$ rpki-client -vvvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft File: 3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft (raw, json) Hash identifier: 2OLMBT+ZHjqv66pl5HjDE2FSgmRCuw486GP2qMpxAyc= Subject key identifier: E3:FF:D8:CB:C2:5C:D4:4E:03:9D:9E:E8:39:6D:06:4A:5A:B4:A0:2E Authority key identifier: 3D:5C:84:37:E7:59:B5:3F:97:DC:2F:51:34:DA:D8:AF:FB:28:7E:DB Certificate issuer: /CN=3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB Certificate serial: 3E0AFFB851D01D29F97369C5533060A6E42E5996 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft Manifest number: 34 Signing time: Sat 22 Aug 2026 12:44:58 +0000 Manifest this update: Sat 22 Aug 2026 12:39:58 +0000 Manifest next update: Sun 23 Aug 2026 16:42:58 +0000 Files and hashes: 1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: nBPTR9gqn6Rf2/ns3b3ImRcLx9t6pwCXXUT6sI3bG0o=) 2: 3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.crl (hash: BVbXcGW1iT1Xo+Z+Iw9oUwBGnJPNF0qa8raTQ4JLYNM=) 3: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: XxxHF6HeYvwB1oZ04ry9Y8tMZqAlZR/YqvfokSuFgUU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.crl rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 16:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0a:ff:b8:51:d0:1d:29:f9:73:69:c5:53:30:60:a6:e4:2e:59:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB Validity Not Before: Aug 22 12:39:58 2026 GMT Not After : Aug 23 16:42:58 2026 GMT Subject: CN=E3FFD8CBC25CD44E039D9EE8396D064A5AB4A02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:3b:cc:43:59:20:20:13:2f:98:2d:18:69: 32:58:14:fa:5f:af:c8:07:37:49:6e:97:eb:ab:24: 1d:be:ef:b9:25:ab:4a:18:75:ff:ad:0c:49:69:bc: 43:f6:ce:98:fe:7f:78:e8:26:f8:2c:4c:db:85:00: 57:0c:0c:64:b5:05:7f:61:74:30:08:4e:e0:a3:3f: 53:93:96:db:47:85:22:53:5b:8e:67:1a:1a:2b:55: b6:51:9f:5b:e5:4e:ba:ee:a9:bf:bc:a7:94:ab:00: 25:d8:a4:88:88:f4:76:51:ad:ff:06:ec:05:cf:de: 62:46:1a:19:29:3d:11:d8:8c:2e:af:44:59:bf:00: 06:e7:3c:03:e7:f4:0f:88:ed:e7:ac:86:a3:55:d8: 6e:a8:be:20:ae:56:35:43:c3:48:72:f5:73:cd:f2: 66:37:c0:e9:7e:8c:98:0d:c5:ec:9b:a6:1f:55:9a: f5:df:8f:12:cc:c4:8d:33:a2:75:ff:7e:f3:55:02: e6:c0:b7:1c:92:2c:8c:ad:33:ff:75:77:9b:87:6b: 17:38:22:81:5e:e1:4d:c7:60:79:94:ed:d9:89:b9: 37:8b:40:3a:32:33:28:fa:6d:73:62:fc:b4:01:0a: 0d:04:14:56:47:47:04:63:77:c5:2b:12:06:3c:1c: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:D8:CB:C2:5C:D4:4E:03:9D:9E:E8:39:6D:06:4A:5A:B4:A0:2E X509v3 Authority Key Identifier: