$ rpki-client -vvf rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft File: 9D24A534785E862FF2DAC70BF06847337A2816FB.mft (raw, json) Hash identifier: YUldpZ3xyiLKVnqrJyERSfohf4+RLaSdxkFOvb+puYM= Subject key identifier: 8A:50:96:FA:61:1C:3F:85:61:52:19:C9:85:07:43:5B:6C:93:E5:AE Authority key identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB Certificate issuer: /CN=9D24A534785E862FF2DAC70BF06847337A2816FB Certificate serial: 0229F12E5BEC0CA883A6A9332FA13413F313CA28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft Manifest number: 02FC Signing time: Wed 05 Nov 2025 09:52:34 +0000 Manifest this update: Wed 05 Nov 2025 09:47:34 +0000 Manifest next update: Thu 06 Nov 2025 13:29:34 +0000 Files and hashes: 1: 9D24A534785E862FF2DAC70BF06847337A2816FB.crl (hash: rbqfq7cPXkWhcxn13AwCc40PMthpDnFzZcZSuregnZk=) 2: 323830343a366231343a3a2f33322d3336203d3e20323730333736.roa (hash: goyqg9XLzjSyt1Nj/jZlhroqHslipMCw33oUGSDwgcY=) 3: 3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa (hash: PwoUsAJev6eSGpJhH8r4RMVtPXYw4/MXxRpUUne9aoo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:29:f1:2e:5b:ec:0c:a8:83:a6:a9:33:2f:a1:34:13:f3:13:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D24A534785E862FF2DAC70BF06847337A2816FB Validity Not Before: Nov 5 09:47:34 2025 GMT Not After : Nov 6 13:29:34 2025 GMT Subject: CN=8A5096FA611C3F85615219C98507435B6C93E5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:26:42:fe:be:e8:91:01:24:6a:fc:43:5f: c0:27:80:10:93:0e:60:ad:a6:42:e4:e4:68:15:17: 01:e3:d3:4f:9f:74:16:ed:2a:4e:6f:46:47:95:b6: 99:d5:17:76:0c:3d:4c:9b:c3:0a:96:e0:85:6f:12: 9c:ac:b5:e5:58:7d:c2:d7:ce:4e:fd:67:a0:92:8c: 3a:fb:fc:bc:dd:e9:36:b4:d0:28:1e:52:06:16:0f: 50:cc:24:b3:d8:ad:89:18:35:85:b8:5a:92:8d:43: 82:68:1f:74:24:14:94:23:05:16:a2:a8:f5:85:fe: da:ce:ee:54:87:4d:52:4e:e3:b2:f2:fb:e2:20:5d: ca:2b:7f:74:eb:10:2e:b1:52:34:c9:7e:c8:76:9b: 2e:fd:ac:a8:5d:05:90:3f:f8:ac:bd:e6:24:71:80: bf:01:b2:f6:61:e3:4a:78:ac:ce:1d:b9:9e:66:29: d8:24:d8:46:55:8e:5c:55:07:8c:26:6e:2f:83:fd: 35:27:c3:07:7e:72:d8:07:7a:c2:13:f3:22:de:f0: 25:3d:05:49:2b:40:43:15:bf:73:92:e9:08:9b:15: 01:03:25:47:96:4a:3b:db:c5:42:34:15:35:22:6b: a1:12:10:f6:65:8b:a1:5a:06:41:c0:34:bb:38:e7: b2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:96:FA:61:1C:3F:85:61:52:19:C9:85:07:43:5B:6C:93:E5:AE X509v3 Authority Key Identifier: keyid:9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4d:dd:b3:cc:74:0b:81:e7:36:1f:53:67:b2:ca:f0:3f:2b: