$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/3/39D21E4E023098127242B01A4B16691F1A8DAFC8.mft File: 39D21E4E023098127242B01A4B16691F1A8DAFC8.mft (raw, json) Hash identifier: 8ORIDJgzQ4jCrTyQrVuHb2hrsRpPBnHqQ5Xx4GobvJ8= Subject key identifier: 98:54:51:8A:3D:31:CA:4D:11:08:46:CE:D0:D2:80:2D:B3:C8:79:0E Authority key identifier: 39:D2:1E:4E:02:30:98:12:72:42:B0:1A:4B:16:69:1F:1A:8D:AF:C8 Certificate issuer: /CN=39D21E4E023098127242B01A4B16691F1A8DAFC8 Certificate serial: 65C9A07C765879C2AA31EAFDF8EC077CD13AF7A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D21E4E023098127242B01A4B16691F1A8DAFC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/3/39D21E4E023098127242B01A4B16691F1A8DAFC8.mft Manifest number: 03 Signing time: Tue 07 Jul 2026 21:12:18 +0000 Manifest this update: Tue 07 Jul 2026 21:07:18 +0000 Manifest next update: Thu 09 Jul 2026 00:08:18 +0000 Files and hashes: 1: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: w4+hzteqiW/xN7aI6YSJzElYjGIuLSCw2nwUShAiJMo=) 2: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: jWY7iySYcHkE36KrzrMUDnerm4nguzjkjwwYNNbRFZo=) 3: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (hash: RYd5qA+kqzpGUrd6DC/Nl0pqKkqyIB2RY7q1A6nGh90=) 4: 39D21E4E023098127242B01A4B16691F1A8DAFC8.crl (hash: Z3/t5q/kLlO82vvixh52l9tnwTV8Zuo24Fdtdh5ZRlA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/3/39D21E4E023098127242B01A4B16691F1A8DAFC8.crl rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/3/39D21E4E023098127242B01A4B16691F1A8DAFC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D21E4E023098127242B01A4B16691F1A8DAFC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 00:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c9:a0:7c:76:58:79:c2:aa:31:ea:fd:f8:ec:07:7c:d1:3a:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D21E4E023098127242B01A4B16691F1A8DAFC8 Validity Not Before: Jul 7 21:07:18 2026 GMT Not After : Jul 9 00:08:18 2026 GMT Subject: CN=9854518A3D31CA4D110846CED0D2802DB3C8790E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:f0:63:6b:f4:94:e2:4a:86:03:b3:10:6e: 94:fe:60:39:64:63:02:d2:f6:f6:98:71:58:75:98: 06:4b:10:83:b6:a3:5c:5b:4e:92:6c:bd:59:cd:eb: bc:96:9a:cd:51:c1:a3:b8:ac:11:e7:8b:50:9b:c0: b2:eb:dc:24:c8:18:1f:5d:4e:ec:ac:c5:ff:3e:ee: c6:55:83:42:34:a1:ee:d7:04:74:ac:38:5c:c8:ba: 9e:24:93:df:50:e0:4f:d7:10:0a:1e:0e:65:b8:2f: d0:c7:18:ad:f2:6b:b5:50:3d:13:a2:dd:0b:b8:33: 33:8e:9f:89:f5:2c:b5:dd:86:15:92:c3:54:6b:e8: 93:1f:7e:33:a6:fb:65:2e:1e:6e:63:ea:02:ed:dd: 38:cd:ac:e4:76:ae:f2:3e:b8:d0:2c:84:33:48:a0: 42:8a:88:4e:88:57:61:2c:31:ff:56:64:6b:0e:3c: d8:43:70:6f:21:7e:8d:93:61:5b:fd:1c:8f:e0:5a: 52:c9:e8:b7:5f:20:2f:a1:4e:aa:fe:11:72:78:05: ee:df:31:65:71:9f:8e:37:35:42:92:5a:13:3d:21: a4:66:36:35:7a:69:22:6a:7f:b2:63:ae:35:58:db: 9c:fb:c0:ad:45:6e:4d:60:96:94:31:5e:09:5e:72: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:54:51:8A:3D:31:CA:4D:11:08:46:CE:D0:D2:80:2D:B3:C8:79:0E