$ rpki-client -vvf rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft File: 924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft (raw, json) Hash identifier: U+5pWpnX+CZHHhk068kqATaTVj1opLVzi2LDG+dgHhQ= Subject key identifier: 06:06:98:55:FF:C1:91:8C:E7:2B:D5:DE:8B:6E:85:50:84:D3:B9:4C Authority key identifier: 92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F Certificate issuer: /CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F Certificate serial: 2A3AA7F498765A436EF064C77CCBDBF3DB2F5F61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft Manifest number: 4C Signing time: Sun 02 Nov 2025 17:33:24 +0000 Manifest this update: Sun 02 Nov 2025 17:28:24 +0000 Manifest next update: Mon 03 Nov 2025 19:43:24 +0000 Files and hashes: 1: 3137302e38312e3230382e302f32322d3332203d3e20323636343233.roa (hash: 8fnQc8JNgtLvzbmbXtpln0i96V/Z/4O/N9XTUOZBvWY=) 2: 924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl (hash: 316H0RtKbPSG0qoh1sc6uz+AFXC+djempRInbpa1pm0=) 3: 323830343a333739383a3a2f33322d313238203d3e20323636343233.roa (hash: chjI8KrTMe3udo1ajscb+NrlqP7BHB275wj8IHwcilE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3a:a7:f4:98:76:5a:43:6e:f0:64:c7:7c:cb:db:f3:db:2f:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F Validity Not Before: Nov 2 17:28:24 2025 GMT Not After : Nov 3 19:43:24 2025 GMT Subject: CN=06069855FFC1918CE72BD5DE8B6E855084D3B94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:07:f9:dc:1b:c8:70:d3:6f:d3:9a:b0:a6: 1e:b1:91:2b:46:46:39:68:9f:f9:70:4e:52:10:33: 16:5d:04:e5:b0:9b:54:62:df:25:4a:af:71:75:9a: 7e:49:72:17:18:e0:ce:41:b1:f9:bb:56:f0:b0:e8: 1b:93:75:19:c3:fa:d6:a9:01:78:2c:80:19:99:d1: 58:be:68:ac:19:45:fe:5e:c5:a0:c1:a3:1c:64:33: f6:38:db:c5:be:be:4d:7b:48:4b:c9:4a:0e:48:a8: 58:94:55:f7:13:d3:7a:60:c8:f4:ba:72:36:d7:c6: a1:6e:f7:3d:e3:82:1d:8e:84:a9:51:39:f8:f5:bd: 4c:03:6d:f7:df:77:cc:6c:51:71:77:53:cd:81:6e: ac:30:ca:f0:ad:dd:5a:99:03:59:53:ce:3b:eb:5e: 3f:f7:fc:03:5a:f1:c5:7a:14:56:41:02:3e:7e:ee: da:85:61:f7:db:a9:09:e1:25:ab:1b:89:a1:ae:fa: b4:c0:cb:cc:be:be:cc:02:42:4c:58:a1:98:14:4e: 5e:d8:cc:02:19:69:d5:98:ec:f2:79:b6:1b:ee:88: 2e:19:7c:17:9d:1a:b1:ce:10:53:ad:f7:02:ba:93: c4:5c:bc:bf:6b:70:0e:d2:8e:54:ec:54:3f:db:95: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:98:55:FF:C1:91:8C:E7:2B:D5:DE:8B:6E:85:50:84:D3:B9:4C X509v3 Authority Key Identifier: keyid:92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:de:85:98:4e:56:45:6b:e3:5e:3b:07:9e:fb:3f:f0:e0:a4: 