$ rpki-client -vvf rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft File: 3EB8F32F868764375318F9AF4199127B28A8178E.mft (raw, json) Hash identifier: nbeveT4fJ4QDBX/Y7c8NTjo8h7hi+0MxJXpddlcLTsI= Subject key identifier: 25:03:8B:86:72:04:A7:61:97:11:AF:55:7B:C7:BA:0E:D9:91:97:AA Authority key identifier: 3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E Certificate issuer: /CN=3EB8F32F868764375318F9AF4199127B28A8178E Certificate serial: 7A7088A78BBE6A80FFFDEF8A46C7AECB4B0F5DAC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer Subject info access: rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft Manifest number: C2 Signing time: Fri 17 Apr 2026 07:50:18 +0000 Manifest this update: Fri 17 Apr 2026 07:45:18 +0000 Manifest next update: Sat 18 Apr 2026 11:45:18 +0000 Files and hashes: 1: 3EB8F32F868764375318F9AF4199127B28A8178E.crl (hash: 5H70nHrL1n/qG5AykXl1XkhaS3IClZf/XRsIOpuZz8A=) 2: 3230312e37312e3230302e302f32322d3234203d3e20323730333031.roa (hash: bMaZFU6eTV4J8KyhJsYqEXDpoT4TyfYUZ/Sa0qHbE90=) 3: 323830343a363966303a3a2f33322d3438203d3e20323730333031.roa (hash: vceFRLcssuyZkrkMU5zJUm8ZoW/HgWMIgq+8EIbES+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 11:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:70:88:a7:8b:be:6a:80:ff:fd:ef:8a:46:c7:ae:cb:4b:0f:5d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EB8F32F868764375318F9AF4199127B28A8178E Validity Not Before: Apr 17 07:45:18 2026 GMT Not After : Apr 18 11:45:18 2026 GMT Subject: CN=25038B867204A7619711AF557BC7BA0ED99197AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:ba:bb:b2:9a:05:84:6d:48:70:7e:34:fc: a8:1e:c4:a5:4c:dd:dc:07:aa:17:ed:06:82:ed:08: 8c:24:77:f2:c1:72:22:45:de:de:4c:b2:3a:88:0d: 9d:25:ec:87:db:6f:48:ee:11:aa:b3:06:33:b7:2b: 3b:2d:8e:40:1f:d9:97:38:da:ed:1a:64:00:a2:71: 1d:48:62:fb:f9:17:4a:d8:89:9f:13:34:5b:22:5d: 86:4b:81:be:00:08:9e:f9:19:99:87:95:f3:39:6c: 3f:92:f7:70:43:82:4a:f4:15:d4:8c:e0:8e:1c:91: 12:99:9c:c7:73:4f:1e:2d:7b:a6:91:d7:cf:f1:d1: d3:2b:04:1f:ab:ea:b3:12:e4:af:3c:71:e0:b0:e7: 75:c5:c1:13:a3:04:19:d6:c4:6e:f6:5c:19:96:78: 8d:62:fc:88:c1:72:42:f4:31:64:de:6b:24:63:45: be:78:78:58:1f:8f:60:2b:84:85:0d:0d:db:07:b7: 45:e6:14:3c:2c:e0:21:c2:19:f1:1d:8d:99:db:9a: 2d:98:1c:b8:55:70:3f:24:8c:62:0b:42:72:b9:46: 01:88:52:1b:c1:14:a5:1b:87:62:87:8f:8d:cb:e4: 47:b5:da:f6:0d:04:60:c8:f0:65:b2:cc:cf:32:50: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:03:8B:86:72:04:A7:61:97:11:AF:55:7B:C7:BA:0E:D9:91:97:AA X509v3 Authority Key Identifier: