$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: SwCs4kRQU5senbyjfOKYQnqmm17cACeq4GS8vF2Vw00= Subject key identifier: 83:9D:4F:3D:49:8D:D5:56:FB:CE:58:6D:8B:63:2F:82:32:0B:FC:71 Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 5E8DCA7601D7FA868998B01EE3B969C993DBC2F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 01FD Signing time: Mon 02 Mar 2026 11:05:53 +0000 Manifest this update: Mon 02 Mar 2026 11:00:53 +0000 Manifest next update: Tue 03 Mar 2026 13:45:53 +0000 Files and hashes: 1: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) 2: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) 3: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: YtcNiy+xq1m7+2A/WNPOVJnF85XVQSighbrawhJaaFw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 13:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8d:ca:76:01:d7:fa:86:89:98:b0:1e:e3:b9:69:c9:93:db:c2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Mar 2 11:00:53 2026 GMT Not After : Mar 3 13:45:53 2026 GMT Subject: CN=839D4F3D498DD556FBCE586D8B632F82320BFC71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:29:18:28:ae:c9:65:c2:48:be:76:dd:e8: b2:70:8e:ec:e3:e4:02:ef:d7:dd:77:6a:46:dc:f3: 99:0c:c7:06:42:f8:53:f5:50:b8:d5:4b:e0:1c:92: 1d:fa:43:9a:48:7b:49:a4:73:e9:fc:88:c0:fa:f9: a4:5b:69:51:b4:6e:7b:32:c8:69:20:7b:91:a5:5c: 98:66:36:90:7c:66:f5:95:f5:19:f4:cf:0c:33:16: 03:9b:fb:3d:df:fc:7d:08:3d:a7:16:30:a5:42:a8: 35:65:2b:de:02:46:6e:02:61:4d:a0:f6:b6:34:2c: d4:18:43:44:2f:8b:e1:d1:34:86:1e:85:28:75:76: 16:b1:3a:ba:f9:24:64:76:6b:4d:e1:35:a4:49:53: 0d:cd:42:f0:5c:3a:4d:6e:85:e4:6c:a2:38:ea:b1: f3:bd:8a:3b:0d:41:69:95:73:13:53:69:37:92:c4: 41:9e:82:1f:6a:92:12:bb:f7:05:ed:5c:04:6d:23: 7d:de:1e:37:3d:ed:f8:fc:19:56:6c:7a:ee:21:e4: a2:df:72:d1:45:38:6c:a2:e6:41:26:25:9e:9c:8c: b6:77:86:72:9f:a1:d4:12:d7:e9:fa:a5:7b:b4:a7: 8e:dc:5f:25:f2:a2:ba:86:c3:aa:8e:c8:27:70:90: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9D:4F:3D:49:8D:D5:56:FB:CE:58:6D:8B:63:2F:82:32:0B:FC:71 X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:33:64:55:4e:2d:06:ba:61:21:f1:9c:8b:61:23:a6:d9:a0: 84:da:43:5a:66:aa:c4:93:b2:c5:ee:90:98:52:9d:fb:98:ea: 1f:65:4a:48:37:b9:59:73:92:ed:ce:98:51:50:d5:98:06:33: ce:b5:dd:8d:77:29:28:2a:51:87:53:49:ea:f2:ea:20:99:62: de:6c:13:7c:e0:25:63:83:1e:34:59:c6:b1:e2:87:05:9a:1d: f2:7a:9b:00:52:41:8e:a1:bf:28:d6:79:2b:93:dd:82:7c:8f: c7:a4:ec:61:3a:0e:db:29:4f:e5:7d:ae:61:a9:12:b5:e0:77: c9:02:2a:32:11:d5:1e:da:2c:5d:f9:77:00:52:1c:69:4e:06: 17:29:df:17:7a:fa:b3:3d:46:f4:f1:0e:65:6f:ad:33:20:c5: de:01:80:8f:7d:43:f2:67:cb:31:8a:1e:90:e1:96:63:5b:45: 8e:bc:f5:22:64:96:f3:59:c6:ec:7b:e4:5f:04:62:1c:d7:df: 0a:7e:e9:7d:ce:4b:03:e1:03:64:cc:31:d1:36:e1:4b:65:81: d8:b1:57:f0:fb:e8:f3:06:89:d1:66:7e:36:b9:28:45:c0:78: 07:54:49:b1:1a:bf:42:b2:99:d4:a7:4a:a5:c0:ab:c7:d8:b6: f0:6e:c0:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXo3KdgHX+oaJmLAe47lpyZPbwvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNjAzMDIxMTAwNTNaFw0yNjAzMDMxMzQ1NTNaMDMxMTAvBgNV BAMTKDgzOUQ0RjNENDk4REQ1NTZGQkNFNTg2RDhCNjMyRjgyMzIwQkZDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZSkYKK7JZcJIvnbd6LJwjuzj 5ALv1913akbc85kMxwZC+FP1ULjVS+Ackh36Q5pIe0mkc+n8iMD6+aRbaVG0bnsy yGkge5GlXJhmNpB8ZvWV9Rn0zwwzFgOb+z3f/H0IPacWMKVCqDVlK94CRm4CYU2g 9rY0LNQYQ0Qvi+HRNIYehSh1dhaxOrr5JGR2a03hNaRJUw3NQvBcOk1uheRsojjq sfO9ijsNQWmVcxNTaTeSxEGegh9qkhK79wXtXARtI33eHjc97fj8GVZseu4h5KLf ctFFOGyi5kEmJZ6cjLZ3hnKfodQS1+n6pXu0p47cXyXyorqGw6qOyCdwkPyhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg51PPUmN1Vb7zlhti2MvgjIL/HEwHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAazNkVU4tBrphIfGci2EjptmghNpDWmaqxJOyxe6QmFKd+5jqH2VKSDe5WXOS 7c6YUVDVmAYzzrXdjXcpKCpRh1NJ6vLqIJli3mwTfOAlY4MeNFnGseKHBZod8nqb AFJBjqG/KNZ5K5PdgnyPx6TsYToO2ylP5X2uYakSteB3yQIqMhHVHtosXfl3AFIc aU4GFynfF3r6sz1G9PEOZW+tMyDF3gGAj31D8mfLMYoekOGWY1tFjrz1ImSW81nG 7HvkXwRiHNffCn7pfc5LA+EDZMwx0TbhS2WB2LFX8Pvo8waJ0WZ+NrkoRcB4B1RJ sRq/QrKZ1KdKpcCrx9i28G7ALg== -----END CERTIFICATE-----Generated at Mon Mar 2 23:45:31 2026 by rpki-client