$ rpki-client -vvf rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft File: 9D24A534785E862FF2DAC70BF06847337A2816FB.mft (raw, json) Hash identifier: q/EoQS3HIkeEiPRQGOCL9sXJSAiOm0JADw0dgbHWFSI= Subject key identifier: D4:F5:3F:5A:5E:11:94:1B:23:C7:7B:50:53:58:A4:60:57:4C:8D:F3 Authority key identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB Certificate issuer: /CN=9D24A534785E862FF2DAC70BF06847337A2816FB Certificate serial: 3AC2BB554D7C133ECB5E6177E737D02D3236D12D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 20:34:58 +0000 Manifest this update: Mon 03 Nov 2025 20:29:58 +0000 Manifest next update: Tue 04 Nov 2025 22:33:58 +0000 Files and hashes: 1: 9D24A534785E862FF2DAC70BF06847337A2816FB.crl (hash: fujRBYN9yw5nytDmPQfaFaxGv2ko5w8BX6y77oEjzDc=) 2: 3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa (hash: PwoUsAJev6eSGpJhH8r4RMVtPXYw4/MXxRpUUne9aoo=) 3: 323830343a366231343a3a2f33322d3336203d3e20323730333736.roa (hash: goyqg9XLzjSyt1Nj/jZlhroqHslipMCw33oUGSDwgcY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 22:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c2:bb:55:4d:7c:13:3e:cb:5e:61:77:e7:37:d0:2d:32:36:d1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D24A534785E862FF2DAC70BF06847337A2816FB Validity Not Before: Nov 3 20:29:58 2025 GMT Not After : Nov 4 22:33:58 2025 GMT Subject: CN=D4F53F5A5E11941B23C77B505358A460574C8DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:fc:55:e5:7a:64:7d:6b:9e:e0:2b:68:cf: 73:ad:4f:8a:9e:b0:d5:ad:79:29:96:dc:da:11:d6: a7:56:6d:79:65:5e:4d:57:e5:37:b6:ee:75:92:bb: d6:5b:0f:9a:67:44:f4:63:b1:d2:88:15:0f:ee:cd: 14:40:20:d8:e4:d9:4e:58:f3:35:86:85:68:e6:da: 6a:a1:b1:6f:ea:a3:b2:8b:51:4f:28:ca:0d:e5:d3: 42:2f:ba:03:19:16:8f:05:5c:46:46:80:48:14:c5: 82:20:67:76:6c:99:4f:c9:b3:d5:44:cd:78:cb:f1: c3:2d:09:b0:67:0f:e3:d9:40:29:5a:5c:e1:78:79: 74:7f:da:53:2b:48:e2:48:ea:a5:b1:07:6d:35:61: db:08:f7:f9:2d:2e:88:40:c2:36:9d:87:bf:0d:fa: 86:6d:28:63:51:14:ff:99:b0:e2:8f:26:26:1a:57: 8b:b9:e6:87:56:ec:5a:8e:47:69:c1:9d:29:be:d9: 12:f2:90:e7:f2:3b:90:23:e2:76:5b:3d:75:9d:c7: 07:14:a4:4d:55:04:49:88:16:9c:08:67:e6:31:f4: 56:69:e6:72:3c:e1:82:98:29:c3:9e:99:7e:95:bb: e5:c3:e4:99:6b:a8:07:12:ad:69:e0:3e:d4:71:a6: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F5:3F:5A:5E:11:94:1B:23:C7:7B:50:53:58:A4:60:57:4C:8D:F3 X509v3 Authority Key Identifier: keyid:9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5c:2b:64:f1:07:46:27:35:13:43:95:85:ba:ae:c8:70:7a: