$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft File: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft (raw, json) Hash identifier: HR6k1F3oj6vgEKdGxvBUwM6cJHgBuo6CyEo1ZYh1VYE= Subject key identifier: 3A:B3:E8:67:CA:C7:01:6F:28:0C:5F:87:75:2E:7C:C5:C0:5C:D4:35 Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82 Certificate issuer: /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782 Certificate serial: 28E5F2E42737F8ECBB2497E3F68183984D0F3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 00:59:01 +0000 Manifest this update: Mon 03 Nov 2025 00:54:01 +0000 Manifest next update: Tue 04 Nov 2025 03:33:01 +0000 Files and hashes: 1: 34352e3232352e382e302f32322d3234203d3e20323636393731.roa (hash: zGWGViH7td7rA46kVTE6+Y88vjDF1r+sX+Mq0/2vUdc=) 2: 323830343a343632343a3a2f33322d3438203d3e20323636393731.roa (hash: 2k3z59sIIIZSbsBKAV37RQcGmmjmnAqoXMIYJjnLyMI=) 3: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl (hash: xTRES8klBq1aAAN0crkFYLW2EcUUOY6wwjoUS49H8bA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e5:f2:e4:27:37:f8:ec:bb:24:97:e3:f6:81:83:98:4d:0f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782 Validity Not Before: Nov 3 00:54:01 2025 GMT Not After : Nov 4 03:33:01 2025 GMT Subject: CN=3AB3E867CAC7016F280C5F87752E7CC5C05CD435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:55:b6:41:74:d9:93:99:0a:be:a9:1c:fb: 19:ca:f1:7d:d9:50:2b:8e:ba:7b:e2:06:eb:28:89: bd:eb:2f:6b:29:67:06:d7:c2:df:48:26:c0:1f:15: 6f:61:cf:68:9c:a1:34:88:d4:35:fd:18:30:90:9d: 38:52:21:6f:0a:85:86:82:6f:25:b1:12:f1:de:cb: f3:a4:5d:73:2e:11:bf:d9:d7:b2:8b:26:e3:f0:c6: c4:e2:01:7f:21:96:d3:9b:34:1f:02:49:18:35:67: d3:ff:54:bc:d9:aa:c0:dd:d9:72:53:b1:95:db:26: a9:20:0e:0c:c6:96:b1:46:cb:25:4c:d6:52:c6:3b: 31:87:49:5b:b9:4b:56:a9:ea:ba:46:7b:55:07:f8: e4:a6:46:c5:79:fe:94:46:22:64:12:72:c6:05:d4: 47:9a:9c:52:d9:73:ea:19:9c:1d:8a:55:4d:3e:1e: ca:0a:f5:01:1a:46:90:80:58:be:40:16:59:7c:3c: 75:35:99:6f:21:2a:ce:a8:25:1f:ff:e3:49:30:fb: 6d:0e:b5:e6:b3:12:84:f0:89:20:2f:18:84:43:7c: b9:f7:72:8f:a9:a2:23:f2:f7:71:37:06:f9:21:dc: 8e:df:69:ef:6a:fd:69:f0:f1:87:4c:8c:46:22:d6: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:E8:67:CA:C7:01:6F:28:0C:5F:87:75:2E:7C:C5:C0:5C:D4:35 X509v3 Authority Key Identifier: keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ae:75:41:72:12:c7:3a:8b:35:e9:21:24:06:02:3e:92:20: 1f:ce:55:02:32:26:29:72:f4:7f:69:58:03:f1:ea:bc:fd:32: