$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft File: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft (raw, json) Hash identifier: iCax2nuAVwABz9Shdrka3Y4QG6G5CqYqC105IYFOuFg= Subject key identifier: C9:9E:B2:87:89:38:20:D3:D1:88:16:FC:3B:0E:18:07:8D:41:A8:CC Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 Certificate issuer: /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Certificate serial: 235C0F1C22A91243B601C774F5B8AAAB28E06B8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft Manifest number: 0410 Signing time: Sun 24 May 2026 00:54:29 +0000 Manifest this update: Sun 24 May 2026 00:49:29 +0000 Manifest next update: Mon 25 May 2026 02:11:29 +0000 Files and hashes: 1: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl (hash: /MEDHi9N2rbKpCzzdns5ymJ5MVdwqG4B9kGWCbzKc6A=) 2: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: mp//bJXHnlfOddhWkq9Y0a9owF8/kVxnYbXzu0BfBOw=) 3: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: PNGiNFTfBbFr+tZNLJBbvXWjG9Tjj57esMu9J6aPaGg=) 4: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: mWgffdXIzVUBsSsZAU9kXPHxIikSV3lXIbbz1rPPnuk=) 5: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: rsXZ2b3I3qekPmSaQHB4zHS0xKQs1RvM8ySUroK1Fpo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 02:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5c:0f:1c:22:a9:12:43:b6:01:c7:74:f5:b8:aa:ab:28:e0:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Validity Not Before: May 24 00:49:29 2026 GMT Not After : May 25 02:11:29 2026 GMT Subject: CN=C99EB287893820D3D18816FC3B0E18078D41A8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:98:43:3b:52:71:e7:d6:d1:35:94:55:16: c3:14:b3:53:b7:25:d6:9a:27:7c:11:4e:84:1a:e6: 15:83:b9:be:58:7f:2a:7a:bb:e8:ae:7b:81:f3:e5: 20:55:69:f3:70:6d:2a:3b:fa:08:68:60:0f:67:c6: 8b:02:74:79:ea:ac:0a:b1:81:dd:ab:9a:86:99:1b: a1:e3:d2:b4:74:f0:47:db:3b:fb:c2:7d:8a:6d:4f: 1a:1a:3a:02:a1:75:e9:7a:2e:18:3f:fc:76:39:ba: 64:e5:42:1e:f4:c4:2f:60:2b:8b:83:91:a7:60:26: e4:44:c8:d2:9b:a8:fb:eb:51:c2:0f:18:09:33:19: 5a:28:52:77:08:a8:2e:53:5a:8e:1c:93:30:c3:44: e4:1a:51:6a:c3:66:3e:02:c3:70:55:8e:5d:3c:c1: f9:7d:a8:66:38:30:ce:46:46:4a:72:b4:12:7f:3e: f9:e5:07:fc:ab:f6:a5:b4:f9:0a:b0:67:38:41:c3: d3:96:42:dd:97:6c:5f:b2:19:47:ce:53:6b:29:64: 42:5e:22:c1:29:f0:f1:32:6b:1c:ab:07:29:1a:d9: 3d:f2:ee:bc:2f:1e:09:15:b6:c6:2f:2f:16:8f:a1: c7:b9:b0:08:03:34:a2:0b:3f:b1:79:d5:c2:2e:10: af:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9E:B2:87:89:38:20:D3:D1:88:16:FC:3B:0E:18:07:8D:41:A8:CC X509v3 Authority Key Identifier: keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e6:51:7c:94:6d:fc:db:ca:5e:13:92:c0:72:26:ba:62:d2: 3f:d6:aa:fd:fa:88:5d:b7:6d:99:0c:ec:eb:f2:cb:59:6b:d9: 01:87:8a:14:12:54:39:77:b1:b5:5f:1f:db:69:79:34:7b:00: 71:f5:2b:a1:61:a3:e9:94:c9:ac:10:af:cc:ae:e6:eb:b4:21: 9c:0c:55:fe:0a:47:71:b5:7e:50:6c:24:07:7f:57:7c:52:bc: bd:5e:d5:e4:f8:8e:4f:2e:f5:32:a7:02:47:43:ae:0a:a9:a7: b6:02:63:0a:72:50:a3:73:d2:5f:92:e2:27:f5:0e:8d:a6:db: 17:eb:3e:20:80:55:af:6e:43:9b:0f:ee:0f:ae:56:89:fd:f7: ca:b6:69:94:83:b9:dc:06:8a:6e:23:71:46:12:66:21:26:30: 7b:1d:b6:43:c3:25:cc:19:06:ec:53:5c:df:23:60:20:46:5b: 6c:a8:29:39:b2:7a:89:9a:b3:68:08:92:95:0a:56:5a:92:44: c2:4b:5d:f0:ba:c0:b2:82:a5:c3:58:ac:78:8d:6a:a4:81:3d: 8c:8d:91:44:4e:01:56:b4:66:6b:88:dc:b3:91:74:c7:a1:1d: b9:a0:74:d2:b1:90:cf:ba:16:12:09:15:35:f7:3e:cf:f7:02: 0c:42:33:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI1wPHCKpEkO2Acd09biqqyjga4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNkRBOUZBMUNGN0UzMTJBQUY3NzIxRUQxNTM4NEUw NjNBRTJFMjAeFw0yNjA1MjQwMDQ5MjlaFw0yNjA1MjUwMjExMjlaMDMxMTAvBgNV BAMTKEM5OUVCMjg3ODkzODIwRDNEMTg4MTZGQzNCMEUxODA3OEQ0MUE4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesZhDO1Jx59bRNZRVFsMUs1O3 JdaaJ3wRToQa5hWDub5Yfyp6u+iue4Hz5SBVafNwbSo7+ghoYA9nxosCdHnqrAqx gd2rmoaZG6Hj0rR08EfbO/vCfYptTxoaOgKhdel6Lhg//HY5umTlQh70xC9gK4uD kadgJuREyNKbqPvrUcIPGAkzGVooUncIqC5TWo4ckzDDROQaUWrDZj4Cw3BVjl08 wfl9qGY4MM5GRkpytBJ/PvnlB/yr9qW0+QqwZzhBw9OWQt2XbF+yGUfOU2spZEJe IsEp8PEyaxyrByka2T3y7rwvHgkVtsYvLxaPoce5sAgDNKILP7F51cIuEK/bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyZ6yh4k4INPRiBb8Ow4YB41BqMwwHwYDVR0j BBgwFoAUNTban6HPfjEqr3ch7RU4TgY64uIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdE aDgvMS8zNTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MzZEQTlGQTFDRjdFMzEy QUFGNzcyMUVEMTUzODRFMDYzQUUyRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdEaDgvMS8z NTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiOZRfJRt/NvKXhOSwHImumLSP9aq/fqIXbdtmQzs6/LLWWvZAYeKFBJUOXex tV8f22l5NHsAcfUroWGj6ZTJrBCvzK7m67QhnAxV/gpHcbV+UGwkB39XfFK8vV7V 5PiOTy71MqcCR0OuCqmntgJjCnJQo3PSX5LiJ/UOjabbF+s+IIBVr25Dmw/uD65W if33yrZplIO53AaKbiNxRhJmISYwex22Q8MlzBkG7FNc3yNgIEZbbKgpObJ6iZqz aAiSlQpWWpJEwktd8LrAsoKlw1iseI1qpIE9jI2RRE4BVrRma4jcs5F0x6EduaB0 0rGQz7oWEgkVNfc+z/cCDEIzAw== -----END CERTIFICATE-----Generated at Sun May 24 14:16:45 2026 by rpki-client