$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft File: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft (raw, json) Hash identifier: 15uPp06xqgsVntgnasDoO1COg6+UUHzE1zn1ZnFsnU4= Subject key identifier: D9:93:17:80:A5:DB:48:46:27:8C:F4:FD:0B:43:74:C3:B0:DF:03:F3 Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 Certificate issuer: /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Certificate serial: 7C19BCF531440586281A48EE05C67FB58AB1D97E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft Manifest number: 013C Signing time: Wed 08 Apr 2026 14:20:10 +0000 Manifest this update: Wed 08 Apr 2026 14:15:10 +0000 Manifest next update: Thu 09 Apr 2026 17:41:10 +0000 Files and hashes: 1: 3137372e32332e35362e302f32312d3332203d3e203532393036.roa (hash: jrnwbKnlRj9X3EB+DFy9Z/5ZbRMcHXbOntOJWDZ8eCc=) 2: 3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (hash: mv3/jFMH/WFk97h2YglLXFAx04FlpcG2tngzh8QwfNw=) 3: 323830343a383734303a3a2f33322d313238203d3e203532393036.roa (hash: kfImCG2TW2PZqgdH+xcKUqqX56025AHMhP+JY16ulkg=) 4: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl (hash: sdq42842iVZnVmzbhS4TKByXEHeAwcAPYPrnT5dA+7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 17:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:19:bc:f5:31:44:05:86:28:1a:48:ee:05:c6:7f:b5:8a:b1:d9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Validity Not Before: Apr 8 14:15:10 2026 GMT Not After : Apr 9 17:41:10 2026 GMT Subject: CN=D9931780A5DB4846278CF4FD0B4374C3B0DF03F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:49:c7:fd:c5:10:bf:f7:00:ed:0c:65:fb: fc:c0:ea:a4:fd:41:9a:69:1c:b2:56:97:ee:b0:5b: 9d:23:e0:8f:6e:18:a8:96:93:99:7e:32:21:34:a3: 75:68:ee:b9:c1:24:ea:ad:05:d5:b1:e6:46:cd:ca: b4:d9:37:1d:49:f5:ab:f5:86:95:03:c5:df:99:ee: b3:20:9d:ce:9d:3e:b1:fa:10:f9:f0:49:f3:37:66: 67:19:89:6e:18:36:aa:60:c1:04:15:39:cf:9e:00: fb:de:a7:11:71:34:0e:88:93:10:c4:ed:2d:b1:d6: 78:4e:0d:97:28:27:38:ad:54:3b:6f:83:03:bd:fc: 52:b1:88:3a:03:c6:86:14:b5:90:73:90:e6:25:80: 16:7c:ad:45:83:05:da:93:9c:31:f1:90:f1:31:5a: f6:e0:ed:aa:15:19:f8:f3:e6:4f:e2:d8:28:88:fc: 28:ea:33:4e:86:00:27:73:06:39:c7:39:04:70:e0: 91:14:2c:1b:2c:d3:f7:a8:17:60:94:df:85:5a:1a: 35:96:bc:dd:89:53:d4:5c:bf:be:9b:27:3b:9d:5b: c2:87:c3:60:c8:eb:93:59:8d:ca:03:f8:5e:bb:5e: 7b:28:76:02:50:bd:6c:34:19:7a:d0:c2:3c:61:7d: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:17:80:A5:DB:48:46:27:8C:F4:FD:0B:43:74:C3:B0:DF:03:F3 X509v3 Authority Key Identifier: keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:01:85:4e:f6:d9:f9:17:cb:bd:f5:9a:75:ae:e3:67:97:eb: 2d:3c:6e:bc:81:0a:0b:d3:f1:b7:7e:21:b4:d1:3b:9f:91:3e: 1b:ff:9b:b7:f0:2c:95:90:a2:34:c7:4c:fe:e2:7d:9d:02:35: a5:1c:1a:64:af:e9:7f:96:98:7b:bc:6d:32:51:7a:ab:d9:87: 1e:98:ba:c8:84:cd:24:5e:d2:cf:b3:3c:dc:0e:8d:84:18:e2: e0:aa:02:16:81:cb:92:cf:3a:7b:3e:5a:3c:35:74:8a:df:b6: 8d:14:80:5d:58:cd:01:ef:2b:86:6d:aa:3b:33:6b:19:68:78: eb:fa:45:9c:bc:38:8c:65:f7:45:2a:f2:13:87:4e:9c:d7:c4: 19:02:73:62:2f:98:6c:14:17:2c:21:79:f4:c5:ad:bd:9e:bb: 5c:61:e7:e2:97:d1:20:e6:2d:e2:64:fe:46:a1:46:c6:c6:be: 2b:eb:f1:56:a2:7e:95:1e:bd:98:16:57:22:31:fa:9a:4e:ef: a1:c8:a3:26:2d:db:b8:c2:47:a5:04:01:d8:2f:2e:f6:b9:4f: 0a:2a:c1:51:9b:6a:fc:f0:cb:98:97:04:b3:51:eb:0b:ee:c6: 4c:57:42:e7:e9:bc:68:cb:f0:68:7f:b9:c9:fc:ea:7a:3f:16: 73:aa:76:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfBm89TFEBYYoGkjuBcZ/tYqx2X4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw QTJFQkJCMTAeFw0yNjA0MDgxNDE1MTBaFw0yNjA0MDkxNzQxMTBaMDMxMTAvBgNV BAMTKEQ5OTMxNzgwQTVEQjQ4NDYyNzhDRjRGRDBCNDM3NEMzQjBERjAzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsknH/cUQv/cA7Qxl+/zA6qT9 QZppHLJWl+6wW50j4I9uGKiWk5l+MiE0o3Vo7rnBJOqtBdWx5kbNyrTZNx1J9av1 hpUDxd+Z7rMgnc6dPrH6EPnwSfM3ZmcZiW4YNqpgwQQVOc+eAPvepxFxNA6IkxDE 7S2x1nhODZcoJzitVDtvgwO9/FKxiDoDxoYUtZBzkOYlgBZ8rUWDBdqTnDHxkPEx Wvbg7aoVGfjz5k/i2CiI/CjqM06GACdzBjnHOQRw4JEULBss0/eoF2CU34VaGjWW vN2JU9Rcv76bJzudW8KHw2DI65NZjcoD+F67XnsodgJQvWw0GXrQwjxhfTtrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2ZMXgKXbSEYnjPT9C0N0w7DfA/MwHwYDVR0j BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2 OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1 RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2OGsvMC9D MzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVAGFTvbZ+RfLvfWada7jZ5frLTxuvIEKC9Pxt34htNE7n5E+G/+bt/AslZCi NMdM/uJ9nQI1pRwaZK/pf5aYe7xtMlF6q9mHHpi6yITNJF7Sz7M83A6NhBji4KoC FoHLks86ez5aPDV0it+2jRSAXVjNAe8rhm2qOzNrGWh46/pFnLw4jGX3RSryE4dO nNfEGQJzYi+YbBQXLCF59MWtvZ67XGHn4pfRIOYt4mT+RqFGxsa+K+vxVqJ+lR69 mBZXIjH6mk7vocijJi3buMJHpQQB2C8u9rlPCirBUZtq/PDLmJcEs1HrC+7GTFdC 5+m8aMvwaH+5yfzqej8Wc6p2eg== -----END CERTIFICATE-----Generated at Thu Apr 9 11:11:43 2026 by rpki-client