de:95:c9:e3:5e:20:b1:73:ac:67:ec:c6:ff:c7:97:0e:a8:e4: df:4c:09:a3:a7:ce:8e:0a:f9:dc:79:25:51:b8:19:33:8e:92: 6c:81:11:a4:bc:c9:0d:f8:a3:b3:8c:70:81:7d:3e:1b:3f:49: f4:83:21:26:c2:64:db:95:68:e5:04:aa:91:72:ae:13:7d:fb: e2:f0:7c:05:d3:70:77:6b:29:97:dc:75:a1:8d:e7:40:51:b8: 96:b2:7a:6b:95:e8:99:87:a5:81:09:fd:06:b6:51:91:14:4b: cc:59:2a:8c:fb:99:ff:72:88:e1:ee:21:8c:de:d7:a4:38:d6: bd:36:41:0d:cd:d4:69:19:80:20:de:95:c1:8f:12:ac:78:56: b3:ed:d0:7d:d1:d9:1e:37:05:00:d2:78:4d:d6:2a:03:63:2f: 32:9f:d9:21:bd:60:e2:f2:53:23:bf:c9:2b:b8:30:21:c8:93: 28:0a:41:ed:ef:d4:2b:8a:5b:04:96:bc:d0:c0:fe:b1:98:57: 74:7f:51:d6:02:95:27:9a:08:aa:37:16:d3:08:68:7e:12:c9: e3:8c:56:ad:9d:e1:69:d9:38:8d:6c:d1:a5:c1:8a:76:91:2b: 12:1b:5a:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAinxLlvsDKiDpqkzL6E0E/MTyigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNEE1MzQ3ODVFODYyRkYyREFDNzBCRjA2ODQ3MzM3 QTI4MTZGQjAeFw0yNTExMDUwOTQ3MzRaFw0yNTExMDYxMzI5MzRaMDMxMTAvBgNV BAMTKDhBNTA5NkZBNjExQzNGODU2MTUyMTlDOTg1MDc0MzVCNkM5M0U1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqiZC/r7okQEkavxDX8AngBCT DmCtpkLk5GgVFwHj00+fdBbtKk5vRkeVtpnVF3YMPUybwwqW4IVvEpysteVYfcLX zk79Z6CSjDr7/Lzd6Ta00CgeUgYWD1DMJLPYrYkYNYW4WpKNQ4JoH3QkFJQjBRai qPWF/trO7lSHTVJO47Ly++IgXcorf3TrEC6xUjTJfsh2my79rKhdBZA/+Ky95iRx gL8BsvZh40p4rM4duZ5mKdgk2EZVjlxVB4wmbi+D/TUnwwd+ctgHesIT8yLe8CU9 BUkrQEMVv3OS6QibFQEDJUeWSjvbxUI0FTUia6ESEPZli6FaBkHANLs457KPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUilCW+mEcP4VhUhnJhQdDW2yT5a4wHwYDVR0j BBgwFoAUnSSlNHhehi/y2scL8GhHM3ooFvswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkJYbWdwbmQ2ZXh5WjhHajM5a1RkYTRnYndiSmdKSHpZdVV6NXU4VjZE YncvMS85RDI0QTUzNDc4NUU4NjJGRjJEQUM3MEJGMDY4NDczMzdBMjgxNkZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMjRBNTM0Nzg1RTg2MkZG MkRBQzcwQkYwNjg0NzMzN0EyODE2RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkJYbWdwbmQ2ZXh5WjhHajM5a1RkYTRnYndiSmdKSHpZdVV6NXU4VjZEYncvMS85 RDI0QTUzNDc4NUU4NjJGRjJEQUM3MEJGMDY4NDczMzdBMjgxNkZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi03ds8x0C4HnNh9TZ7LK8D8r3pXJ414gsXOsZ+zG/8eXDqjk30wJo6fOjgr5 3HklUbgZM46SbIERpLzJDfijs4xwgX0+Gz9J9IMhJsJk25Vo5QSqkXKuE3374vB8 BdNwd2spl9x1oY3nQFG4lrJ6a5XomYelgQn9BrZRkRRLzFkqjPuZ/3KI4e4hjN7X pDjWvTZBDc3UaRmAIN6VwY8SrHhWs+3QfdHZHjcFANJ4TdYqA2MvMp/ZIb1g4vJT I7/JK7gwIciTKApB7e/UK4pbBJa80MD+sZhXdH9R1gKVJ5oIqjcW0whofhLJ44xW rZ3hadk4jWzRpcGKdpErEhtanA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:46:53 2025 by rpki-client