$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft File: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json) Hash identifier: sM3Sv96Z/0uLMFnIm1iSijrCcWd/MikOHzRHCaHdX4s= Subject key identifier: 9B:B1:45:0C:AE:1F:DF:85:3A:75:76:2F:C1:AC:77:B3:99:9D:61:B6 Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD Certificate issuer: /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD Certificate serial: 3056B957E09AEEAA9BFE74B31FB386952295FCC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft Manifest number: 02F0 Signing time: Tue 04 Nov 2025 09:11:20 +0000 Manifest this update: Tue 04 Nov 2025 09:06:20 +0000 Manifest next update: Wed 05 Nov 2025 12:32:20 +0000 Files and hashes: 1: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: trGVR1Mjd3oOXnJH1T/B9ulY/mi7slVQYaEyuFKZzW4=) 2: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: Z0J4eT+/Pm37ea2jwyYZIrXM8+ylfxcILtCFUN3f0nU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:56:b9:57:e0:9a:ee:aa:9b:fe:74:b3:1f:b3:86:95:22:95:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD Validity Not Before: Nov 4 09:06:20 2025 GMT Not After : Nov 5 12:32:20 2025 GMT Subject: CN=9BB1450CAE1FDF853A75762FC1AC77B3999D61B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:3e:e8:11:53:a8:4d:cf:f9:b1:34:31:1f: 39:cf:8b:96:a1:33:12:fd:ec:ba:ba:32:bd:ec:c1: ad:45:3e:13:a1:b2:38:4c:15:b2:ce:38:cc:0a:cd: 0a:c6:9b:72:b0:a9:c0:2e:08:71:12:7a:c4:a7:fc: 39:97:81:df:28:c4:ae:8b:58:c5:31:26:df:d5:04: 51:8f:63:b2:d3:d1:55:c6:b0:a9:8f:2e:18:e4:4d: 9c:27:fc:11:9b:d1:93:81:84:dd:17:6b:ab:2a:8f: b9:7a:5b:45:d8:08:ae:19:cd:5d:1e:86:30:0c:ac: 51:fd:7b:c4:91:36:13:60:19:66:45:52:ce:b4:a1: db:4d:52:a1:df:e8:fe:9d:a6:37:8a:d0:8f:bb:04: bb:40:01:89:a8:c7:25:69:94:74:26:81:06:ef:22: 21:b0:c8:f5:f7:9e:6b:4d:95:1c:15:29:67:0e:1b: 12:d2:c6:90:2a:67:74:f9:76:19:76:24:2c:31:21: 85:ce:67:72:d6:e5:17:c0:b2:0b:d0:b5:3d:71:4d: 2c:a3:59:f4:de:8f:fe:84:09:5e:04:6f:e8:6f:89: e2:7a:9c:07:62:8e:3a:f1:7d:5e:f9:7c:8d:8e:53: c8:e6:0f:2e:f8:0f:30:39:4f:96:a1:a7:f9:32:03: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:45:0C:AE:1F:DF:85:3A:75:76:2F:C1:AC:77:B3:99:9D:61:B6 X509v3 Authority Key Identifier: keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e5:40:d1:e9:35:3e:4a:2a:03:a1:67:f6:ee:a7:c2:9f:a9: df:07:fc:c6:57:fd:a5:b8:3c:d2:af:b8:88:56:90:d2:cf:57: 6b:13:41:13:0b:13:26:4c:cb:8d:8c:2f:07:af:5c:be:b6:e4: 04:30:ed:c2:7c:3e:eb:43:3c:4a:85:53:60:6a:93:98:23:8f: 69:32:c4:88:73:19:cb:67:18:e7:34:53:00:94:ea:c8:22:ee: 26:35:9e:a4:a9:eb:37:a8:48:70:76:a2:27:43:86:65:2e:7c: 18:32:ab:36:f0:99:cc:30:be:50:17:f2:55:97:a0:d1:f2:d1: f7:bb:b6:1a:ec:7f:ce:f9:4b:7c:90:f7:e2:05:87:08:dd:a5: 57:5d:3b:72:95:19:4a:93:6e:ab:8c:14:82:c3:71:df:91:18: 55:0c:31:fc:ee:a0:92:54:b2:17:b7:5f:28:22:46:77:5f:87: 74:b7:65:30:b6:fe:53:cf:d8:32:c4:ae:ce:a6:cc:1b:72:5d: 76:54:b2:c6:42:00:37:19:0a:5a:f6:4d:e8:86:86:5a:8c:39: 82:ea:7a:89:da:4a:b2:9c:6a:99:2a:71:14:e1:e0:23:f5:41: 7a:5a:6f:6d:6c:6b:3e:f1:47:aa:2c:1f:e1:33:b1:e2:4c:f7: 75:33:57:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMFa5V+Ca7qqb/nSzH7OGlSKV/MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyMjA3NzZBM0ZDRTA4MzhCMkYyNjlFQjBBQjQ3M0Uw NUQ1OUNCRDAeFw0yNTExMDQwOTA2MjBaFw0yNTExMDUxMjMyMjBaMDMxMTAvBgNV BAMTKDlCQjE0NTBDQUUxRkRGODUzQTc1NzYyRkMxQUM3N0IzOTk5RDYxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMz7oEVOoTc/5sTQxHznPi5ah MxL97Lq6Mr3swa1FPhOhsjhMFbLOOMwKzQrGm3KwqcAuCHESesSn/DmXgd8oxK6L WMUxJt/VBFGPY7LT0VXGsKmPLhjkTZwn/BGb0ZOBhN0Xa6sqj7l6W0XYCK4ZzV0e hjAMrFH9e8SRNhNgGWZFUs60odtNUqHf6P6dpjeK0I+7BLtAAYmoxyVplHQmgQbv IiGwyPX3nmtNlRwVKWcOGxLSxpAqZ3T5dhl2JCwxIYXOZ3LW5RfAsgvQtT1xTSyj WfTej/6ECV4Eb+hvieJ6nAdijjrxfV75fI2OU8jmDy74DzA5T5ahp/kyA1IfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm7FFDK4f34U6dXYvwax3s5mdYbYwHwYDVR0j BBgwFoAUJCIHdqP84IOLLyaesKtHPgXVnL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO SFMvMC8yNDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MjIwNzc2QTNGQ0UwODM4 QjJGMjY5RUIwQUI0NzNFMDVENTlDQkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejROSFMvMC8y NDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWeVA0ek1PkoqA6Fn9u6nwp+p3wf8xlf9pbg80q+4iFaQ0s9XaxNBEwsTJkzL jYwvB69cvrbkBDDtwnw+60M8SoVTYGqTmCOPaTLEiHMZy2cY5zRTAJTqyCLuJjWe pKnrN6hIcHaiJ0OGZS58GDKrNvCZzDC+UBfyVZeg0fLR97u2Gux/zvlLfJD34gWH CN2lV107cpUZSpNuq4wUgsNx35EYVQwx/O6gklSyF7dfKCJGd1+HdLdlMLb+U8/Y MsSuzqbMG3JddlSyxkIANxkKWvZN6IaGWow5gup6idpKspxqmSpxFOHgI/VBelpv bWxrPvFHqiwf4TOx4kz3dTNX7g== -----END CERTIFICATE-----Generated at Wed Nov 5 02:16:51 2025 by rpki-client