$ rpki-client -vvvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft File: 3A039835A68C92594BA889BF185A560E86C0CFD1.mft (raw, json) Hash identifier: 7cesDMIzFqqjTfZ9uAzWYGejDsHHSAAKVcUmnPD/f6I= Subject key identifier: 39:85:E3:A2:63:7D:11:54:A8:D9:13:1A:06:CE:4E:1E:D6:07:BA:28 Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1 Certificate issuer: /CN=3A039835A68C92594BA889BF185A560E86C0CFD1 Certificate serial: 618A10B10B64E05451159889A1D09E5C620B805D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft Manifest number: 0242 Signing time: Sun 23 Aug 2026 05:35:15 +0000 Manifest this update: Sun 23 Aug 2026 05:30:15 +0000 Manifest next update: Mon 24 Aug 2026 08:34:15 +0000 Files and hashes: 1: 323830343a393435633a3a2f33322d3332203d3e203631363234.roa (hash: qqaZ9qMzxwBk/j4r/MDz/jb4GMlz1dtS9JyfpAnWrtI=) 2: 323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa (hash: lbzq2tAXRMoHrt5RPrxpeRldsgZjhpc2YTTuAWVgAAs=) 3: 323830343a393435633a313030303a3a2f34382d3438203d3e203631363234.roa (hash: uuEuEktLWudAmuYeResON2BeKpn7qQts0zaXus8nkLk=) 4: 323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa (hash: GS8KHbQRI4PyamdhZl6DJVBemcQkz6Ags9WznVxqWdE=) 5: 3A039835A68C92594BA889BF185A560E86C0CFD1.crl (hash: O0kJjPeNz9/q7Ekq7grsWEYUgHGN+OBHJ5cN6ShuBnE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 06:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8a:10:b1:0b:64:e0:54:51:15:98:89:a1:d0:9e:5c:62:0b:80:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1 Validity Not Before: Aug 23 05:30:15 2026 GMT Not After : Aug 24 08:34:15 2026 GMT Subject: CN=3985E3A2637D1154A8D9131A06CE4E1ED607BA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:d6:cd:e9:c2:8b:4f:f7:6a:40:2d:65:8f: 28:03:13:3a:f8:84:2e:8b:51:1f:09:ff:dc:b8:41: 1b:df:f2:f9:e1:b4:18:23:53:af:dd:7b:de:29:5a: b8:40:a8:21:16:d3:5f:c4:c6:70:c0:81:08:b3:cd: b7:c0:ad:86:05:8e:1d:28:08:ee:98:71:93:7e:4d: 04:ce:33:d0:e0:c2:57:8e:fb:bf:5e:73:d1:0a:e6: 94:40:b9:4a:9d:43:ed:94:8b:86:01:15:12:dd:99: 6c:7e:18:fc:74:7a:8a:ef:1a:15:35:f8:48:f4:7f: 73:12:2b:cb:7f:1e:9c:ca:c0:82:ab:cd:b9:50:0c: 62:bc:3a:f7:c7:a0:d7:1f:df:6e:9c:ce:d1:f7:b5: f4:ff:3a:20:d0:c7:2a:94:33:c7:83:cc:3a:ea:84: 7b:2b:a5:05:d4:6c:cd:d9:ea:3f:df:80:a5:f7:e0: 28:19:5c:4b:8c:27:6c:15:a4:23:ef:60:b6:70:89: ce:d9:ee:ca:fb:49:4c:50:86:c7:ae:73:75:1f:29: 23:97:e4:5a:fb:a9:e6:d0:6b:fc:54:f4:25:f1:de: 8b:d9:d3:87:18:3b:20:4f:7b:d7:4e:a8:83:09:c8: 