$ rpki-client -vvf rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft File: 3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft (raw, json) Hash identifier: 5k69abD3F33g1eVbGnLkdNIZqiIf4+Yknpp4RSGltu8= Subject key identifier: 57:0A:45:42:64:FD:E3:AF:4B:6A:1F:C1:F5:69:01:E1:87:9F:5B:49 Authority key identifier: 3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8 Certificate issuer: /CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8 Certificate serial: 15B515AD02366CA01C5D88DA250FA7CE93EC7A63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft Manifest number: 28 Signing time: Thu 09 Apr 2026 13:14:22 +0000 Manifest this update: Thu 09 Apr 2026 13:09:22 +0000 Manifest next update: Fri 10 Apr 2026 16:10:22 +0000 Files and hashes: 1: 323830343a3534633a3a2f33322d313238203d3e20323632353037.roa (hash: 26Q9UM1CuDv2/YqrUpygKEhJYm/Pl+HmO07pfOy0mag=) 2: 3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl (hash: Hssd2pTZac+WvVg4XiFuwFKOEDk1ym1HrtYNHZWIc2A=) 3: 3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa (hash: vGQ+znXQ06EEYIi6OzTGXWX9lefuFbPbbdXL7um4r80=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 13:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b5:15:ad:02:36:6c:a0:1c:5d:88:da:25:0f:a7:ce:93:ec:7a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8 Validity Not Before: Apr 9 13:09:22 2026 GMT Not After : Apr 10 16:10:22 2026 GMT Subject: CN=570A454264FDE3AF4B6A1FC1F56901E1879F5B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:f2:3b:f5:58:be:6d:fb:93:b7:19:3e:50: 00:bb:3a:7f:81:f5:9c:f8:5d:46:05:b7:4e:7e:3e: 62:6e:0c:bf:09:ca:44:c6:17:8f:1c:70:3d:98:7b: 84:fe:ea:6d:0d:1f:a4:8b:b2:52:50:ac:f6:10:bc: da:fb:81:d1:9a:65:6e:47:1f:3a:42:cd:b3:56:6c: 7f:38:af:cc:e9:54:11:0e:26:82:7f:8f:e9:8a:f7: e9:ff:d4:c4:52:54:0e:7a:5c:47:1b:0d:60:44:4f: ef:7f:38:55:9c:e3:88:72:02:e3:40:88:3e:e9:f0: c2:23:71:4a:1b:40:6e:ca:3a:62:a7:13:4a:54:af: f3:d7:31:f0:f3:93:a7:ee:3e:75:40:a9:26:3b:7a: 59:1e:95:20:a0:d9:93:e2:b7:f1:b7:32:fa:62:2f: 2f:44:ac:7f:e3:9f:17:39:9d:31:99:d6:06:8c:fc: 6a:81:1f:a3:aa:a1:0f:f7:a3:bf:da:b3:69:6a:06: 8b:b6:10:4e:af:c7:6b:9f:ea:48:87:23:ee:f3:12: 45:71:ad:29:7f:b7:f7:a8:cd:ef:00:46:06:52:ea: d7:a7:20:67:0b:7c:45:30:de:77:b1:e4:03:80:12: 9e:e2:1b:9a:e4:72:a8:46:aa:a0:9d:b2:5e:2c:ea: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0A:45:42:64:FD:E3:AF:4B:6A:1F:C1:F5:69:01:E1:87:9F:5B:49 X509v3 Authority Key Identifier: keyid:3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ef:3d:c7:fb:a3:71:50:47:46:e6:55:97:64:18:fe:b8:03: 