eb:51:b7:8f:aa:ad:7a:e6:b5:05:de:e8:8b:2d:17:66:65:28: 9f:23:d3:6a:c5:c1:de:98:d2:8e:36:bb:17:7a:46:12:35:c0: 1c:5e:bc:b4:d8:25:dc:ea:24:6f:98:18:7c:d7:fa:f3:c7:d2: f1:dc:42:6b:bf:31:f1:4b:3e:4d:56:fd:a6:3b:14:90:50:16: 02:72:5e:47:61:bb:81:03:66:1e:86:ba:ae:15:4a:c9:74:b9: e8:c9:9d:46:fb:4f:8f:ed:39:81:8d:5c:92:10:97:07:96:b7: a8:a1:85:8c:6c:d3:1f:72:78:10:09:fb:84:4b:0c:b3:02:4f: 1c:ce:8f:86:fd:f4:50:bc:1f:69:f3:cc:58:cc:1d:d8:be:de: 24:8c:4f:c3:8c:84:fc:83:fb:a6:bf:b8:5d:ce:7e:b0:d0:f7: 41:e9:2f:63:a3:4c:87:7a:af:c2:83:8d:36:0b:d5:8f:ee:ba: 94:44:f4:f6:1b:7a:5a:a3:45:cf:26:5b:c6:59:39:31:64:77: 83:fa:5d:58:2a:56:d5:58:b9:d8:c4:be:fa:91:4f:46:b3:10: 3e:84:04:17:c5:27:b6:7e:ca:11:2b:38:6d:a7:08:e4:43:d7: 8a:68:71:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOsK7VU18Ez7LXmF35zfQLTI20S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNEE1MzQ3ODVFODYyRkYyREFDNzBCRjA2ODQ3MzM3 QTI4MTZGQjAeFw0yNTExMDMyMDI5NThaFw0yNTExMDQyMjMzNThaMDMxMTAvBgNV BAMTKEQ0RjUzRjVBNUUxMTk0MUIyM0M3N0I1MDUzNThBNDYwNTc0QzhERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJfxV5XpkfWue4Ctoz3OtT4qe sNWteSmW3NoR1qdWbXllXk1X5Te27nWSu9ZbD5pnRPRjsdKIFQ/uzRRAINjk2U5Y 8zWGhWjm2mqhsW/qo7KLUU8oyg3l00IvugMZFo8FXEZGgEgUxYIgZ3ZsmU/Js9VE zXjL8cMtCbBnD+PZQClaXOF4eXR/2lMrSOJI6qWxB201YdsI9/ktLohAwjadh78N +oZtKGNRFP+ZsOKPJiYaV4u55odW7FqOR2nBnSm+2RLykOfyO5Aj4nZbPXWdxwcU pE1VBEmIFpwIZ+Yx9FZp5nI84YKYKcOemX6Vu+XD5JlrqAcSrWngPtRxpjm7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1PU/Wl4RlBsjx3tQU1ikYFdMjfMwHwYDVR0j BBgwFoAUnSSlNHhehi/y2scL8GhHM3ooFvswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkJYbWdwbmQ2ZXh5WjhHajM5a1RkYTRnYndiSmdKSHpZdVV6NXU4VjZE YncvMS85RDI0QTUzNDc4NUU4NjJGRjJEQUM3MEJGMDY4NDczMzdBMjgxNkZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMjRBNTM0Nzg1RTg2MkZG MkRBQzcwQkYwNjg0NzMzN0EyODE2RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkJYbWdwbmQ2ZXh5WjhHajM5a1RkYTRnYndiSmdKSHpZdVV6NXU4VjZEYncvMS85 RDI0QTUzNDc4NUU4NjJGRjJEQUM3MEJGMDY4NDczMzdBMjgxNkZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa1wrZPEHRic1E0OVhbquyHB661G3j6qteua1Bd7oiy0XZmUonyPTasXB3pjS jja7F3pGEjXAHF68tNgl3Ookb5gYfNf688fS8dxCa78x8Us+TVb9pjsUkFAWAnJe R2G7gQNmHoa6rhVKyXS56MmdRvtPj+05gY1ckhCXB5a3qKGFjGzTH3J4EAn7hEsM swJPHM6Phv30ULwfafPMWMwd2L7eJIxPw4yE/IP7pr+4Xc5+sND3QekvY6NMh3qv woONNgvVj+66lET09ht6WqNFzyZbxlk5MWR3g/pdWCpW1Vi52MS++pFPRrMQPoQE F8Untn7KESs4bacI5EPXimhx0w== -----END CERTIFICATE-----Generated at Tue Nov 4 00:29:17 2025 by rpki-client