$ rpki-client -vvvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: hDaIAN3BVi1jwpf5U+cXYmDAQpXXYw/JKZUqcQSDlAE= Subject key identifier: DF:8D:D0:02:2E:AA:4E:3D:F9:41:A3:45:CB:26:A1:43:C2:32:8E:B0 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 496F8530BEB7D7FCBDED0503BA6C1F7960573AEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0455 Signing time: Tue 25 Aug 2026 03:52:54 +0000 Manifest this update: Tue 25 Aug 2026 03:47:54 +0000 Manifest next update: Wed 26 Aug 2026 07:17:54 +0000 Files and hashes: 1: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: 7L/KLhUJp8hvgSnM6rUHLqCYVaGwbZnA0r3dRu9GS5Y=) 2: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: F7w2Dq+Yhj72VNuZUgl1wKxmEpwz0ASh9hJIJlITw+8=) 3: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: tSOXGp3AKoKrMg3hjQnTPWPEkh2iCcBNOWKCuvWdE+I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Aug 2026 07:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:85:30:be:b7:d7:fc:bd:ed:05:03:ba:6c:1f:79:60:57:3a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Aug 25 03:47:54 2026 GMT Not After : Aug 26 07:17:54 2026 GMT Subject: CN=DF8DD0022EAA4E3DF941A345CB26A143C2328EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:da:9f:ed:c3:fa:0c:b7:22:c5:b3:9c:03: 23:0c:01:65:6d:68:90:ba:2d:37:95:7d:a2:15:29: 63:15:70:2b:39:76:94:14:fe:15:d7:bb:c9:02:28: ee:50:3f:41:cc:b6:16:2a:76:e9:f5:21:a8:7b:51: 03:c0:49:03:fe:77:81:bd:76:fa:96:1a:e6:a1:eb: 16:ff:9f:cb:85:fb:37:01:a5:72:b0:55:cd:45:24: 5d:61:22:de:cb:45:a6:88:14:ff:60:a4:83:d8:88: 97:86:24:b7:b8:a4:0f:90:84:cf:02:71:f4:03:40: c2:2a:3d:e5:24:d8:ee:3b:c5:c3:16:2b:a9:55:e4: 12:9b:f3:5f:3a:55:48:00:c9:c5:8a:82:7e:87:84: 06:02:1a:dc:6a:13:8e:53:e9:56:4a:79:64:01:63: 10:af:25:72:68:bd:ff:19:45:59:dc:e9:f9:bc:1a: 52:e0:98:df:74:7e:df:29:f4:8b:ef:05:35:4a:85: e7:d4:a8:5e:73:27:9a:d5:e0:e1:13:51:0b:4a:76: fa:87:c8:ab:db:b3:45:8a:dd:b9:9f:56:b9:41:ef: 21:62:a3:51:b9:54:95:29:8c:19:14:dc:b2:67:b6: e6:cd:92:c0:70:cc:5b:e8:05:5e:5c:e5:5a:36:fd: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8D:D0:02:2E:AA:4E:3D:F9:41:A3:45:CB:26:A1:43:C2:32:8E:B0 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:54:a7:68:2d:51:d2:62:66:8a:c0:ee:d2:d8:f2:8a:4a:e7: 41:fc:27:72:76:e7:9f:53:b6:f6:92:02:ac:fd:80:cb:66:7e: 4c:c7:1a:60:f8:99:60:0a:ad:0c:02:13:88:ca:18:c1:8c:b3: 71:54:e6:85:2b:5e:9b:d3:35:76:5a:e0:dd:24:33:87:60:86: 34:51:9f:0a:c0:7d:c9:5b:d3:7f:14:f8:96:48:01:81:66:d4: 52:4e:f7:ce:f9:0a:b9:6f:07:1c:d4:de:04:9f:ab:f9:01:8e: e7:00:17:b8:4d:86:f0:bd:cb:17:b3:ef:b0:6a:ff:dd:6d:6a: 7f:e1:41:b6:3a:34:88:41:6a:24:ed:e8:a9:80:1f:f8:b3:3e: 32:b8:cf:ea:39:d7:bf:00:43:39:82:a1:7c:bb:4b:fa:09:b9: 95:0f:1a:14:b4:c3:8e:e8:5d:80:83:48:49:7b:a1:bc:3e:59: fe:59:20:a1:4b:1c:6c:7c:9b:1b:89:7f:2c:ef:35:80:e0:49: 06:2f:27:ca:b3:1a:19:ea:86:53:c8:e1:08:34:95:ba:33:b4: a0:c2:ff:c0:7a:31:78:8e:04:ee:95:f7:84:d6:ab:2d:60:2d: c9:c3:9b:0f:ee:20:84:07:1c:80:a5:e6:6c:ef:23:f3:b4:14: bf:d7:e6:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSW+FML631/y97QUDumwfeWBXOuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNjA4MjUwMzQ3NTRaFw0yNjA4MjYwNzE3NTRaMDMxMTAvBgNV BAMTKERGOEREMDAyMkVBQTRFM0RGOTQxQTM0NUNCMjZBMTQzQzIzMjhFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCemdqf7cP6DLcixbOcAyMMAWVt aJC6LTeVfaIVKWMVcCs5dpQU/hXXu8kCKO5QP0HMthYqdun1Iah7UQPASQP+d4G9 dvqWGuah6xb/n8uF+zcBpXKwVc1FJF1hIt7LRaaIFP9gpIPYiJeGJLe4pA+QhM8C cfQDQMIqPeUk2O47xcMWK6lV5BKb8186VUgAycWKgn6HhAYCGtxqE45T6VZKeWQB YxCvJXJovf8ZRVnc6fm8GlLgmN90ft8p9IvvBTVKhefUqF5zJ5rV4OETUQtKdvqH yKvbs0WK3bmfVrlB7yFio1G5VJUpjBkU3LJntubNksBwzFvoBV5c5Vo2/dbrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU343QAi6qTj35QaNFyyahQ8IyjrAwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlSnaC1R0mJmisDu0tjyikrnQfwncnbnn1O29pICrP2Ay2Z+TMcaYPiZYAqt DAITiMoYwYyzcVTmhStem9M1dlrg3SQzh2CGNFGfCsB9yVvTfxT4lkgBgWbUUk73 zvkKuW8HHNTeBJ+r+QGO5wAXuE2G8L3LF7PvsGr/3W1qf+FBtjo0iEFqJO3oqYAf +LM+MrjP6jnXvwBDOYKhfLtL+gm5lQ8aFLTDjuhdgINISXuhvD5Z/lkgoUscbHyb G4l/LO81gOBJBi8nyrMaGeqGU8jhCDSVujO0oML/wHoxeI4E7pX3hNarLWAtycOb D+4ghAccgKXmbO8j87QUv9fmFw== -----END CERTIFICATE-----Generated at Tue Aug 25 19:16:07 2026 by rpki-client