$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: kqnFRkMnaRBOHXwMz4Htu65mMsMPDoiIvsRXC+XPmfU= Subject key identifier: 6C:26:7B:76:06:33:62:24:2A:56:52:EC:F9:B2:E2:DC:DD:5D:09:A7 Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 128124B0DFDD739B5C2BA5E5B72FE4DAA94B5B8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 0111 Signing time: Thu 09 Apr 2026 00:59:00 +0000 Manifest this update: Thu 09 Apr 2026 00:54:00 +0000 Manifest next update: Fri 10 Apr 2026 01:27:00 +0000 Files and hashes: 1: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) 2: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: qRX6BXXIZsEBzQZCjxR8NT/2DziewKSyjvpnTKD6oFU=) 3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) 4: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 01:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:81:24:b0:df:dd:73:9b:5c:2b:a5:e5:b7:2f:e4:da:a9:4b:5b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Apr 9 00:54:00 2026 GMT Not After : Apr 10 01:27:00 2026 GMT Subject: CN=6C267B76063362242A5652ECF9B2E2DCDD5D09A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8f:49:a6:bd:f6:e1:74:f5:58:b5:3f:43:34: 8e:02:73:55:f0:2f:72:0a:1a:c2:dd:c8:2b:d7:37: 53:98:18:82:0e:50:d6:bd:28:68:e7:53:77:8d:11: 1c:f7:94:e9:85:d6:d9:bb:ca:ca:f0:db:7f:40:48: 85:65:c3:c2:ff:13:ce:81:41:3c:aa:13:f4:32:ca: 6e:79:e6:c9:ef:1d:bb:78:d8:e5:78:27:87:72:e4: 1a:48:cd:e0:24:a7:e0:c7:d4:50:5e:44:13:80:4a: 33:cf:af:8b:20:bf:08:e7:fa:6e:84:b1:56:b0:7f: 6d:8f:ec:f0:13:a5:7a:92:e3:ba:11:b9:bb:1a:78: 24:11:b1:2d:6b:5d:e3:e8:98:6b:82:7b:41:c4:e5: 4f:c2:a0:0d:b7:80:ba:3c:29:1d:9a:84:32:18:3a: 68:ec:a8:b2:a9:96:bc:85:33:dc:2f:44:ca:d9:1b: 5a:9a:cb:79:13:5b:e6:6f:38:67:4d:07:9c:dc:fb: ab:e8:49:c1:73:46:64:71:6e:6f:34:22:41:8f:14: bd:81:48:76:14:56:9d:22:03:88:43:97:9c:f7:9c: f2:c0:04:a4:43:95:72:cb:b0:39:42:33:b2:ea:7c: 94:c1:16:aa:13:a2:10:fd:24:84:96:c9:3c:a6:08: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:7B:76:06:33:62:24:2A:56:52:EC:F9:B2:E2:DC:DD:5D:09:A7 X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b2:95:45:46:fc:af:bc:38:e3:7e:23:e9:7b:a5:60:89:28: 7b:aa:8a:b3:44:a7:5d:ec:2c:2c:76:4f:76:f9:70:32:cd:3a: 83:f5:a8:47:30:5a:07:4d:ff:d4:99:1e:34:58:c1:08:b9:4d: 6c:ca:05:e6:cd:ad:9b:cd:12:77:2f:49:43:da:ab:13:c0:d3: ae:80:8c:de:ec:4c:05:ac:7c:97:b7:f8:5a:47:8c:86:d2:e7: 68:ec:d4:a1:77:82:39:bc:c9:32:41:4a:80:03:cb:bd:ff:63: 1d:83:ed:6b:83:6c:f5:32:d8:ac:26:03:b0:f4:43:29:98:74: 64:ef:87:80:78:2c:a3:82:52:ea:e7:92:cc:33:45:ac:3e:26: 9f:b8:38:53:43:7e:3a:aa:09:49:54:50:c7:dd:1f:23:d3:05: d5:4c:60:2b:02:1a:87:e3:bc:a0:ca:e0:9a:27:15:ae:6e:30: d1:d4:c8:60:d5:2c:d5:01:16:92:1e:dc:28:55:cf:64:16:76: d9:e9:df:90:1e:3f:6e:f0:6f:35:93:bf:87:40:3c:a4:a1:39: c8:78:ca:4b:0a:80:fb:10:7f:7f:2b:cd:07:98:3f:0f:ac:ce: 04:fc:1c:f1:23:f6:d3:50:8d:68:8e:50:19:c5:d2:46:95:1c: 48:fc:8b:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEoEksN/dc5tcK6Xlty/k2qlLW4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNjA0MDkwMDU0MDBaFw0yNjA0MTAwMTI3MDBaMDMxMTAvBgNV BAMTKDZDMjY3Qjc2MDYzMzYyMjQyQTU2NTJFQ0Y5QjJFMkRDREQ1RDA5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHj0mmvfbhdPVYtT9DNI4Cc1Xw L3IKGsLdyCvXN1OYGIIOUNa9KGjnU3eNERz3lOmF1tm7ysrw239ASIVlw8L/E86B QTyqE/Qyym555snvHbt42OV4J4dy5BpIzeAkp+DH1FBeRBOASjPPr4sgvwjn+m6E sVawf22P7PATpXqS47oRubsaeCQRsS1rXePomGuCe0HE5U/CoA23gLo8KR2ahDIY OmjsqLKplryFM9wvRMrZG1qay3kTW+ZvOGdNB5zc+6voScFzRmRxbm80IkGPFL2B SHYUVp0iA4hDl5z3nPLABKRDlXLLsDlCM7LqfJTBFqoTohD9JISWyTymCH1TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbCZ7dgYzYiQqVlLs+bLi3N1dCacwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN7KVRUb8r7w4434j6XulYIkoe6qKs0SnXewsLHZPdvlwMs06g/WoRzBaB03/ 1JkeNFjBCLlNbMoF5s2tm80Sdy9JQ9qrE8DTroCM3uxMBax8l7f4WkeMhtLnaOzU oXeCObzJMkFKgAPLvf9jHYPta4Ns9TLYrCYDsPRDKZh0ZO+HgHgso4JS6ueSzDNF rD4mn7g4U0N+OqoJSVRQx90fI9MF1UxgKwIah+O8oMrgmicVrm4w0dTIYNUs1QEW kh7cKFXPZBZ22enfkB4/bvBvNZO/h0A8pKE5yHjKSwqA+xB/fyvNB5g/D6zOBPwc 8SP201CNaI5QGcXSRpUcSPyLIw== -----END CERTIFICATE-----Generated at Thu Apr 9 11:11:26 2026 by rpki-client