ad:3d:c4:21:0f:03:0a:52:4e:e3:f0:9c:f0:cb:7f:08:28:c6: e7:9f:4a:0b:b9:d9:c2:19:a5:75:b2:15:ab:b2:85:fb:98:e6: a6:db:a5:b6:a8:74:06:0f:67:5e:d2:8e:d3:2a:5c:81:44:a5: 58:bc:ee:98:b8:8c:b3:46:89:be:7a:be:4e:0e:a2:14:25:7d: 31:20:76:3f:a5:16:01:02:5f:fe:6d:0f:0d:c7:cc:31:32:c6: cd:c9:f1:e4:3c:16:80:d7:14:12:2d:8a:70:94:90:91:61:3f: f0:aa:85:00:82:29:71:58:62:1b:c0:60:8a:8c:cd:6b:85:33: c5:80:40:61:a0:84:b5:91:ac:56:99:64:f4:f5:db:6d:8c:e0: 7a:79:74:cd:7e:e6:6c:91:b4:54:23:7e:66:0d:84:b9:36:28: 57:45:ba:1b:18:1c:51:92:8d:43:74:a4:90:3d:79:fa:86:f6: 84:2f:e3:48:46:85:9b:bd:74:e8:45:a8:d0:e5:85:37:45:6f: be:d8:76:e5:54:1a:98:e8:64:b4:46:c2:45:a9:b0:5e:3a:ee: ed:a2:0a:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITKOXy5Cc3+Oy7JJfj9oGDmE0POjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyNEVCMjZCNkQ4MkUxNTY1RkZDQjFCRThCQzBDMkNCQkI1 QTgwNzgyMB4XDTI1MTEwMzAwNTQwMVoXDTI1MTEwNDAzMzMwMVowMzExMC8GA1UE AxMoM0FCM0U4NjdDQUM3MDE2RjI4MEM1Rjg3NzUyRTdDQzVDMDVDRDQzNTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQRVbZBdNmTmQq+qRz7GcrxfdlQ K466e+IG6yiJvesvaylnBtfC30gmwB8Vb2HPaJyhNIjUNf0YMJCdOFIhbwqFhoJv JbES8d7L86Rdcy4Rv9nXsosm4/DGxOIBfyGW05s0HwJJGDVn0/9UvNmqwN3ZclOx ldsmqSAODMaWsUbLJUzWUsY7MYdJW7lLVqnqukZ7VQf45KZGxXn+lEYiZBJyxgXU R5qcUtlz6hmcHYpVTT4eygr1ARpGkIBYvkAWWXw8dTWZbyEqzqglH//jSTD7bQ61 5rMShPCJIC8YhEN8ufdyj6miI/L3cTcG+SHcjt9p72r9afDxh0yMRiLWmXkCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBQ6s+hnyscBbygMX4d1LnzFwFzUNTAfBgNVHSME GDAWgBQk6ya22C4VZf/LG+i8DCy7tagHgjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8zRXhBcG83NU1HQ0R4a1Q0R0VzSDZtQVVjOWkxOUZpem9DZjJRUGZ5U3Nm RS8xLzI0RUIyNkI2RDgyRTE1NjVGRkNCMUJFOEJDMEMyQ0JCQjVBODA3ODIuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMjRFQjI2QjZEODJFMTU2NUZG Q0IxQkU4QkMwQzJDQkJCNUE4MDc4Mi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8z RXhBcG83NU1HQ0R4a1Q0R0VzSDZtQVVjOWkxOUZpem9DZjJRUGZ5U3NmRS8xLzI0 RUIyNkI2RDgyRTE1NjVGRkNCMUJFOEJDMEMyQ0JCQjVBODA3ODIubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjrnVBchLHOos16SEkBgI+kiAfzlUCMiYpcvR/aVgD8eq8/TKtPcQhDwMKUk7j 8Jzwy38IKMbnn0oLudnCGaV1shWrsoX7mOam26W2qHQGD2de0o7TKlyBRKVYvO6Y uIyzRom+er5ODqIUJX0xIHY/pRYBAl/+bQ8Nx8wxMsbNyfHkPBaA1xQSLYpwlJCR YT/wqoUAgilxWGIbwGCKjM1rhTPFgEBhoIS1kaxWmWT09dttjOB6eXTNfuZskbRU I35mDYS5NihXRbobGBxRko1DdKSQPXn6hvaEL+NIRoWbvXToRajQ5YU3RW++2Hbl VBqY6GS0RsJFqbBeOu7togoz -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:27 2025 by rpki-client