$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft File: 3A643A755DDC15D6F86DC11230B9F76A2774D614.mft (raw, json) Hash identifier: 3jXdN1e4w1FV+JRss1XWn735WsXMH0lIJwmB3/GiVAk= Subject key identifier: 53:4E:C5:18:21:41:5D:2E:74:31:A9:D2:09:FA:F1:A4:C3:E8:49:C8 Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14 Certificate issuer: /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614 Certificate serial: 12251321170DFD549462745E651A30BFC5047783 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer Subject info access: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft Manifest number: 01DE Signing time: Sat 23 May 2026 20:10:00 +0000 Manifest this update: Sat 23 May 2026 20:05:00 +0000 Manifest next update: Sun 24 May 2026 20:16:00 +0000 Files and hashes: 1: 323830343a373036383a3a2f33322d313238203d3e20323730373235.roa (hash: 6PShaX8h/AVJp6bPgeVzA4tURjIZtwXwMwIPwhids84=) 2: 3A643A755DDC15D6F86DC11230B9F76A2774D614.crl (hash: 7TnxSpkwHXNnlAEI/ly/BafYbuO6MOj68mNat1MATrM=) 3: 3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (hash: uJPZpGqlp2+6BM8e5FiCaFRRh4X3aiGqt7DY2Tt6jT8=) 4: 3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (hash: mRoJxlUfwEBjFf9wX960FoxB74HITXgomDbH50/+HOk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 20:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:25:13:21:17:0d:fd:54:94:62:74:5e:65:1a:30:bf:c5:04:77:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614 Validity Not Before: May 23 20:05:00 2026 GMT Not After : May 24 20:16:00 2026 GMT Subject: CN=534EC51821415D2E7431A9D209FAF1A4C3E849C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:6f:11:0a:bb:ae:d4:fa:ce:33:af:80:17: 8b:a8:0a:fd:23:6d:83:fd:4c:5d:26:d6:f5:04:6d: 7b:cd:ee:92:b6:49:6d:af:dd:8d:5a:d5:fd:a8:0d: 12:2f:09:92:4e:a6:c2:51:c5:49:f4:4d:dc:a2:a3: a1:fd:51:44:28:36:db:4d:c6:7f:7d:73:17:4e:3b: 5f:e2:32:b0:d1:29:3d:3f:d7:90:b4:c4:6f:1c:77: ff:2b:86:32:8d:46:be:ac:24:8a:c4:ec:f7:33:c9: 69:0d:81:97:74:3f:82:53:41:52:56:c4:ec:6b:9f: 9a:aa:eb:21:21:e5:df:5e:84:32:f4:7a:b0:9e:68: bb:96:e9:62:70:eb:b6:d1:78:c5:c8:2b:57:53:80: a7:df:31:eb:e9:55:9a:ae:83:57:a8:ab:6b:b4:12: 91:88:4f:44:7e:d3:91:76:e0:eb:ed:f6:83:51:bd: 91:95:35:24:a0:92:90:d9:af:9d:be:0a:4f:a4:27: d9:7d:d8:81:31:aa:f0:ef:26:fa:ef:e3:1e:b5:57: f6:4a:80:00:84:ae:f7:bb:df:ef:99:f8:41:d6:04: 2d:9d:9a:eb:bc:db:29:16:d4:f5:1a:1f:bd:df:0a: 6b:fe:37:98:d1:7f:2c:79:bb:78:79:7d:1c:6d:49: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:C5:18:21:41:5D:2E:74:31:A9:D2:09:FA:F1:A4:C3:E8:49:C8 