8f:f1:c2:9e:5e:ad:d9:93:0b:36:41:86:2e:cb:b5: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:85:E3:A2:63:7D:11:54:A8:D9:13:1A:06:CE:4E:1E:D6:07:BA:28 X509v3 Authority Key Identifier: keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:53:1d:9a:9b:49:fc:e0:f7:9f:60:db:09:58:fe:37:6c:de: 1a:58:f1:c9:ba:5f:3f:cb:fc:bb:59:1a:a5:b4:94:d9:53:17: 48:7f:e1:9b:b5:8c:61:25:95:5c:87:cd:21:c5:15:f8:80:d3: 3e:a9:7e:ac:8c:15:ba:e9:d1:d8:23:d4:c6:ef:c5:9e:10:e4: 40:ec:fb:59:2f:bd:0a:2b:40:a6:5c:10:a3:0b:15:50:83:d6: fd:e8:d5:1b:58:c1:68:bf:2f:b5:83:91:36:40:f4:36:df:ca: c4:8b:32:51:7e:16:f5:37:70:5a:0a:59:db:ec:fc:9e:9e:d6: 8f:6d:34:58:f1:c4:40:25:0d:ed:4f:d7:84:57:e9:53:4d:f1: f9:bf:82:a0:73:a8:6c:d5:91:b5:5a:f3:ab:3a:c8:6f:d9:73: df:0d:f4:9b:53:96:85:33:7b:ef:54:e2:70:1a:5d:79:9e:fe: b9:8d:b6:a1:72:3e:c5:73:e5:b4:93:fb:cd:c2:35:d3:02:44: a1:35:34:14:fe:b0:d2:80:34:94:19:43:fd:d0:56:46:98:80: 66:11:2e:56:9a:e3:d9:f7:67:2b:51:7b:46:88:b6:5b:c5:54: af:33:d4:fc:ed:42:bb:86:48:32:2e:4a:39:60:f4:af:d2:d0: b3:46:49:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYYoQsQtk4FRRFZiJodCeXGILgF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwMzk4MzVBNjhDOTI1OTRCQTg4OUJGMTg1QTU2MEU4 NkMwQ0ZEMTAeFw0yNjA4MjMwNTMwMTVaFw0yNjA4MjQwODM0MTVaMDMxMTAvBgNV BAMTKDM5ODVFM0EyNjM3RDExNTRBOEQ5MTMxQTA2Q0U0RTFFRDYwN0JBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVNbN6cKLT/dqQC1ljygDEzr4 hC6LUR8J/9y4QRvf8vnhtBgjU6/de94pWrhAqCEW01/ExnDAgQizzbfArYYFjh0o CO6YcZN+TQTOM9DgwleO+79ec9EK5pRAuUqdQ+2Ui4YBFRLdmWx+GPx0eorvGhU1 +Ej0f3MSK8t/HpzKwIKrzblQDGK8OvfHoNcf326cztH3tfT/OiDQxyqUM8eDzDrq hHsrpQXUbM3Z6j/fgKX34CgZXEuMJ2wVpCPvYLZwic7Z7sr7SUxQhseuc3UfKSOX 5Fr7qebQa/xU9CXx3ovZ04cYOyBPe9dOqIMJyI/xwp5erdmTCzZBhi7LtcexAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOYXjomN9EVSo2RMaBs5OHtYHuigwHwYDVR0j BBgwFoAUOgOYNaaMkllLqIm/GFpWDobAz9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9w WG0vMC8zQTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMDM5ODM1QTY4QzkyNTk0 QkE4ODlCRjE4NUE1NjBFODZDMENGRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9wWG0vMC8z QTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC1MdmptJ/OD3n2DbCVj+N2zeGljxybpfP8v8u1kapbSU2VMXSH/hm7WMYSWV XIfNIcUV+IDTPql+rIwVuunR2CPUxu/FnhDkQOz7WS+9CitAplwQowsVUIPW/ejV G1jBaL8vtYORNkD0Nt/KxIsyUX4W9TdwWgpZ2+z8np7Wj200WPHEQCUN7U/XhFfp U03x+b+CoHOobNWRtVrzqzrIb9lz3w30m1OWhTN771TicBpdeZ7+uY22oXI+xXPl tJP7zcI10wJEoTU0FP6w0oA0lBlD/dBWRpiAZhEuVprj2fdnK1F7Roi2W8VUrzPU /O1Cu4ZIMi5KOWD0r9LQs0ZJ2Q== -----END CERTIFICATE-----Generated at Sun Aug 23 07:25:21 2026 by rpki-client