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft File: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft (raw, json) Hash identifier: 1v/jcADj5X1cPGgxnH0AfSIcXWmUk+4tMMhuOxjRCnk= Subject key identifier: A7:1F:CA:E6:B1:C5:03:11:8C:A9:69:C7:1A:94:86:77:30:5D:B3:EF Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C Certificate issuer: /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C Certificate serial: 2084463860839BA2FB51F380FA12E4D8E45C070F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft Manifest number: 0425 Signing time: Sat 13 Jun 2026 01:58:00 +0000 Manifest this update: Sat 13 Jun 2026 01:53:00 +0000 Manifest next update: Sun 14 Jun 2026 03:28:00 +0000 Files and hashes: 1: 3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (hash: krCiRYpet3pgHGbXnn3BKw4D8NkVpoBbnYxsvrWatXg=) 2: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl (hash: kYFyFwZAt44zO6kTZB3CYAPgtnWTJfd9d7Wv5mfGnzA=) 3: 323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (hash: V1umr+zfw0aULo1EAVEtCgrG0n6QsyHKLXheMI+wKYI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 03:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:84:46:38:60:83:9b:a2:fb:51:f3:80:fa:12:e4:d8:e4:5c:07:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C Validity Not Before: Jun 13 01:53:00 2026 GMT Not After : Jun 14 03:28:00 2026 GMT Subject: CN=A71FCAE6B1C503118CA969C71A948677305DB3EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:69:37:29:47:6f:94:7c:c3:cd:9c:55:dc: 1f:0b:63:ec:0a:ba:ac:92:12:3d:6c:7e:8b:d2:65: fb:00:3a:3f:39:96:7a:56:af:88:0f:92:88:2a:61: 25:e8:8a:46:9e:8d:13:4e:4d:e4:a8:0e:61:7b:b4: 55:de:12:77:0e:0a:36:3c:41:8f:11:6d:c4:1d:74: 2b:d6:dc:a7:2d:6c:49:e2:18:a4:ab:38:31:0f:df: bf:e2:3c:d7:49:5a:36:bc:00:c4:3b:6a:d5:11:10: 56:1c:a5:18:ad:80:cf:e7:81:ac:13:d9:1a:fa:4d: 5e:03:71:56:c1:3c:1f:55:03:f8:79:32:d1:0b:5c: af:65:d7:99:5a:0b:b2:b8:dc:b0:3d:8a:c7:ed:a5: 00:38:d7:e2:20:2d:06:50:a8:92:3c:a5:07:4b:ab: d5:01:38:a3:a4:6f:e4:3c:7a:27:b7:39:9c:c5:d4: 2d:47:45:ec:d5:05:11:98:df:bc:a1:ef:33:ef:89: e0:d1:ad:90:a4:6b:b1:73:10:20:11:6e:72:62:b4: 7d:a0:67:e3:73:a0:11:23:32:74:e6:cc:e2:90:34: 64:ad:e0:ff:33:8a:9c:9f:a0:be:9d:2a:4a:de:d5: d4:70:3b:fa:3c:25:ec:2d:74:67:5b:4e:a6:65:47: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1F:CA:E6:B1:C5:03:11:8C:A9:69:C7:1A:94:86:77:30:5D:B3:EF X509v3 Authority Key Identifier: keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:43:47:a3:be:55:dd:bc:86:fa:99:7e:29:30:26:2e:b5:ce: 3e:9a:fb:65:9e:ac:0e:2b:88:4f:d2:64:89:46:21:78:1e:07: 59:de:5e:05:97:6b:fa:a9:49:3f:71:c3:f0:c2:34:cd:c0:79: 3f:5c:7b:e6:6b:b1:cf:63:1a:6b:e5:11:ef:03:b5:61:bd:a5: f0:12:6d:6d:d6:bd:86:b2:31:58:4d:d6:6b:7e:67:69:9f:fd: 84:2c:b8:de:f1:2a:da:44:e0:0f:65:af:04:64:f0:9e:e1:e9: cb:61:9a:ec:c7:69:3a:d8:69:1a:d8:98:bc:5b:e9:68:c4:c8: 06:41:63:9c:51:f7:ee:98:c5:a0:f9:48:70:45:d3:c8:7a:ff: 24:43:81:90:07:80:ab:1f:dd:02:0d:d7:4e:25:c9:de:9a:15: a5:a2:e0:1c:df:6a:03:83:2c:33:6d:0a:3a:71:a8:ae:46:17: fe:d4:7a:aa:31:59:e6:0a:6e:28:2e:68:2f:26:41:98:d7:c2: f2:1a:f8:0b:0b:40:db:b9:46:4d:c0:84:f3:49:1f:6c:57:01: 62:89:db:dc:50:6a:22:44:9d:37:72:06:c8:3b:e5:5b:bc:72: c4:87:c9:fd:11:44:28:0c:0f:d5:7a:d1:b1:53:27:92:5d:70: 59:a8:6a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIIRGOGCDm6L7UfOA+hLk2ORcBw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OEJGREI0QkFEM0NCMzhBQ0RBOEZBQzkxOUExQTI0 REVERUI1QzAeFw0yNjA2MTMwMTUzMDBaFw0yNjA2MTQwMzI4MDBaMDMxMTAvBgNV BAMTKEE3MUZDQUU2QjFDNTAzMTE4Q0E5NjlDNzFBOTQ4Njc3MzA1REIzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJmk3KUdvlHzDzZxV3B8LY+wK uqySEj1sfovSZfsAOj85lnpWr4gPkogqYSXoikaejRNOTeSoDmF7tFXeEncOCjY8 QY8RbcQddCvW3KctbEniGKSrODEP37/iPNdJWja8AMQ7atUREFYcpRitgM/ngawT 2Rr6TV4DcVbBPB9VA/h5MtELXK9l15laC7K43LA9isftpQA41+IgLQZQqJI8pQdL q9UBOKOkb+Q8eie3OZzF1C1HRezVBRGY37yh7zPvieDRrZCka7FzECARbnJitH2g Z+NzoBEjMnTmzOKQNGSt4P8zipyfoL6dKkre1dRwO/o8JewtdGdbTqZlRzMTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpx/K5rHFAxGMqWnHGpSGdzBds+8wHwYDVR0j BBgwFoAU01i/20utPLOKzaj6yRmhok3t61wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo aTIvMS9EMzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNThCRkRCNEJBRDNDQjM4 QUNEQThGQUM5MTlBMUEyNERFREVCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURoaTIvMS9E MzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbkNHo75V3byG+pl+KTAmLrXOPpr7ZZ6sDiuIT9JkiUYheB4HWd5eBZdr+qlJ P3HD8MI0zcB5P1x75muxz2Maa+UR7wO1Yb2l8BJtbda9hrIxWE3Wa35naZ/9hCy4 3vEq2kTgD2WvBGTwnuHpy2Ga7MdpOthpGtiYvFvpaMTIBkFjnFH37pjFoPlIcEXT yHr/JEOBkAeAqx/dAg3XTiXJ3poVpaLgHN9qA4MsM20KOnGorkYX/tR6qjFZ5gpu KC5oLyZBmNfC8hr4CwtA27lGTcCE80kfbFcBYonb3FBqIkSdN3IGyDvlW7xyxIfJ /RFEKAwP1XrRsVMnkl1wWahqwg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:59:26 2026 by rpki-client