$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: T4XxIko4kHTTTRGlWIW6Cj67KfNvZXXO+kfQCRfkLVY= Subject key identifier: 77:C5:E6:B1:03:A0:FD:C8:AA:E4:A4:1F:62:FD:62:12:0B:75:6A:4D Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 34DC884F8BE9475BE8802AC7430B0157965D32E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0414 Signing time: Tue 07 Jul 2026 20:37:12 +0000 Manifest this update: Tue 07 Jul 2026 20:32:12 +0000 Manifest next update: Wed 08 Jul 2026 23:21:12 +0000 Files and hashes: 1: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: F7w2Dq+Yhj72VNuZUgl1wKxmEpwz0ASh9hJIJlITw+8=) 2: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: sp4oAV/x0ATg+AU5l5Uo7GLgzoRafwfiDCe7/vkhvB8=) 3: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: tSOXGp3AKoKrMg3hjQnTPWPEkh2iCcBNOWKCuvWdE+I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Jul 2026 23:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:dc:88:4f:8b:e9:47:5b:e8:80:2a:c7:43:0b:01:57:96:5d:32:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Jul 7 20:32:12 2026 GMT Not After : Jul 8 23:21:12 2026 GMT Subject: CN=77C5E6B103A0FDC8AAE4A41F62FD62120B756A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:67:95:bf:93:b5:f0:17:6a:c9:23:b8:57: 1d:93:22:1c:ac:2f:1a:cc:57:a1:a9:d3:1e:99:b3: 9d:29:b8:80:7a:1f:6d:6d:f4:20:e9:70:67:b1:52: 09:14:a2:92:7a:ae:bc:fd:59:d9:1a:24:af:46:5e: 06:b9:c1:e2:e5:78:eb:ba:82:12:50:46:17:01:8e: 1a:2c:7a:ca:22:b0:e6:54:96:54:7c:50:97:e9:04: f6:d9:86:c0:66:f8:a2:8b:de:2f:c0:a4:02:a4:43: c9:a4:1f:ef:9c:da:8b:0a:64:a2:06:5e:1a:01:39: 91:7f:48:50:5b:20:be:73:00:22:f7:e6:67:17:e2: f5:1a:f1:c4:a4:78:88:ec:86:6d:02:5a:24:c5:16: 03:23:9e:bd:af:2d:87:01:8d:c5:6f:fe:0c:b4:fc: 55:6c:6d:cf:b3:af:d0:4b:ad:95:78:b3:e7:7b:7f: a9:90:e4:93:3e:aa:3c:35:83:f2:43:81:86:b2:ef: cd:d6:ce:6e:4e:09:bc:88:fb:21:43:5a:cd:ac:d6: e8:5b:d6:3b:6b:52:e7:95:5f:f6:f1:8e:ea:eb:62: 24:32:ed:0d:d2:a6:6c:0f:35:c3:29:58:ae:60:6e: 0e:bd:e6:99:db:e9:37:e9:b4:e7:4b:36:91:60:47: d9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C5:E6:B1:03:A0:FD:C8:AA:E4:A4:1F:62:FD:62:12:0B:75:6A:4D X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:16:87:d2:88:11:31:56:be:ae:17:28:f6:85:97:11:6e:11: f9:70:6e:71:a7:5a:6e:e2:07:1d:2f:32:bd:e5:52:57:2f:c7: 12:8e:47:00:5b:11:8f:e4:58:65:bb:c0:21:c0:ec:c7:95:5b: 81:56:7d:e0:52:c9:3a:5f:83:b9:31:b4:a6:52:18:92:ae:b4: 27:98:c1:ea:54:41:4f:13:fd:b1:62:32:15:3b:e2:ee:ba:d3: 3b:e7:f8:4c:5a:fd:e2:02:1a:2a:f7:23:04:97:9b:81:8a:33: 2c:64:63:09:de:b4:b7:a7:c4:87:29:37:47:75:45:4c:3f:a1: 91:8a:98:6a:5c:2b:84:45:68:3c:b5:79:69:1f:86:16:19:dc: d5:4f:83:bf:c3:fd:86:d9:41:3a:d6:30:9f:94:52:36:47:35: 3e:bf:52:31:95:25:ae:af:37:8f:a7:7a:47:75:f6:9c:52:fb: ed:9f:9f:50:29:b4:c3:59:18:93:c4:a7:b2:c2:03:df:81:e3: fe:1d:ca:c7:9f:ee:40:fe:75:cf:7b:91:cd:ca:75:df:85:4a: 1a:40:b1:69:e9:04:dc:58:19:9d:42:b2:b0:78:fa:01:ad:dd: 74:8c:c3:1f:09:75:82:8c:4b:02:9c:b7:84:0f:11:af:54:6a: 83:e2:f5:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNNyIT4vpR1vogCrHQwsBV5ZdMuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNjA3MDcyMDMyMTJaFw0yNjA3MDgyMzIxMTJaMDMxMTAvBgNV BAMTKDc3QzVFNkIxMDNBMEZEQzhBQUU0QTQxRjYyRkQ2MjEyMEI3NTZBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC152eVv5O18BdqySO4Vx2TIhys LxrMV6Gp0x6Zs50puIB6H21t9CDpcGexUgkUopJ6rrz9WdkaJK9GXga5weLleOu6 ghJQRhcBjhosesoisOZUllR8UJfpBPbZhsBm+KKL3i/ApAKkQ8mkH++c2osKZKIG XhoBOZF/SFBbIL5zACL35mcX4vUa8cSkeIjshm0CWiTFFgMjnr2vLYcBjcVv/gy0 /FVsbc+zr9BLrZV4s+d7f6mQ5JM+qjw1g/JDgYay783Wzm5OCbyI+yFDWs2s1uhb 1jtrUueVX/bxjurrYiQy7Q3SpmwPNcMpWK5gbg695pnb6TfptOdLNpFgR9kBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd8XmsQOg/ciq5KQfYv1iEgt1ak0wHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxaH0ogRMVa+rhco9oWXEW4R+XBucadabuIHHS8yveVSVy/HEo5HAFsRj+RY ZbvAIcDsx5VbgVZ94FLJOl+DuTG0plIYkq60J5jB6lRBTxP9sWIyFTvi7rrTO+f4 TFr94gIaKvcjBJebgYozLGRjCd60t6fEhyk3R3VFTD+hkYqYalwrhEVoPLV5aR+G Fhnc1U+Dv8P9htlBOtYwn5RSNkc1Pr9SMZUlrq83j6d6R3X2nFL77Z+fUCm0w1kY k8SnssID34Hj/h3Kx5/uQP51z3uRzcp134VKGkCxaekE3FgZnUKysHj6Aa3ddIzD Hwl1goxLApy3hA8Rr1Rqg+L15A== -----END CERTIFICATE-----Generated at Wed Jul 8 15:24:41 2026 by rpki-client