$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: IFJAdsqFXLbehpz2R+3E/g23ZDgHRwZLaTYZftpeK1g= Subject key identifier: 87:B9:AA:06:C3:FE:15:57:0D:19:25:54:34:3A:6E:6C:C1:4D:74:99 Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 5D4BABE8547885DD27A30F21FE20ECE19F323573 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 022D Signing time: Wed 08 Apr 2026 20:38:19 +0000 Manifest this update: Wed 08 Apr 2026 20:33:19 +0000 Manifest next update: Thu 09 Apr 2026 22:04:19 +0000 Files and hashes: 1: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: /I16wXc+URZin4PzXzOL4i5bAKu9hV9AHMGs3aCHUBM=) 2: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) 3: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 22:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:ab:e8:54:78:85:dd:27:a3:0f:21:fe:20:ec:e1:9f:32:35:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Apr 8 20:33:19 2026 GMT Not After : Apr 9 22:04:19 2026 GMT Subject: CN=87B9AA06C3FE15570D192554343A6E6CC14D7499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:95:7e:ad:6d:ae:ed:44:82:6d:e0:53:75: 2c:55:76:64:e9:90:e2:f8:26:46:18:60:55:3a:f6: 40:ac:70:97:2f:61:99:30:34:74:35:c2:98:c9:b4: 1a:36:51:b0:a6:06:d2:9b:66:0c:b1:24:28:e6:a2: 19:d8:29:ed:72:68:2d:09:ad:27:a9:d5:a8:19:18: 40:ef:a8:52:5e:5f:e9:10:85:bb:a1:5d:fb:3d:41: f7:30:9a:a1:05:20:44:7e:75:4c:4f:e8:b8:38:e1: f7:c0:45:b4:99:4e:07:77:80:48:75:79:2d:35:31: 16:cc:36:91:02:73:ee:ba:03:91:0e:18:b4:4d:10: 7b:2a:90:b5:f8:a6:34:8d:0d:5e:78:45:e0:44:0b: 4a:40:d2:71:df:48:77:03:bc:a6:68:7a:2c:27:ad: d6:4f:e2:48:ed:df:9c:50:5c:24:8d:ba:af:92:ff: ee:18:1a:1e:b1:2f:1b:1c:23:43:15:43:2a:7d:8f: f7:98:f7:60:6f:65:f6:2c:b8:85:04:24:5f:4c:72: 35:6e:89:8a:c1:f7:31:5a:b4:4f:72:a8:f4:64:d5: df:c3:5f:23:06:6d:b7:00:c7:f2:d1:ab:b0:c8:0d: 83:d0:8f:75:d8:f4:a9:b1:1b:aa:ed:1d:26:6a:48: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:AA:06:C3:FE:15:57:0D:19:25:54:34:3A:6E:6C:C1:4D:74:99 X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:43:0c:2c:bb:60:ae:8f:c7:52:30:63:b0:ce:ae:4f:e0:fb: 9f:d4:24:1f:a2:91:99:9c:be:77:91:2f:47:6d:33:ee:8e:fc: 55:f9:98:81:33:ce:aa:e4:e3:ad:64:ae:32:26:c2:61:33:49: 45:48:5d:0c:b5:65:c2:de:37:6d:b3:06:3d:02:93:ae:5d:7a: a6:10:66:52:6e:b5:87:ba:31:b4:ab:2f:86:0f:c1:0a:47:83: db:a8:59:92:cc:9a:92:9b:4f:eb:f7:05:53:8f:3e:5b:e7:d3: c5:a8:aa:a5:70:55:02:34:7a:5e:25:76:8e:fe:5e:88:36:74: d2:a0:b2:9b:7d:46:84:54:2f:9d:03:50:fa:8c:42:25:df:52: b5:a1:38:df:bd:00:66:56:ea:4c:3a:47:23:cf:0c:c4:3d:ed: 88:87:9b:6d:9c:9a:20:17:d5:1a:20:15:5c:06:d4:e5:11:30: bc:55:5c:b3:ac:18:e6:44:4c:24:68:2b:54:11:70:3e:14:09: 1b:a9:81:f4:5c:8e:37:7c:f4:c5:06:8d:39:4a:85:6e:40:70: de:0a:fb:47:9b:67:34:7c:6f:eb:7a:dd:59:8b:72:fa:9c:b0: 4f:07:4b:3b:35:3c:83:73:3a:49:9f:e7:5e:60:8a:33:be:e0: 01:ae:29:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXUur6FR4hd0now8h/iDs4Z8yNXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNjA0MDgyMDMzMTlaFw0yNjA0MDkyMjA0MTlaMDMxMTAvBgNV BAMTKDg3QjlBQTA2QzNGRTE1NTcwRDE5MjU1NDM0M0E2RTZDQzE0RDc0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCZV+rW2u7USCbeBTdSxVdmTp kOL4JkYYYFU69kCscJcvYZkwNHQ1wpjJtBo2UbCmBtKbZgyxJCjmohnYKe1yaC0J rSep1agZGEDvqFJeX+kQhbuhXfs9QfcwmqEFIER+dUxP6Lg44ffARbSZTgd3gEh1 eS01MRbMNpECc+66A5EOGLRNEHsqkLX4pjSNDV54ReBEC0pA0nHfSHcDvKZoeiwn rdZP4kjt35xQXCSNuq+S/+4YGh6xLxscI0MVQyp9j/eY92BvZfYsuIUEJF9McjVu iYrB9zFatE9yqPRk1d/DXyMGbbcAx/LRq7DIDYPQj3XY9KmxG6rtHSZqSGA5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh7mqBsP+FVcNGSVUNDpubMFNdJkwHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANEMMLLtgro/HUjBjsM6uT+D7n9QkH6KRmZy+d5EvR20z7o78VfmYgTPOquTj rWSuMibCYTNJRUhdDLVlwt43bbMGPQKTrl16phBmUm61h7oxtKsvhg/BCkeD26hZ ksyakptP6/cFU48+W+fTxaiqpXBVAjR6XiV2jv5eiDZ00qCym31GhFQvnQNQ+oxC Jd9StaE4370AZlbqTDpHI88MxD3tiIebbZyaIBfVGiAVXAbU5REwvFVcs6wY5kRM JGgrVBFwPhQJG6mB9FyON3z0xQaNOUqFbkBw3gr7R5tnNHxv63rdWYty+pywTwdL OzU8g3M6SZ/nXmCKM77gAa4pXQ== -----END CERTIFICATE-----Generated at Thu Apr 9 14:32:33 2026 by rpki-client