$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft File: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json) Hash identifier: jZdHubJBlpSI+1NXQU7oiNF8yR5/MBKUPihxY6yVYE8= Subject key identifier: 48:6D:B3:BD:46:4E:70:EF:1F:A5:1A:8C:79:CF:8B:96:A5:C6:E5:33 Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD Certificate issuer: /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD Certificate serial: 3539645E23CE8215EFAB6C09463FED64F8A609C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft Manifest number: 02EE Signing time: Sun 02 Nov 2025 21:01:19 +0000 Manifest this update: Sun 02 Nov 2025 20:56:19 +0000 Manifest next update: Tue 04 Nov 2025 00:07:19 +0000 Files and hashes: 1: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: QY95rbx0otw3jK6iRa3CNomny81KIDEyQXRS1G6useo=) 2: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: Z0J4eT+/Pm37ea2jwyYZIrXM8+ylfxcILtCFUN3f0nU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:39:64:5e:23:ce:82:15:ef:ab:6c:09:46:3f:ed:64:f8:a6:09:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD Validity Not Before: Nov 2 20:56:19 2025 GMT Not After : Nov 4 00:07:19 2025 GMT Subject: CN=486DB3BD464E70EF1FA51A8C79CF8B96A5C6E533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:86:75:ba:f0:c6:c0:ed:cf:4f:d7:29:53: e8:59:a2:96:b5:56:d6:34:c3:b1:24:8c:85:ce:a9: 7e:d4:d0:27:cc:8d:9f:6f:e2:22:0d:bf:a8:5f:5c: e5:0a:f8:e2:ea:4e:1f:c7:b2:54:aa:fc:a1:ee:83: ac:d0:3b:db:40:63:dc:e1:2a:14:0a:e7:73:f2:18: d2:48:d1:f6:d5:05:30:71:0c:26:0c:12:b5:eb:6b: 33:d9:b5:22:cf:64:f1:6c:7a:53:48:38:f1:69:b5: 38:58:ec:c4:e0:ef:5b:a9:76:4d:96:0a:26:59:61: 47:10:ad:b5:64:f1:ca:86:35:00:0e:a6:12:a2:d6: f4:54:d4:79:50:9d:3e:d1:59:1e:d7:92:1c:76:58: 79:f8:c6:35:50:be:ef:c0:03:f5:27:ae:a1:9a:61: de:32:c8:12:ec:7a:a4:4b:a3:33:0f:51:66:ac:a0: ba:3d:26:0c:de:a3:c8:12:6b:a4:44:5f:cb:3b:1d: 63:ca:7b:54:1c:42:74:66:05:35:aa:75:ec:6f:73: fe:b6:fc:78:fb:a4:0e:95:e3:48:a9:da:5d:8e:1f: a5:03:80:82:e5:1d:7a:a3:ae:9d:49:57:16:2b:93: 21:f7:35:66:95:26:a0:3b:2d:08:d5:89:7b:09:01: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:B3:BD:46:4E:70:EF:1F:A5:1A:8C:79:CF:8B:96:A5:C6:E5:33 X509v3 Authority Key Identifier: keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a5:8d:c2:1a:da:d8:23:e3:60:61:7c:a4:5e:7b:91:53:cd: f2:20:4a:3e:10:3a:82:33:15:8b:e1:95:c7:9f:50:99:42:7a: 4e:b9:ae:97:4c:84:d9:34:02:db:f9:c8:d9:40:69:33:5f:75: fb:b5:73:dd:e3:1c:12:c9:52:c5:78:28:64:1a:1d:7b:7b:96: fb:af:3f:64:58:0a:dd:b4:bd:e7:f0:d9:e0:39:3d:fa:9e:b9: de:36:80:b5:22:99:ea:e9:e4:ad:62:a5:6d:13:ed:0c:55:0b: c1:2a:fb:2b:5f:76:c4:ff:48:31:d3:a8:5e:f9:fe:9d:ff:bb: 84:ff:22:e0:bf:0e:22:06:ed:0b:4f:1e:6d:a6:7d:1c:83:5d: 2d:b7:fb:48:ca:60:36:08:23:4a:50:7b:0b:2d:d4:99:33:bf: 5f:00:b1:a3:cb:ff:ec:cd:a6:1f:91:13:53:15:b3:51:93:2e: 24:c9:e7:31:30:fe:65:1e:87:37:9b:a6:e4:ab:f9:d9:a9:42: c1:4e:ab:f0:c4:e9:c8:14:20:87:79:8a:b1:86:f8:dd:67:50: 99:e7:45:d7:57:83:57:f9:28:80:49:bd:c8:b0:a5:1f:2d:76: 68:2a:90:1a:50:de:5f:89:41:4d:de:20:6f:33:7e:03:6d:ae: 7a:e9:f9:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNTlkXiPOghXvq2wJRj/tZPimCcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyMjA3NzZBM0ZDRTA4MzhCMkYyNjlFQjBBQjQ3M0Uw NUQ1OUNCRDAeFw0yNTExMDIyMDU2MTlaFw0yNTExMDQwMDA3MTlaMDMxMTAvBgNV BAMTKDQ4NkRCM0JENDY0RTcwRUYxRkE1MUE4Qzc5Q0Y4Qjk2QTVDNkU1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tIZ1uvDGwO3PT9cpU+hZopa1 VtY0w7EkjIXOqX7U0CfMjZ9v4iINv6hfXOUK+OLqTh/HslSq/KHug6zQO9tAY9zh KhQK53PyGNJI0fbVBTBxDCYMErXrazPZtSLPZPFselNIOPFptThY7MTg71updk2W CiZZYUcQrbVk8cqGNQAOphKi1vRU1HlQnT7RWR7Xkhx2WHn4xjVQvu/AA/UnrqGa Yd4yyBLseqRLozMPUWasoLo9Jgzeo8gSa6REX8s7HWPKe1QcQnRmBTWqdexvc/62 /Hj7pA6V40ip2l2OH6UDgILlHXqjrp1JVxYrkyH3NWaVJqA7LQjViXsJAV4xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSG2zvUZOcO8fpRqMec+LlqXG5TMwHwYDVR0j BBgwFoAUJCIHdqP84IOLLyaesKtHPgXVnL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO SFMvMC8yNDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MjIwNzc2QTNGQ0UwODM4 QjJGMjY5RUIwQUI0NzNFMDVENTlDQkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejROSFMvMC8y NDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKWNwhra2CPjYGF8pF57kVPN8iBKPhA6gjMVi+GVx59QmUJ6Trmul0yE2TQC 2/nI2UBpM191+7Vz3eMcEslSxXgoZBode3uW+68/ZFgK3bS95/DZ4Dk9+p653jaA tSKZ6unkrWKlbRPtDFULwSr7K192xP9IMdOoXvn+nf+7hP8i4L8OIgbtC08ebaZ9 HINdLbf7SMpgNggjSlB7Cy3UmTO/XwCxo8v/7M2mH5ETUxWzUZMuJMnnMTD+ZR6H N5um5Kv52alCwU6r8MTpyBQgh3mKsYb43WdQmedF11eDV/kogEm9yLClHy12aCqQ GlDeX4lBTd4gbzN+A22ueun53Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:46 2025 by rpki-client