$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft File: 24DA1210F429D91717494C8CC3BF85882918C64A.mft (raw, json) Hash identifier: ba9b0qZ3D+C2aFnAH13EKbS4mnR76ZhBGud251qZ4jc= Subject key identifier: 68:FE:49:F1:15:3B:64:10:1F:CC:79:DC:C4:73:D7:9A:21:F2:78:36 Authority key identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A Certificate issuer: /CN=24DA1210F429D91717494C8CC3BF85882918C64A Certificate serial: 3E9BCD95EE29B0E9BAFE0F6412F281D2313ED965 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft Manifest number: F6 Signing time: Mon 02 Mar 2026 17:28:41 +0000 Manifest this update: Mon 02 Mar 2026 17:23:41 +0000 Manifest next update: Tue 03 Mar 2026 20:12:41 +0000 Files and hashes: 1: 24DA1210F429D91717494C8CC3BF85882918C64A.crl (hash: Se8ZzqV0tvYJRegWxRUr6GJTornAMDpYN4slfLbCHE0=) 2: 3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa (hash: StEIH8HAyQjRAJHv8B6e6jK9OoBgrQ8iw78Xwgfs5Jo=) 3: 3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa (hash: uiRXmYyaZnyGUKLQ5O4V1lbbD9LHclhNzx6GlKrNEXo=) 4: 323830343a323463303a3a2f33322d313238203d3e20323632323930.roa (hash: iib8Ej5DM/IZ6Qi660/twgY7+AlM+uG5yZlC1F5qXaU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 20:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9b:cd:95:ee:29:b0:e9:ba:fe:0f:64:12:f2:81:d2:31:3e:d9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DA1210F429D91717494C8CC3BF85882918C64A Validity Not Before: Mar 2 17:23:41 2026 GMT Not After : Mar 3 20:12:41 2026 GMT Subject: CN=68FE49F1153B64101FCC79DCC473D79A21F27836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:b2:34:22:c6:c1:6f:99:6f:21:58:3b:1b: bb:68:0e:a9:36:15:29:c7:9a:dc:4a:7e:da:ff:ac: 5b:5f:34:eb:b4:4f:13:85:51:2e:27:28:ee:1a:d0: f7:a7:41:d7:af:75:22:6d:7a:4c:5c:49:ae:b4:4a: ae:58:95:42:1a:c4:4e:0e:64:3b:73:1f:3f:e8:e1: 29:94:89:3f:db:b0:89:76:a7:e5:26:04:f2:6f:15: b3:58:e0:9c:08:6c:52:83:00:c0:f4:46:f5:8b:68: 4a:e7:07:46:9f:13:92:7c:f0:38:8c:aa:35:f0:04: b3:20:16:ac:6c:37:34:17:63:37:17:cd:3e:67:8f: bc:ab:d4:44:52:4b:7e:72:43:4b:34:16:4f:a7:ff: 49:6b:10:4d:5a:35:04:27:d2:de:9f:9a:17:a4:df: f4:d2:49:d0:a0:d9:e3:88:8f:69:c1:34:16:f5:34: cf:0f:8f:ee:d6:86:25:d0:20:9d:aa:8e:f4:63:0e: a7:d5:77:f1:a5:24:39:87:47:e9:8b:de:58:aa:88: 06:c8:c4:c1:e2:77:54:09:59:72:e3:94:c7:ca:fe: ad:8f:17:ae:6d:4a:25:da:41:04:51:19:33:ad:ee: 59:ea:43:e8:c3:76:55:ee:bc:ad:65:f2:46:14:ce: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FE:49:F1:15:3B:64:10:1F:CC:79:DC:C4:73:D7:9A:21:F2:78:36 X509v3 Authority