$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft File: CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft (raw, json) Hash identifier: +qFRw+hnsTE9sC1wE9VhQmXmh5y/WNazAh+K0Rj6nIU= Subject key identifier: 93:21:BF:F5:6D:FD:4E:70:1B:3F:5B:B7:49:6C:38:BF:EC:BE:F7:2C Authority key identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91 Certificate issuer: /CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691 Certificate serial: 6BB5588552BB30DFAE6431D2B6A8207DD0C21158 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer Subject info access: rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft Manifest number: 3B Signing time: Tue 28 Jul 2026 15:53:19 +0000 Manifest this update: Tue 28 Jul 2026 15:48:19 +0000 Manifest next update: Wed 29 Jul 2026 18:22:19 +0000 Files and hashes: 1: 323830343a326336343a3a2f33322d3438203d3e20323635323135.roa (hash: WANm1F6sSBsFTOfUmiHGg4ICR4rvlqK0ssG6KDIYLoc=) 2: 3136372e3235302e3138342e302f32322d3234203d3e20323635323135.roa (hash: CHOOKZQIOYxzpT/kc2KUiR2j+iPpUCZEl7IDfqZHwD8=) 3: 34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa (hash: fo+GMng67/O0QE9/lvD790XYBLwfdCA2eo3lBqgJmTg=) 4: CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl (hash: f27Dqv70M9ocjnQ+3WFFxEI3zvITfi+oXe/gxdOiSPk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 18:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b5:58:85:52:bb:30:df:ae:64:31:d2:b6:a8:20:7d:d0:c2:11:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691 Validity Not Before: Jul 28 15:48:19 2026 GMT Not After : Jul 29 18:22:19 2026 GMT Subject: CN=9321BFF56DFD4E701B3F5BB7496C38BFECBEF72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:09:3d:4b:cb:96:d7:f0:14:1a:cc:ea:c2: dd:d4:2c:9d:7f:fc:51:34:c2:61:ca:dd:2d:04:24: 25:7c:e3:52:f5:8f:75:b4:ad:95:13:f1:0a:34:01: aa:0d:44:e2:a5:fd:17:fa:7d:9d:7a:86:f6:ef:37: 55:29:78:06:99:82:45:57:c8:c6:c9:a0:0c:ef:19: 04:38:f0:43:26:97:ca:8c:77:f5:c2:ef:68:fb:f8: 17:30:7c:b2:b3:a5:42:b8:b6:fd:b0:07:27:4c:b5: c8:f8:75:03:46:ba:f3:94:61:2d:7b:ec:6a:7e:9f: 7b:5d:c8:99:f1:f4:7c:3d:b6:99:b5:ef:ee:56:04: 20:74:f6:22:b1:74:a2:70:a3:83:8b:51:64:c1:b3: c8:88:b4:ac:7e:56:23:3d:21:37:ba:8f:b6:24:4c: 2e:60:19:8d:e6:44:d8:2b:9f:9f:3c:6c:b3:4d:b5: 4b:9d:d2:b9:88:9f:04:05:98:8f:2b:5f:93:e0:c0: e2:8d:f0:8b:5a:15:f5:82:f8:22:ef:f7:19:85:f8: 1d:02:ec:93:1e:c0:a5:1f:be:24:d2:44:f3:76:27: bf:39:f9:ed:c4:b6:00:e3:1e:0f:19:35:af:ce:0d: 49:8f:e8:4a:81:e3:d0:f5:82:7b:59:3b:3c:ed:8e: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:BF:F5:6D:FD:4E:70:1B:3F:5B:B7:49:6C:38:BF:EC:BE:F7:2C X509v3 Authority Key