$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft File: 24DA1210F429D91717494C8CC3BF85882918C64A.mft (raw, json) Hash identifier: lMyfQ1NFdXSMuX5DccH9G5MVi8GX9dRJEnl3C7+vycg= Subject key identifier: 36:C4:05:E8:6E:A0:5F:F9:CA:22:C6:74:85:97:3E:B0:33:1C:39:63 Authority key identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A Certificate issuer: /CN=24DA1210F429D91717494C8CC3BF85882918C64A Certificate serial: 378CD499A84A17936583337059FA2DC26060A0D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft Manifest number: 58 Signing time: Mon 03 Nov 2025 10:12:59 +0000 Manifest this update: Mon 03 Nov 2025 10:07:59 +0000 Manifest next update: Tue 04 Nov 2025 10:53:59 +0000 Files and hashes: 1: 3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa (hash: uiRXmYyaZnyGUKLQ5O4V1lbbD9LHclhNzx6GlKrNEXo=) 2: 24DA1210F429D91717494C8CC3BF85882918C64A.crl (hash: 1D56hnycOw+TTQwsOVWI9P1ji/hIFpf6oEtJIDBZVdc=) 3: 323830343a323463303a3a2f33322d313238203d3e20323632323930.roa (hash: iib8Ej5DM/IZ6Qi660/twgY7+AlM+uG5yZlC1F5qXaU=) 4: 3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa (hash: StEIH8HAyQjRAJHv8B6e6jK9OoBgrQ8iw78Xwgfs5Jo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8c:d4:99:a8:4a:17:93:65:83:33:70:59:fa:2d:c2:60:60:a0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DA1210F429D91717494C8CC3BF85882918C64A Validity Not Before: Nov 3 10:07:59 2025 GMT Not After : Nov 4 10:53:59 2025 GMT Subject: CN=36C405E86EA05FF9CA22C67485973EB0331C3963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:85:55:65:1d:7d:9c:91:00:26:25:0b:a1:8b: 17:c9:73:c1:3a:b0:12:ff:0f:2f:db:22:fb:b6:7a: f1:3f:96:e6:85:07:8c:5f:58:8a:c5:05:6d:5f:91: a7:b1:30:f5:cc:e7:d9:ce:60:f0:ca:68:da:09:e9: c1:aa:59:06:ee:1a:65:e4:d0:cc:51:70:a5:f1:a4: fd:7f:f3:1f:fd:73:53:28:8b:20:01:75:0a:54:f1: 69:bf:5b:f3:49:6c:c8:68:94:cb:d6:2e:0e:16:59: 1e:0e:88:fe:fc:c8:ad:0c:e5:77:01:58:98:92:c6: 3c:6a:f2:53:c3:fc:88:25:d1:dd:da:8a:71:1f:b4: 85:89:1b:33:c8:03:73:0b:bc:06:de:ee:ae:80:28: 18:74:1d:db:4e:d7:f3:00:00:11:b5:f4:fe:30:e1: f4:f4:71:8c:c0:7a:c8:e6:bb:56:53:02:26:f3:e7: c5:8f:23:93:05:4f:fc:33:dd:aa:46:b5:e2:76:73: d6:cf:80:fb:69:cf:c4:ce:00:e8:b6:12:aa:af:2b: be:2f:ea:78:c5:89:cd:67:c3:5d:e0:73:10:e4:1c: 4c:17:7a:fd:4f:b7:75:c7:56:f7:2b:79:88:79:e4: 3a:71:2d:93:dd:5d:f3:e3:73:16:58:4b:39:85:cc: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C4:05:E8:6E:A0:5F:F9:CA:22:C6:74:85:97:3E:B0:33:1C:39:63 X509v3 Authority Key Identifier: