$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft File: 24C90100868CC7E5E4ADB4222503286F7BF449AA.mft (raw, json) Hash identifier: n55Mq56etauCVqbPV06d0OyAac52tlJFHZ/2Nelfw0A= Subject key identifier: 86:24:DF:52:1C:D2:A0:9B:3E:BE:68:D8:1B:AA:C5:F6:9A:21:71:24 Authority key identifier: 24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA Certificate issuer: /CN=24C90100868CC7E5E4ADB4222503286F7BF449AA Certificate serial: 65BF4A09AEDFF08138EEC879C034440835BFAACE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft Manifest number: 02E0 Signing time: Mon 20 Oct 2025 07:29:29 +0000 Manifest this update: Mon 20 Oct 2025 07:24:29 +0000 Manifest next update: Tue 21 Oct 2025 08:18:29 +0000 Files and hashes: 1: 323830343a346231343a3a2f33322d3336203d3e20323637323832.roa (hash: YepoO3AKHh52C+NKLMnz+2byTie+Z3SUdV9FD/LaTiw=) 2: 34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa (hash: XbMvb0sHDqh6I8tw7R7pOeSgv0NogUeRGWr0SWQ5A0I=) 3: 24C90100868CC7E5E4ADB4222503286F7BF449AA.crl (hash: NnY81TmGHxtOi4YU1FosRt9ioMJ8RfohjMn3z04HksQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:bf:4a:09:ae:df:f0:81:38:ee:c8:79:c0:34:44:08:35:bf:aa:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA Validity Not Before: Oct 20 07:24:29 2025 GMT Not After : Oct 21 08:18:29 2025 GMT Subject: CN=8624DF521CD2A09B3EBE68D81BAAC5F69A217124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:38:8b:3b:b6:3d:c1:b3:7c:e9:eb:45:bb: 21:c5:66:ba:6b:dd:bf:bb:aa:d7:72:00:d6:e6:97: 21:49:89:f7:97:81:41:2b:e6:fa:a3:f2:d7:00:32: 33:1d:53:fe:bd:d6:e7:1e:df:da:1f:c0:7d:ee:0e: e5:d0:a6:f0:6c:f0:03:5b:c7:99:39:02:96:eb:c5: cb:c8:d9:b1:d5:4a:a6:46:8f:e7:32:5f:f1:e3:08: 4e:26:88:e2:60:27:60:da:c5:2e:24:82:89:bf:ce: f7:18:f7:14:05:c3:c8:a1:b2:82:21:55:11:dc:c6: 5e:f6:c9:36:b0:3f:2f:0a:39:c2:27:b6:54:e8:a1: 73:c9:fa:81:86:32:ca:38:f6:86:90:ae:4b:dd:ad: c3:e4:56:21:6c:71:e5:ec:56:ec:be:ba:0e:97:e8: d0:da:88:11:18:b1:44:aa:44:4f:c4:83:8a:d2:d4: 04:06:ea:af:46:ec:10:43:c7:8a:93:79:50:2f:60: aa:92:ea:4d:9f:08:82:d9:a8:1b:54:b2:a0:cc:bf: 0a:06:8d:ed:b0:1d:e0:99:ee:5a:99:0d:07:3b:8f: 20:bf:21:d6:11:8b:aa:92:a0:59:2a:07:cb:84:1d: 56:5a:5b:f3:f5:b8:23:15:cf:1a:94:cf:ff:b0:33: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:24:DF:52:1C:D2:A0:9B:3E:BE:68:D8:1B:AA:C5:F6:9A:21:71:24 X509v3 Authority Key Identifier: keyid:24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:07:32:0f:70:31:a6:61:73:b5:b9:84:ac:cb:5c:4d:9b:2f: