$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft File: 3A039835A68C92594BA889BF185A560E86C0CFD1.mft (raw, json) Hash identifier: k8jSeSadU07jc3rKwtK9y2e/+Vi9WgUGUaetpi6y8uw= Subject key identifier: C7:4E:D2:EB:9F:55:CE:09:BA:17:4E:06:58:45:E9:08:54:6F:F0:EB Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1 Certificate issuer: /CN=3A039835A68C92594BA889BF185A560E86C0CFD1 Certificate serial: 65B1D28221222629AD439040C31C54BA0FA45A22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft Manifest number: 0158 Signing time: Mon 02 Mar 2026 03:05:11 +0000 Manifest this update: Mon 02 Mar 2026 03:00:11 +0000 Manifest next update: Tue 03 Mar 2026 03:24:11 +0000 Files and hashes: 1: 323830343a393435633a3a2f33322d3332203d3e203631363234.roa (hash: O5a/in+ZSMm/aJV2VJLL+YxhXUuvZKOUdRvUKrq3RIo=) 2: 323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa (hash: grV4HIWn/ymWH/bJnnLr6SwzuCZFSH/DBgecy+7gXO8=) 3: 3A039835A68C92594BA889BF185A560E86C0CFD1.crl (hash: S3ZSQblHyazU8UBd/pIBRf5Zij2wGSSrSeYR79Gqnk0=) 4: 323830343a393435633a313030303a3a2f34382d3438203d3e203631363234.roa (hash: zS/bJNuceZb7NmBvP1/JJiijlMlSqOLFQVIErnpnTaI=) 5: 323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa (hash: STkPyccVeUxaO9xk5tWcF3qQMhapGN9zyhQKh5ySEZ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 03:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b1:d2:82:21:22:26:29:ad:43:90:40:c3:1c:54:ba:0f:a4:5a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1 Validity Not Before: Mar 2 03:00:11 2026 GMT Not After : Mar 3 03:24:11 2026 GMT Subject: CN=C74ED2EB9F55CE09BA174E065845E908546FF0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:d1:5a:cb:4b:c7:3a:ef:84:97:16:3a:02: 0f:34:0a:6e:8a:cb:f6:5a:27:fb:26:f2:2a:34:08: f5:91:be:f8:44:e4:6d:66:20:ec:94:a2:d9:cf:cd: 9f:79:9d:e3:2a:8d:22:b4:d3:32:34:ca:15:e2:b5: 75:d6:bd:3a:ee:f3:2e:22:cf:87:dc:f8:97:d7:23: 90:e9:6c:56:44:86:ee:aa:58:c1:90:17:26:e1:2d: 07:61:cb:d1:d1:66:a2:1a:20:f5:b9:14:27:0d:00: cf:ed:37:cc:ad:e0:a8:8a:2f:aa:26:87:f8:bb:a9: d0:e0:cf:f4:47:72:d5:0b:c4:1a:0d:3f:cc:a0:41: 41:31:cc:07:b9:ca:4d:89:09:0e:99:cc:31:e7:12: bf:9e:26:97:e6:2e:b1:44:5b:b3:28:81:54:cb:4e: e0:bf:06:e1:fa:22:58:75:56:76:49:bc:e9:80:e9: c6:97:36:0c:f6:1a:66:0f:2f:47:2d:16:00:3c:21: b3:41:5e:f6:b4:12:78:82:e6:ce:ed:03:3f:6c:4d: 1b:cd:b4:3c:de:26:1e:ac:83:f1:51:2e:4a:c2:dd: 2c:0a:30:f3:30:15:31:22:1d:d4:d2:64:57:19:17: 13:2d:53:ef:bd:cb:d0:c6:e4:4d:e2:1a:74:17:d4: