$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: 78lz0XpR1NDkZoZIT3Bbn9rONEYoc+gpKWBeMLUvNE4= Subject key identifier: 79:15:99:98:1D:89:E6:74:63:C0:9E:73:CB:CB:BA:F3:A6:68:10:42 Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 64CE9203AE65336402A69D16A08D5EAA0CB81EDB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 03D3 Signing time: Wed 08 Apr 2026 01:48:28 +0000 Manifest this update: Wed 08 Apr 2026 01:43:28 +0000 Manifest next update: Thu 09 Apr 2026 05:13:28 +0000 Files and hashes: 1: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=) 2: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=) 3: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=) 4: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=) 5: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=) 6: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=) 7: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: ESFq7SaEQvWP87HRpJkkYYP002f6AMds8oXZUzT/ViY=) 8: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=) 9: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 05:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ce:92:03:ae:65:33:64:02:a6:9d:16:a0:8d:5e:aa:0c:b8:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Apr 8 01:43:28 2026 GMT Not After : Apr 9 05:13:28 2026 GMT Subject: CN=791599981D89E67463C09E73CBCBBAF3A6681042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:a3:df:38:cf:92:55:7f:07:b6:99:ae:58: e9:29:e6:7e:6b:c9:18:cb:61:23:fa:df:71:1f:8d: df:b5:fb:e2:ed:59:5e:57:47:81:63:47:c2:63:e8: 5a:9f:4d:61:b8:8c:2b:61:97:27:46:40:c5:35:07: 19:09:3b:90:ab:50:c3:cf:fc:26:f2:e2:a7:71:a8: aa:04:33:42:ae:52:61:60:05:af:2a:cf:f8:51:1b: 9f:04:e2:e9:dd:75:56:c5:4e:f4:a2:03:c4:41:4c: dd:b3:f3:3f:89:c1:9b:e2:ec:11:e6:ef:d0:86:2c: 46:ca:b3:9f:b6:e9:35:82:f1:6e:50:5a:b1:9a:ef: a7:05:89:09:6d:2d:7c:21:0e:4d:84:5d:e3:fb:8d: 01:05:ae:81:2b:9c:2a:66:10:7b:19:07:9b:8d:d2: 5f:f0:4f:f0:f4:78:0b:5e:71:f3:64:02:aa:67:c4: 50:9e:79:df:c1:c3:6b:53:e3:1f:ab:92:a4:f3:02: 29:59:e1:39:70:e2:2f:c3:e2:4d:50:5a:35:0b:e2: 48:f8:80:27:2f:c5:31:ac:f8:23:d6:5b:1c:d7:c3: 4d:c1:59:0e:f8:de:a7:44:51:b7:73:01:64:a2:3d: f3:de:4e:a4:05:82:91:c7:60:ec:74:9e:0f:79:a3: 43:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:99:98:1D:89:E6:74:63:C0:9E:73:CB:CB:BA:F3:A6:68:10:42 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c1:94:86:17:35:b8:f2:3c:8d:3b:11:d3:7d:88:75:0b:b7: e7:4e:68:4a:1f:77:51:df:fb:6c:b5:ed:32:b4:cd:38:a2:d8: 9d:5f:ab:22:e6:82:98:a4:07:e5:3c:e0:da:f4:0b:77:d4:a6: 02:ff:b5:c6:e0:8e:6f:50:bb:22:fc:e4:b5:be:b6:04:33:7b: a2:79:c3:68:4a:19:ce:ee:c8:41:88:fd:c4:a7:cb:4a:c6:63: a2:31:79:59:e3:4b:ea:bb:81:f9:4f:ed:9b:ee:08:04:49:19: ae:4d:8e:b8:45:4e:cc:a7:11:31:3b:5f:1d:d9:4f:70:cb:4e: 6f:60:b8:a3:64:26:16:56:a8:34:1b:37:20:60:b4:11:2d:ec: e1:05:49:7e:cf:0b:24:b8:eb:88:4d:94:02:49:76:08:d4:80: 6c:17:33:38:46:bb:53:b4:d6:91:4c:af:8d:b0:ae:f5:d8:58: 09:73:5b:0d:2e:08:7f:7e:39:e4:54:b9:ec:11:eb:65:17:0f: fe:68:8e:03:07:94:0b:97:2d:1c:48:a1:d4:da:e5:0d:e0:38: 45:5c:03:bc:09:1a:3a:e0:62:5e:c4:bf:e9:09:9a:67:14:fa: f4:5e:33:ad:0f:47:75:88:aa:68:35:d3:fb:ef:42:74:68:40: 64:95:c5:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZM6SA65lM2QCpp0WoI1eqgy4HtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNjA0MDgwMTQzMjhaFw0yNjA0MDkwNTEzMjhaMDMxMTAvBgNV BAMTKDc5MTU5OTk4MUQ4OUU2NzQ2M0MwOUU3M0NCQ0JCQUYzQTY2ODEwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8faPfOM+SVX8HtpmuWOkp5n5r yRjLYSP633Efjd+1++LtWV5XR4FjR8Jj6FqfTWG4jCthlydGQMU1BxkJO5CrUMPP /Cby4qdxqKoEM0KuUmFgBa8qz/hRG58E4unddVbFTvSiA8RBTN2z8z+JwZvi7BHm 79CGLEbKs5+26TWC8W5QWrGa76cFiQltLXwhDk2EXeP7jQEFroErnCpmEHsZB5uN 0l/wT/D0eAtecfNkAqpnxFCeed/Bw2tT4x+rkqTzAilZ4Tlw4i/D4k1QWjUL4kj4 gCcvxTGs+CPWWxzXw03BWQ743qdEUbdzAWSiPfPeTqQFgpHHYOx0ng95o0OXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeRWZmB2J5nRjwJ5zy8u686ZoEEIwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcsGUhhc1uPI8jTsR032IdQu3505oSh93Ud/7bLXtMrTNOKLYnV+rIuaCmKQH 5Tzg2vQLd9SmAv+1xuCOb1C7Ivzktb62BDN7onnDaEoZzu7IQYj9xKfLSsZjojF5 WeNL6ruB+U/tm+4IBEkZrk2OuEVOzKcRMTtfHdlPcMtOb2C4o2QmFlaoNBs3IGC0 ES3s4QVJfs8LJLjriE2UAkl2CNSAbBczOEa7U7TWkUyvjbCu9dhYCXNbDS4If345 5FS57BHrZRcP/miOAweUC5ctHEih1NrlDeA4RVwDvAkaOuBiXsS/6QmaZxT69F4z rQ9HdYiqaDXT++9CdGhAZJXF8w== -----END CERTIFICATE-----Generated at Wed Apr 8 17:46:43 2026 by rpki-client