keyid:3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9c:e1:a5:3a:38:99:b1:74:65:71:18:6f:5d:6e:a3:c6:9c: 60:15:f8:b9:76:9f:f7:dc:77:f5:56:e8:24:1e:8f:01:0f:05: ab:1f:32:de:92:e7:eb:48:80:8d:78:83:0c:81:ac:8b:a0:c9: 5f:84:7a:48:02:d3:75:c8:e0:1d:d8:40:2c:8a:1f:12:30:a0: 05:6a:94:4c:89:12:a6:35:3f:58:2e:f6:a5:c2:18:0b:48:75: 2d:07:61:28:5b:fc:c5:e7:59:1f:9b:44:7e:df:1f:da:75:97: 0b:c6:96:3c:2f:89:ba:ea:d4:3e:f2:bb:6e:f0:bf:57:ce:dc: 00:b5:c4:dd:45:22:d1:16:ba:2a:ef:e9:22:94:bf:17:29:7c: 8a:c3:98:99:63:19:65:76:0b:aa:94:d8:4b:81:5f:ab:d8:80: d9:c5:0e:1f:e8:49:66:86:c3:34:86:4d:c4:24:86:fc:a9:15: c5:b2:d6:5c:a4:6d:bb:1f:83:f4:bc:b2:36:66:ce:07:37:fb: b5:95:94:c5:c0:cd:4c:7f:6e:9e:09:ae:64:d9:da:f0:9b:66: 00:c9:7d:75:58:11:32:e9:c8:8a:fd:eb:84:e3:52:98:4d:a0: f7:6b:69:3e:32:0b:38:fb:0d:26:a6:69:ad:0a:dc:9d:e4:c5: 25:b3:97:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUenCIp4u+aoD//e+KRseuy0sPXawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCOEYzMkY4Njg3NjQzNzUzMThGOUFGNDE5OTEyN0Iy OEE4MTc4RTAeFw0yNjA0MTcwNzQ1MThaFw0yNjA0MTgxMTQ1MThaMDMxMTAvBgNV BAMTKDI1MDM4Qjg2NzIwNEE3NjE5NzExQUY1NTdCQzdCQTBFRDk5MTk3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC717q7spoFhG1IcH40/KgexKVM 3dwHqhftBoLtCIwkd/LBciJF3t5MsjqIDZ0l7Ifbb0juEaqzBjO3KzstjkAf2Zc4 2u0aZACicR1IYvv5F0rYiZ8TNFsiXYZLgb4ACJ75GZmHlfM5bD+S93BDgkr0FdSM 4I4ckRKZnMdzTx4te6aR18/x0dMrBB+r6rMS5K88ceCw53XFwROjBBnWxG72XBmW eI1i/IjBckL0MWTeayRjRb54eFgfj2ArhIUNDdsHt0XmFDws4CHCGfEdjZnbmi2Y HLhVcD8kjGILQnK5RgGIUhvBFKUbh2KHj43L5Ee12vYNBGDI8GWyzM8yUJN7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJQOLhnIEp2GXEa9Ve8e6DtmRl6owHwYDVR0j BBgwFoAUPrjzL4aHZDdTGPmvQZkSeyioF44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjJvNHdIcWJYNzJEOTlWY0hMNnBEUHBrSHhSQng2TjEyU1RDN3o2M3Bk Z00vMC8zRUI4RjMyRjg2ODc2NDM3NTMxOEY5QUY0MTk5MTI3QjI4QTgxNzhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFQjhGMzJGODY4NzY0Mzc1 MzE4RjlBRjQxOTkxMjdCMjhBODE3OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjJvNHdIcWJYNzJEOTlWY0hMNnBEUHBrSHhSQng2TjEyU1RDN3o2M3BkZ00vMC8z RUI4RjMyRjg2ODc2NDM3NTMxOEY5QUY0MTk5MTI3QjI4QTgxNzhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQJzhpTo4mbF0ZXEYb11uo8acYBX4uXaf99x39VboJB6PAQ8Fqx8y3pLn60iA jXiDDIGsi6DJX4R6SALTdcjgHdhALIofEjCgBWqUTIkSpjU/WC72pcIYC0h1LQdh KFv8xedZH5tEft8f2nWXC8aWPC+JuurUPvK7bvC/V87cALXE3UUi0Ra6Ku/pIpS/ Fyl8isOYmWMZZXYLqpTYS4Ffq9iA2cUOH+hJZobDNIZNxCSG/KkVxbLWXKRtux+D 9LyyNmbOBzf7tZWUxcDNTH9ungmuZNna8JtmAMl9dVgRMunIiv3rhONSmE2g92tp PjILOPsNJqZprQrcneTFJbOX7A== -----END CERTIFICATE-----Generated at Fri Apr 17 21:42:09 2026 by rpki-client