$ rpki-client -vvvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: NsL/0ePJm0GnqzhyxJxBlGZ35csdv8oPzbDd+isvMUo= Subject key identifier: FD:C3:C1:0C:E4:C3:A0:7F:1E:3F:38:F0:CC:AD:59:E6:BE:C4:E1:C0 Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 585ECC0807B1EA9925D1434B75B4D37AA2F971C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 021B Signing time: Mon 26 Oct 2026 08:24:06 +0000 Manifest this update: Mon 26 Oct 2026 08:19:06 +0000 Manifest next update: Tue 27 Oct 2026 11:55:06 +0000 Files and hashes: 1: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: QwFTFqEhnBK+xtJr8ArBd85hm4d1M4Y8skuEVrY1cqM=) 2: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: YWKrnbYgIeVW4vKjtQ4mkmrxaiS2jUAfjNZDr6nbfBk=) 3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: fBAPXrz9HDdLBnxC5VZSGZZlhRpGU63ZCbY+k1eTIZQ=) 4: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: LdLkaDdEMMt9I1/QxeyIcxxb59q8u5vlmydLA0jNb50=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Oct 2026 11:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5e:cc:08:07:b1:ea:99:25:d1:43:4b:75:b4:d3:7a:a2:f9:71:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Oct 26 08:19:06 2026 GMT Not After : Oct 27 11:55:06 2026 GMT Subject: CN=FDC3C10CE4C3A07F1E3F38F0CCAD59E6BEC4E1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:4f:a8:ef:02:dc:df:6b:b9:db:98:af:58: 47:b2:50:a7:9d:0d:a4:16:70:a9:98:cf:40:85:c4: ac:4b:c4:41:72:9f:8e:6b:28:f7:09:72:eb:ec:69: 44:dd:6c:08:08:c4:89:40:c6:c0:00:0c:9a:84:e7: f8:77:57:0d:4f:06:d6:1c:e6:91:24:be:3f:82:21: 5d:ce:01:2e:fe:fb:1f:4f:45:03:ed:6e:89:c4:b7: 54:9f:fc:13:e9:ce:44:20:bf:8a:80:a6:b1:49:89: 9a:fe:d9:02:a7:bb:07:cd:ce:66:3f:ad:83:46:75: e7:e8:b7:32:74:aa:2e:2a:74:67:a0:f9:50:ec:c9: cb:bc:fb:17:64:b2:c8:b9:73:3a:9f:e7:00:9d:37: 24:7d:17:38:2f:8a:16:fe:54:ad:22:7e:46:71:ca: 54:fd:65:4b:99:31:88:71:a5:f9:6f:bb:ec:93:3b: f0:cb:da:7e:f9:5e:45:8a:50:c1:89:2a:8c:54:63: 58:f7:56:ce:d0:7c:9d:0a:1e:1d:48:0b:12:8c:c9: 4c:38:7f:2e:94:d5:ac:88:65:dc:c0:b0:3b:1e:51: 96:08:bc:22:86:f3:06:40:00:f7:cc:df:5b:22:0d: c9:28:77:38:0e:02:60:e8:49:d4:c1:84:10:e1:db: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C3:C1:0C:E4:C3:A0:7F:1E:3F:38:F0:CC:AD:59:E6:BE:C4:E1:C0 X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3d:6e:7b:f7:d6:b7:d5:54:c2:a8:a2:2a:62:07:4d:7e:ad: e7:ad:a0:48:f9:9b:c8:52:cc:07:38:b5:8b:35:20:bc:9a:ba: 52:e8:f9:4c:b7:79:1a:94:e3:8d:92:e1:2f:a6:2c:11:bc:fc: 7b:d5:98:44:85:0a:ff:b8:b3:80:e6:da:71:27:45:06:93:fe: 3f:79:bd:7a:a1:b4:0c:92:fc:c8:a1:1e:2d:2a:32:30:e4:cc: 00:e1:66:89:fe:22:fa:db:4f:f7:f6:7d:b6:ff:7e:96:a6:b5: cd:47:94:f4:f6:24:f8:66:01:2f:92:d2:91:59:80:76:82:e9: 46:7a:e1:14:c2:f4:9c:48:b0:86:7b:12:8f:ab:18:3d:d9:c0: 32:39:40:e9:9f:3e:94:db:ce:c6:d8:73:cd:88:91:3a:70:8d: 0d:c7:42:28:a9:4e:5a:9c:2a:a3:3b:42:ca:1b:9c:75:18:85: 52:33:3e:a6:75:6c:ee:5c:1c:b2:48:9c:06:0a:d0:bf:03:92: 53:95:3d:47:89:4d:59:03:4d:9d:7a:1d:b1:67:4d:da:43:51: 55:8c:b7:54:be:0d:d7:7e:e1:b8:41:61:ca:ec:fe:29:d9:ea: 00:55:97:c2:eb:cd:5e:52:ac:f1:a3:53:51:02:fd:a2:01:72: 19:6d:d5:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWF7MCAex6pkl0UNLdbTTeqL5cckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNjEwMjYwODE5MDZaFw0yNjEwMjcxMTU1MDZaMDMxMTAvBgNV BAMTKEZEQzNDMTBDRTRDM0EwN0YxRTNGMzhGMENDQUQ1OUU2QkVDNEUxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSs0+o7wLc32u525ivWEeyUKed DaQWcKmYz0CFxKxLxEFyn45rKPcJcuvsaUTdbAgIxIlAxsAADJqE5/h3Vw1PBtYc 5pEkvj+CIV3OAS7++x9PRQPtbonEt1Sf/BPpzkQgv4qAprFJiZr+2QKnuwfNzmY/ rYNGdefotzJ0qi4qdGeg+VDsycu8+xdkssi5czqf5wCdNyR9Fzgvihb+VK0ifkZx ylT9ZUuZMYhxpflvu+yTO/DL2n75XkWKUMGJKoxUY1j3Vs7QfJ0KHh1ICxKMyUw4 fy6U1ayIZdzAsDseUZYIvCKG8wZAAPfM31siDckodzgOAmDoSdTBhBDh2zbPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/cPBDOTDoH8ePzjwzK1Z5r7E4cAwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMD1ue/fWt9VUwqiiKmIHTX6t562gSPmbyFLMBzi1izUgvJq6Uuj5TLd5GpTj jZLhL6YsEbz8e9WYRIUK/7izgObacSdFBpP+P3m9eqG0DJL8yKEeLSoyMOTMAOFm if4i+ttP9/Z9tv9+lqa1zUeU9PYk+GYBL5LSkVmAdoLpRnrhFML0nEiwhnsSj6sY PdnAMjlA6Z8+lNvOxthzzYiROnCNDcdCKKlOWpwqoztCyhucdRiFUjM+pnVs7lwc skicBgrQvwOSU5U9R4lNWQNNnXodsWdN2kNRVYy3VL4N137huEFhyuz+KdnqAFWX wuvNXlKs8aNTUQL9ogFyGW3VYQ== -----END CERTIFICATE-----Generated at Tue Oct 27 00:25:29 2026 by rpki-client