50:d7:a1:10:b5:e0:fb:a6:c2:1f:b4:52:85:23:4d:e0:02:27: 74:bf:25:e1:5c:ae:c3:c8:63:3c:38:06:21:a8:aa:29:e3:12: 7d:b3:49:a4:f3:b6:51:20:b3:58:20:0a:de:9a:7b:9f:5c:9a: 78:54:4c:15:d1:40:c3:47:c9:bf:d3:dd:9c:d7:c7:71:4a:78: 52:30:a6:d2:b9:29:b3:b0:cb:52:b5:85:0b:8e:67:21:1c:10: 2f:5b:67:72:13:92:1a:ad:6a:18:4e:c1:14:6e:0f:25:46:42: 83:a2:43:77:a9:aa:b0:58:ed:f1:05:95:16:f0:2f:ec:f9:32: 00:11:a2:3e:83:56:43:91:67:76:ee:07:d4:6b:90:12:62:95: 79:da:47:67:0b:c9:31:9e:db:e2:87:77:f3:ef:c1:4d:3f:86: 64:2d:db:82:06:c9:a6:7b:18:a1:a8:a7:49:d6:e4:57:0f:e0: c9:0e:ba:51:1d:61:cc:8f:71:c0:03:81:54:8e:af:8c:85:0c: ee:62:a0:e7:0f:ef:00:c5:9f:ed:14:d2:30:9e:dc:e2:30:d3: d2:b0:81:5b:87:36:74:1b:65:0e:77:ab:48:e3:26:5e:ed:9a: 8a:4c:ae:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKjqn9Jh2WkNu8GTHfMvb89svX2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0QTM0MjNEMkVBRTBGOTE2Q0RENjA1RUI1RUMzMUZG MERGQjk4RjAeFw0yNTExMDIxNzI4MjRaFw0yNTExMDMxOTQzMjRaMDMxMTAvBgNV BAMTKDA2MDY5ODU1RkZDMTkxOENFNzJCRDVERThCNkU4NTUwODREM0I5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprgf53BvIcNNv05qwph6xkStG Rjlon/lwTlIQMxZdBOWwm1Ri3yVKr3F1mn5JchcY4M5Bsfm7VvCw6BuTdRnD+tap AXgsgBmZ0Vi+aKwZRf5exaDBoxxkM/Y428W+vk17SEvJSg5IqFiUVfcT03pgyPS6 cjbXxqFu9z3jgh2OhKlROfj1vUwDbfffd8xsUXF3U82BbqwwyvCt3VqZA1lTzjvr Xj/3/ANa8cV6FFZBAj5+7tqFYffbqQnhJasbiaGu+rTAy8y+vswCQkxYoZgUTl7Y zAIZadWY7PJ5thvuiC4ZfBedGrHOEFOt9wK6k8RcvL9rcA7SjlTsVD/blTO9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBgaYVf/BkYznK9Xei26FUITTuUwwHwYDVR0j BBgwFoAUkko0I9Lq4PkWzdYF617DH/DfuY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JzRTR6bmg5OFBTdHRTa1c5NGRhRWp3ZVN5RjY0QXpRRHFFREFEOFk0 YmkvMC85MjRBMzQyM0QyRUFFMEY5MTZDREQ2MDVFQjVFQzMxRkYwREZCOThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyNEEzNDIzRDJFQUUwRjkx NkNERDYwNUVCNUVDMzFGRjBERkI5OEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JzRTR6bmg5OFBTdHRTa1c5NGRhRWp3ZVN5RjY0QXpRRHFFREFEOFk0YmkvMC85 MjRBMzQyM0QyRUFFMEY5MTZDREQ2MDVFQjVFQzMxRkYwREZCOThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZt6FmE5WRWvjXjsHnvs/8OCkUNehELXg+6bCH7RShSNN4AIndL8l4Vyuw8hj PDgGIaiqKeMSfbNJpPO2USCzWCAK3pp7n1yaeFRMFdFAw0fJv9PdnNfHcUp4UjCm 0rkps7DLUrWFC45nIRwQL1tnchOSGq1qGE7BFG4PJUZCg6JDd6mqsFjt8QWVFvAv 7PkyABGiPoNWQ5Fndu4H1GuQEmKVedpHZwvJMZ7b4od38+/BTT+GZC3bggbJpnsY oainSdbkVw/gyQ66UR1hzI9xwAOBVI6vjIUM7mKg5w/vAMWf7RTSMJ7c4jDT0rCB W4c2dBtlDnerSOMmXu2aikyuRw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:21 2025 by rpki-client