X509v3 Authority Key Identifier: keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d3:b6:c1:ff:b4:9c:3b:9f:09:7a:e6:bf:c8:7b:ba:6d:aa: dd:14:a6:a2:f5:68:bf:ee:2d:64:5b:56:83:eb:bf:69:d8:d6: 8f:25:97:1c:36:32:df:bf:b5:39:88:24:c3:96:df:6b:66:08: 2e:3a:a9:f1:99:8b:70:ed:cf:eb:43:de:92:4f:28:72:3f:3f: e9:33:fb:49:24:02:6d:f8:4f:cc:40:02:b0:84:27:c1:67:ce: 23:fb:d6:d1:17:61:ca:ac:e6:4a:39:5a:00:b9:2c:7c:43:5d: b2:e3:05:66:76:c0:aa:86:68:33:05:d5:b3:75:66:22:a2:f4: 0d:53:b7:3e:b0:2e:0e:89:ad:15:09:f2:17:ad:5e:ce:fe:cd: 1b:68:72:fb:c5:b4:2a:76:eb:c3:5d:dd:14:6f:5b:3a:c4:9e: 23:eb:b0:d1:a7:9e:03:21:e2:06:aa:7a:a6:af:2b:69:23:c6: da:fb:9e:d0:38:c6:5a:5a:81:85:bb:f8:4a:33:3c:95:25:ea: d2:9f:4b:f8:51:aa:d1:92:a1:a8:12:fd:4c:73:77:fa:82:71: 87:59:ab:06:e6:cb:1e:57:a3:18:48:e5:5b:e1:99:f5:64:fc: 0d:68:82:72:7f:77:62:a7:46:71:31:50:13:4a:22:9c:85:ae: c7:c2:56:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEiUTIRcN/VSUYnReZRowv8UEd4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E2NDNBNzU1RERDMTVENkY4NkRDMTEyMzBCOUY3NkEy Nzc0RDYxNDAeFw0yNjA1MjMyMDA1MDBaFw0yNjA1MjQyMDE2MDBaMDMxMTAvBgNV BAMTKDUzNEVDNTE4MjE0MTVEMkU3NDMxQTlEMjA5RkFGMUE0QzNFODQ5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDND28RCruu1PrOM6+AF4uoCv0j bYP9TF0m1vUEbXvN7pK2SW2v3Y1a1f2oDRIvCZJOpsJRxUn0Tdyio6H9UUQoNttN xn99cxdOO1/iMrDRKT0/15C0xG8cd/8rhjKNRr6sJIrE7PczyWkNgZd0P4JTQVJW xOxrn5qq6yEh5d9ehDL0erCeaLuW6WJw67bReMXIK1dTgKffMevpVZqug1eoq2u0 EpGIT0R+05F24Ovt9oNRvZGVNSSgkpDZr52+Ck+kJ9l92IExqvDvJvrv4x61V/ZK gACErve73++Z+EHWBC2dmuu82ykW1PUaH73fCmv+N5jRfyx5u3h5fRxtSY0rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU07FGCFBXS50ManSCfrxpMPoScgwHwYDVR0j BBgwFoAUOmQ6dV3cFdb4bcESMLn3aid01hQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RV S0EvMC8zQTY0M0E3NTVEREMxNUQ2Rjg2REMxMTIzMEI5Rjc2QTI3NzRENjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNjQzQTc1NUREQzE1RDZG ODZEQzExMjMwQjlGNzZBMjc3NEQ2MTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RVS0EvMC8z QTY0M0E3NTVEREMxNUQ2Rjg2REMxMTIzMEI5Rjc2QTI3NzRENjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9O2wf+0nDufCXrmv8h7um2q3RSmovVov+4tZFtWg+u/adjWjyWXHDYy37+1 OYgkw5bfa2YILjqp8ZmLcO3P60Pekk8ocj8/6TP7SSQCbfhPzEACsIQnwWfOI/vW 0RdhyqzmSjlaALksfENdsuMFZnbAqoZoMwXVs3VmIqL0DVO3PrAuDomtFQnyF61e zv7NG2hy+8W0Knbrw13dFG9bOsSeI+uw0aeeAyHiBqp6pq8raSPG2vue0DjGWlqB hbv4SjM8lSXq0p9L+FGq0ZKhqBL9THN3+oJxh1mrBubLHlejGEjlW+GZ9WT8DWiC cn93YqdGcTFQE0oinIWux8JWgg== -----END CERTIFICATE-----Generated at Sun May 24 14:12:25 2026 by rpki-client