$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: EI5cAFczISOlDZyvKsqtgwh3UUBWiSZFlsS1T593EcA= Subject key identifier: 23:C7:8E:A8:59:25:54:B0:43:A1:D1:21:88:B4:71:92:A2:93:3C:65 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 2BF9141014D5635620DE25B99D88DF6A3147FF22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 01CC Signing time: Fri 17 Apr 2026 20:24:57 +0000 Manifest this update: Fri 17 Apr 2026 20:19:57 +0000 Manifest next update: Sat 18 Apr 2026 23:25:57 +0000 Files and hashes: 1: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: ORahyMkciN4RSxDGF7FbW15jn/GUHvJpDtdnEkpaI/k=) 2: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=) 3: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=) 4: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f9:14:10:14:d5:63:56:20:de:25:b9:9d:88:df:6a:31:47:ff:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Apr 17 20:19:57 2026 GMT Not After : Apr 18 23:25:57 2026 GMT Subject: CN=23C78EA8592554B043A1D12188B47192A2933C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:c2:0e:fa:36:68:31:f4:66:08:d8:5a:2b: 6c:02:8b:f6:ce:65:4f:08:15:8d:ef:73:ec:73:40: 71:30:bc:96:14:26:91:26:bf:a6:8f:ef:45:5d:e1: bd:3e:fa:3f:a2:97:4f:bd:ec:a5:40:f4:ad:75:32: 83:fd:52:c0:16:f8:f3:f7:fc:57:f4:54:d9:6c:67: ed:e2:dc:98:8b:80:90:07:30:f2:96:ce:75:56:21: 4a:e7:72:9b:5b:ab:13:00:ae:83:9d:cb:80:63:3e: c0:3f:b3:4f:cd:c2:15:97:9a:9d:63:e2:06:f8:6e: e7:6e:dd:72:9f:c0:b8:2a:d6:7b:77:45:36:77:f2: 00:60:1a:73:22:5e:b7:f6:c5:c9:df:25:41:8e:8e: 53:bc:9c:5c:46:85:8f:9c:c9:a7:13:ad:47:55:22: b3:70:dd:00:c7:a6:45:39:e0:9c:2b:0e:c5:d6:a2: 8d:ff:9a:f9:e3:aa:00:25:d1:ae:cc:be:77:b8:79: 0e:91:1f:1f:54:c1:92:18:64:b2:a5:d0:1e:89:99: e3:56:13:c4:f4:6e:ad:97:b7:a3:56:7c:aa:32:67: 7b:63:db:b3:96:c0:83:37:09:f4:98:9c:06:16:95: a4:b8:21:19:16:ec:bc:a0:08:27:6f:ca:4e:79:7e: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:8E:A8:59:25:54:B0:43:A1:D1:21:88:B4:71:92:A2:93:3C:65 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5c:6c:66:d5:03:46:44:e3:68:79:a2:44:e2:e9:74:7c:de: f0:1b:db:34:ae:d3:10:5c:61:4d:20:de:56:fb:ab:5e:44:2a: 9d:de:5e:6d:9b:41:e7:63:15:9c:ae:29:8c:39:c3:5c:da:dd: 5b:32:65:cf:dd:a4:82:b9:d9:68:a5:f9:46:87:f1:2e:02:26: 10:14:69:60:86:0e:58:8d:f0:4f:99:c7:07:e0:2a:68:2b:b7: b9:3a:b4:13:90:40:d0:9d:7c:6f:58:29:8f:ae:96:2b:4f:49: a9:95:53:17:26:af:18:33:3a:ca:d1:51:bd:75:9f:f6:95:6f: ea:a7:ef:f6:c9:2e:28:64:d6:d9:ab:03:d9:5f:bb:70:f0:2c: ad:a5:83:70:28:ff:ce:58:d4:b5:17:55:ee:35:7b:e1:f7:45: ba:a4:82:1a:2c:51:60:fe:87:4d:06:09:c2:92:9e:49:5c:40: 42:e0:2f:c5:5a:53:88:f1:87:5b:73:af:7a:c5:e6:49:2b:9d: 20:d7:65:81:3b:68:c1:e1:df:39:2e:6c:8a:c5:05:4b:5f:a6: c6:5f:6f:13:08:9f:33:51:6d:cd:5d:88:14:4a:5c:51:a8:3c: 20:d2:89:ee:c6:f6:dd:e0:04:95:7e:37:f0:36:fd:50:79:21: 25:99:fe:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK/kUEBTVY1Yg3iW5nYjfajFH/yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNjA0MTcyMDE5NTdaFw0yNjA0MTgyMzI1NTdaMDMxMTAvBgNV BAMTKDIzQzc4RUE4NTkyNTU0QjA0M0ExRDEyMTg4QjQ3MTkyQTI5MzNDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0G8IO+jZoMfRmCNhaK2wCi/bO ZU8IFY3vc+xzQHEwvJYUJpEmv6aP70Vd4b0++j+il0+97KVA9K11MoP9UsAW+PP3 /Ff0VNlsZ+3i3JiLgJAHMPKWznVWIUrncptbqxMAroOdy4BjPsA/s0/NwhWXmp1j 4gb4budu3XKfwLgq1nt3RTZ38gBgGnMiXrf2xcnfJUGOjlO8nFxGhY+cyacTrUdV IrNw3QDHpkU54JwrDsXWoo3/mvnjqgAl0a7Mvne4eQ6RHx9UwZIYZLKl0B6JmeNW E8T0bq2Xt6NWfKoyZ3tj27OWwIM3CfSYnAYWlaS4IRkW7LygCCdvyk55fkx5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI8eOqFklVLBDodEhiLRxkqKTPGUwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARFxsZtUDRkTjaHmiROLpdHze8BvbNK7TEFxhTSDeVvurXkQqnd5ebZtB52MV nK4pjDnDXNrdWzJlz92kgrnZaKX5RofxLgImEBRpYIYOWI3wT5nHB+AqaCu3uTq0 E5BA0J18b1gpj66WK09JqZVTFyavGDM6ytFRvXWf9pVv6qfv9skuKGTW2asD2V+7 cPAsraWDcCj/zljUtRdV7jV74fdFuqSCGixRYP6HTQYJwpKeSVxAQuAvxVpTiPGH W3OvesXmSSudINdlgTtoweHfOS5sisUFS1+mxl9vEwifM1FtzV2IFEpcUag8INKJ 7sb23eAElX438Db9UHkhJZn+lQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:44:16 2026 by rpki-client