$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft File: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft (raw, json) Hash identifier: IRXRF+PmVyEy/IWSPxQDwkfOHmgJsthulK+Q9eQTCE4= Subject key identifier: 34:12:78:39:A7:44:1A:80:A2:4C:65:FE:F0:A2:37:29:F2:25:DE:4D Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Certificate serial: 0E3FA13566956B823E598F2181DBFACBD4E6B0D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft Manifest number: 0460 Signing time: Fri 17 Apr 2026 15:57:24 +0000 Manifest this update: Fri 17 Apr 2026 15:52:24 +0000 Manifest next update: Sat 18 Apr 2026 16:13:24 +0000 Files and hashes: 1: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (hash: 5D9aXFlbU9fjLoiSVvBefi4iRP3TG6aejX0Oq29ADJQ=) 2: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl (hash: IjsYIddNwQRY40O9rFfxT3mo0n1lCsKigik8Mp0vRqU=) 3: 3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (hash: qb5CEyMM5Bsyj+QUacujxzF+SjW2ntuhn2byZVb2KWQ=) 4: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (hash: wj2v8FaXrypVWJ5QgcZuYBN25ZTB3posFfJqz3YLkcc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3f:a1:35:66:95:6b:82:3e:59:8f:21:81:db:fa:cb:d4:e6:b0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Validity Not Before: Apr 17 15:52:24 2026 GMT Not After : Apr 18 16:13:24 2026 GMT Subject: CN=34127839A7441A80A24C65FEF0A23729F225DE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:2e:a6:b2:68:b5:e6:71:26:2b:6d:e5:ca: ec:b3:18:c7:e4:ca:a2:96:fc:51:48:87:ab:49:83: ad:ff:92:cd:2c:e7:cd:88:69:7f:0c:11:8e:21:37: da:57:d4:21:bd:ff:17:b5:46:ac:31:64:ff:a1:2d: 5a:2c:68:3f:ab:3a:07:76:3c:9f:cd:8b:ab:37:84: ac:57:eb:06:f3:59:63:c7:80:49:1b:0a:83:e5:4b: 35:fc:d7:00:f5:68:c8:23:e9:2e:1d:06:5b:fe:af: ef:ea:45:62:2b:6b:55:c1:87:3d:53:a3:8a:e4:e6: 20:21:d8:3c:e2:03:87:df:ff:06:b4:d7:20:16:62: 32:bc:1e:1d:99:ef:9f:6c:5b:e9:f3:d0:ba:41:ba: 6c:c5:7d:79:af:ab:ce:76:00:6b:e0:db:59:0a:ea: 55:63:38:e3:75:84:b0:03:01:c9:ac:94:a0:5e:2b: c2:4b:cb:35:e3:64:49:16:f9:cb:37:48:26:5a:d8: 3e:42:14:a5:73:cc:3a:46:49:e5:fe:57:4b:a6:6a: dc:82:87:4a:33:d3:04:ab:0e:de:10:4d:3b:69:7f: 74:17:eb:96:f8:8a:5f:a2:c0:ba:43:15:4f:76:b9: e4:d8:81:cc:d8:7c:0f:e6:10:c5:f8:3d:0b:f3:25: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:12:78:39:A7:44:1A:80:A2:4C:65:FE:F0:A2:37:29:F2:25:DE:4D X509v3 Authority Key Identifier: keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:92:15:0b:d5:c0:8a:5d:6f:ef:2a:f7:a6:27:f9:55:2b:22: 4f:27:ec:52:aa:a5:8c:50:55:e5:19:d6:3a:19:87:13:27:91: ab:6d:cc:90:2b:fc:04:e9:3f:72:8a:0e:b5:d7:0d:83:e3:3e: c8:c2:97:2b:78:72:01:92:be:ff:9c:50:d3:25:86:62:95:09: 07:c8:80:a2:69:f6:61:4b:06:58:69:be:a2:59:8d:de:9b:6d: a5:39:c6:a1:73:92:25:4f:80:7e:c1:3b:8b:d7:49:34:a8:e4: ef:0d:c3:83:11:bf:79:87:44:04:23:bb:5e:68:aa:3f:00:26: 26:dd:fb:0a:65:c8:81:fe:28:b2:2f:c8:5d:46:90:b7:42:a8: ac:98:e9:50:77:8c:5b:c0:25:f2:e8:c6:a4:ab:5a:1e:5b:e3: bc:e5:56:9b:ca:35:71:f2:b9:2f:43:f2:82:68:a4:67:c3:e4: fe:db:5a:36:54:65:1c:51:93:0c:b8:21:a9:55:8d:d8:e7:d1: d8:5b:0f:79:8f:db:23:79:87:0e:7c:a8:94:6c:07:29:be:d1: a8:ad:cc:5a:03:c3:45:91:c4:e8:82:7c:db:2b:f6:06:f3:33: 4d:b1:19:2e:83:24:20:8b:b9:4d:b6:04:34:67:eb:ab:59:1d: 41:82:e5:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDj+hNWaVa4I+WY8hgdv6y9TmsNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw N0ZFQzVDRTAeFw0yNjA0MTcxNTUyMjRaFw0yNjA0MTgxNjEzMjRaMDMxMTAvBgNV BAMTKDM0MTI3ODM5QTc0NDFBODBBMjRDNjVGRUYwQTIzNzI5RjIyNURFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Fy6msmi15nEmK23lyuyzGMfk yqKW/FFIh6tJg63/ks0s582IaX8MEY4hN9pX1CG9/xe1RqwxZP+hLVosaD+rOgd2 PJ/Ni6s3hKxX6wbzWWPHgEkbCoPlSzX81wD1aMgj6S4dBlv+r+/qRWIra1XBhz1T o4rk5iAh2DziA4ff/wa01yAWYjK8Hh2Z759sW+nz0LpBumzFfXmvq852AGvg21kK 6lVjOON1hLADAcmslKBeK8JLyzXjZEkW+cs3SCZa2D5CFKVzzDpGSeX+V0umatyC h0oz0wSrDt4QTTtpf3QX65b4il+iwLpDFU92ueTYgczYfA/mEMX4PQvzJXcfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNBJ4OadEGoCiTGX+8KI3KfIl3k0wHwYDVR0j BBgwFoAUOr+W0Y5+BaJO2qEX0rnnagf+xc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3Vz Z3IvMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQkY5NkQxOEU3RTA1QTI0 RURBQTExN0QyQjlFNzZBMDdGRUM1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3VzZ3IvMS8z QUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVZIVC9XAil1v7yr3pif5VSsiTyfsUqqljFBV5RnWOhmHEyeRq23MkCv8BOk/ cooOtdcNg+M+yMKXK3hyAZK+/5xQ0yWGYpUJB8iAomn2YUsGWGm+olmN3pttpTnG oXOSJU+AfsE7i9dJNKjk7w3DgxG/eYdEBCO7XmiqPwAmJt37CmXIgf4osi/IXUaQ t0KorJjpUHeMW8Al8ujGpKtaHlvjvOVWm8o1cfK5L0PygmikZ8Pk/ttaNlRlHFGT DLghqVWN2OfR2FsPeY/bI3mHDnyolGwHKb7RqK3MWgPDRZHE6IJ82yv2BvMzTbEZ LoMkIIu5TbYENGfrq1kdQYLlgQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:30:37 2026 by rpki-client