$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft File: D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft (raw, json) Hash identifier: VMLxkp5RBDJ1ZN6Psh5srnBcwE7/2sspthdwD0BPhJY= Subject key identifier: 35:12:02:CD:F7:15:24:70:A3:47:70:0E:9A:31:2D:E6:1E:8D:12:1E Authority key identifier: D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42 Certificate issuer: /CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742 Certificate serial: 43A53DD1A20DBBD3BE049C6A981F790FF8DF61FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer Subject info access: rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft Manifest number: 95 Signing time: Sat 23 May 2026 22:49:45 +0000 Manifest this update: Sat 23 May 2026 22:44:45 +0000 Manifest next update: Mon 25 May 2026 02:21:45 +0000 Files and hashes: 1: 323830343a336563343a3a2f33322d3434203d3e20323636363139.roa (hash: NMXs+d51bVk/z5q22Tx9T25srwjT6cqAT+oz13kBezw=) 2: 34352e372e3231362e302f32322d3234203d3e20323636363139.roa (hash: eANC6AkIb7brkzKwP7sUrnXl8fUbqph3YLW2GuBsUzQ=) 3: D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl (hash: CrjG8ihaUzP6Lgmn4j3fVkf7sMSRrpM70EBPWXyttpo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 02:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a5:3d:d1:a2:0d:bb:d3:be:04:9c:6a:98:1f:79:0f:f8:df:61:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742 Validity Not Before: May 23 22:44:45 2026 GMT Not After : May 25 02:21:45 2026 GMT Subject: CN=351202CDF7152470A347700E9A312DE61E8D121E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:a5:5c:c2:1c:7b:2f:d3:e4:1a:c3:e6:5f: a5:0f:90:cb:79:ce:ec:be:cf:7d:20:2f:ba:8f:71: ae:63:ab:3d:d0:3c:1b:78:90:81:b1:32:93:8a:c4: f4:e0:69:bc:2d:d2:ee:cd:27:bb:b7:42:9c:4e:88: 25:46:77:3d:b2:70:94:9a:c8:f3:b5:be:d8:65:d4: a4:16:37:22:4f:c0:36:f2:f3:db:d8:58:54:d0:21: 44:30:ba:a6:39:ea:5e:63:d8:f9:73:66:ff:30:6f: 58:f5:10:b3:0f:41:ad:1c:15:46:21:ac:80:de:19: ac:29:32:0f:29:06:a7:80:f8:2c:3d:ed:f2:4e:2b: 47:66:21:24:97:40:b8:d8:17:4e:57:0d:d4:ad:d0: 89:15:e7:94:c0:80:dc:c7:c9:d0:b0:bc:8d:df:a2: bc:4f:0e:8e:88:de:8f:52:ea:da:1a:56:2a:f7:69: 35:06:c2:12:05:74:4d:29:06:b1:aa:cc:50:98:c8: 94:d0:24:bc:80:84:ff:42:30:dc:a1:3f:96:bc:18: 45:2e:8d:64:b2:53:49:2e:4d:09:6e:95:72:c2:2f: da:a8:d9:4f:b0:86:94:81:15:0f:f2:a0:3a:6e:82: a3:5e:b8:dd:dc:0c:c3:49:ab:36:85:da:c8:12:c6: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:02:CD:F7:15:24:70:A3:47:70:0E:9A:31:2D:E6:1E:8D:12:1E X509v3 Authority Key