$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json) Hash identifier: PmbVDXvqCeCOGLN3a3cSeEJzBxfS/UMnKY0VMi/ZA2M= Subject key identifier: 40:B7:0D:6D:55:C8:AE:6A:07:1E:14:69:64:AD:F5:76:B4:D9:F3:32 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 68C3354BC5F9C2A7C65574F74148D12433EC3644 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft Manifest number: 0242 Signing time: Thu 09 Apr 2026 05:31:02 +0000 Manifest this update: Thu 09 Apr 2026 05:26:02 +0000 Manifest next update: Fri 10 Apr 2026 05:41:02 +0000 Files and hashes: 1: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: v8ZV8L2ScvLa75gQzyoOF2tbLz+7D+KHzBNKKQlSJVs=) 2: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: kipjBJ09zZtwvC7nmczGaoX100huYmXa/+NwcxArDt4=) 3: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: zLfuCXZBi2nWdOOyG+zGt+cSVyUYBRH1EQR+N0EQYZ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 05:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:35:4b:c5:f9:c2:a7:c6:55:74:f7:41:48:d1:24:33:ec:36:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Apr 9 05:26:02 2026 GMT Not After : Apr 10 05:41:02 2026 GMT Subject: CN=40B70D6D55C8AE6A071E146964ADF576B4D9F332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:51:b9:7e:7b:fb:d9:56:42:08:ac:b3:47: 1d:24:06:13:3c:79:c5:1c:5b:9f:dd:69:53:46:6d: 07:79:28:7b:73:9d:ad:8d:de:45:e9:ca:48:7d:f9: f8:0f:47:ad:50:62:95:35:be:26:7d:da:7b:75:af: 18:e5:82:e7:d1:5b:f3:62:a0:22:48:93:95:a3:b2: 5f:db:27:79:77:77:4b:61:54:1b:e6:19:11:de:99: 9e:b6:a1:48:b9:70:88:9d:dd:60:4c:77:a4:17:5f: d3:81:22:02:17:10:fa:53:63:28:50:67:c5:72:c3: 61:23:b2:59:91:49:39:52:83:27:ac:63:1c:49:31: a3:ce:d8:50:63:0f:64:dc:af:30:89:f7:bc:cb:9a: 40:18:4b:93:c1:cb:43:4c:59:7a:36:a3:4b:a6:89: c1:96:01:bc:aa:dc:16:ec:f4:cf:89:86:71:b4:a0: 2b:40:f1:21:d1:45:96:0d:1b:57:13:d6:f1:1c:c2: 34:25:cf:e9:6b:bc:9e:cc:19:bf:69:34:d5:84:87: c7:48:47:53:ad:1a:87:ea:f7:40:f6:b5:ca:c4:0e: d3:17:57:d4:f5:ac:dd:45:a2:9c:85:f7:02:c1:df: 20:e1:13:8c:6d:85:45:de:8c:86:3d:43:76:37:f2: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:0D:6D:55:C8:AE:6A:07:1E:14:69:64:AD:F5:76:B4:D9:F3:32 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fa:e8:b1:7f:4d:c5:25:e5:d0:94:2b:ef:41:bf:07:05:3e: e2:f1:9f:54:29:4c:f9:de:9b:fb:a7:d2:ab:95:12:a8:13:f6: 95:f3:8d:1b:e0:0e:c7:18:8f:cb:7c:db:6f:f8:7d:6c:37:72: 9f:c5:8a:ad:bd:5c:26:40:4f:d4:06:44:22:5a:f2:78:9b:cd: 8b:5d:27:ab:04:c7:1f:44:fb:74:61:99:dd:b5:bc:90:d0:bd: fc:28:a1:ea:c5:0e:20:c8:cd:79:a5:79:96:bb:d7:cf:25:4e: 33:ee:c9:bb:91:22:bf:19:36:be:f0:f5:a4:fe:2a:5a:6e:89: a3:16:f6:e0:65:d4:d7:f1:55:3e:11:d6:37:7e:65:aa:76:82: d1:4e:09:84:73:0f:91:11:e3:64:7c:ec:ff:2c:cc:61:8b:00: de:e2:4c:17:94:44:d1:42:dc:f1:d7:92:e0:44:1b:c9:b6:16: cb:44:7f:67:77:79:3d:fa:ee:26:90:4d:18:93:30:15:db:37: 06:26:01:43:8a:cd:24:13:56:39:10:cb:c6:35:50:95:e5:21: 99:9f:65:9d:4e:13:88:45:58:8f:97:46:e8:9d:3b:37:78:0c: b5:d5:4a:0a:30:06:92:f9:8f:1d:e9:ef:32:9c:24:d2:33:41: 2b:d7:84:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaMM1S8X5wqfGVXT3QUjRJDPsNkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNjA0MDkwNTI2MDJaFw0yNjA0MTAwNTQxMDJaMDMxMTAvBgNV BAMTKDQwQjcwRDZENTVDOEFFNkEwNzFFMTQ2OTY0QURGNTc2QjREOUYzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QVG5fnv72VZCCKyzRx0kBhM8 ecUcW5/daVNGbQd5KHtzna2N3kXpykh9+fgPR61QYpU1viZ92nt1rxjlgufRW/Ni oCJIk5Wjsl/bJ3l3d0thVBvmGRHemZ62oUi5cIid3WBMd6QXX9OBIgIXEPpTYyhQ Z8Vyw2EjslmRSTlSgyesYxxJMaPO2FBjD2TcrzCJ97zLmkAYS5PBy0NMWXo2o0um icGWAbyq3Bbs9M+JhnG0oCtA8SHRRZYNG1cT1vEcwjQlz+lrvJ7MGb9pNNWEh8dI R1OtGofq90D2tcrEDtMXV9T1rN1FopyF9wLB3yDhE4xthUXejIY9Q3Y38kkjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQLcNbVXIrmoHHhRpZK31drTZ8zIwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/rosX9NxSXl0JQr70G/BwU+4vGfVClM+d6b+6fSq5USqBP2lfONG+AOxxiP y3zbb/h9bDdyn8WKrb1cJkBP1AZEIlryeJvNi10nqwTHH0T7dGGZ3bW8kNC9/Cih 6sUOIMjNeaV5lrvXzyVOM+7Ju5Eivxk2vvD1pP4qWm6Joxb24GXU1/FVPhHWN35l qnaC0U4JhHMPkRHjZHzs/yzMYYsA3uJMF5RE0ULc8deS4EQbybYWy0R/Z3d5Pfru JpBNGJMwFds3BiYBQ4rNJBNWORDLxjVQleUhmZ9lnU4TiEVYj5dG6J07N3gMtdVK CjAGkvmPHenvMpwk0jNBK9eEsA== -----END CERTIFICATE-----Generated at Thu Apr 9 11:13:49 2026 by rpki-client