$ rpki-client -vvvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: FReU8zoM3tD2aHFh1uVigvCdDI4KfXZhH3mcQlwkx5g= Subject key identifier: CC:E5:D9:F6:45:83:F2:3B:58:9C:CA:33:8F:FD:4C:F1:CF:1B:EB:B5 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 48D4502A62C861593909AEFD889606F38A4DBBF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 0276 Signing time: Sun 23 Aug 2026 05:48:20 +0000 Manifest this update: Sun 23 Aug 2026 05:43:20 +0000 Manifest next update: Mon 24 Aug 2026 06:32:20 +0000 Files and hashes: 1: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=) 2: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=) 3: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=) 4: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: 0JMWd95eHHyEd1SLJhMukdLdBCw0BpVGoezeXTNDWwY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 06:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d4:50:2a:62:c8:61:59:39:09:ae:fd:88:96:06:f3:8a:4d:bb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Aug 23 05:43:20 2026 GMT Not After : Aug 24 06:32:20 2026 GMT Subject: CN=CCE5D9F64583F23B589CCA338FFD4CF1CF1BEBB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:c2:70:47:e9:39:c1:f4:4a:57:71:4b:c7: b7:1c:ca:04:22:50:16:b4:2a:42:55:e3:d3:5a:08: c3:eb:35:ea:63:81:b1:e5:85:fa:87:57:13:6f:83: 12:6f:31:6f:b6:d1:95:a4:35:64:13:7d:ee:2e:5b: d5:b0:05:29:e0:69:9e:cc:69:36:71:d2:70:97:4c: 77:5f:d0:7d:d7:f8:46:85:66:93:fe:fb:1f:82:a3: 02:73:23:2c:e3:d2:54:8d:7b:43:e9:37:db:67:f3: af:24:6a:d6:8e:7e:f7:ff:7b:98:5d:7a:41:63:17: 45:f2:1d:02:29:ac:38:2c:27:b0:8d:8f:ff:56:92: 2f:c7:78:a6:db:48:4c:aa:3c:88:bf:69:be:b7:6d: 6f:00:27:0a:c4:40:b6:28:68:15:fc:ca:36:07:e5: 59:19:e7:db:53:4a:9e:24:e2:96:36:da:45:92:a8: b8:7c:97:59:05:26:50:f6:f1:21:1e:7d:4d:91:c8: 69:fb:0a:c3:4d:30:df:8e:db:fb:49:d9:61:0d:da: 9b:d3:b4:f7:4b:29:13:a5:40:73:9a:53:c4:67:c8: ec:b7:cf:c3:40:c1:b0:f1:d4:4f:d2:c9:8b:10:99: b4:30:97:07:bd:8b:fe:f9:f5:c6:e0:38:6d:3b:1a: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:D9:F6:45:83:F2:3B:58:9C:CA:33:8F:FD:4C:F1:CF:1B:EB:B5 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0d:9a:58:83:77:03:0d:ff:70:d5:3b:7e:42:a5:d2:d2:7a: a9:7a:83:ea:b8:74:f2:b4:ed:86:d9:b9:96:c1:68:32:6a:5c: 17:cc:eb:53:b4:9b:35:f3:0a:27:e2:57:bc:8e:98:76:48:89: c6:e5:1a:38:a1:2c:ce:4f:a1:e3:1e:5d:77:06:40:4a:0b:70: 91:66:36:90:d4:38:ba:ea:e7:3c:2e:23:17:76:1b:95:ec:6f: 8d:6d:c6:06:95:34:0f:20:98:76:08:a3:6b:43:42:0e:c1:d1: 03:bd:f5:77:7e:e3:6d:ff:53:91:24:b1:74:a9:e4:ba:59:70: 70:aa:8a:73:4e:1a:d7:0a:7f:7d:95:a4:a8:11:04:c3:6f:b3: 45:2c:27:5d:ba:c7:df:05:42:bd:28:06:3c:9c:6e:c7:2a:05: e9:50:37:8e:de:0e:1d:2d:1f:fb:62:95:cb:c2:68:cc:28:2b: 7d:f0:48:a2:8f:94:5e:9e:02:fc:00:44:69:26:be:65:66:db: 3d:79:e4:0a:0e:d2:84:94:2d:05:d0:db:d2:cc:0e:b9:d4:62: 11:cb:8f:29:d6:59:8e:0d:57:2f:69:62:33:c1:14:3a:2a:bc: 4a:70:8c:b0:98:37:06:01:24:7b:fc:ca:ec:d8:6f:c3:25:fd: 08:91:e0:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSNRQKmLIYVk5Ca79iJYG84pNu/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNjA4MjMwNTQzMjBaFw0yNjA4MjQwNjMyMjBaMDMxMTAvBgNV BAMTKENDRTVEOUY2NDU4M0YyM0I1ODlDQ0EzMzhGRkQ0Q0YxQ0YxQkVCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCajcJwR+k5wfRKV3FLx7ccygQi UBa0KkJV49NaCMPrNepjgbHlhfqHVxNvgxJvMW+20ZWkNWQTfe4uW9WwBSngaZ7M aTZx0nCXTHdf0H3X+EaFZpP++x+CowJzIyzj0lSNe0PpN9tn868kataOfvf/e5hd ekFjF0XyHQIprDgsJ7CNj/9Wki/HeKbbSEyqPIi/ab63bW8AJwrEQLYoaBX8yjYH 5VkZ59tTSp4k4pY22kWSqLh8l1kFJlD28SEefU2RyGn7CsNNMN+O2/tJ2WEN2pvT tPdLKROlQHOaU8RnyOy3z8NAwbDx1E/SyYsQmbQwlwe9i/759cbgOG07GiyzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzOXZ9kWD8jtYnMozj/1M8c8b67UwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdw2aWIN3Aw3/cNU7fkKl0tJ6qXqD6rh08rTthtm5lsFoMmpcF8zrU7SbNfMK J+JXvI6YdkiJxuUaOKEszk+h4x5ddwZASgtwkWY2kNQ4uurnPC4jF3YblexvjW3G BpU0DyCYdgija0NCDsHRA731d37jbf9TkSSxdKnkullwcKqKc04a1wp/fZWkqBEE w2+zRSwnXbrH3wVCvSgGPJxuxyoF6VA3jt4OHS0f+2KVy8JozCgrffBIoo+UXp4C /ABEaSa+ZWbbPXnkCg7ShJQtBdDb0swOudRiEcuPKdZZjg1XL2liM8EUOiq8SnCM sJg3BgEke/zK7NhvwyX9CJHgZQ== -----END CERTIFICATE-----Generated at Sun Aug 23 15:16:10 2026 by rpki-client