$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json) Hash identifier: hDAPwBErBTPgNV0TY1F7OYieGL3N1pcRlARcfZiAfNo= Subject key identifier: C3:16:5B:55:51:D4:94:56:CC:44:15:3F:1E:F7:FA:7D:ED:76:2C:13 Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 Certificate issuer: /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Certificate serial: 57297E32B1FB11BF0241C041387A0C526F07E1A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft Manifest number: 53 Signing time: Sat 18 Apr 2026 00:02:05 +0000 Manifest this update: Fri 17 Apr 2026 23:57:05 +0000 Manifest next update: Sun 19 Apr 2026 02:43:05 +0000 Files and hashes: 1: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=) 2: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=) 3: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: ZFxIbPc7ScFlX9niiLqb0bCeyy1V0uLHI6j1oKcxWRw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 02:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:29:7e:32:b1:fb:11:bf:02:41:c0:41:38:7a:0c:52:6f:07:e1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Validity Not Before: Apr 17 23:57:05 2026 GMT Not After : Apr 19 02:43:05 2026 GMT Subject: CN=C3165B5551D49456CC44153F1EF7FA7DED762C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:43:d8:f3:bf:8c:98:df:b9:81:fd:74:e7: 5d:06:10:1a:d1:b0:d7:37:b3:8c:01:44:17:b9:f3: bd:df:4b:4e:9f:a7:41:f2:61:af:38:77:f4:0e:08: 66:50:f9:d3:45:28:5b:01:e9:47:84:a6:9f:22:dd: 52:f4:94:d4:dc:76:88:0d:41:0c:86:1f:6b:45:ae: b1:c9:eb:35:16:79:5e:32:4c:f0:66:c2:8e:e5:c5: db:ee:55:79:42:7a:d5:94:e4:14:e9:88:45:b4:2b: 4e:91:e7:ce:17:c0:06:34:54:e3:21:ac:4c:e3:92: 46:22:a9:d4:ef:cb:1a:fb:d3:52:52:68:93:86:c0: a2:aa:f5:d7:56:90:84:58:8f:9c:74:49:f1:b6:92: 8b:0e:0f:50:42:b3:fd:40:1a:30:0f:8e:c1:57:c7: 36:10:37:88:b2:cb:c8:3b:db:1c:db:60:08:11:04: b6:f1:3d:20:13:f5:05:18:c2:de:dd:ff:df:1e:16: 55:7c:e4:e9:7a:f6:dd:17:df:2f:ba:de:67:b2:23: bb:6f:0f:a6:59:b7:bf:72:70:6f:5d:cd:ca:f8:8f: 61:56:c0:1e:4e:fa:d3:7c:47:02:8b:5b:33:be:90: 41:aa:89:a4:24:20:23:f8:94:86:7a:e8:08:e7:be: 30:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:16:5B:55:51:D4:94:56:CC:44:15:3F:1E:F7:FA:7D:ED:76:2C:13 X509v3 Authority Key Identifier: keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:bc:7b:20:5d:c9:1d:a0:4b:a3:3a:08:b0:14:f3:a2:78:25: 7b:07:df:80:5a:25:9e:2c:4f:bc:dd:f4:0c:dd:8b:0d:9a:c6: 42:66:73:28:a0:5e:40:32:23:17:32:8c:36:ab:2e:fe:63:68: 52:73:18:4a:91:c4:f6:86:08:03:90:dd:0b:e0:9f:41:b0:b4: fe:5f:0a:d0:28:08:7a:6f:ca:ec:73:8b:3f:7b:32:07:df:18: 0a:86:39:6e:ac:67:20:30:42:ce:b5:fc:60:84:42:3e:a3:8c: a2:1a:60:22:52:3a:57:0d:ac:60:c0:2a:2c:ed:7f:91:a7:00: a4:5f:5f:de:57:92:cc:bd:e7:98:d9:b0:98:7f:65:12:4b:c6: ee:5b:a4:60:d4:f5:5d:84:11:96:70:09:64:6e:6b:53:88:04: cf:5c:6e:57:fd:3c:ba:81:13:c3:2e:87:fe:c5:82:7f:42:82: 81:03:c9:67:88:fc:0a:7f:cf:d8:64:1a:f7:df:b4:a7:d6:bb: 5e:15:2e:11:15:53:23:87:02:d8:15:54:79:27:ee:69:e1:56: c3:fd:7b:9e:5b:a7:d1:9b:1d:a9:31:08:1a:49:0f:a0:1c:c9: 58:d0:90:dd:e6:c0:b4:3c:a2:7e:7c:72:a6:fb:71:da:8f:0b: 4d:d4:ba:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVyl+MrH7Eb8CQcBBOHoMUm8H4acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGQUM0MURCMTJFNjkyNEUyMjJDRDZDODQwN0U3RjYw NEU2REVDODAeFw0yNjA0MTcyMzU3MDVaFw0yNjA0MTkwMjQzMDVaMDMxMTAvBgNV BAMTKEMzMTY1QjU1NTFENDk0NTZDQzQ0MTUzRjFFRjdGQTdERUQ3NjJDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbH0PY87+MmN+5gf10510GEBrR sNc3s4wBRBe5873fS06fp0HyYa84d/QOCGZQ+dNFKFsB6UeEpp8i3VL0lNTcdogN QQyGH2tFrrHJ6zUWeV4yTPBmwo7lxdvuVXlCetWU5BTpiEW0K06R584XwAY0VOMh rEzjkkYiqdTvyxr701JSaJOGwKKq9ddWkIRYj5x0SfG2kosOD1BCs/1AGjAPjsFX xzYQN4iyy8g72xzbYAgRBLbxPSAT9QUYwt7d/98eFlV85Ol69t0X3y+63meyI7tv D6ZZt79ycG9dzcr4j2FWwB5O+tN8RwKLWzO+kEGqiaQkICP4lIZ66AjnvjD5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwxZbVVHUlFbMRBU/Hvf6fe12LBMwHwYDVR0j BBgwFoAUOvrEHbEuaSTiIs1shAfn9gTm3sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFI YWQvMC8zQUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkFDNDFEQjEyRTY5MjRF MjIyQ0Q2Qzg0MDdFN0Y2MDRFNkRFQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFIYWQvMC8z QUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAULx7IF3JHaBLozoIsBTzonglewffgFolnixPvN30DN2LDZrGQmZzKKBeQDIj FzKMNqsu/mNoUnMYSpHE9oYIA5DdC+CfQbC0/l8K0CgIem/K7HOLP3syB98YCoY5 bqxnIDBCzrX8YIRCPqOMohpgIlI6Vw2sYMAqLO1/kacApF9f3leSzL3nmNmwmH9l EkvG7lukYNT1XYQRlnAJZG5rU4gEz1xuV/08uoETwy6H/sWCf0KCgQPJZ4j8Cn/P 2GQa99+0p9a7XhUuERVTI4cC2BVUeSfuaeFWw/17nlun0ZsdqTEIGkkPoBzJWNCQ 3ebAtDyifnxypvtx2o8LTdS6iQ== -----END CERTIFICATE-----Generated at Sat Apr 18 08:58:15 2026 by rpki-client