Identifier: keyid:D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:33:fa:9e:03:3f:a6:c0:95:6e:6d:f7:1d:74:e5:e8:19:d1: e0:7c:07:c3:1a:80:b6:fb:bd:b4:3b:a3:66:67:91:66:1d:ee: 78:f8:f0:db:b7:f5:1f:64:92:90:df:72:ed:c4:75:68:2d:c1: e0:fb:ae:6e:ce:01:c4:f7:80:53:7d:20:3a:c5:17:52:98:92: 4a:f1:96:d0:27:be:be:78:e6:28:1b:f0:0b:95:a4:9b:37:78: e3:83:64:d7:d0:60:a0:c6:5c:a7:6f:9a:e6:3a:cc:c6:f1:ab: 79:60:37:75:24:9b:54:28:01:cc:f8:82:c8:18:3b:7c:a4:01: fd:05:fe:3d:6c:ee:37:26:d3:e7:a6:de:ba:4a:9a:26:78:9b: 94:3b:3f:2a:95:f8:92:ec:bd:01:ad:ec:ac:28:b7:63:23:ba: 2c:18:86:1c:a2:f3:97:5a:a5:24:f0:00:1d:48:df:60:5f:77: f2:81:44:79:5f:93:3b:c1:bf:f9:94:ae:5a:5e:a8:29:48:b8: 4b:c7:e4:25:3a:71:b4:bc:7c:94:fc:c5:38:2f:e7:6e:41:17: a8:0d:81:44:89:08:a2:69:c6:38:a0:94:8c:77:f4:f2:1f:3a: b0:52:c1:09:96:5e:76:91:cb:0d:ec:13:a2:e2:8a:73:15:b2: 84:4f:2b:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ6U90aINu9O+BJxqmB95D/jfYfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCNEU5QTIyNUM0MEQzNEY5M0U0N0U4OTk4MkVCN0M1 QzkxRDc0MjAeFw0yNjA1MjMyMjQ0NDVaFw0yNjA1MjUwMjIxNDVaMDMxMTAvBgNV BAMTKDM1MTIwMkNERjcxNTI0NzBBMzQ3NzAwRTlBMzEyREU2MUU4RDEyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63aVcwhx7L9PkGsPmX6UPkMt5 zuy+z30gL7qPca5jqz3QPBt4kIGxMpOKxPTgabwt0u7NJ7u3QpxOiCVGdz2ycJSa yPO1vthl1KQWNyJPwDby89vYWFTQIUQwuqY56l5j2PlzZv8wb1j1ELMPQa0cFUYh rIDeGawpMg8pBqeA+Cw97fJOK0dmISSXQLjYF05XDdSt0IkV55TAgNzHydCwvI3f orxPDo6I3o9S6toaVir3aTUGwhIFdE0pBrGqzFCYyJTQJLyAhP9CMNyhP5a8GEUu jWSyU0kuTQlulXLCL9qo2U+whpSBFQ/yoDpugqNeuN3cDMNJqzaF2sgSxrSVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNRICzfcVJHCjR3AOmjEt5h6NEh4wHwYDVR0j BBgwFoAU07TpoiXEDTT5PkfomYLrfFyR10IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4 MlYvMC9EM0I0RTlBMjI1QzQwRDM0RjkzRTQ3RTg5OTgyRUI3QzVDOTFENzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQjRFOUEyMjVDNDBEMzRG OTNFNDdFODk5ODJFQjdDNUM5MUQ3NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4MlYvMC9E M0I0RTlBMjI1QzQwRDM0RjkzRTQ3RTg5OTgyRUI3QzVDOTFENzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAejP6ngM/psCVbm33HXTl6BnR4HwHwxqAtvu9tDujZmeRZh3uePjw27f1H2SS kN9y7cR1aC3B4Puubs4BxPeAU30gOsUXUpiSSvGW0Ce+vnjmKBvwC5Wkmzd444Nk 19BgoMZcp2+a5jrMxvGreWA3dSSbVCgBzPiCyBg7fKQB/QX+PWzuNybT56beukqa JniblDs/KpX4kuy9Aa3srCi3YyO6LBiGHKLzl1qlJPAAHUjfYF938oFEeV+TO8G/ +ZSuWl6oKUi4S8fkJTpxtLx8lPzFOC/nbkEXqA2BRIkIomnGOKCUjHf08h86sFLB CZZedpHLDewTouKKcxWyhE8rFg== -----END CERTIFICATE-----Generated at Sun May 24 14:59:57 2026 by rpki-client