$ rpki-client -vvf rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.mft File: 3C9D4D3AEF9E810A027203F89E123454B9B54D1A.mft (raw, json) Hash identifier: DrPoQzdErbLNC3hBpkDbpBiwojVB/XMOs4gqTR7jQt4= Subject key identifier: EE:42:81:63:57:23:5B:BD:5D:CF:46:1F:99:D3:6E:ED:D6:B7:C1:E2 Authority key identifier: 3C:9D:4D:3A:EF:9E:81:0A:02:72:03:F8:9E:12:34:54:B9:B5:4D:1A Certificate issuer: /CN=3C9D4D3AEF9E810A027203F89E123454B9B54D1A Certificate serial: 124F7AAF6F321D4C5873BB9CB610B22A113A9CA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.mft Manifest number: 20 Signing time: Sat 27 Jun 2026 00:47:35 +0000 Manifest this update: Sat 27 Jun 2026 00:42:35 +0000 Manifest next update: Sun 28 Jun 2026 00:59:35 +0000 Files and hashes: 1: 323830343a376131383a3a2f33322d313238203d3e20323731333437.roa (hash: Iiz9+y+MkQpapYH9rtZPqprWMdUL6iQQrebYKARR674=) 2: 3C9D4D3AEF9E810A027203F89E123454B9B54D1A.crl (hash: +LLmpYcXQ82qxw+bpkvXdEVU+0aYjPxqVnS2TObmSgY=) 3: 3230302e35332e39322e302f32322d3332203d3e20323731333437.roa (hash: kI26HoQ/glZy9QzC4wxsNezi3A5G3KX38efjihCHags=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.crl rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 00:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4f:7a:af:6f:32:1d:4c:58:73:bb:9c:b6:10:b2:2a:11:3a:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9D4D3AEF9E810A027203F89E123454B9B54D1A Validity Not Before: Jun 27 00:42:35 2026 GMT Not After : Jun 28 00:59:35 2026 GMT Subject: CN=EE42816357235BBD5DCF461F99D36EEDD6B7C1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:1f:fc:0b:be:8a:ac:c2:93:aa:9c:77:8b: 4c:59:4d:ff:e4:49:bf:fe:5f:f5:7a:13:bc:96:d5: 13:42:cc:c2:7e:f9:99:40:45:bb:f8:1c:ed:8c:54: d3:78:5e:d0:b0:90:8a:cc:55:9c:d7:e8:f3:7f:d1: 07:25:c2:56:7e:db:d4:dd:23:80:2c:90:98:9c:77: 7c:6c:08:0e:c6:d2:64:2a:df:79:f3:d1:2b:42:a5: fd:af:14:bd:3a:86:37:f1:72:be:a0:6c:15:14:15: be:67:a3:ae:93:0a:72:61:e9:24:c3:d2:ae:0c:d7: d1:40:d1:3d:a6:a0:ec:36:d2:43:6a:4c:c5:f6:06: 1b:da:16:30:4a:47:4b:54:61:c0:5a:55:18:a7:48: db:eb:5e:59:7e:15:79:00:84:18:a7:95:56:b8:4e: 5b:4a:33:8e:23:e3:52:62:18:54:b0:3b:82:8c:8b: e0:15:6c:bd:12:84:17:94:bc:30:33:06:61:64:4a: 4e:96:d5:d6:bd:c9:48:60:a4:ac:98:06:a7:0a:10: c4:7d:fc:d6:ef:b4:9a:5d:0d:c8:39:3e:b8:25:46: a9:46:4c:77:63:bd:6b:0b:f8:21:99:05:73:19:f1: 73:8d:81:1b:37:82:ec:58:e8:3f:d2:4f:79:26:bd: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:42:81:63:57:23:5B:BD:5D:CF:46:1F:99:D3:6E:ED:D6:B7:C1:E2 X509v3 Authority Key Identifier: