$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: ybG/VRGkGVaVxMeU8uh5vlBCun8313wmJjQWC5dwtfk= Subject key identifier: 42:92:58:95:25:77:BF:52:FF:93:DB:4C:95:1B:BA:D5:AB:E9:97:3A Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 200B65DEA7E4489DB2CD3581886AF50CF6A9665D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 0239 Signing time: Fri 17 Apr 2026 19:48:54 +0000 Manifest this update: Fri 17 Apr 2026 19:43:54 +0000 Manifest next update: Sat 18 Apr 2026 22:55:54 +0000 Files and hashes: 1: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) 2: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) 3: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: PetY4nLIrJ8uRiPkYqFVZdJ6/zl3jJqK5C/j+posnxU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 22:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0b:65:de:a7:e4:48:9d:b2:cd:35:81:88:6a:f5:0c:f6:a9:66:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Apr 17 19:43:54 2026 GMT Not After : Apr 18 22:55:54 2026 GMT Subject: CN=429258952577BF52FF93DB4C951BBAD5ABE9973A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:5a:a0:b7:4e:35:6d:22:e9:39:c9:42:b4: 69:52:41:b3:4f:a3:3d:a0:0a:8b:63:b3:19:d3:0e: 48:bf:71:1c:32:26:17:5b:1b:2a:ae:99:31:a7:da: 76:a6:5e:5d:d4:ca:69:71:a3:f7:8e:5e:8c:b8:29: e5:cf:d2:38:4e:d3:85:8e:ec:02:71:56:4b:55:2e: 9d:b3:62:9a:3d:7f:ce:74:5b:ad:88:3e:cd:16:f5: 1b:a1:e2:f9:78:0e:18:e0:5c:5b:18:b1:a9:20:df: 91:b0:7d:80:b7:63:53:7b:9c:14:24:1e:8c:d8:fb: de:61:89:75:db:32:a3:69:3f:6d:f5:90:d3:a2:79: 07:8c:2f:a2:01:cc:de:73:84:90:1c:17:c6:2e:2b: 16:ed:e7:54:3f:d1:9f:6d:e7:5e:f0:88:55:4a:93: 10:cc:a9:23:14:77:5a:0d:4d:69:a9:79:85:84:6e: 53:7c:48:00:d7:2c:b5:f4:bd:cd:94:7d:48:40:6a: 7a:96:82:96:6f:30:2a:61:43:4e:50:e3:d5:96:f0: 82:1a:fb:66:ba:7d:af:a4:e1:ed:0e:72:53:e1:2d: f9:b4:44:70:b9:5c:d9:63:b3:5b:29:94:ec:59:23: b7:af:42:d3:c4:db:7c:3f:4d:fd:39:d9:19:6e:0f: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:58:95:25:77:BF:52:FF:93:DB:4C:95:1B:BA:D5:AB:E9:97:3A X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8f:6c:c2:98:df:51:eb:5e:0e:27:b6:fa:d1:68:9d:04:dc: ea:c7:35:d5:ab:df:53:bb:78:07:f3:2f:18:0c:86:ba:e8:1a: d0:f8:59:f0:0b:b6:e7:f6:c9:04:67:42:18:d8:a8:97:d4:aa: a5:00:14:8f:a0:8b:f1:ac:f2:40:b2:e2:dc:d8:76:e2:3c:ad: b5:58:ae:54:47:48:93:be:79:ad:6e:7f:dc:ca:99:c9:59:89: 75:c6:83:c7:5a:a0:58:5d:4f:3c:2e:ac:11:f9:82:c1:74:d5: 51:44:13:0d:a1:66:60:a2:ed:71:11:3c:45:86:de:52:a8:52: 34:60:50:30:a0:20:94:fd:95:a0:66:0f:49:8b:46:0e:2e:b7: 52:82:b0:e7:40:77:be:30:ac:1d:39:98:08:0b:72:9f:e8:f3: fd:dd:5c:f9:c3:84:9e:cb:76:45:cc:3d:fe:e2:7a:50:ff:c5: c9:44:b0:f8:6d:ad:c4:28:a4:3a:8b:4a:dd:7e:4b:9b:dd:05: d4:48:e0:ed:a8:2f:02:06:da:5c:c9:b1:62:6d:b2:de:0d:f2: 6f:a8:e1:11:34:24:c8:98:24:cc:b2:0d:ae:6f:ce:40:e3:d6: dc:c8:08:98:5a:e3:b6:63:1c:ab:5c:9e:91:31:cf:74:8f:ce: 0b:0a:a4:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIAtl3qfkSJ2yzTWBiGr1DPapZl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNjA0MTcxOTQzNTRaFw0yNjA0MTgyMjU1NTRaMDMxMTAvBgNV BAMTKDQyOTI1ODk1MjU3N0JGNTJGRjkzREI0Qzk1MUJCQUQ1QUJFOTk3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSlqgt041bSLpOclCtGlSQbNP oz2gCotjsxnTDki/cRwyJhdbGyqumTGn2namXl3Uymlxo/eOXoy4KeXP0jhO04WO 7AJxVktVLp2zYpo9f850W62IPs0W9Ruh4vl4DhjgXFsYsakg35GwfYC3Y1N7nBQk HozY+95hiXXbMqNpP231kNOieQeML6IBzN5zhJAcF8YuKxbt51Q/0Z9t517wiFVK kxDMqSMUd1oNTWmpeYWEblN8SADXLLX0vc2UfUhAanqWgpZvMCphQ05Q49WW8IIa +2a6fa+k4e0OclPhLfm0RHC5XNljs1splOxZI7evQtPE23w/Tf052RluDwfpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQpJYlSV3v1L/k9tMlRu61avplzowHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuI9swpjfUeteDie2+tFonQTc6sc11avfU7t4B/MvGAyGuuga0PhZ8Au25/bJ BGdCGNiol9SqpQAUj6CL8azyQLLi3Nh24jyttViuVEdIk755rW5/3MqZyVmJdcaD x1qgWF1PPC6sEfmCwXTVUUQTDaFmYKLtcRE8RYbeUqhSNGBQMKAglP2VoGYPSYtG Di63UoKw50B3vjCsHTmYCAtyn+jz/d1c+cOEnst2Rcw9/uJ6UP/FyUSw+G2txCik OotK3X5Lm90F1Ejg7agvAgbaXMmxYm2y3g3yb6jhETQkyJgkzLINrm/OQOPW3MgI mFrjtmMcq1yekTHPdI/OCwqkZA== -----END CERTIFICATE-----Generated at Sat Apr 18 06:40:07 2026 by rpki-client