Key Identifier: keyid:24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:85:12:02:a3:4c:3e:91:0d:57:47:b4:1f:b6:7d:41:3e:a9: 89:50:95:eb:3d:bc:e9:23:6a:cf:e4:8d:b1:b5:9c:a9:dd:11: fa:b1:be:3c:37:34:ff:7a:0d:94:08:e6:c9:50:ce:4d:a8:ad: f8:58:56:7c:bf:78:92:62:eb:f1:1c:95:58:88:90:7d:1b:13: 54:5a:9e:b5:8e:d7:b6:fc:5a:39:ae:13:de:19:35:49:29:cf: 98:76:36:c0:ea:66:2b:cb:7c:69:ee:8a:41:ca:ac:65:e5:ba: 30:54:c4:d7:94:30:4a:57:aa:95:6f:69:38:80:40:c7:f7:4b: 74:01:b9:d7:b6:f6:52:63:36:d1:fc:f2:5d:e9:5e:bc:19:07: cd:67:40:74:d8:99:b1:e6:8f:2d:93:36:e3:cd:d5:ef:2b:a7: 02:45:74:6b:82:fc:f7:1b:db:79:86:2c:7c:fd:3c:64:7a:e9: 8d:b6:26:31:e8:c1:2c:db:a1:64:a0:3c:bc:98:b6:76:55:dc: be:ea:9c:28:58:77:a6:05:17:72:8a:41:8d:30:10:87:ce:e2: cd:a1:0a:18:37:b7:d8:4a:1d:3b:6c:5e:82:da:d0:cf:b2:b2: 16:19:dc:a7:60:27:e8:78:df:60:cc:76:f2:63:d5:f2:c9:75: d2:6e:32:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPpvNle4psOm6/g9kEvKB0jE+2WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjREQTEyMTBGNDI5RDkxNzE3NDk0QzhDQzNCRjg1ODgy OTE4QzY0QTAeFw0yNjAzMDIxNzIzNDFaFw0yNjAzMDMyMDEyNDFaMDMxMTAvBgNV BAMTKDY4RkU0OUYxMTUzQjY0MTAxRkNDNzlEQ0M0NzNENzlBMjFGMjc4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9q7I0IsbBb5lvIVg7G7toDqk2 FSnHmtxKftr/rFtfNOu0TxOFUS4nKO4a0PenQdevdSJtekxcSa60Sq5YlUIaxE4O ZDtzHz/o4SmUiT/bsIl2p+UmBPJvFbNY4JwIbFKDAMD0RvWLaErnB0afE5J88DiM qjXwBLMgFqxsNzQXYzcXzT5nj7yr1ERSS35yQ0s0Fk+n/0lrEE1aNQQn0t6fmhek 3/TSSdCg2eOIj2nBNBb1NM8Pj+7WhiXQIJ2qjvRjDqfVd/GlJDmHR+mL3liqiAbI xMHid1QJWXLjlMfK/q2PF65tSiXaQQRRGTOt7lnqQ+jDdlXuvK1l8kYUzrPLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaP5J8RU7ZBAfzHncxHPXmiHyeDYwHwYDVR0j BBgwFoAUJNoSEPQp2RcXSUyMw7+FiCkYxkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVi cG4vMC8yNERBMTIxMEY0MjlEOTE3MTc0OTRDOENDM0JGODU4ODI5MThDNjRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0REExMjEwRjQyOUQ5MTcx NzQ5NEM4Q0MzQkY4NTg4MjkxOEM2NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVicG4vMC8y NERBMTIxMEY0MjlEOTE3MTc0OTRDOENDM0JGODU4ODI5MThDNjRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgIUSAqNMPpENV0e0H7Z9QT6piVCV6z286SNqz+SNsbWcqd0R+rG+PDc0/3oN lAjmyVDOTait+FhWfL94kmLr8RyVWIiQfRsTVFqetY7XtvxaOa4T3hk1SSnPmHY2 wOpmK8t8ae6KQcqsZeW6MFTE15QwSleqlW9pOIBAx/dLdAG517b2UmM20fzyXele vBkHzWdAdNiZseaPLZM2483V7yunAkV0a4L89xvbeYYsfP08ZHrpjbYmMejBLNuh ZKA8vJi2dlXcvuqcKFh3pgUXcopBjTAQh87izaEKGDe32EodO2xegtrQz7KyFhnc p2An6HjfYMx28mPV8sl10m4yfg== -----END CERTIFICATE-----Generated at Tue Mar 3 02:44:04 2026 by rpki-client