$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft File: 2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft (raw, json) Hash identifier: 5K3CHC08vUJg8FRpfb7fbZyDdqgz+td+WJbomkAvHDs= Subject key identifier: 36:ED:A5:B5:D9:7E:AC:58:2F:ED:D8:49:00:98:BC:C2:BB:89:75:FD Authority key identifier: 2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0 Certificate issuer: /CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0 Certificate serial: 132D5D51C1563F3A874058DA1F52B304195770D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft Manifest number: 1A Signing time: Fri 17 Apr 2026 10:25:30 +0000 Manifest this update: Fri 17 Apr 2026 10:20:30 +0000 Manifest next update: Sat 18 Apr 2026 13:32:30 +0000 Files and hashes: 1: E3BB93A402B2B2BD1B9E973D86B1B49828AF2F3F.cer (hash: AsmJqTOXBdy0axSnVZY+BIxJt9nV7s4rmgKtaIBo6+k=) 2: 2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl (hash: iSCmuraWj/J58pa+i/GuD204VPjCTPF+THpjPsyl6k4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 13:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2d:5d:51:c1:56:3f:3a:87:40:58:da:1f:52:b3:04:19:57:70:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0 Validity Not Before: Apr 17 10:20:30 2026 GMT Not After : Apr 18 13:32:30 2026 GMT Subject: CN=36EDA5B5D97EAC582FEDD8490098BCC2BB8975FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:f1:be:20:ba:9c:69:c5:c0:52:d1:b3:b0: 8a:89:e4:08:73:af:d9:59:f4:8c:55:18:4b:c4:f1: a1:17:f5:8b:eb:eb:6e:01:90:6a:c1:d9:7a:f8:62: cf:6c:1a:af:1f:81:08:a3:76:7e:f9:61:9e:23:75: 4e:12:f7:a1:bb:12:cd:0d:76:55:9c:99:54:16:59: e9:f2:99:61:a1:e2:c1:05:ac:07:6d:1b:df:56:d5: 14:76:57:ee:d0:05:0f:ef:df:fd:f2:bf:3e:be:75: dc:34:cc:41:6d:12:7c:00:ec:5d:59:20:0e:be:7e: 7c:2d:d3:df:22:d0:a8:17:86:67:0f:08:8b:44:78: 1d:68:3c:af:66:1d:8c:ad:91:2c:12:5c:4c:0c:be: 5c:ee:83:47:f1:a6:3a:bd:65:d0:ca:64:c5:a7:e7: 2c:33:99:d5:32:98:1a:96:8d:bf:ff:2c:7f:13:40: c3:f0:e0:6d:a5:1b:da:ca:90:58:06:25:b6:36:b7: 7b:58:e7:87:df:bb:49:b1:54:0e:8a:07:4b:9d:38: 0a:da:5f:37:86:7f:6a:4c:f7:07:0b:e9:86:a0:f3: cf:1b:75:f0:d8:64:82:31:84:00:87:ed:4a:3a:46: 2d:a5:e1:47:81:72:c8:55:06:ca:15:7d:ef:c1:fb: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:A5:B5:D9:7E:AC:58:2F:ED:D8:49:00:98:BC:C2:BB:89:75:FD X509v3 Authority Key Identifier: keyid:2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9d:c4:8e:e5:6e:ee:da:b0:2e:64:0a:20:f1:fd:2d:b8:6a: 1d:65:71:43:bd:8e:ba:48:90:3a:c2:07:d9:6f:a8:ba:cd:f6: 