e6:4e:41:c9:07:c6:32:93:b4:69:59:29:94:b7:c1:95:18:c8: 70:f3:9c:bb:99:47:48:46:39:9d:f0:44:89:e6:ae:58:46:81: bf:75:cc:a8:48:c9:6d:2c:b6:88:81:91:9e:f4:94:5e:0d:5e: f7:a9:e7:f2:65:24:a7:53:43:bd:ef:a3:3e:f2:9e:cb:7f:8d: 25:d5:c2:71:1b:5e:f7:09:95:b3:9e:77:b5:b6:1a:20:6e:17: e1:77:85:c7:b5:00:a3:5f:db:52:8e:c1:0d:23:f5:97:e4:68: b0:64:97:16:64:63:58:b2:33:02:be:bc:34:28:7f:8f:81:fe: 39:a1:7d:f2:51:b9:b5:fe:59:15:3d:2d:22:47:1b:33:16:97: 3b:40:8d:56:90:ef:9a:57:76:bb:01:1a:be:93:fb:cc:92:2c: 56:ea:56:8e:9d:0a:a8:85:aa:e1:eb:84:49:90:80:b1:52:a1: f4:e2:98:da:e5:13:98:c9:74:f1:ef:60:05:9f:fa:3d:19:e2: 7a:fd:90:8d:de:aa:1d:c6:b1:77:f2:45:52:64:aa:99:46:a8: d0:3d:1e:97:b9:74:83:d1:94:c3:0c:28:ce:42:aa:a6:39:c1: 57:40:38:a9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUZb9KCa7f8IE47sh5wDRECDW/qs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDOTAxMDA4NjhDQzdFNUU0QURCNDIyMjUwMzI4NkY3 QkY0NDlBQTAeFw0yNTEwMjAwNzI0MjlaFw0yNTEwMjEwODE4MjlaMDMxMTAvBgNV BAMTKDg2MjRERjUyMUNEMkEwOUIzRUJFNjhEODFCQUFDNUY2OUEyMTcxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfDiLO7Y9wbN86etFuyHFZrpr 3b+7qtdyANbmlyFJifeXgUEr5vqj8tcAMjMdU/691uce39ofwH3uDuXQpvBs8ANb x5k5ApbrxcvI2bHVSqZGj+cyX/HjCE4miOJgJ2DaxS4kgom/zvcY9xQFw8ihsoIh VRHcxl72yTawPy8KOcIntlTooXPJ+oGGMso49oaQrkvdrcPkViFsceXsVuy+ug6X 6NDaiBEYsUSqRE/Eg4rS1AQG6q9G7BBDx4qTeVAvYKqS6k2fCILZqBtUsqDMvwoG je2wHeCZ7lqZDQc7jyC/IdYRi6qSoFkqB8uEHVZaW/P1uCMVzxqUz/+wM7DBAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUhiTfUhzSoJs+vmjYG6rF9pohcSQwHwYDVR0j BBgwFoAUJMkBAIaMx+XkrbQiJQMob3v0SaowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84VVVTR1hrTFBidkpOQ1ZuamluU1J6NEVOVzRRUXRzWk54b2YxOHFuZUhT LzEvMjRDOTAxMDA4NjhDQzdFNUU0QURCNDIyMjUwMzI4NkY3QkY0NDlBQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNEM5MDEwMDg2OENDN0U1RTRB REI0MjIyNTAzMjg2RjdCRjQ0OUFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhV VVNHWGtMUGJ2Sk5DVm5qaW5TUno0RU5XNFFRdHNaTnhvZjE4cW5lSFMvMS8yNEM5 MDEwMDg2OENDN0U1RTRBREI0MjIyNTAzMjg2RjdCRjQ0OUFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA AwcyD3AxpmFztbmErMtcTZsv5k5ByQfGMpO0aVkplLfBlRjIcPOcu5lHSEY5nfBE ieauWEaBv3XMqEjJbSy2iIGRnvSUXg1e96nn8mUkp1NDve+jPvKey3+NJdXCcRte 9wmVs553tbYaIG4X4XeFx7UAo1/bUo7BDSP1l+RosGSXFmRjWLIzAr68NCh/j4H+ OaF98lG5tf5ZFT0tIkcbMxaXO0CNVpDvmld2uwEavpP7zJIsVupWjp0KqIWq4euE SZCAsVKh9OKY2uUTmMl08e9gBZ/6PRniev2Qjd6qHcaxd/JFUmSqmUao0D0el7l0 g9GUwwwozkKqpjnBV0A4qQ== -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:01 2025 by rpki-client