$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft File: 2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json) Hash identifier: Umxx71VVlTuBybkkqaPVH17oObmbdzIlcNl4VuXrpKU= Subject key identifier: A2:3C:25:66:44:6D:F3:96:B4:85:8C:22:BD:B6:AB:87:0A:95:E6:7E Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 13E914002A004EFFD83213392D066DAA34DA49E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft Manifest number: FA Signing time: Fri 17 Apr 2026 04:35:22 +0000 Manifest this update: Fri 17 Apr 2026 04:30:22 +0000 Manifest next update: Sat 18 Apr 2026 08:20:22 +0000 Files and hashes: 1: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=) 2: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=) 3: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: bHfWH5XSOvsdQ9P+OBdYK/TJ4fIxEdrxy40dq5n3Nko=) 4: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 08:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e9:14:00:2a:00:4e:ff:d8:32:13:39:2d:06:6d:aa:34:da:49:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Apr 17 04:30:22 2026 GMT Not After : Apr 18 08:20:22 2026 GMT Subject: CN=A23C2566446DF396B4858C22BDB6AB870A95E67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:a3:66:ed:e4:fe:4c:bd:72:1c:93:46:ed: 0f:15:d5:16:7d:63:87:f2:29:c8:12:d7:c1:0f:25: 5d:02:90:1d:68:14:84:81:e9:1e:cd:62:d4:b4:9c: 2c:72:b6:c1:ab:42:39:68:bf:1a:bd:69:30:61:6a: e8:9d:53:c6:1f:49:32:e2:f1:59:42:ec:ce:51:ba: 5c:da:14:09:fd:45:61:36:b5:1a:b5:df:9c:d4:e7: b3:30:d2:4f:b8:f1:7b:01:6f:d0:49:26:03:63:2b: 68:7b:2a:4b:a6:75:6b:e2:47:14:38:aa:d1:af:9b: 9d:7a:5a:82:2c:3d:c3:c6:df:6d:dd:e6:1e:b8:8e: 61:cf:27:d1:54:11:e0:74:28:81:3e:6c:10:f2:23: 8d:e2:c0:c1:cc:5a:e8:97:ed:2a:82:f8:51:58:c6: ce:f8:08:b3:e7:0f:bd:f9:82:4d:9e:f1:9f:94:94: 11:7a:7d:4e:73:29:3c:21:89:96:df:5f:35:2d:06: a6:d4:a0:8d:61:e0:b4:55:ac:2d:7d:8a:3b:39:0b: 35:3c:e0:13:1b:12:46:00:4d:69:5a:30:e6:2f:69: b2:36:d9:e8:83:d3:3b:28:de:38:49:07:b4:15:d1: 6c:c3:31:34:7d:84:cc:85:6b:3b:9c:4e:5c:db:a1: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:25:66:44:6D:F3:96:B4:85:8C:22:BD:B6:AB:87:0A:95:E6:7E X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f4:00:08:d7:bb:e9:f4:31:30:75:1a:41:d8:47:2a:96:0c: 07:cb:bd:1d:12:ac:4f:dc:52:2c:96:6e:9b:5c:8d:81:ed:78: 3e:25:ec:c2:57:50:9b:77:ec:0e:14:60:4a:40:4b:5c:69:05: 16:b1:41:26:e9:13:cc:58:f2:69:74:f9:a2:7a:13:3c:1c:ed: 8b:79:fd:cd:ab:13:d2:5e:7a:b6:b4:65:12:07:4e:ba:c9:6d: aa:00:f8:e2:91:8b:fb:72:34:18:d8:bb:ce:ad:17:d7:29:89: da:b4:0c:dc:bb:29:12:ef:2d:3e:12:f1:16:05:67:f6:40:dd: a0:30:11:86:af:6b:61:ce:6b:50:71:34:5d:66:3a:0d:24:83: 80:5b:27:09:43:e0:83:0f:3b:de:1a:e9:cc:32:eb:3a:5f:2c: bb:be:9b:38:9b:56:cb:9d:12:22:50:ac:d4:9b:d8:cd:63:c8: 9a:00:39:b2:98:43:05:63:9f:a6:7d:1e:7d:d8:0e:63:3a:0f: 4a:28:a6:f4:72:8d:09:b2:d4:a1:7a:34:31:24:eb:ad:27:08: ed:0a:bb:9e:b8:44:2d:65:75:bd:d7:98:59:3c:5e:66:43:f2: 5f:32:e8:0f:49:a0:c4:ed:16:68:f7:8b:c3:25:f4:e7:4c:11: 5e:48:f1:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE+kUACoATv/YMhM5LQZtqjTaSecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNjA0MTcwNDMwMjJaFw0yNjA0MTgwODIwMjJaMDMxMTAvBgNV BAMTKEEyM0MyNTY2NDQ2REYzOTZCNDg1OEMyMkJEQjZBQjg3MEE5NUU2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HaNm7eT+TL1yHJNG7Q8V1RZ9 Y4fyKcgS18EPJV0CkB1oFISB6R7NYtS0nCxytsGrQjlovxq9aTBhauidU8YfSTLi 8VlC7M5RulzaFAn9RWE2tRq135zU57Mw0k+48XsBb9BJJgNjK2h7KkumdWviRxQ4 qtGvm516WoIsPcPG323d5h64jmHPJ9FUEeB0KIE+bBDyI43iwMHMWuiX7SqC+FFY xs74CLPnD735gk2e8Z+UlBF6fU5zKTwhiZbfXzUtBqbUoI1h4LRVrC19ijs5CzU8 4BMbEkYATWlaMOYvabI22eiD0zso3jhJB7QV0WzDMTR9hMyFazucTlzboa6PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUojwlZkRt85a0hYwivbarhwqV5n4wHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw/QACNe76fQxMHUaQdhHKpYMB8u9HRKsT9xSLJZum1yNge14PiXswldQm3fs DhRgSkBLXGkFFrFBJukTzFjyaXT5onoTPBzti3n9zasT0l56trRlEgdOusltqgD4 4pGL+3I0GNi7zq0X1ymJ2rQM3LspEu8tPhLxFgVn9kDdoDARhq9rYc5rUHE0XWY6 DSSDgFsnCUPggw873hrpzDLrOl8su76bOJtWy50SIlCs1JvYzWPImgA5sphDBWOf pn0efdgOYzoPSiim9HKNCbLUoXo0MSTrrScI7Qq7nrhELWV1vdeYWTxeZkPyXzLo D0mgxO0WaPeLwyX050wRXkjxoQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:20:45 2026 by rpki-client