$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft File: 24DA1210F429D91717494C8CC3BF85882918C64A.mft (raw, json) Hash identifier: MU4tOZDBgHgbAxmjYtXdjnlN1u3damjvRt8ROMcJcKY= Subject key identifier: AD:3E:85:6B:0D:BE:DC:28:94:F8:6B:C9:F8:2E:3C:DC:4F:72:7E:9C Authority key identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A Certificate issuer: /CN=24DA1210F429D91717494C8CC3BF85882918C64A Certificate serial: 364FB3DCD3AE1989B8130919B5074E6E72C22023 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft Manifest number: 5A Signing time: Tue 04 Nov 2025 20:53:00 +0000 Manifest this update: Tue 04 Nov 2025 20:48:00 +0000 Manifest next update: Wed 05 Nov 2025 23:21:00 +0000 Files and hashes: 1: 323830343a323463303a3a2f33322d313238203d3e20323632323930.roa (hash: iib8Ej5DM/IZ6Qi660/twgY7+AlM+uG5yZlC1F5qXaU=) 2: 3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa (hash: uiRXmYyaZnyGUKLQ5O4V1lbbD9LHclhNzx6GlKrNEXo=) 3: 24DA1210F429D91717494C8CC3BF85882918C64A.crl (hash: bjqDLpdS1VMwG/QHlGpkOCzAgrts1xCu5foBNy8q5Nc=) 4: 3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa (hash: StEIH8HAyQjRAJHv8B6e6jK9OoBgrQ8iw78Xwgfs5Jo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4f:b3:dc:d3:ae:19:89:b8:13:09:19:b5:07:4e:6e:72:c2:20:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DA1210F429D91717494C8CC3BF85882918C64A Validity Not Before: Nov 4 20:48:00 2025 GMT Not After : Nov 5 23:21:00 2025 GMT Subject: CN=AD3E856B0DBEDC2894F86BC9F82E3CDC4F727E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:4b:32:75:bb:ef:91:d4:92:61:84:9b:2c: 56:59:c1:f8:8d:ab:0e:63:e0:69:ee:ce:2e:76:e6: b7:6e:35:3b:cf:f1:35:d2:4e:1b:34:a3:5c:aa:1c: 40:81:d0:43:4f:d1:11:90:c1:58:55:09:2f:1f:2b: 91:79:29:cb:48:f9:13:0d:4b:81:3a:ab:57:f0:bf: 32:58:26:da:c3:66:f6:4c:9a:8e:29:77:0f:93:79: 4c:ba:27:f6:81:f7:ec:d2:9a:9b:ff:74:9d:68:15: 29:d4:8f:5c:96:d9:15:60:bd:70:64:1e:55:56:77: 27:8f:51:df:47:cf:29:82:a8:e2:39:82:1e:39:1c: 87:66:01:23:08:8a:a1:8c:86:25:6c:d7:7f:59:51: 5f:80:96:74:3a:71:5d:1c:95:e1:d2:5b:88:f5:28: a8:3d:32:a4:4d:c5:69:ad:fa:13:3e:ab:70:d9:9e: 8a:2f:eb:1f:51:0a:fd:b9:86:51:f6:b4:66:8a:30: 77:72:3c:3b:25:dc:8b:0e:0e:e0:1b:c2:a2:78:d6: 54:fd:f6:23:45:c5:fe:97:be:e5:63:ed:b9:0c:96: 9e:85:7d:ef:09:0f:70:0c:d3:f8:91:68:b1:8a:b1: db:fe:d5:a6:63:31:a0:94:03:b7:3c:c6:c5:3c:e7: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3E:85:6B:0D:BE:DC:28:94:F8:6B:C9:F8:2E:3C:DC:4F:72:7E:9C X509v3 Authority Key Identifier: keyid:24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:85:56:00:54:61:d8:99:2f:69:08:47:ae:64:9a:88:9f:2a: bc:87:a8:15:7a:37:f5:f5:15:7f:fa:a7:f3:8b:77:30:24:de: c8:d4:ae:3a:75:48:29:e7:c6:88:ee:49:de:3f:f5:f2:45:a7: 96:9e:26:78:94:1c:65:05:7e:22:5a:20:17:29:26:70:fe:7e: f8:6a:29:b1:6b:b7:5b:47:24:06:30:7e:24:f2:05:8f:d7:02: 3e:a7:04:80:1d:8a:e8:d7:f3:22:04:39:f7:a7:5d:9e:8c:c7: 0a:29:9c:68:60:35:62:2a:f3:dc:66:15:43:da:0a:47:46:9b: 49:b6:c3:91:ce:7e:ef:e3:ed:7b:e5:59:ab:1a:15:fd:16:bb: d4:6e:9f:c4:f5:c0:e7:6e:de:56:50:a5:20:ec:f9:c1:2c:c6: 2f:a4:3f:df:d9:04:fb:90:b5:4f:e9:07:dc:78:18:11:b0:51: ad:0d:0c:5c:5a:36:2c:d1:31:9a:31:2c:cf:5c:c5:1d:c8:6c: 5b:9f:59:22:3b:d2:a5:63:58:ed:cc:35:ce:16:4c:47:a4:b9: 66:9a:c9:2f:38:e2:55:8a:09:cd:b9:77:63:78:ce:5e:e2:ab: 7a:70:32:27:52:66:2b:1a:7e:57:c0:9c:0b:d5:a5:28:fb:22: 54:57:bb:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNk+z3NOuGYm4EwkZtQdObnLCICMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjREQTEyMTBGNDI5RDkxNzE3NDk0QzhDQzNCRjg1ODgy OTE4QzY0QTAeFw0yNTExMDQyMDQ4MDBaFw0yNTExMDUyMzIxMDBaMDMxMTAvBgNV BAMTKEFEM0U4NTZCMERCRURDMjg5NEY4NkJDOUY4MkUzQ0RDNEY3MjdFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiI0sydbvvkdSSYYSbLFZZwfiN qw5j4Gnuzi525rduNTvP8TXSThs0o1yqHECB0ENP0RGQwVhVCS8fK5F5KctI+RMN S4E6q1fwvzJYJtrDZvZMmo4pdw+TeUy6J/aB9+zSmpv/dJ1oFSnUj1yW2RVgvXBk HlVWdyePUd9HzymCqOI5gh45HIdmASMIiqGMhiVs139ZUV+AlnQ6cV0cleHSW4j1 KKg9MqRNxWmt+hM+q3DZnoov6x9RCv25hlH2tGaKMHdyPDsl3IsODuAbwqJ41lT9 9iNFxf6XvuVj7bkMlp6Ffe8JD3AM0/iRaLGKsdv+1aZjMaCUA7c8xsU853EFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrT6Faw2+3CiU+GvJ+C483E9yfpwwHwYDVR0j BBgwFoAUJNoSEPQp2RcXSUyMw7+FiCkYxkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVi cG4vMC8yNERBMTIxMEY0MjlEOTE3MTc0OTRDOENDM0JGODU4ODI5MThDNjRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0REExMjEwRjQyOUQ5MTcx NzQ5NEM4Q0MzQkY4NTg4MjkxOEM2NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVicG4vMC8y NERBMTIxMEY0MjlEOTE3MTc0OTRDOENDM0JGODU4ODI5MThDNjRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwoVWAFRh2JkvaQhHrmSaiJ8qvIeoFXo39fUVf/qn84t3MCTeyNSuOnVIKefG iO5J3j/18kWnlp4meJQcZQV+IlogFykmcP5++GopsWu3W0ckBjB+JPIFj9cCPqcE gB2K6NfzIgQ596ddnozHCimcaGA1Yirz3GYVQ9oKR0abSbbDkc5+7+Pte+VZqxoV /Ra71G6fxPXA527eVlClIOz5wSzGL6Q/39kE+5C1T+kH3HgYEbBRrQ0MXFo2LNEx mjEsz1zFHchsW59ZIjvSpWNY7cw1zhZMR6S5ZprJLzjiVYoJzbl3Y3jOXuKrenAy J1JmKxp+V8CcC9WlKPsiVFe71Q== -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:03 2025 by rpki-client