$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json) Hash identifier: ENccVz61uQh2vcLw8GAAFy74R7mmhqUh01YQtMOgVHI= Subject key identifier: 25:2E:17:24:95:3C:A3:3A:E1:AF:82:64:6E:36:95:E3:A2:C0:43:F7 Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 Certificate issuer: /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Certificate serial: 104566107D14F6EF7B90A703D70A291E03B116FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft Manifest number: 47 Signing time: Thu 09 Apr 2026 02:46:54 +0000 Manifest this update: Thu 09 Apr 2026 02:41:54 +0000 Manifest next update: Fri 10 Apr 2026 04:56:54 +0000 Files and hashes: 1: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=) 2: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=) 3: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: Er8GHP67Ds/YZcRvMxXNX2Dq5GGtZacViRZrl9YxzAQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 04:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:45:66:10:7d:14:f6:ef:7b:90:a7:03:d7:0a:29:1e:03:b1:16:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8 Validity Not Before: Apr 9 02:41:54 2026 GMT Not After : Apr 10 04:56:54 2026 GMT Subject: CN=252E1724953CA33AE1AF82646E3695E3A2C043F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:9a:67:f7:46:c8:96:68:68:c9:72:17:c3: 39:78:90:f7:81:6d:8c:a1:2d:83:32:5b:f3:6f:e8: 89:fb:61:0e:67:36:19:cd:3b:39:a2:bd:e4:24:87: 6c:05:3f:d0:a8:0f:e2:2b:de:a8:a7:52:b2:6b:07: 42:76:89:6d:3f:3c:3b:69:29:ed:71:68:e0:65:df: 08:c7:9d:08:89:fa:52:67:25:08:2c:e1:36:e1:38: ec:a1:74:a1:98:7a:5f:37:1a:ca:94:f8:b9:b5:59: cc:2f:e6:23:58:4b:bb:af:f5:35:c6:ef:1d:c0:89: e7:97:46:55:90:1b:fb:72:a7:9d:81:b4:57:bc:36: 89:49:f1:69:b4:f9:f2:da:fb:60:51:fa:3a:af:2a: 58:f3:ff:13:8f:86:3c:23:d9:4d:94:55:71:3e:08: b1:84:71:01:fb:d6:39:3a:33:73:09:1f:e9:93:13: 6a:0f:db:65:71:b7:6e:88:e6:cc:50:e9:b9:e5:86: f0:29:26:e4:20:ac:21:c6:32:6b:a0:e7:ed:75:37: 5e:b3:e4:6b:08:e0:28:ef:6c:c3:22:34:8b:ba:50: 54:a5:97:78:f7:08:52:23:e6:ea:fe:04:f0:0d:52: b9:7f:15:f0:4b:2d:aa:d7:f3:63:a0:20:9f:59:80: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2E:17:24:95:3C:A3:3A:E1:AF:82:64:6E:36:95:E3:A2:C0:43:F7 X509v3 Authority Key Identifier: keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:19:fb:f3:91:49:df:25:fa:a9:49:a3:83:e7:a1:9a:e9:aa: 5b:dd:94:9c:f2:3b:40:23:1c:3a:81:6c:f8:e1:ec:da:06:9f: 4e:ee:99:2b:8d:80:8d:a0:d1:79:54:b9:e6:d5:55:02:78:d1: a3:0a:38:a5:92:e0:b4:5b:a1:61:79:c8:a8:ba:37:56:02:2f: 42:83:bc:17:b9:7d:cb:ca:00:ca:dd:9f:77:18:8b:f1:99:ef: e5:5b:65:46:f1:dc:2a:26:f1:be:18:2a:fa:c0:3b:10:7b:a5: f7:20:05:49:ef:13:cc:e3:40:d8:27:9b:dc:8e:93:19:71:98: 25:d9:25:f3:e3:75:8e:41:be:aa:b9:cf:4b:f4:23:f9:ac:3a: 6d:47:ad:0d:00:57:9b:86:89:78:ee:87:c3:29:1b:c8:fb:40: 64:b6:c9:8c:9f:97:af:e6:43:dd:c2:3d:b4:4c:d1:a8:06:87: 7c:bb:ee:4c:8d:55:cd:30:fa:09:ae:e0:1f:4a:34:89:c7:6c: 87:91:33:27:e9:b9:de:9b:37:fa:69:a4:d6:81:be:00:c5:56: ef:8a:b1:d9:75:57:e0:17:0e:57:c1:16:ab:8e:d6:e5:0c:ab: a1:cd:5e:c3:a9:f4:8f:af:b0:ac:2e:28:9b:fc:4d:76:7f:5d: 7d:79:d6:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEEVmEH0U9u97kKcD1wopHgOxFv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGQUM0MURCMTJFNjkyNEUyMjJDRDZDODQwN0U3RjYw NEU2REVDODAeFw0yNjA0MDkwMjQxNTRaFw0yNjA0MTAwNDU2NTRaMDMxMTAvBgNV BAMTKDI1MkUxNzI0OTUzQ0EzM0FFMUFGODI2NDZFMzY5NUUzQTJDMDQzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKppn90bIlmhoyXIXwzl4kPeB bYyhLYMyW/Nv6In7YQ5nNhnNOzmiveQkh2wFP9CoD+Ir3qinUrJrB0J2iW0/PDtp Ke1xaOBl3wjHnQiJ+lJnJQgs4TbhOOyhdKGYel83GsqU+Lm1Wcwv5iNYS7uv9TXG 7x3AieeXRlWQG/typ52BtFe8NolJ8Wm0+fLa+2BR+jqvKljz/xOPhjwj2U2UVXE+ CLGEcQH71jk6M3MJH+mTE2oP22Vxt26I5sxQ6bnlhvApJuQgrCHGMmug5+11N16z 5GsI4CjvbMMiNIu6UFSll3j3CFIj5ur+BPANUrl/FfBLLarX82OgIJ9ZgJM5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJS4XJJU8ozrhr4JkbjaV46LAQ/cwHwYDVR0j BBgwFoAUOvrEHbEuaSTiIs1shAfn9gTm3sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFI YWQvMC8zQUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkFDNDFEQjEyRTY5MjRF MjIyQ0Q2Qzg0MDdFN0Y2MDRFNkRFQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFIYWQvMC8z QUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbRn785FJ3yX6qUmjg+ehmumqW92UnPI7QCMcOoFs+OHs2gafTu6ZK42AjaDR eVS55tVVAnjRowo4pZLgtFuhYXnIqLo3VgIvQoO8F7l9y8oAyt2fdxiL8Znv5Vtl RvHcKibxvhgq+sA7EHul9yAFSe8TzONA2Ceb3I6TGXGYJdkl8+N1jkG+qrnPS/Qj +aw6bUetDQBXm4aJeO6HwykbyPtAZLbJjJ+Xr+ZD3cI9tEzRqAaHfLvuTI1VzTD6 Ca7gH0o0icdsh5EzJ+m53ps3+mmk1oG+AMVW74qx2XVX4BcOV8EWq47W5Qyroc1e w6n0j6+wrC4om/xNdn9dfXnWVA== -----END CERTIFICATE-----Generated at Thu Apr 9 13:02:05 2026 by rpki-client