2f:52:e8:af:14:e6:99:61:36:14:5d:70:41:56:7a:0b:ff:a3: b2:f5:bf:8e:66:e2:12:cc:65:00:b6:fe:41:71:90:63:73:74: 5d:29:52:d8:46:89:c7:72:df:1b:4a:d1:ca:51:5f:d7:2b:15: 47:0d:da:21:6b:19:28:bf:79:a9:62:e5:40:bf:a9:61:e0:15: 45:27:a5:ea:0b:50:1c:50:39:96:b2:16:32:99:05:d8:4e:b8: ad:f7:de:fe:c0:59:fd:73:54:53:32:31:8d:63:f9:8e:1b:33: 9e:21:c9:2e:0a:b3:4e:62:98:38:04:d6:19:04:17:d4:dc:b4: db:1c:9c:ef:d7:6d:4a:7f:93:75:51:0e:ab:2d:a8:d8:ab:29: 7d:76:b6:6f:1e:b2:48:57:a6:59:21:8c:22:71:fc:99:55:c9: bc:29:99:80:5c:f4:d5:92:2d:0f:69:e7:81:db:dd:e3:03:47: 22:4c:45:29:e4:c6:6a:63:be:82:f4:fe:1d:69:92:92:ba:c2: 8d:0f:1a:8e:25:a0:ec:3c:fc:76:e2:35:1d:f6:43:5a:e4:6b: eb:9c:31:48:39:68:e1:a8:f5:04:25:1e:ee:36:77:29:30:da: 3e:76:ed:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFbUVrQI2bKAcXYjaJQ+nzpPsemMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FFM0VERDQ2RjYwNTAzOUZEQUNDQUEzMTMyREI2OTE1 QkIyQThEODAeFw0yNjA0MDkxMzA5MjJaFw0yNjA0MTAxNjEwMjJaMDMxMTAvBgNV BAMTKDU3MEE0NTQyNjRGREUzQUY0QjZBMUZDMUY1NjkwMUUxODc5RjVCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Q/I79Vi+bfuTtxk+UAC7On+B 9Zz4XUYFt05+PmJuDL8JykTGF48ccD2Ye4T+6m0NH6SLslJQrPYQvNr7gdGaZW5H HzpCzbNWbH84r8zpVBEOJoJ/j+mK9+n/1MRSVA56XEcbDWBET+9/OFWc44hyAuNA iD7p8MIjcUobQG7KOmKnE0pUr/PXMfDzk6fuPnVAqSY7elkelSCg2ZPit/G3Mvpi Ly9ErH/jnxc5nTGZ1gaM/GqBH6OqoQ/3o7/as2lqBou2EE6vx2uf6kiHI+7zEkVx rSl/t/eoze8ARgZS6tenIGcLfEUw3nex5AOAEp7iG5rkcqhGqqCdsl4s6oEbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVwpFQmT9469Lah/B9WkB4YefW0kwHwYDVR0j BBgwFoAUOuPt1G9gUDn9rMqjEy22kVuyqNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1I4ODdOc3l4dGpCUnAyZFg0ZzY3ZHVIaTJUVWFrMkNrVGZ0YmZwZXBw a3MvMS8zQUUzRURENDZGNjA1MDM5RkRBQ0NBQTMxMzJEQjY5MTVCQjJBOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRTNFREQ0NkY2MDUwMzlG REFDQ0FBMzEzMkRCNjkxNUJCMkE4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1I4ODdOc3l4dGpCUnAyZFg0ZzY3ZHVIaTJUVWFrMkNrVGZ0YmZwZXBwa3MvMS8z QUUzRURENDZGNjA1MDM5RkRBQ0NBQTMxMzJEQjY5MTVCQjJBOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAre89x/ujcVBHRuZVl2QY/rgDL1LorxTmmWE2FF1wQVZ6C/+jsvW/jmbiEsxl ALb+QXGQY3N0XSlS2EaJx3LfG0rRylFf1ysVRw3aIWsZKL95qWLlQL+pYeAVRSel 6gtQHFA5lrIWMpkF2E64rffe/sBZ/XNUUzIxjWP5jhszniHJLgqzTmKYOATWGQQX 1Ny02xyc79dtSn+TdVEOqy2o2KspfXa2bx6ySFemWSGMInH8mVXJvCmZgFz01ZIt D2nngdvd4wNHIkxFKeTGamO+gvT+HWmSkrrCjQ8ajiWg7Dz8duI1HfZDWuRr65wx SDlo4aj1BCUe7jZ3KTDaPnbteA== -----END CERTIFICATE-----Generated at Thu Apr 9 15:32:44 2026 by rpki-client