$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: uCNFJqy0aye1xUutvU+CpyuDzsQQmzd372gOBX+5wno= Subject key identifier: 02:5E:3E:6D:67:FF:CC:D4:20:A3:0F:EC:BC:19:9F:79:EF:71:58:82 Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 789CAB952C6ACD0C28EF406E8646AC2EBCE1ED84 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 0161 Signing time: Wed 05 Nov 2025 10:21:38 +0000 Manifest this update: Wed 05 Nov 2025 10:16:38 +0000 Manifest next update: Thu 06 Nov 2025 12:13:38 +0000 Files and hashes: 1: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) 2: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: qMdms5SvRSM1dhOa9o8Va1vPtDKpkMCtPg3NnIpuEhE=) 3: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9c:ab:95:2c:6a:cd:0c:28:ef:40:6e:86:46:ac:2e:bc:e1:ed:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Nov 5 10:16:38 2025 GMT Not After : Nov 6 12:13:38 2025 GMT Subject: CN=025E3E6D67FFCCD420A30FECBC199F79EF715882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:e8:4d:00:bf:42:22:a0:60:47:1b:02:9a: 1b:c7:8e:f6:a3:0f:cb:70:97:b9:a6:6c:f9:c1:56: ae:b7:4c:c4:ed:77:5e:74:fe:99:4a:15:39:0b:cb: cb:23:99:0c:d8:a1:a7:6e:05:39:9c:3e:1f:c6:8c: 8c:92:40:4c:e5:0b:25:01:1e:70:be:62:4a:c4:8a: b9:58:8d:19:97:13:a6:76:bb:5d:7d:06:34:33:21: a5:22:71:7f:49:4e:67:2d:85:ed:7e:b3:bf:76:28: 90:0a:a6:ac:0c:86:c2:36:e7:50:2e:a6:1b:31:e2: d3:5a:8c:34:4f:3d:f1:68:2b:0f:c2:58:5c:fa:5c: 8e:f0:0b:97:ae:69:f8:2e:39:df:9a:5f:70:c7:15: 20:95:ba:ee:5d:d0:40:50:0c:0c:c4:30:f6:5f:01: 15:33:3c:5a:f1:7a:32:f8:3d:64:12:b3:ab:31:31: 5b:d6:36:a8:77:70:8d:63:18:0d:90:a8:6b:30:14: a1:ca:bb:64:b4:67:db:9a:b3:c7:44:78:f6:18:0c: cd:85:a0:be:eb:d6:f4:5a:71:54:b8:24:a0:ca:e0: 39:cb:a3:ae:02:9c:f5:5a:70:69:b4:c5:b2:fe:50: af:1d:58:a9:07:15:ec:7e:ef:f7:4d:72:f6:21:99: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5E:3E:6D:67:FF:CC:D4:20:A3:0F:EC:BC:19:9F:79:EF:71:58:82 X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:10:88:ba:2a:d8:60:88:61:8e:95:c8:63:45:26:02:3e:8f: d9:49:c2:31:e7:28:6c:c2:9a:f8:e9:fd:37:2d:98:3b:76:ea: 8e:d4:ce:d0:03:92:44:bb:d5:3f:bd:61:15:5c:8c:0d:cb:07: dd:70:1b:56:68:66:90:c3:c6:5c:d9:36:d6:7e:5e:ab:c9:de: b1:13:03:ac:31:1c:2a:a4:71:b3:a4:36:d7:f1:10:41:d9:7b: 33:da:e1:bb:e2:41:be:0f:d5:0b:ac:ca:ff:f4:a9:38:95:90: e1:18:37:d6:9f:18:de:05:7e:c5:92:59:23:6c:de:99:b7:34: 0c:c9:83:b7:28:d7:33:bf:43:56:9e:84:48:05:39:43:a8:d3: c3:e0:7a:93:ab:22:50:6e:7e:23:81:ee:d7:ab:20:ba:70:86: 49:95:9d:2f:64:0f:eb:cf:ab:fe:94:af:b7:87:0f:a1:6c:2a: 22:99:b1:dc:b0:85:ad:fd:dc:b5:c9:28:c3:25:aa:49:e0:cd: 8a:6e:39:51:7d:58:78:ec:c5:6f:69:cc:23:4c:13:9c:b3:56: e8:dd:3e:27:76:fe:1c:b8:0d:b0:ff:69:ac:13:12:cd:1d:90: 4b:eb:94:f9:96:23:c7:3a:6a:ca:39:b2:68:2d:cd:3e:a9:9b: 22:cd:bd:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeJyrlSxqzQwo70BuhkasLrzh7YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNTExMDUxMDE2MzhaFw0yNTExMDYxMjEzMzhaMDMxMTAvBgNV BAMTKDAyNUUzRTZENjdGRkNDRDQyMEEzMEZFQ0JDMTk5Rjc5RUY3MTU4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VOhNAL9CIqBgRxsCmhvHjvaj D8twl7mmbPnBVq63TMTtd150/plKFTkLy8sjmQzYoaduBTmcPh/GjIySQEzlCyUB HnC+YkrEirlYjRmXE6Z2u119BjQzIaUicX9JTmcthe1+s792KJAKpqwMhsI251Au phsx4tNajDRPPfFoKw/CWFz6XI7wC5euafguOd+aX3DHFSCVuu5d0EBQDAzEMPZf ARUzPFrxejL4PWQSs6sxMVvWNqh3cI1jGA2QqGswFKHKu2S0Z9uas8dEePYYDM2F oL7r1vRacVS4JKDK4DnLo64CnPVacGm0xbL+UK8dWKkHFex+7/dNcvYhmRgHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAl4+bWf/zNQgow/svBmfee9xWIIwHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxRCIuirYYIhhjpXIY0UmAj6P2UnCMecobMKa+On9Ny2YO3bqjtTO0AOSRLvV P71hFVyMDcsH3XAbVmhmkMPGXNk21n5eq8nesRMDrDEcKqRxs6Q21/EQQdl7M9rh u+JBvg/VC6zK//SpOJWQ4Rg31p8Y3gV+xZJZI2zembc0DMmDtyjXM79DVp6ESAU5 Q6jTw+B6k6siUG5+I4Hu16sgunCGSZWdL2QP68+r/pSvt4cPoWwqIpmx3LCFrf3c tckowyWqSeDNim45UX1YeOzFb2nMI0wTnLNW6N0+J3b+HLgNsP9prBMSzR2QS+uU +ZYjxzpqyjmyaC3NPqmbIs29pg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:33 2025 by rpki-client