Identifier: keyid:CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:49:55:07:29:db:21:02:87:dc:5e:24:81:1f:d8:a3:52:4a: 89:55:86:df:e7:f6:7d:9c:69:5e:78:bc:0e:d3:d4:54:a4:60: e7:88:27:8f:c2:54:3f:98:a1:5c:b7:c0:32:ef:25:db:e0:33: 22:a5:63:a0:88:3b:6a:43:f7:2d:59:00:a9:9d:e1:c7:00:5d: 43:5b:dd:27:b6:f7:65:bb:37:28:dc:48:16:f5:83:f3:c6:02: 94:4b:ae:be:50:13:64:ab:11:1f:e8:6e:63:bc:79:69:e0:cc: 37:8a:2e:43:87:85:e9:39:5b:48:d1:c7:b1:22:00:7b:1f:6b: f1:5c:e1:b3:89:dd:8e:b2:2a:23:4b:de:56:96:94:7b:b5:82: df:0d:7b:b6:40:a8:92:b8:a7:5a:f2:77:bc:5f:1a:b5:92:ec: 3d:62:83:5c:ff:f9:06:7a:60:9f:ed:32:91:05:f5:f2:25:91: d2:11:25:db:95:ea:b0:f0:8e:a6:bc:f9:3f:cb:d6:f0:ce:4e: a1:19:fd:e4:04:12:16:09:d7:01:12:48:1a:f9:e9:04:a0:7a: cf:e8:41:5b:62:b5:4e:16:39:bb:b4:46:ca:b7:98:85:24:1b: aa:8d:b1:df:11:7e:95:39:d2:c5:73:96:34:14:7a:00:f1:dd: 3a:18:2d:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa7VYhVK7MN+uZDHStqggfdDCEVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQjRBMjQzMERDNkExRTZEMjgxQjM0QkFEMkZBRTVG QzQxNDY5MTAeFw0yNjA3MjgxNTQ4MTlaFw0yNjA3MjkxODIyMTlaMDMxMTAvBgNV BAMTKDkzMjFCRkY1NkRGRDRFNzAxQjNGNUJCNzQ5NkMzOEJGRUNCRUY3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHgk9S8uW1/AUGszqwt3ULJ1/ /FE0wmHK3S0EJCV841L1j3W0rZUT8Qo0AaoNROKl/Rf6fZ16hvbvN1UpeAaZgkVX yMbJoAzvGQQ48EMml8qMd/XC72j7+BcwfLKzpUK4tv2wBydMtcj4dQNGuvOUYS17 7Gp+n3tdyJnx9Hw9tpm17+5WBCB09iKxdKJwo4OLUWTBs8iItKx+ViM9ITe6j7Yk TC5gGY3mRNgrn588bLNNtUud0rmInwQFmI8rX5PgwOKN8ItaFfWC+CLv9xmF+B0C 7JMewKUfviTSRPN2J785+e3EtgDjHg8ZNa/ODUmP6EqB49D1gntZOzztjrivAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkyG/9W39TnAbP1u3SWw4v+y+9ywwHwYDVR0j BBgwFoAUyjtKJDDcah5tKBs0utL65fxBRpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVhURmhCNTZzMnhaeTFrS0VHQkY4c1YydU52ZllFWFJpR1lrd2lXbmlL TXMvMC9DQTNCNEEyNDMwREM2QTFFNkQyODFCMzRCQUQyRkFFNUZDNDE0NjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBM0I0QTI0MzBEQzZBMUU2 RDI4MUIzNEJBRDJGQUU1RkM0MTQ2OTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVhURmhCNTZzMnhaeTFrS0VHQkY4c1YydU52ZllFWFJpR1lrd2lXbmlLTXMvMC9D QTNCNEEyNDMwREM2QTFFNkQyODFCMzRCQUQyRkFFNUZDNDE0NjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUlVBynbIQKH3F4kgR/Yo1JKiVWG3+f2fZxpXni8DtPUVKRg54gnj8JUP5ih XLfAMu8l2+AzIqVjoIg7akP3LVkAqZ3hxwBdQ1vdJ7b3Zbs3KNxIFvWD88YClEuu vlATZKsRH+huY7x5aeDMN4ouQ4eF6TlbSNHHsSIAex9r8Vzhs4ndjrIqI0veVpaU e7WC3w17tkCokrinWvJ3vF8atZLsPWKDXP/5Bnpgn+0ykQX18iWR0hEl25XqsPCO prz5P8vW8M5OoRn95AQSFgnXARJIGvnpBKB6z+hBW2K1ThY5u7RGyreYhSQbqo2x 3xF+lTnSxXOWNBR6APHdOhgtfA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:42:55 2026 by rpki-client