$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: KhsBTzUN+07/YpH7h0MCxqSx96eIXDqzcarWxtPU1sk= Subject key identifier: 98:13:A8:4E:64:17:58:F5:68:E0:9C:42:DA:2D:FF:EF:CD:34:75:73 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 0396B1F0ABD9ACD45DB2BB9B4229DC5623C5F81C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 03A7 Signing time: Sat 18 Apr 2026 00:09:00 +0000 Manifest this update: Sat 18 Apr 2026 00:04:00 +0000 Manifest next update: Sun 19 Apr 2026 00:54:00 +0000 Files and hashes: 1: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: 0ZjPgw7qff0RoKkkvgmH/LB49EfxFU91PNNQFJZ2LwI=) 2: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: tSOXGp3AKoKrMg3hjQnTPWPEkh2iCcBNOWKCuvWdE+I=) 3: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: F7w2Dq+Yhj72VNuZUgl1wKxmEpwz0ASh9hJIJlITw+8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 00:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:96:b1:f0:ab:d9:ac:d4:5d:b2:bb:9b:42:29:dc:56:23:c5:f8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Apr 18 00:04:00 2026 GMT Not After : Apr 19 00:54:00 2026 GMT Subject: CN=9813A84E641758F568E09C42DA2DFFEFCD347573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:91:48:58:bf:23:8e:0b:5e:e8:a7:c7:a2: a1:08:c1:da:93:fe:0d:9a:11:77:26:e7:43:5a:2a: b9:35:ee:34:0e:2c:ec:6d:23:06:63:a1:43:88:f5: e8:4a:d5:69:37:45:81:d0:b6:c0:90:19:20:f5:cd: 44:7b:46:56:77:32:8d:1b:2c:5a:2f:6b:64:c1:5a: 94:ab:db:94:f6:75:1f:dc:cd:8b:2b:27:93:84:51: 99:9c:36:a9:24:35:12:82:bb:a1:ff:09:91:ca:9d: 67:88:13:d3:f1:6d:15:bf:44:c1:68:64:ff:5a:21: 85:86:98:3d:8c:16:17:10:a4:e3:c6:c5:c2:b5:7e: c6:f3:26:c3:e5:7b:b9:c2:6c:ca:6d:0d:97:a2:f8: b7:28:08:ce:6c:93:b2:95:a1:a2:b5:51:bb:65:cf: b1:cb:d8:fc:41:40:f7:2a:08:71:98:4e:a5:c0:3e: 57:09:98:4c:48:4b:cb:4d:cc:7d:4e:08:bf:dd:1d: cd:38:90:67:ec:f6:4b:78:e3:10:94:96:ab:b0:85: 3b:61:b2:4b:8e:68:d5:e5:ee:cf:52:81:8f:4e:88: f5:66:35:99:ea:d1:f3:8e:52:66:43:36:97:06:65: 2b:c7:54:ea:40:ac:db:79:89:f8:eb:d9:e5:52:42: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:13:A8:4E:64:17:58:F5:68:E0:9C:42:DA:2D:FF:EF:CD:34:75:73 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:73:55:9f:0c:20:95:0c:c6:72:f7:41:44:e0:3f:21:c0:2a: ae:bc:a7:a1:43:ab:b0:c7:cd:9c:1e:93:d8:39:cc:2f:1f:0b: f3:c9:ce:ed:1b:72:99:00:0d:fb:b0:98:c0:58:16:08:96:0f: b1:b4:17:c5:e6:38:ae:0c:5c:4f:5f:ef:e5:3d:eb:35:61:25: ad:50:ac:09:4a:4f:36:40:86:b7:81:1d:c3:76:4f:1c:63:b5: 40:28:9e:2a:f8:7b:17:67:e2:a6:75:c6:c4:2a:ee:d8:7b:6a: 5c:a8:ef:cb:db:25:30:f4:79:61:23:b8:3c:95:ff:f4:cf:98: 96:5f:32:a9:94:83:c3:9c:ba:af:37:6e:19:da:84:22:d0:90: 54:ea:06:2d:dc:a9:bd:5f:8b:fd:8d:95:44:25:27:16:20:22: 24:95:e0:07:c9:c4:7b:c8:c5:5d:1c:16:9b:9e:bb:49:04:e6: 41:d0:59:60:71:45:4a:8d:a9:6c:a9:78:f0:8b:db:c0:8e:f0: b8:c8:ab:4b:9e:1e:c9:f4:e5:91:04:87:a8:b0:28:c4:14:ff: 27:36:ee:57:a4:a1:1b:a2:20:eb:0c:1f:c2:1a:37:c0:25:4a: d9:de:5d:e8:66:eb:25:cf:b5:b4:81:19:53:ce:b4:d6:6f:74: 47:47:95:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA5ax8KvZrNRdsrubQincViPF+BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNjA0MTgwMDA0MDBaFw0yNjA0MTkwMDU0MDBaMDMxMTAvBgNV BAMTKDk4MTNBODRFNjQxNzU4RjU2OEUwOUM0MkRBMkRGRkVGQ0QzNDc1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LJFIWL8jjgte6KfHoqEIwdqT /g2aEXcm50NaKrk17jQOLOxtIwZjoUOI9ehK1Wk3RYHQtsCQGSD1zUR7RlZ3Mo0b LFova2TBWpSr25T2dR/czYsrJ5OEUZmcNqkkNRKCu6H/CZHKnWeIE9PxbRW/RMFo ZP9aIYWGmD2MFhcQpOPGxcK1fsbzJsPle7nCbMptDZei+LcoCM5sk7KVoaK1Ubtl z7HL2PxBQPcqCHGYTqXAPlcJmExIS8tNzH1OCL/dHc04kGfs9kt44xCUlquwhTth skuOaNXl7s9SgY9OiPVmNZnq0fOOUmZDNpcGZSvHVOpArNt5ifjr2eVSQjN5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmBOoTmQXWPVo4JxC2i3/7800dXMwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT3NVnwwglQzGcvdBROA/IcAqrrynoUOrsMfNnB6T2DnMLx8L88nO7RtymQAN +7CYwFgWCJYPsbQXxeY4rgxcT1/v5T3rNWElrVCsCUpPNkCGt4Edw3ZPHGO1QCie Kvh7F2fipnXGxCru2HtqXKjvy9slMPR5YSO4PJX/9M+Yll8yqZSDw5y6rzduGdqE ItCQVOoGLdypvV+L/Y2VRCUnFiAiJJXgB8nEe8jFXRwWm567SQTmQdBZYHFFSo2p bKl48IvbwI7wuMirS54eyfTlkQSHqLAoxBT/JzbuV6ShG6Ig6wwfwho3wCVK2d5d 6GbrJc+1tIEZU8601m90R0eV7A== -----END CERTIFICATE-----Generated at Sat Apr 18 10:21:23 2026 by rpki-client