$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft File: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json) Hash identifier: FJ2+/ZBwTcqJ/QtIRLtlJqsXCKr3shYxQTw6nl5mmSI= Subject key identifier: 24:53:B3:D1:05:1E:42:40:5F:6C:CA:72:10:67:18:D7:BE:ED:65:33 Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 Certificate issuer: /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Certificate serial: 1997B46D5052D171F8458A87B10B399AEA1D42FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject info access: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft Manifest number: 019F Signing time: Thu 09 Apr 2026 10:44:28 +0000 Manifest this update: Thu 09 Apr 2026 10:39:28 +0000 Manifest next update: Fri 10 Apr 2026 14:27:28 +0000 Files and hashes: 1: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=) 2: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: YFcQdulfOnfucoRpNbskRlTHgjA4ueah5shdwzf22/g=) 3: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 14:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:97:b4:6d:50:52:d1:71:f8:45:8a:87:b1:0b:39:9a:ea:1d:42:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Validity Not Before: Apr 9 10:39:28 2026 GMT Not After : Apr 10 14:27:28 2026 GMT Subject: CN=2453B3D1051E42405F6CCA72106718D7BEED6533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:d0:3f:dd:53:d2:9f:3b:23:af:9a:de:45: 99:4b:e3:9e:a6:9a:57:66:5d:81:02:50:89:b3:7d: 89:7a:54:5e:01:1d:65:4f:ca:ff:c6:32:a7:2d:48: f7:b7:62:ea:4e:0e:eb:38:1e:99:c0:6f:67:d5:4d: df:4d:f3:63:44:61:fe:b9:ef:f8:de:0a:86:c5:51: ce:c1:86:9b:a1:38:60:79:c2:8b:21:43:01:c9:87: 4b:55:2e:33:32:b0:03:95:74:41:d9:7d:6d:dc:ce: 77:71:03:fe:59:75:0d:51:62:0d:d6:85:56:61:54: 77:a3:63:5b:1f:54:b4:6f:b2:30:4a:ea:0c:c8:ae: 1a:c9:5b:6e:5c:02:3d:f3:10:18:46:49:f2:15:cd: f6:07:50:a9:4a:da:f4:b3:dd:72:c0:32:af:51:78: 7b:cf:63:76:e7:8c:73:2c:23:a3:96:af:0c:3b:96: c0:5c:e7:51:a2:86:02:45:e6:b9:05:d8:2a:92:02: e2:32:4e:16:21:f8:7d:18:92:1c:9d:3d:7c:90:cc: 69:92:8e:84:2c:32:82:1b:ed:da:02:80:c9:04:02: 1b:3b:19:b6:8e:37:68:90:43:07:4d:57:85:45:4f: a2:eb:44:56:2b:25:a7:84:13:00:d3:69:de:c3:ce: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:B3:D1:05:1E:42:40:5F:6C:CA:72:10:67:18:D7:BE:ED:65:33 X509v3 Authority Key Identifier: keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a0:31:32:da:bf:c4:fd:61:6d:b5:09:ba:73:06:c9:9f:0d: 30:b6:f6:7b:2f:dc:9e:b4:17:8a:28:a4:9a:a5:59:c1:58:1e: 05:7e:3f:65:e3:75:ec:2c:0d:c6:26:eb:53:79:3e:57:f2:e4: 03:78:46:5b:bf:8e:59:86:57:8b:09:25:73:87:87:f9:0c:e5: ac:7e:19:5d:6c:58:3b:65:09:49:09:68:b8:97:93:dc:d9:dc: 3e:73:f1:d8:3d:46:ef:0a:69:16:d8:6e:6f:a7:b7:9c:b5:d4: 05:f3:3d:4a:fe:73:22:ab:7e:3a:e3:5c:38:4a:b3:b1:41:67: ea:53:8d:d7:cc:f3:f7:b8:07:9d:d6:74:35:8e:2e:da:97:0b: 95:4c:14:09:94:66:e7:e6:be:cc:0e:10:1f:ba:bc:0c:87:81: f1:3a:5f:f1:e2:aa:20:dd:73:4c:0e:82:c5:44:5e:9f:7d:df: 82:d9:02:0a:e1:3e:e5:7f:f3:e9:bb:c5:47:de:2c:1a:7a:3e: 0e:f7:8a:a1:54:5f:e0:8d:a5:7b:ef:c0:86:54:37:fa:6b:c4: 2e:a0:3a:75:20:28:ab:e0:79:46:69:ca:aa:ba:e5:5a:a7:a3: 12:67:e8:46:d0:5d:46:31:4a:c2:69:3c:e0:4d:ec:ef:91:b0: 2e:a0:f0:64 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUGZe0bVBS0XH4RYqHsQs5muodQvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1 QjVBQTQwNzAeFw0yNjA0MDkxMDM5MjhaFw0yNjA0MTAxNDI3MjhaMDMxMTAvBgNV BAMTKDI0NTNCM0QxMDUxRTQyNDA1RjZDQ0E3MjEwNjcxOEQ3QkVFRDY1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14tA/3VPSnzsjr5reRZlL456m mldmXYECUImzfYl6VF4BHWVPyv/GMqctSPe3YupODus4HpnAb2fVTd9N82NEYf65 7/jeCobFUc7BhpuhOGB5woshQwHJh0tVLjMysAOVdEHZfW3czndxA/5ZdQ1RYg3W hVZhVHejY1sfVLRvsjBK6gzIrhrJW25cAj3zEBhGSfIVzfYHUKlK2vSz3XLAMq9R eHvPY3bnjHMsI6OWrww7lsBc51GihgJF5rkF2CqSAuIyThYh+H0YkhydPXyQzGmS joQsMoIb7doCgMkEAhs7GbaON2iQQwdNV4VFT6LrRFYrJaeEEwDTad7DzstdAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUJFOz0QUeQkBfbMpyEGcY177tZTMwHwYDVR0j BBgwFoAUMySh1yxcAZHaG0e4v9G8hFtapAcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ldFNMVm54eDUyWG0xdkdLdVhOazRiclBFblJHRTNWUVFFN3FVYjZFcFFK LzAvMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1QjVBQTQwNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzI0QTFENzJDNUMwMTkxREEx QjQ3QjhCRkQxQkM4NDVCNUFBNDA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2V0 U0xWbnh4NTJYbTF2R0t1WE5rNGJyUEVuUkdFM1ZRUUU3cVViNkVwUUovMC8zMzI0 QTFENzJDNUMwMTkxREExQjQ3QjhCRkQxQkM4NDVCNUFBNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA xKAxMtq/xP1hbbUJunMGyZ8NMLb2ey/cnrQXiiikmqVZwVgeBX4/ZeN17CwNxibr U3k+V/LkA3hGW7+OWYZXiwklc4eH+QzlrH4ZXWxYO2UJSQlouJeT3NncPnPx2D1G 7wppFthub6e3nLXUBfM9Sv5zIqt+OuNcOEqzsUFn6lON18zz97gHndZ0NY4u2pcL lUwUCZRm5+a+zA4QH7q8DIeB8Tpf8eKqIN1zTA6CxURen33fgtkCCuE+5X/z6bvF R94sGno+DveKoVRf4I2le+/AhlQ3+mvELqA6dSAoq+B5RmnKqrrlWqejEmfoRtBd RjFKwmk84E3s75GwLqDwZA== -----END CERTIFICATE-----Generated at Thu Apr 9 15:56:01 2026 by rpki-client