$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft File: 3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft (raw, json) Hash identifier: ylgYLwNsHeFSub9V3gESgUda0oYihrlqDwl6xNm5TlA= Subject key identifier: 16:64:71:E4:FB:B2:4B:B3:55:0B:9B:37:55:40:26:91:D6:5F:EF:F1 Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60 Certificate issuer: /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560 Certificate serial: 747205BF16249671B50A030ED75DAEE658DBCB92 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft Manifest number: B0 Signing time: Wed 08 Apr 2026 17:00:28 +0000 Manifest this update: Wed 08 Apr 2026 16:55:28 +0000 Manifest next update: Thu 09 Apr 2026 18:42:28 +0000 Files and hashes: 1: 3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl (hash: Po+DG9vVgPR58DA+ZOGf0a7sKH4ml0K72PBrQuOfIAk=) 2: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: nlTw0GIIpp6SyPsVEPHRac40g2ydnw4rzlurpGEhgGU=) 3: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: tO3ng5ssl7OXoRcbQLn/q2hJzoTtQtHd+JHRdfRMwYU=) 4: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: 7l6dXdKV/Qxm67y6Yp+xmZNlo7Mb3/J+6Jrg7LuDGnM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 18:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:72:05:bf:16:24:96:71:b5:0a:03:0e:d7:5d:ae:e6:58:db:cb:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560 Validity Not Before: Apr 8 16:55:28 2026 GMT Not After : Apr 9 18:42:28 2026 GMT Subject: CN=166471E4FBB24BB3550B9B3755402691D65FEFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:41:4c:db:73:e6:50:75:7a:da:53:6a:e2:0b: 79:37:a5:9b:8e:e0:28:ff:cf:16:bf:d7:6b:32:63: 8f:f6:ef:b0:b6:94:f3:f4:d9:cb:bb:ee:a3:9d:a1: a4:9f:5d:5d:d7:af:24:40:0d:90:59:b0:05:da:51: e6:7f:06:f3:df:1e:3f:47:f2:fd:93:79:7a:40:94: f9:de:ea:5d:6d:d8:be:c3:34:cd:c6:b7:8d:ab:23: 99:7e:8f:b8:45:52:2f:6a:2e:b6:de:f6:7f:dc:83: 06:69:4d:a7:58:ec:90:04:6a:3c:5f:bc:b5:cd:14: 9c:95:78:0c:8f:4b:b6:f6:d6:2d:dc:8f:99:d6:ba: 06:b3:06:12:93:bd:8e:1b:b6:3b:37:cb:d3:14:e6: a9:a7:3f:6d:87:11:ab:a2:87:37:6a:48:d0:29:45: cd:13:3b:a6:b6:f0:56:b6:64:66:03:6a:e0:19:e8: 1e:ae:4c:6d:e1:60:6e:46:80:c3:81:25:e6:fa:d6: 12:f3:1d:47:af:0d:e3:37:a6:a5:a7:37:ba:cf:5c: 62:a1:2f:fd:ac:a7:f2:04:97:3e:4d:25:cb:d8:03: c8:82:b5:e2:60:8a:67:a4:d0:42:e1:49:fc:e1:9c: b9:a8:05:92:13:bc:e5:f8:91:46:38:f3:79:d4:07: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:64:71:E4:FB:B2:4B:B3:55:0B:9B:37:55:40:26:91:D6:5F:EF:F1 X509v3 Authority Key Identifier: keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9f:cf:b5:02:6c:45:86:a8:c2:ab:16:c7:81:38:53:ec:5e: de:46:05:51:87:fe:31:39:3b:83:60:d8:89:ee:e5:45:05:a8: 74:36:ad:4e:ca:4a:55:a8:9c:79:bc:8d:09:58:60:82:22:b0: 4a:de:d8:8d:83:b5:4b:2b:62:56:48:f8:0d:5e:a1:92:a3:c4: b5:90:bd:b5:f7:4a:ad:40:19:c3:9b:50:fe:f5:59:dc:02:5d: 78:36:d7:00:e6:8b:9c:7b:a2:1b:d7:c6:a4:99:ff:27:a9:31: 65:1c:02:d3:47:b8:74:e4:a8:ae:6b:e2:c8:d8:aa:a4:95:fb: 99:33:c4:62:0b:b4:3f:31:34:bf:a5:8f:f5:4d:d0:9f:e3:9e: bf:c7:7d:9a:e0:ae:04:3c:e2:c2:54:87:df:2b:27:52:73:57: 3a:a5:e1:98:b2:a8:86:50:4a:d9:0b:c8:aa:be:71:7e:ea:6f: 74:1a:87:f6:da:14:d6:41:98:d6:6e:ec:33:cd:2d:2d:93:0b: dd:1c:68:70:bf:8b:59:56:ea:35:00:6f:0e:18:10:58:c3:12: c7:5d:cb:07:7f:ee:a8:2e:f5:52:2d:f4:d2:8a:12:63:50:2b: a4:cb:4d:8b:ea:f6:4a:88:7d:f5:4c:c4:5e:42:ba:f0:d9:1c: 3b:c3:ec:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdHIFvxYklnG1CgMO112u5ljby5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3N0YxQTM0RUM0QTU3MEQ5MjM2MkEzQjE2NUNCMDNG QTFBODU2MDAeFw0yNjA0MDgxNjU1MjhaFw0yNjA0MDkxODQyMjhaMDMxMTAvBgNV BAMTKDE2NjQ3MUU0RkJCMjRCQjM1NTBCOUIzNzU1NDAyNjkxRDY1RkVGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQUzbc+ZQdXraU2riC3k3pZuO 4Cj/zxa/12syY4/277C2lPP02cu77qOdoaSfXV3XryRADZBZsAXaUeZ/BvPfHj9H 8v2TeXpAlPne6l1t2L7DNM3Gt42rI5l+j7hFUi9qLrbe9n/cgwZpTadY7JAEajxf vLXNFJyVeAyPS7b21i3cj5nWugazBhKTvY4btjs3y9MU5qmnP22HEauihzdqSNAp Rc0TO6a28Fa2ZGYDauAZ6B6uTG3hYG5GgMOBJeb61hLzHUevDeM3pqWnN7rPXGKh L/2sp/IElz5NJcvYA8iCteJgimek0ELhSfzhnLmoBZITvOX4kUY483nUB6b7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFmRx5PuyS7NVC5s3VUAmkdZf7/EwHwYDVR0j BBgwFoAUNHfxo07EpXDZI2KjsWXLA/oahWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC8zNDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NzdGMUEzNEVDNEE1NzBE OTIzNjJBM0IxNjVDQjAzRkExQTg1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC8z NDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPJ/PtQJsRYaowqsWx4E4U+xe3kYFUYf+MTk7g2DYie7lRQWodDatTspKVaic ebyNCVhggiKwSt7YjYO1SytiVkj4DV6hkqPEtZC9tfdKrUAZw5tQ/vVZ3AJdeDbX AOaLnHuiG9fGpJn/J6kxZRwC00e4dOSormviyNiqpJX7mTPEYgu0PzE0v6WP9U3Q n+Oev8d9muCuBDziwlSH3ysnUnNXOqXhmLKohlBK2QvIqr5xfupvdBqH9toU1kGY 1m7sM80tLZML3RxocL+LWVbqNQBvDhgQWMMSx13LB3/uqC71Ui300ooSY1ArpMtN i+r2Soh99UzEXkK68NkcO8PsUQ== -----END CERTIFICATE-----Generated at Thu Apr 9 11:13:53 2026 by rpki-client