$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: CQvAk8JHiqPF7Yp74rxfDdwYKIkyczELoo4q/Doslj8= Subject key identifier: CE:16:83:69:DE:30:5D:BE:67:E1:72:61:D8:86:92:1C:FF:07:73:DF Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 5A5C7F30E1585EF11D8D1196398E1027383428FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 0410 Signing time: Sat 23 May 2026 20:42:03 +0000 Manifest this update: Sat 23 May 2026 20:37:03 +0000 Manifest next update: Sun 24 May 2026 20:58:03 +0000 Files and hashes: 1: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: Y0fDWKHBkMr7eU7RouNstjgOozQfVthVM/19aCqxUlg=) 2: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=) 3: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=) 4: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=) 5: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=) 6: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=) 7: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=) 8: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=) 9: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 20:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5c:7f:30:e1:58:5e:f1:1d:8d:11:96:39:8e:10:27:38:34:28:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: May 23 20:37:03 2026 GMT Not After : May 24 20:58:03 2026 GMT Subject: CN=CE168369DE305DBE67E17261D886921CFF0773DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:b9:6c:46:1e:9f:b3:49:be:9c:e9:00:91: 47:dc:0d:65:1b:2b:6b:52:40:70:6b:ec:cc:34:de: 4f:8f:74:8e:e2:46:06:f8:48:db:6a:32:68:a4:57: a6:10:3e:8d:7b:ee:ef:0b:22:ad:ce:b4:46:90:96: 1f:a4:8d:40:b4:a7:c6:f9:01:cc:a8:b5:12:78:89: 1e:31:3d:ab:ae:a2:bf:e7:11:92:e2:38:b5:dd:f5: 04:50:5d:8e:0a:8b:31:51:29:9f:36:db:4a:3d:72: b6:cb:8c:c2:9d:e1:60:d6:ff:b3:76:d1:db:ea:37: 4e:78:5b:ee:9d:61:a1:6d:0d:cc:07:87:46:e3:21: 1d:d2:48:d7:73:e3:90:f2:98:89:6b:86:ba:02:0a: a8:e1:29:aa:36:5d:51:47:d3:80:b9:04:a8:a0:51: 80:df:79:4b:81:e3:70:eb:e0:3b:6f:b2:b6:74:c7: 69:76:1c:39:ae:78:ec:a8:1a:23:1a:3c:8c:d7:da: 48:f2:29:e4:97:9a:e7:e8:57:89:ac:41:db:cc:68: 0f:c3:40:a3:af:46:27:02:fd:e1:dd:56:45:32:7d: b2:53:76:91:fd:e0:0d:ea:f8:1a:28:b9:03:eb:a5: 5c:7a:35:40:e3:17:3f:8b:a6:f2:6b:24:bd:53:b5: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:83:69:DE:30:5D:BE:67:E1:72:61:D8:86:92:1C:FF:07:73:DF X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7c:01:f6:bf:e4:24:c7:c2:2d:19:90:dd:c3:bf:de:f7:38: b5:bd:8d:6c:ac:a2:87:ab:59:f8:cb:14:6b:fc:c1:12:97:16: b1:6e:f0:cf:e2:d0:92:95:65:b3:ac:2c:92:ac:75:28:3c:bd: 87:58:a8:b9:cc:c1:06:2b:11:62:83:c9:d1:ef:1b:c8:b6:37: 8b:c7:96:c3:17:ec:ef:f3:64:70:7e:48:fb:7c:d4:e2:9f:4f: 21:02:ab:e6:9e:f3:73:7b:08:ff:4f:20:1b:65:f0:68:46:9c: be:ff:e4:cf:3f:af:95:b5:93:0f:c7:52:e0:27:f1:7d:92:8f: aa:0c:fa:32:7f:80:bf:f4:c1:eb:bf:74:9a:3c:5a:b4:35:78: 68:af:26:e4:46:bc:51:37:04:6d:95:b5:af:3a:4f:8a:52:bc: b2:7c:79:2a:bb:7b:85:e4:ea:15:b2:16:2d:f2:bb:65:f5:f0: d7:3b:8c:75:98:1f:a0:b1:23:b4:f2:1a:ae:38:52:b5:e3:01: 09:c9:ef:28:a4:4f:80:0a:67:57:38:fd:04:d4:79:8a:d4:6e: 28:9a:50:a5:9e:8a:63:c7:76:36:31:f7:19:53:3c:d6:29:1e: 21:3e:02:19:15:1a:cd:ad:85:5e:46:85:03:33:75:80:eb:b2: 0a:b4:fe:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWlx/MOFYXvEdjRGWOY4QJzg0KPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNjA1MjMyMDM3MDNaFw0yNjA1MjQyMDU4MDNaMDMxMTAvBgNV BAMTKENFMTY4MzY5REUzMDVEQkU2N0UxNzI2MUQ4ODY5MjFDRkYwNzczREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37rlsRh6fs0m+nOkAkUfcDWUb K2tSQHBr7Mw03k+PdI7iRgb4SNtqMmikV6YQPo177u8LIq3OtEaQlh+kjUC0p8b5 AcyotRJ4iR4xPauuor/nEZLiOLXd9QRQXY4KizFRKZ8220o9crbLjMKd4WDW/7N2 0dvqN054W+6dYaFtDcwHh0bjIR3SSNdz45DymIlrhroCCqjhKao2XVFH04C5BKig UYDfeUuB43Dr4DtvsrZ0x2l2HDmueOyoGiMaPIzX2kjyKeSXmufoV4msQdvMaA/D QKOvRicC/eHdVkUyfbJTdpH94A3q+BoouQPrpVx6NUDjFz+LpvJrJL1TtWtnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzhaDad4wXb5n4XJh2IaSHP8Hc98wHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3wB9r/kJMfCLRmQ3cO/3vc4tb2NbKyih6tZ+MsUa/zBEpcWsW7wz+LQkpVl s6wskqx1KDy9h1iouczBBisRYoPJ0e8byLY3i8eWwxfs7/NkcH5I+3zU4p9PIQKr 5p7zc3sI/08gG2XwaEacvv/kzz+vlbWTD8dS4CfxfZKPqgz6Mn+Av/TB6790mjxa tDV4aK8m5Ea8UTcEbZW1rzpPilK8snx5Krt7heTqFbIWLfK7ZfXw1zuMdZgfoLEj tPIarjhSteMBCcnvKKRPgApnVzj9BNR5itRuKJpQpZ6KY8d2NjH3GVM81ikeIT4C GRUaza2FXkaFAzN1gOuyCrT+6g== -----END CERTIFICATE-----Generated at Sun May 24 12:50:53 2026 by rpki-client