$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: D8uMeFwZKRvjWN8XvEvyRTGZBiI4rKeaCL26lA+QScA= Subject key identifier: 82:89:DA:02:C0:C6:A1:CF:60:FF:A9:19:36:11:45:F6:86:11:00:6E Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 44BF2CCBF1B132F9F6E75113A7E879BF02429C1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: FB Signing time: Wed 20 Aug 2025 10:32:05 +0000 Manifest this update: Wed 20 Aug 2025 10:27:05 +0000 Manifest next update: Thu 21 Aug 2025 12:45:05 +0000 Files and hashes: 1: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: 9BwqZnsEEh2FpNZBDK8YGurmPBJp/jCYgF0mfb7m+as=) 2: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) 3: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 12:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bf:2c:cb:f1:b1:32:f9:f6:e7:51:13:a7:e8:79:bf:02:42:9c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Aug 20 10:27:05 2025 GMT Not After : Aug 21 12:45:05 2025 GMT Subject: CN=8289DA02C0C6A1CF60FFA919361145F68611006E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:43:a9:19:2b:a9:5d:c4:7a:63:5a:8e:6e: 2f:3d:7b:37:1e:cd:b1:76:77:c3:16:fd:c7:df:95: 56:fe:6f:29:f5:9c:9b:89:21:c7:5e:c4:72:bc:f2: c9:94:a7:5a:88:4f:b7:1d:f1:6b:6e:63:12:34:70: 3e:95:ae:56:60:67:09:cc:30:c8:5a:0e:88:fe:4e: e1:02:a9:38:89:3b:ff:6b:43:f5:9c:1b:81:09:5e: 2b:0d:b7:65:52:a3:d0:e1:05:ee:53:fb:bb:80:07: 77:a9:8e:7a:6f:47:dd:b3:f2:fb:16:15:6f:61:1d: 51:22:1f:5d:48:41:af:6e:d3:42:24:39:17:d2:4c: ca:db:73:58:bc:90:8d:69:90:38:52:86:73:8c:f8: 50:9b:a4:28:34:3f:33:27:14:70:2c:a3:01:c2:74: b2:48:fc:9d:d0:27:fc:2f:ad:c4:c3:f7:2b:10:d2: aa:29:95:fa:6e:12:2c:b3:0e:26:c9:f1:04:4a:18: b9:b4:ed:06:97:56:9a:ee:ec:da:d4:cd:5c:43:f9: a3:2a:71:d9:58:37:24:11:e0:76:6a:2b:7b:a5:ce: da:c7:a0:6d:b6:cb:d4:61:37:62:e1:51:90:8c:b3: 4e:cb:0b:f4:62:64:f2:ae:28:6c:eb:99:7e:76:ad: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:89:DA:02:C0:C6:A1:CF:60:FF:A9:19:36:11:45:F6:86:11:00:6E X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:12:97:39:20:15:48:5f:88:0b:21:37:68:4a:b1:c5:74:ae: 51:a0:3d:54:21:9d:b3:e2:4f:7a:90:2f:cc:30:b1:9b:5b:83: b2:e0:04:b9:f4:a7:d9:8f:9f:9f:6f:42:09:8e:b8:07:0b:af: 07:99:77:c7:c6:af:30:05:f4:3d:31:c8:62:a1:22:30:d6:cc: 58:10:bf:39:27:e9:af:08:7b:2d:eb:86:72:f0:af:38:c8:23: 0f:ad:67:68:89:5e:18:9f:95:45:bc:61:17:f7:6e:9e:ae:61: 32:6b:e5:08:67:41:1b:f1:7a:f7:c5:60:0a:db:11:8b:53:a5: e4:53:85:2a:83:aa:62:f1:a8:84:91:84:dd:9b:61:df:3e:4f: 19:66:dd:7d:b7:f0:62:25:09:b5:39:79:3f:db:f9:b3:91:45: e0:3e:bc:39:c6:f0:85:d0:b6:e5:f6:30:7b:e3:28:99:0b:c0: 1f:5a:52:bc:47:30:80:40:07:67:47:1d:5e:4d:5d:6d:a9:e8: 4c:ee:29:50:e4:d9:3e:b9:67:99:5a:01:01:b5:44:05:d9:f5: 40:85:76:17:21:50:22:e8:3e:90:79:7d:44:e8:0c:ce:19:a7: 0c:07:1e:4e:f6:f7:ac:47:67:31:a8:60:ff:9c:4c:d9:92:f6: 56:f2:3b:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURL8sy/GxMvn251ETp+h5vwJCnBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNTA4MjAxMDI3MDVaFw0yNTA4MjExMjQ1MDVaMDMxMTAvBgNV BAMTKDgyODlEQTAyQzBDNkExQ0Y2MEZGQTkxOTM2MTE0NUY2ODYxMTAwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmP0OpGSupXcR6Y1qObi89ezce zbF2d8MW/cfflVb+byn1nJuJIcdexHK88smUp1qIT7cd8WtuYxI0cD6VrlZgZwnM MMhaDoj+TuECqTiJO/9rQ/WcG4EJXisNt2VSo9DhBe5T+7uAB3epjnpvR92z8vsW FW9hHVEiH11IQa9u00IkORfSTMrbc1i8kI1pkDhShnOM+FCbpCg0PzMnFHAsowHC dLJI/J3QJ/wvrcTD9ysQ0qoplfpuEiyzDibJ8QRKGLm07QaXVpru7NrUzVxD+aMq cdlYNyQR4HZqK3ulztrHoG22y9RhN2LhUZCMs07LC/RiZPKuKGzrmX52rV/PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgonaAsDGoc9g/6kZNhFF9oYRAG4wHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAORKXOSAVSF+ICyE3aEqxxXSuUaA9VCGds+JPepAvzDCxm1uDsuAEufSn2Y+f n29CCY64BwuvB5l3x8avMAX0PTHIYqEiMNbMWBC/OSfprwh7LeuGcvCvOMgjD61n aIleGJ+VRbxhF/dunq5hMmvlCGdBG/F698VgCtsRi1Ol5FOFKoOqYvGohJGE3Zth 3z5PGWbdfbfwYiUJtTl5P9v5s5FF4D68OcbwhdC25fYwe+MomQvAH1pSvEcwgEAH Z0cdXk1dbanoTO4pUOTZPrlnmVoBAbVEBdn1QIV2FyFQIug+kHl9ROgMzhmnDAce Tvb3rEdnMahg/5xM2ZL2VvI7fQ== -----END CERTIFICATE-----Generated at Wed Aug 20 16:26:47 2025 by rpki-client