$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: XTFUw6p4fcpUVoMt618b4mY6iclQJ4Tj7fiMr/fk9A8= Subject key identifier: A4:6A:C1:F3:FA:F8:D6:26:2E:D9:B9:7E:DC:BD:D5:42:31:5C:B1:7D Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 748A789494482D1867EB096EA1D7DFACD0B67199 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 011D Signing time: Sat 18 Apr 2026 02:04:00 +0000 Manifest this update: Sat 18 Apr 2026 01:59:00 +0000 Manifest next update: Sun 19 Apr 2026 03:57:00 +0000 Files and hashes: 1: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) 2: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: RyTaCaMYzW5xvUTd5nYMvHbl2uWFkRmfiPW/r3q0E5Q=) 3: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) 4: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 03:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8a:78:94:94:48:2d:18:67:eb:09:6e:a1:d7:df:ac:d0:b6:71:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Apr 18 01:59:00 2026 GMT Not After : Apr 19 03:57:00 2026 GMT Subject: CN=A46AC1F3FAF8D6262ED9B97EDCBDD542315CB17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:e5:5f:89:a8:85:ad:7b:63:4f:4c:37:84: 35:d3:a4:7c:c2:b9:f3:f9:8b:2b:ab:7b:d6:a3:0a: 91:37:ba:84:28:ef:89:eb:2c:8b:fc:74:5a:55:b2: 88:ad:23:3f:3f:67:e8:ac:88:3f:2c:ea:9d:73:ad: 3c:14:89:2c:49:2e:63:50:5e:44:3b:1e:da:30:13: f5:35:d8:66:e5:91:ab:49:73:43:0f:6a:09:b9:ae: 5f:c3:c5:6c:0a:c6:6b:63:c4:16:4a:fe:f3:28:ea: a9:11:c5:98:00:cb:83:ab:9c:15:17:fe:92:62:90: 2f:37:4e:2b:63:8b:6e:00:f5:4e:29:d5:b8:43:f7: 6b:6d:1a:b4:86:81:e4:d0:e8:1c:97:ea:da:69:6f: b6:c0:40:78:f5:8a:ee:f0:5a:aa:c1:1f:0e:db:c8: 4b:d5:da:ea:1c:8f:ef:8e:d7:7c:e9:27:f4:81:2e: ee:1e:db:ef:a0:9b:69:16:22:53:12:42:6a:8c:d2: 8e:4e:2a:01:66:fd:f9:a3:c4:60:a8:04:d9:20:56: fe:2b:f5:f7:d6:9a:6c:63:43:2e:18:51:1a:69:10: 5f:d4:53:2e:a4:1a:b5:0f:cc:35:a3:d4:ff:71:93: 81:d9:b4:55:a3:ff:9c:70:d7:26:7b:97:0e:f0:ee: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6A:C1:F3:FA:F8:D6:26:2E:D9:B9:7E:DC:BD:D5:42:31:5C:B1:7D X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c0:c0:cd:bb:6b:5e:77:07:6a:7f:48:48:a6:64:92:0b:ea: f4:b1:e8:d2:4d:49:4c:e4:2b:a3:ba:8c:49:b0:a9:3e:e5:1a: c5:7c:82:63:26:37:ab:af:2b:e7:cb:93:35:74:9f:e9:a0:f8: cb:c4:d4:01:5e:04:d7:c5:38:82:2a:68:1e:b5:8b:5d:25:34: b1:33:2d:95:25:92:ac:13:50:b5:b1:6c:62:95:fc:3c:39:fb: 85:34:c8:9d:72:72:03:d7:a3:ed:a9:db:6e:ac:99:1b:78:b9: 1a:e0:8e:75:03:d4:17:0a:5d:97:1f:8e:d8:0a:f2:df:21:48: dd:3f:3b:b6:9d:62:f7:12:b8:5d:8d:84:a2:c4:06:99:fb:0d: ab:31:f4:88:24:81:5f:78:cf:71:d8:dd:f4:19:6d:94:50:a2: d2:4f:7c:71:9e:54:c6:1d:1c:96:e7:fb:47:19:f4:9a:6b:fe: 09:15:86:ff:f0:a1:35:9a:bf:7e:31:b1:ac:2e:5e:ef:fd:e6: da:45:d2:f2:78:2b:e8:79:ec:56:ca:a8:94:2a:5d:64:b7:af: af:5a:07:bd:86:b7:d8:c7:63:ed:52:41:f7:de:af:9e:2a:9d: 14:fc:58:76:7e:cb:f8:d9:f9:18:00:28:54:62:4d:a3:53:b8: 43:9d:0a:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdIp4lJRILRhn6wluodffrNC2cZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNjA0MTgwMTU5MDBaFw0yNjA0MTkwMzU3MDBaMDMxMTAvBgNV BAMTKEE0NkFDMUYzRkFGOEQ2MjYyRUQ5Qjk3RURDQkRENTQyMzE1Q0IxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3H+VfiaiFrXtjT0w3hDXTpHzC ufP5iyure9ajCpE3uoQo74nrLIv8dFpVsoitIz8/Z+isiD8s6p1zrTwUiSxJLmNQ XkQ7HtowE/U12GblkatJc0MPagm5rl/DxWwKxmtjxBZK/vMo6qkRxZgAy4OrnBUX /pJikC83Titji24A9U4p1bhD92ttGrSGgeTQ6ByX6tppb7bAQHj1iu7wWqrBHw7b yEvV2uocj++O13zpJ/SBLu4e2++gm2kWIlMSQmqM0o5OKgFm/fmjxGCoBNkgVv4r 9ffWmmxjQy4YURppEF/UUy6kGrUPzDWj1P9xk4HZtFWj/5xw1yZ7lw7w7s4ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpGrB8/r41iYu2bl+3L3VQjFcsX0wHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGcDAzbtrXncHan9ISKZkkgvq9LHo0k1JTOQro7qMSbCpPuUaxXyCYyY3q68r 58uTNXSf6aD4y8TUAV4E18U4gipoHrWLXSU0sTMtlSWSrBNQtbFsYpX8PDn7hTTI nXJyA9ej7anbbqyZG3i5GuCOdQPUFwpdlx+O2Ary3yFI3T87tp1i9xK4XY2EosQG mfsNqzH0iCSBX3jPcdjd9BltlFCi0k98cZ5Uxh0cluf7Rxn0mmv+CRWG//ChNZq/ fjGxrC5e7/3m2kXS8ngr6HnsVsqolCpdZLevr1oHvYa32Mdj7VJB996vniqdFPxY dn7L+Nn5GAAoVGJNo1O4Q50Ktw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:45:00 2026 by rpki-client