X509v3 Authority Key Identifier: keyid:39:D2:1E:4E:02:30:98:12:72:42:B0:1A:4B:16:69:1F:1A:8D:AF:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/3/39D21E4E023098127242B01A4B16691F1A8DAFC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D21E4E023098127242B01A4B16691F1A8DAFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/3/39D21E4E023098127242B01A4B16691F1A8DAFC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:a8:09:ba:7f:31:a2:22:5a:e5:08:37:90:90:0f:5e:a1:e5: e0:58:15:ba:99:4f:9c:72:ab:f3:48:90:20:cc:8e:3f:06:b7: 12:f5:8a:84:91:bb:59:cf:6b:1e:74:0d:57:59:d9:70:a0:3f: 5b:a6:4f:2a:ab:32:aa:3e:6c:5f:c9:1a:bf:a3:c4:41:de:64: 84:d8:ae:3b:87:1c:ff:fe:f1:e4:17:be:00:82:ff:c4:59:e4: ff:95:82:45:93:ab:5a:67:ba:2e:89:40:cb:4a:50:9c:21:97: fc:f4:08:10:ae:51:2a:c6:6a:56:90:3e:fd:3e:29:a4:7a:a9: b5:89:8a:46:ae:50:25:17:40:99:00:93:78:d5:b2:c5:5d:b7: 23:b9:1c:9d:ca:38:25:02:9c:9f:8f:cc:6c:46:80:f8:cb:0d: f1:17:fb:04:bc:39:8f:bc:74:39:da:c3:d3:98:63:89:02:61: 73:59:b1:c5:8a:5e:3a:ab:6e:4c:6d:40:39:0e:c2:04:e1:8a: 22:00:a5:8a:31:f2:9d:b9:68:3b:44:8f:c8:da:56:c2:3f:35: b3:d4:0d:b4:8f:0b:3f:b1:37:8c:e4:75:f1:72:48:7c:f9:20: 5c:52:39:ec:1e:83:6c:62:65:7c:bc:28:f7:6c:2e:c9:2e:70: b1:44:ed:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZcmgfHZYecKqMer9+OwHfNE696AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlEMjFFNEUwMjMwOTgxMjcyNDJCMDFBNEIxNjY5MUYx QThEQUZDODAeFw0yNjA3MDcyMTA3MThaFw0yNjA3MDkwMDA4MThaMDMxMTAvBgNV BAMTKDk4NTQ1MThBM0QzMUNBNEQxMTA4NDZDRUQwRDI4MDJEQjNDODc5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVl/Bja/SU4kqGA7MQbpT+YDlk YwLS9vaYcVh1mAZLEIO2o1xbTpJsvVnN67yWms1RwaO4rBHni1CbwLLr3CTIGB9d Tuysxf8+7sZVg0I0oe7XBHSsOFzIup4kk99Q4E/XEAoeDmW4L9DHGK3ya7VQPROi 3Qu4MzOOn4n1LLXdhhWSw1Rr6JMffjOm+2UuHm5j6gLt3TjNrOR2rvI+uNAshDNI oEKKiE6IV2EsMf9WZGsOPNhDcG8hfo2TYVv9HI/gWlLJ6LdfIC+hTqr+EXJ4Be7f MWVxn443NUKSWhM9IaRmNjV6aSJqf7JjrjVY25z7wK1Fbk1glpQxXglecsHVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmFRRij0xyk0RCEbO0NKALbPIeQ4wHwYDVR0j BBgwFoAUOdIeTgIwmBJyQrAaSxZpHxqNr8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6 ZzMvMy8zOUQyMUU0RTAyMzA5ODEyNzI0MkIwMUE0QjE2NjkxRjFBOERBRkM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5RDIxRTRFMDIzMDk4MTI3 MjQyQjAxQTRCMTY2OTFGMUE4REFGQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6ZzMvMy8z OUQyMUU0RTAyMzA5ODEyNzI0MkIwMUE0QjE2NjkxRjFBOERBRkM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz6gJun8xoiJa5Qg3kJAPXqHl4FgVuplPnHKr80iQIMyOPwa3EvWKhJG7Wc9r HnQNV1nZcKA/W6ZPKqsyqj5sX8kav6PEQd5khNiuO4cc//7x5Be+AIL/xFnk/5WC RZOrWme6LolAy0pQnCGX/PQIEK5RKsZqVpA+/T4ppHqptYmKRq5QJRdAmQCTeNWy xV23I7kcnco4JQKcn4/MbEaA+MsN8Rf7BLw5j7x0OdrD05hjiQJhc1mxxYpeOqtu TG1AOQ7CBOGKIgClijHynbloO0SPyNpWwj81s9QNtI8LP7E3jOR18XJIfPkgXFI5 7B6DbGJlfLwo92wuyS5wsUTt0w== -----END CERTIFICATE-----Generated at Wed Jul 8 15:18:19 2026 by rpki-client