keyid:3D:5C:84:37:E7:59:B5:3F:97:DC:2F:51:34:DA:D8:AF:FB:28:7E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:80:37:0a:f3:45:df:f5:db:9b:30:c0:f5:b9:1a:5c:4e: 47:b5:70:9d:ec:09:19:4f:2a:c0:65:f5:94:f3:84:f9:4e:f9: ad:26:1c:08:20:1a:3c:22:eb:eb:0e:36:31:ca:51:5b:a7:61: 89:4e:b6:8f:38:a8:2a:8f:e4:b0:6e:b1:0c:63:8b:40:48:9a: cb:bf:b8:e7:0b:ae:3f:b7:50:a4:1d:e3:2c:db:95:83:2d:76: 83:15:ab:1f:c7:6c:1a:71:dc:58:61:5b:3e:09:04:75:74:30: 54:d6:f8:eb:da:57:42:56:b3:c3:30:31:40:1f:41:e0:d0:5a: ce:1f:11:a3:ae:4a:be:21:5f:0e:73:8e:18:7f:a3:1a:70:ad: e8:c7:48:73:f4:bc:ab:11:45:f4:b3:6f:79:93:97:e8:fe:bc: 73:ab:8d:a9:f9:19:6f:14:cd:eb:2f:79:a8:43:1d:87:4e:1d: 87:84:e7:22:0f:96:1d:95:4b:43:1f:d7:71:90:de:c3:82:06: 4b:89:fc:ce:cc:94:18:31:ec:e2:a0:e5:99:2f:f1:85:0e:f5: 08:e3:93:18:5b:c7:77:9d:d5:52:59:1e:cb:20:40:14:d1:60: cf:7d:fe:b2:c5:c9:d7:cd:83:95:24:45:65:fb:66:10:65:ce: 2f:25:50:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPgr/uFHQHSn5c2nFUzBgpuQuWZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1Qzg0MzdFNzU5QjUzRjk3REMyRjUxMzREQUQ4QUZG QjI4N0VEQjAeFw0yNjA4MjIxMjM5NThaFw0yNjA4MjMxNjQyNThaMDMxMTAvBgNV BAMTKEUzRkZEOENCQzI1Q0Q0NEUwMzlEOUVFODM5NkQwNjRBNUFCNEEwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58DvMQ1kgIBMvmC0YaTJYFPpf r8gHN0lul+urJB2+77klq0oYdf+tDElpvEP2zpj+f3joJvgsTNuFAFcMDGS1BX9h dDAITuCjP1OTlttHhSJTW45nGhorVbZRn1vlTrruqb+8p5SrACXYpIiI9HZRrf8G 7AXP3mJGGhkpPRHYjC6vRFm/AAbnPAPn9A+I7eeshqNV2G6oviCuVjVDw0hy9XPN 8mY3wOl+jJgNxeybph9VmvXfjxLMxI0zonX/fvNVAubAtxySLIytM/91d5uHaxc4 IoFe4U3HYHmU7dmJuTeLQDoyMyj6bXNi/LQBCg0EFFZHRwRjd8UrEgY8HNPRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4//Yy8Jc1E4DnZ7oOW0GSlq0oC4wHwYDVR0j BBgwFoAUPVyEN+dZtT+X3C9RNNrYr/softswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1m TnAvMC8zRDVDODQzN0U3NTlCNTNGOTdEQzJGNTEzNERBRDhBRkZCMjg3RURCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENUM4NDM3RTc1OUI1M0Y5 N0RDMkY1MTM0REFEOEFGRkIyODdFREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1mTnAvMC8z RDVDODQzN0U3NTlCNTNGOTdEQzJGNTEzNERBRDhBRkZCMjg3RURCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoSANwrzRd/125swwPW5GlxOR7VwnewJGU8qwGX1lPOE+U75rSYcCCAaPCLr 6w42McpRW6dhiU62jzioKo/ksG6xDGOLQEiay7+45wuuP7dQpB3jLNuVgy12gxWr H8dsGnHcWGFbPgkEdXQwVNb469pXQlazwzAxQB9B4NBazh8Ro65KviFfDnOOGH+j GnCt6MdIc/S8qxFF9LNveZOX6P68c6uNqfkZbxTN6y95qEMdh04dh4TnIg+WHZVL Qx/XcZDew4IGS4n8zsyUGDHs4qDlmS/xhQ71COOTGFvHd53VUlkeyyBAFNFgz33+ ssXJ182DlSRFZftmEGXOLyVQdw== -----END CERTIFICATE-----Generated at Sun Aug 23 06:00:22 2026 by rpki-client