$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft File: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft (raw, json) Hash identifier: GmCs7wz/nSbqGUv+UKX3fyWlSgVnLZSSdaVkFmAaFdw= Subject key identifier: 9B:F6:74:35:89:EA:3D:5A:82:61:27:10:A7:60:E3:A4:44:3B:D8:9E Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Certificate serial: 21BA434AEB8343BB914D6950D2BCDFFEE20486C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft Manifest number: 016A Signing time: Wed 08 Jul 2026 01:32:48 +0000 Manifest this update: Wed 08 Jul 2026 01:27:48 +0000 Manifest next update: Thu 09 Jul 2026 04:09:48 +0000 Files and hashes: 1: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (hash: Hfp1DucUOLGX558iN8StPvuFHGp7CQRLaXSkygAZbFQ=) 2: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl (hash: rV2brfHEwYXeVMxnG02J8z3m8IVOSs0z1FTvNJPIFAQ=) 3: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (hash: ctFV3kPNJK3bV9B3MLschItzKM1ihhzRapNYYOJyJ2c=) 4: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (hash: 70JQRaVTJXwvav8bFTgGxR3IrAOSwj6tnXxST/n7XC0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 04:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ba:43:4a:eb:83:43:bb:91:4d:69:50:d2:bc:df:fe:e2:04:86:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Validity Not Before: Jul 8 01:27:48 2026 GMT Not After : Jul 9 04:09:48 2026 GMT Subject: CN=9BF6743589EA3D5A82612710A760E3A4443BD89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:cc:9d:89:b1:01:8d:58:b3:6f:c4:e7:46: 9b:a0:28:f5:2d:9c:c0:c5:f5:52:27:f6:38:48:76: c7:31:20:dd:e4:93:33:3d:cf:46:3a:f1:be:7a:ff: 70:9d:90:a2:99:32:d7:41:dd:bb:9b:56:ca:37:af: 5a:58:42:0d:5c:12:9e:0d:f2:54:a2:01:75:e0:83: 8b:13:84:c8:74:4a:0f:0b:e1:43:a4:52:b4:0e:f7: c4:6b:37:74:0e:4c:6e:d6:0c:13:70:19:fd:95:fa: 71:ad:85:94:be:da:44:3d:d8:de:25:30:0c:eb:90: 9d:60:45:91:d0:be:7e:48:e6:df:42:ed:a7:90:72: 83:86:66:b8:fc:b4:74:25:fe:23:11:87:67:ac:62: 75:85:84:cd:a5:44:0d:65:bc:cb:ce:d8:e6:b5:48: 81:8b:4f:a2:d6:9f:ba:2b:d3:65:6e:a4:db:a4:3c: 1e:f9:4c:17:b3:49:74:0c:64:0f:c6:44:0c:2f:a1: 98:b4:be:a3:35:bb:54:e8:f9:e5:51:72:db:92:91: 5e:23:84:fa:51:f0:0f:75:4b:98:e7:35:d5:88:fe: ec:e3:89:b1:e5:a2:13:2d:3f:50:57:f3:78:37:07: 47:ab:84:9f:e3:f2:fe:24:73:0a:d3:4b:78:14:61: 00:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F6:74:35:89:EA:3D:5A:82:61:27:10:A7:60:E3:A4:44:3B:D8:9E X509v3 Authority Key Identifier: keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f8:ad:d8:e7:32:db:21:5d:43:ff:b7:2d:58:15:e5:b6:25: 3c:7e:c4:7e:8b:f6:68:14:ab:17:f2:72:5d:73:cc:30:6b:81: 4a:12:38:2f:16:3f:d6:d3:28:32:ed:9b:b8:4a:81:10:56:62: b1:0a:91:24:a6:0e:cb:62:f6:c8:d6:03:ea:48:1d:f7:85:52: 8b:75:46:32:25:b2:a0:60:15:a4:31:75:fb:df:8e:e8:20:8d: c6:5d:51:6c:64:d6:75:57:69:c4:76:9d:cd:7d:46:46:2f:24: a7:5f:71:2e:00:ec:c7:e1:47:f9:b5:ef:29:28:b0:28:d0:72: 7a:d9:ba:9b:76:a3:79:9a:57:5c:92:ae:62:74:f5:9d:ea:5d: be:59:30:8b:fc:01:56:45:de:ab:ba:84:74:31:c9:f7:f0:6b: 14:da:4a:80:8b:3f:67:f8:f5:d6:f4:cc:1c:17:ff:a6:89:55: 92:09:87:7f:b2:97:65:10:a6:cb:3e:7d:bf:13:cf:74:e9:22: 1d:69:c7:e2:56:5a:bb:34:d7:e2:75:4c:e3:e5:80:d7:d0:fc: 11:a8:11:0a:e6:bf:f2:de:02:2d:7c:2f:05:c1:81:94:59:25: f1:8e:fd:f3:e0:bf:34:ca:d2:cf:5f:43:7b:a7:83:40:0d:5c: 9b:47:b1:89 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIbpDSuuDQ7uRTWlQ0rzf/uIEhsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBE QUJCRUYyMjAeFw0yNjA3MDgwMTI3NDhaFw0yNjA3MDkwNDA5NDhaMDMxMTAvBgNV BAMTKDlCRjY3NDM1ODlFQTNENUE4MjYxMjcxMEE3NjBFM0E0NDQzQkQ4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7cydibEBjVizb8TnRpugKPUt nMDF9VIn9jhIdscxIN3kkzM9z0Y68b56/3CdkKKZMtdB3bubVso3r1pYQg1cEp4N 8lSiAXXgg4sThMh0Sg8L4UOkUrQO98RrN3QOTG7WDBNwGf2V+nGthZS+2kQ92N4l MAzrkJ1gRZHQvn5I5t9C7aeQcoOGZrj8tHQl/iMRh2esYnWFhM2lRA1lvMvO2Oa1 SIGLT6LWn7or02VupNukPB75TBezSXQMZA/GRAwvoZi0vqM1u1To+eVRctuSkV4j hPpR8A91S5jnNdWI/uzjibHlohMtP1BX83g3B0erhJ/j8v4kcwrTS3gUYQCvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUm/Z0NYnqPVqCYScQp2DjpEQ72J4wHwYDVR0j BBgwFoAUwyVO+lxOn9pnaNApQkffcNq77yIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV LzAvQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBEQUJCRUYyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMzI1NEVGQTVDNEU5RkRBNjc2 OEQwMjk0MjQ3REY3MERBQkJFRjIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dC Wm1nd2ZXdEpweVVTMkp4OEx5SzhhQmQ0Z3ZHUlFTTFhITnE3WGU3SFUvMC9DMzI1 NEVGQTVDNEU5RkRBNjc2OEQwMjk0MjQ3REY3MERBQkJFRjIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA BPit2Ocy2yFdQ/+3LVgV5bYlPH7Efov2aBSrF/JyXXPMMGuBShI4LxY/1tMoMu2b uEqBEFZisQqRJKYOy2L2yNYD6kgd94VSi3VGMiWyoGAVpDF1+9+O6CCNxl1RbGTW dVdpxHadzX1GRi8kp19xLgDsx+FH+bXvKSiwKNByetm6m3ajeZpXXJKuYnT1nepd vlkwi/wBVkXeq7qEdDHJ9/BrFNpKgIs/Z/j11vTMHBf/polVkgmHf7KXZRCmyz59 vxPPdOkiHWnH4lZauzTX4nVM4+WA19D8EagRCua/8t4CLXwvBcGBlFkl8Y798+C/ NMrSz19De6eDQA1cm0exiQ== -----END CERTIFICATE-----Generated at Wed Jul 8 19:08:41 2026 by rpki-client