keyid:3C:9D:4D:3A:EF:9E:81:0A:02:72:03:F8:9E:12:34:54:B9:B5:4D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:76:bd:e9:98:61:9f:27:51:45:6a:54:d2:eb:54:91:a8:07: d5:fc:5d:48:31:5b:fd:00:6b:14:90:bd:35:e0:9b:bd:a8:81: e4:d7:b4:35:aa:4d:a3:1a:67:af:8d:bf:c4:f6:bf:a4:79:fc: 23:09:13:75:e3:31:d5:fb:ba:92:1c:41:a7:1e:ba:83:7d:27: 6d:5f:7e:3f:04:89:06:ce:35:79:97:e5:22:30:40:77:ff:38: cb:46:91:df:c7:c0:ca:95:83:9c:74:70:cc:ac:5f:d8:b1:9e: 9b:3b:c0:85:c8:1a:b8:7d:bd:6a:fd:c5:95:08:12:be:35:8a: a8:89:cd:b9:67:f1:88:bb:50:72:e7:67:5b:dd:5b:c6:a3:40: ea:ad:7f:57:2d:2d:f7:49:8b:50:b1:0c:f9:25:d5:7c:0d:f4: 92:84:d7:5a:3e:3b:0f:3a:a8:56:b2:c4:51:b1:17:a4:41:d8: b8:39:94:b2:4e:b8:ae:bb:c5:a2:2f:b1:11:2b:1b:cd:0d:57: 7a:f1:72:53:f6:9c:4c:d5:c4:07:ba:1f:cb:27:75:e1:57:7a: ed:83:5f:c3:d3:c6:34:ac:c5:41:56:03:47:b7:c7:5f:3d:12: 45:1a:c9:58:6b:8b:48:2c:80:ee:79:e3:f3:9f:5b:c1:c6:ec: 6b:74:a3:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEk96r28yHUxYc7ucthCyKhE6nKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5RDREM0FFRjlFODEwQTAyNzIwM0Y4OUUxMjM0NTRC OUI1NEQxQTAeFw0yNjA2MjcwMDQyMzVaFw0yNjA2MjgwMDU5MzVaMDMxMTAvBgNV BAMTKEVFNDI4MTYzNTcyMzVCQkQ1RENGNDYxRjk5RDM2RUVERDZCN0MxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGh/8C76KrMKTqpx3i0xZTf/k Sb/+X/V6E7yW1RNCzMJ++ZlARbv4HO2MVNN4XtCwkIrMVZzX6PN/0QclwlZ+29Td I4AskJicd3xsCA7G0mQq33nz0StCpf2vFL06hjfxcr6gbBUUFb5no66TCnJh6STD 0q4M19FA0T2moOw20kNqTMX2BhvaFjBKR0tUYcBaVRinSNvrXll+FXkAhBinlVa4 TltKM44j41JiGFSwO4KMi+AVbL0ShBeUvDAzBmFkSk6W1da9yUhgpKyYBqcKEMR9 /NbvtJpdDcg5PrglRqlGTHdjvWsL+CGZBXMZ8XONgRs3guxY6D/ST3kmvWwhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7kKBY1cjW71dz0YfmdNu7da3weIwHwYDVR0j BBgwFoAUPJ1NOu+egQoCcgP4nhI0VLm1TRowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWVIWFpHZmZlNzVmWWZtVERQTFVNbU1MTUY1RUpFWnlYYU55dzNWaEN1 eXQvMC8zQzlENEQzQUVGOUU4MTBBMDI3MjAzRjg5RTEyMzQ1NEI5QjU0RDFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOUQ0RDNBRUY5RTgxMEEw MjcyMDNGODlFMTIzNDU0QjlCNTREMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWVIWFpHZmZlNzVmWWZtVERQTFVNbU1MTUY1RUpFWnlYYU55dzNWaEN1eXQvMC8z QzlENEQzQUVGOUU4MTBBMDI3MjAzRjg5RTEyMzQ1NEI5QjU0RDFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHa96ZhhnydRRWpU0utUkagH1fxdSDFb/QBrFJC9NeCbvaiB5Ne0NapNoxpn r42/xPa/pHn8IwkTdeMx1fu6khxBpx66g30nbV9+PwSJBs41eZflIjBAd/84y0aR 38fAypWDnHRwzKxf2LGemzvAhcgauH29av3FlQgSvjWKqInNuWfxiLtQcudnW91b xqNA6q1/Vy0t90mLULEM+SXVfA30koTXWj47DzqoVrLEUbEXpEHYuDmUsk64rrvF oi+xESsbzQ1XevFyU/acTNXEB7ofyyd14Vd67YNfw9PGNKzFQVYDR7fHXz0SRRrJ WGuLSCyA7nnj859bwcbsa3SjoA== -----END CERTIFICATE-----Generated at Sat Jun 27 12:04:21 2026 by rpki-client