keyid:24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c1:e9:d7:76:d9:2c:e3:a0:b6:10:33:92:16:0a:c5:e2:d6: fe:5a:5a:36:4d:fc:44:f0:fe:2a:aa:72:88:0b:27:d5:e5:10: 9e:6e:e1:24:44:4c:e3:8c:1a:95:61:1a:03:fd:29:9d:81:34: 53:8a:52:ec:80:9c:22:2c:49:d1:61:af:6c:b6:09:9c:00:fc: 1e:b0:a8:f0:db:5f:2e:f5:21:43:b4:76:18:11:b8:db:77:fa: b2:65:04:fa:c9:85:b9:b8:d4:76:f0:33:e6:49:44:1a:e8:4a: 4b:ac:ad:1b:c7:6d:e8:44:d0:ff:b6:13:5e:24:8c:7e:4e:16: d5:3c:9b:39:83:fd:a6:e8:ed:98:f7:58:a7:f0:ec:3b:2b:4e: 81:e5:3e:1d:98:7a:8a:03:5a:ba:10:7b:9a:72:76:fd:82:8f: a9:f6:1c:de:22:65:40:bb:75:31:04:e2:eb:42:e1:5d:c0:90: 1a:1a:e2:f1:71:6e:a6:2b:9f:4c:e1:7f:6a:9e:f2:ef:f7:84: 7a:d6:3c:c1:a4:a6:04:6c:1f:af:2f:6a:9f:1e:42:9d:e0:83: 87:74:31:ec:d0:6c:61:50:ff:b4:07:4a:90:6c:a8:b6:1c:99: df:93:e5:4f:32:de:a8:5c:ee:21:37:60:62:19:53:f6:45:bb: 9c:df:88:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN4zUmahKF5NlgzNwWfotwmBgoNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjREQTEyMTBGNDI5RDkxNzE3NDk0QzhDQzNCRjg1ODgy OTE4QzY0QTAeFw0yNTExMDMxMDA3NTlaFw0yNTExMDQxMDUzNTlaMDMxMTAvBgNV BAMTKDM2QzQwNUU4NkVBMDVGRjlDQTIyQzY3NDg1OTczRUIwMzMxQzM5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8hVVlHX2ckQAmJQuhixfJc8E6 sBL/Dy/bIvu2evE/luaFB4xfWIrFBW1fkaexMPXM59nOYPDKaNoJ6cGqWQbuGmXk 0MxRcKXxpP1/8x/9c1MoiyABdQpU8Wm/W/NJbMholMvWLg4WWR4OiP78yK0M5XcB WJiSxjxq8lPD/Igl0d3ainEftIWJGzPIA3MLvAbe7q6AKBh0HdtO1/MAABG19P4w 4fT0cYzAesjmu1ZTAibz58WPI5MFT/wz3apGteJ2c9bPgPtpz8TOAOi2EqqvK74v 6njFic1nw13gcxDkHEwXev1Pt3XHVvcreYh55DpxLZPdXfPjcxZYSzmFzGwVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNsQF6G6gX/nKIsZ0hZc+sDMcOWMwHwYDVR0j BBgwFoAUJNoSEPQp2RcXSUyMw7+FiCkYxkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVi cG4vMC8yNERBMTIxMEY0MjlEOTE3MTc0OTRDOENDM0JGODU4ODI5MThDNjRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0REExMjEwRjQyOUQ5MTcx NzQ5NEM4Q0MzQkY4NTg4MjkxOEM2NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVicG4vMC8y NERBMTIxMEY0MjlEOTE3MTc0OTRDOENDM0JGODU4ODI5MThDNjRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa8Hp13bZLOOgthAzkhYKxeLW/lpaNk38RPD+KqpyiAsn1eUQnm7hJERM44wa lWEaA/0pnYE0U4pS7ICcIixJ0WGvbLYJnAD8HrCo8NtfLvUhQ7R2GBG423f6smUE +smFubjUdvAz5klEGuhKS6ytG8dt6ETQ/7YTXiSMfk4W1TybOYP9pujtmPdYp/Ds OytOgeU+HZh6igNauhB7mnJ2/YKPqfYc3iJlQLt1MQTi60LhXcCQGhri8XFupiuf TOF/ap7y7/eEetY8waSmBGwfry9qnx5CneCDh3Qx7NBsYVD/tAdKkGyothyZ35Pl TzLeqFzuITdgYhlT9kW7nN+IMQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:18 2025 by rpki-client