b8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:D2:EB:9F:55:CE:09:BA:17:4E:06:58:45:E9:08:54:6F:F0:EB X509v3 Authority Key Identifier: keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:39:61:bb:4c:56:05:c6:72:59:2e:34:a1:f0:71:6b:c4:56: 4e:45:d9:38:de:0d:ed:a6:02:fb:cf:9e:d3:48:62:b5:6b:fc: f1:7c:fc:50:52:95:8f:0f:01:83:76:f2:ed:e3:28:d5:5d:c1: 27:e5:3d:18:07:a3:03:dc:6d:53:b9:86:06:2f:a3:09:f7:16: 44:4d:4e:52:0f:c4:1c:8e:50:f6:ae:64:bb:ce:a8:2e:46:f4: 46:cd:c9:86:40:ac:38:eb:5a:48:a7:be:c9:8f:4a:75:8b:64: f6:14:95:39:b5:96:5a:c9:14:de:b4:2a:63:75:8f:ae:d6:80: 98:3c:fa:35:b2:f4:e3:e4:31:ae:3d:98:7b:5f:a4:6e:7b:ad: 84:ae:87:96:43:13:6e:a4:38:42:0b:f6:82:74:a9:26:35:d7: 38:40:f0:71:93:6b:05:ca:ea:f9:6a:59:48:b3:18:f6:75:af: 8f:b9:de:ce:37:05:95:12:27:ad:00:62:38:cb:1d:0c:47:5e: 6f:4e:f9:12:83:83:be:a8:00:49:86:06:cf:cf:e9:28:ed:51: d8:31:a1:88:50:87:89:7d:2f:79:86:7d:29:00:d1:81:60:e0: da:a3:e5:4e:a8:5e:a4:e1:31:7f:32:8b:20:61:d1:2a:08:77: 95:e4:ba:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZbHSgiEiJimtQ5BAwxxUug+kWiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwMzk4MzVBNjhDOTI1OTRCQTg4OUJGMTg1QTU2MEU4 NkMwQ0ZEMTAeFw0yNjAzMDIwMzAwMTFaFw0yNjAzMDMwMzI0MTFaMDMxMTAvBgNV BAMTKEM3NEVEMkVCOUY1NUNFMDlCQTE3NEUwNjU4NDVFOTA4NTQ2RkYwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBdFay0vHOu+ElxY6Ag80Cm6K y/ZaJ/sm8io0CPWRvvhE5G1mIOyUotnPzZ95neMqjSK00zI0yhXitXXWvTru8y4i z4fc+JfXI5DpbFZEhu6qWMGQFybhLQdhy9HRZqIaIPW5FCcNAM/tN8yt4KiKL6om h/i7qdDgz/RHctULxBoNP8ygQUExzAe5yk2JCQ6ZzDHnEr+eJpfmLrFEW7MogVTL TuC/BuH6Ilh1VnZJvOmA6caXNgz2GmYPL0ctFgA8IbNBXva0EniC5s7tAz9sTRvN tDzeJh6sg/FRLkrC3SwKMPMwFTEiHdTSZFcZFxMtU++9y9DG5E3iGnQX1LidAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUx07S659Vzgm6F04GWEXpCFRv8OswHwYDVR0j BBgwFoAUOgOYNaaMkllLqIm/GFpWDobAz9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9w WG0vMC8zQTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMDM5ODM1QTY4QzkyNTk0 QkE4ODlCRjE4NUE1NjBFODZDMENGRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9wWG0vMC8z QTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyjlhu0xWBcZyWS40ofBxa8RWTkXZON4N7aYC+8+e00hitWv88Xz8UFKVjw8B g3by7eMo1V3BJ+U9GAejA9xtU7mGBi+jCfcWRE1OUg/EHI5Q9q5ku86oLkb0Rs3J hkCsOOtaSKe+yY9KdYtk9hSVObWWWskU3rQqY3WPrtaAmDz6NbL04+Qxrj2Ye1+k bnuthK6HlkMTbqQ4Qgv2gnSpJjXXOEDwcZNrBcrq+WpZSLMY9nWvj7nezjcFlRIn rQBiOMsdDEdeb075EoODvqgASYYGz8/pKO1R2DGhiFCHiX0veYZ9KQDRgWDg2qPl TqhepOExfzKLIGHRKgh3leS63g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:16 2026 by rpki-client