$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: 4ias+3fo7/98MxG04xSmI/nI8R9BxTzyviL8WFd2mSc= Subject key identifier: C3:B7:C1:50:20:FE:D2:8F:49:F1:FB:AB:1A:C0:0F:08:CC:6B:C5:59 Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 51F7E7546715B48A960B1BA59D2B865B5B98F80A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 03DF Signing time: Fri 17 Apr 2026 10:24:43 +0000 Manifest this update: Fri 17 Apr 2026 10:19:43 +0000 Manifest next update: Sat 18 Apr 2026 12:43:43 +0000 Files and hashes: 1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: Egkh/QF1fJzCaj4d8V1eYkd7sYWN4hfK6thb+wkQtGs=) 2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 12:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f7:e7:54:67:15:b4:8a:96:0b:1b:a5:9d:2b:86:5b:5b:98:f8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Apr 17 10:19:43 2026 GMT Not After : Apr 18 12:43:43 2026 GMT Subject: CN=C3B7C15020FED28F49F1FBAB1AC00F08CC6BC559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:82:b9:4b:6c:ba:89:0f:fe:33:71:68:2e: 43:63:98:4a:84:6a:80:2f:63:14:40:ce:82:f6:0c: 64:2f:1f:78:3a:68:00:0d:a8:84:d7:e6:96:a7:79: 9c:73:f6:df:6c:93:96:1b:91:a7:c8:6e:aa:b3:73: 10:25:92:0f:6c:ae:32:dc:13:ef:18:40:4e:15:51: a6:3a:9b:d8:9d:15:bd:84:13:5e:75:43:23:a3:56: 5b:54:eb:4e:1e:1b:ab:ce:a8:9d:c4:b2:18:a4:63: 6a:2e:0b:8e:e5:ef:4c:c9:9a:78:eb:53:52:83:cb: 4b:73:07:18:94:4d:af:b5:4d:29:c4:01:ca:42:b7: 3c:6d:24:3f:bd:f1:ed:4d:a2:7e:ee:43:79:84:4a: ce:90:cc:28:5e:fb:29:97:d3:23:d7:2b:22:00:85: 64:3c:fe:8e:56:56:05:ed:d3:98:d8:d2:3e:0b:57: d5:d1:97:e0:8c:36:ea:c6:09:0c:36:8c:ad:79:12: fe:ea:76:a4:8f:88:84:ae:cb:24:13:a6:a3:84:06: 6b:74:f6:c3:ae:86:80:cf:0f:cb:55:89:11:50:b2: aa:2c:0b:df:58:59:8e:7f:64:04:a0:19:7e:a9:ec: 85:b0:50:4d:95:f6:0c:96:9f:0d:c4:98:1b:41:f6: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B7:C1:50:20:FE:D2:8F:49:F1:FB:AB:1A:C0:0F:08:CC:6B:C5:59 X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c5:6c:b0:48:10:e1:5b:5a:97:92:01:fd:77:10:57:68:c3: dd:2d:93:51:fb:ce:5a:76:77:52:27:a3:3a:17:7b:56:25:37: 79:43:90:79:d6:ea:38:11:ab:19:85:ca:33:d5:97:40:82:50: 98:ca:b4:71:7a:a2:cd:67:0e:2c:cc:d8:9f:31:79:ba:75:4d: 56:01:01:d8:83:f9:a5:15:39:3c:93:b3:a0:34:c9:fe:fc:7b: 42:4d:6b:3e:19:b7:df:1e:3c:d4:34:12:50:39:02:fb:22:18: d3:5c:19:2b:66:e7:02:d0:83:68:9d:65:dc:06:55:15:91:34: 90:ba:db:7a:ca:0a:50:ab:bf:9b:0c:f3:76:e5:2c:a9:c3:84: 79:08:3f:01:87:04:35:65:64:4c:2e:f5:3e:fa:1a:b4:73:64: be:79:a2:66:0a:7d:78:43:42:c0:a4:db:4a:fe:92:47:b9:ec: e0:38:70:b2:5a:60:19:68:01:d0:e2:e2:90:0b:c0:83:e6:f2: 24:89:45:28:c9:9c:31:2e:37:94:d0:cf:bc:8c:c0:ff:fa:63: 11:c9:85:10:c5:7f:bc:4c:d6:de:02:6a:e9:db:f0:cb:22:17: a8:d9:c8:06:c6:a0:38:e9:67:4f:13:80:13:c8:c7:18:c2:09: 7d:fb:a7:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUffnVGcVtIqWCxulnSuGW1uY+AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNjA0MTcxMDE5NDNaFw0yNjA0MTgxMjQzNDNaMDMxMTAvBgNV BAMTKEMzQjdDMTUwMjBGRUQyOEY0OUYxRkJBQjFBQzAwRjA4Q0M2QkM1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykIK5S2y6iQ/+M3FoLkNjmEqE aoAvYxRAzoL2DGQvH3g6aAANqITX5paneZxz9t9sk5YbkafIbqqzcxAlkg9srjLc E+8YQE4VUaY6m9idFb2EE151QyOjVltU604eG6vOqJ3EshikY2ouC47l70zJmnjr U1KDy0tzBxiUTa+1TSnEAcpCtzxtJD+98e1Non7uQ3mESs6QzChe+ymX0yPXKyIA hWQ8/o5WVgXt05jY0j4LV9XRl+CMNurGCQw2jK15Ev7qdqSPiISuyyQTpqOEBmt0 9sOuhoDPD8tViRFQsqosC99YWY5/ZASgGX6p7IWwUE2V9gyWnw3EmBtB9s8lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw7fBUCD+0o9J8furGsAPCMxrxVkwHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApcVssEgQ4Vtal5IB/XcQV2jD3S2TUfvOWnZ3UiejOhd7ViU3eUOQedbqOBGr GYXKM9WXQIJQmMq0cXqizWcOLMzYnzF5unVNVgEB2IP5pRU5PJOzoDTJ/vx7Qk1r Phm33x481DQSUDkC+yIY01wZK2bnAtCDaJ1l3AZVFZE0kLrbesoKUKu/mwzzduUs qcOEeQg/AYcENWVkTC71PvoatHNkvnmiZgp9eENCwKTbSv6SR7ns4DhwslpgGWgB 0OLikAvAg+byJIlFKMmcMS43lNDPvIzA//pjEcmFEMV/vEzW3gJq6dvwyyIXqNnI BsagOOlnTxOAE8jHGMIJffun4A== -----END CERTIFICATE-----Generated at Sat Apr 18 01:54:18 2026 by rpki-client