80:3a:0a:d9:73:32:99:3a:5a:7c:40:ba:12:9b:fe:c6:27:f5: 48:33:25:28:fc:45:3e:45:c0:89:4c:0a:a7:c7:88:56:be:32: 6d:01:a3:b6:26:d6:be:d1:a1:1e:f4:68:6a:dd:a0:6b:8a:9b: 64:ea:6f:81:34:cf:15:23:1d:ec:4e:74:7c:e8:7d:1e:58:89: 49:44:ea:19:1c:ea:bd:69:f7:cd:91:7a:53:9d:4b:b7:b3:41: 57:af:22:b6:c8:85:a8:d6:c2:19:8b:cb:03:b2:70:2b:54:6e: a8:85:1a:1b:bb:b8:c2:a4:09:93:54:6d:85:df:ce:59:d3:b2: 4c:27:5f:29:80:69:a0:32:4f:c5:8e:8b:51:2b:28:d3:7a:c8: 2d:d9:55:63:bc:92:b0:00:4e:15:29:eb:c4:b0:67:d3:6d:55: a6:2b:b8:92:ad:8b:1b:87:03:a1:07:ee:dc:9b:5f:31:28:02: 4e:32:18:08:c5:f0:38:9f:fe:9f:77:d9:36:3a:d3:c8:45:93: 88:88:2d:5d:0c:b3:0a:71:c9:e0:67:0e:ae:a7:a6:60:63:80: 0e:ff:b8:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEy1dUcFWPzqHQFjaH1KzBBlXcNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYzRkJGRURFNjc2M0UyNERERDJDM0E0QjlFNkU1QUE5 RTQ1M0JEMDAeFw0yNjA0MTcxMDIwMzBaFw0yNjA0MTgxMzMyMzBaMDMxMTAvBgNV BAMTKDM2RURBNUI1RDk3RUFDNTgyRkVERDg0OTAwOThCQ0MyQkI4OTc1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnvG+ILqcacXAUtGzsIqJ5Ahz r9lZ9IxVGEvE8aEX9Yvr624BkGrB2Xr4Ys9sGq8fgQijdn75YZ4jdU4S96G7Es0N dlWcmVQWWenymWGh4sEFrAdtG99W1RR2V+7QBQ/v3/3yvz6+ddw0zEFtEnwA7F1Z IA6+fnwt098i0KgXhmcPCItEeB1oPK9mHYytkSwSXEwMvlzug0fxpjq9ZdDKZMWn 5ywzmdUymBqWjb//LH8TQMPw4G2lG9rKkFgGJbY2t3tY54ffu0mxVA6KB0udOAra XzeGf2pM9wcL6Yag888bdfDYZIIxhACH7Uo6Ri2l4UeBcshVBsoVfe/B+1s7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNu2ltdl+rFgv7dhJAJi8wruJdf0wHwYDVR0j BBgwFoAULz+/7eZ2PiTd0sOkueblqp5FO9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2NwUk1WR3hlRGZnY0VqOXBVZU1TOE1QOVlybW9TaW9lSjhiSmJIcFdj TGUvMC8yRjNGQkZFREU2NzYzRTI0REREMkMzQTRCOUU2RTVBQTlFNDUzQkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGM0ZCRkVERTY3NjNFMjRE REQyQzNBNEI5RTZFNUFBOUU0NTNCRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2NwUk1WR3hlRGZnY0VqOXBVZU1TOE1QOVlybW9TaW9lSjhiSmJIcFdjTGUvMC8y RjNGQkZFREU2NzYzRTI0REREMkMzQTRCOUU2RTVBQTlFNDUzQkQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl53EjuVu7tqwLmQKIPH9LbhqHWVxQ72OukiQOsIH2W+ous32gDoK2XMymTpa fEC6Epv+xif1SDMlKPxFPkXAiUwKp8eIVr4ybQGjtibWvtGhHvRoat2ga4qbZOpv gTTPFSMd7E50fOh9HliJSUTqGRzqvWn3zZF6U51Lt7NBV68itsiFqNbCGYvLA7Jw K1RuqIUaG7u4wqQJk1Rthd/OWdOyTCdfKYBpoDJPxY6LUSso03rILdlVY7ySsABO FSnrxLBn021Vpiu4kq2LG4cDoQfu3JtfMSgCTjIYCMXwOJ/+n3fZNjrTyEWTiIgt XQyzCnHJ4GcOrqemYGOADv+4FQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:51 2026 by rpki-client