$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: cGdk8yb69anEwmYHYWArkEsd+pEnsg2dEfyx1DkHC8M= Subject key identifier: 4A:E2:BB:9E:08:D1:BC:90:06:11:1E:27:06:5E:C3:D0:79:FE:48:CA Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 0E894380E1D01160C0862CAB5A47F003B44DEEEC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 021B Signing time: Thu 26 Mar 2026 14:30:46 +0000 Manifest this update: Thu 26 Mar 2026 14:25:46 +0000 Manifest next update: Fri 27 Mar 2026 14:33:46 +0000 Files and hashes: 1: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) 2: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: ChOMF+Mj23Yf+XacEfg0YoSikqvZ72HHecxHZXoWOhw=) 3: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 14:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:89:43:80:e1:d0:11:60:c0:86:2c:ab:5a:47:f0:03:b4:4d:ee:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Mar 26 14:25:46 2026 GMT Not After : Mar 27 14:33:46 2026 GMT Subject: CN=4AE2BB9E08D1BC9006111E27065EC3D079FE48CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:df:a6:a7:86:ad:fe:fd:d8:2f:54:ac:ea: fe:89:2c:1a:04:95:1f:ab:54:f6:f9:f3:3a:97:d1: 18:58:8c:5c:91:51:1e:ea:95:e3:5e:64:86:fe:25: ce:8c:15:fe:64:e2:6c:b1:b7:c0:1d:8c:de:65:13: c5:2d:62:30:e3:14:44:78:4a:d8:f3:fa:a6:82:b3: 71:9a:a4:2d:c4:90:e3:e5:53:d2:fb:4d:85:b8:40: f8:e4:53:45:82:7b:e9:8c:4a:82:68:12:a7:d5:f3: 05:cd:66:bf:60:b4:65:47:55:60:3a:94:66:7f:ec: 6a:5a:cc:84:a0:a7:6a:c2:b6:88:cc:4b:a5:17:71: 2d:9f:c0:2f:81:03:1b:fa:1d:12:34:78:09:07:e1: 52:bf:d5:dc:e3:81:76:58:b6:f4:b2:92:9b:0c:42: 8e:39:e9:63:47:7c:49:d5:aa:db:7a:1a:4b:9b:6b: 87:f5:5d:e9:82:a7:0d:a1:d2:81:54:6f:68:52:5b: 65:fd:61:06:4b:25:29:98:d9:ab:c2:3a:a1:b8:7d: 52:ba:16:c1:77:a4:6e:c7:da:39:74:93:95:c0:e3: 9b:fb:c9:ee:b5:a4:10:15:44:9b:ae:24:d4:46:33: 42:f2:8f:3e:76:16:fe:36:6a:8c:a9:9b:3d:ed:f7: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E2:BB:9E:08:D1:BC:90:06:11:1E:27:06:5E:C3:D0:79:FE:48:CA X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6f:6d:33:9e:5c:4a:ea:c8:4e:b7:2a:f6:88:08:42:70:83: af:e9:90:94:e2:ea:f5:4b:43:4c:b7:bc:9d:0a:11:ef:c3:20: 9d:bd:3f:ec:81:f9:4c:63:97:b8:d0:b0:61:fe:b4:33:b4:a8: 89:e2:21:ed:b5:d2:de:03:aa:37:4e:52:b4:2d:23:ca:57:3e: 6e:c2:b5:44:1d:48:c2:df:42:cd:fc:e0:83:c4:6a:73:47:fe: 0b:1a:1d:c0:6f:20:c5:fc:4d:00:b3:c7:61:50:45:c3:6c:5c: b9:41:30:92:09:48:f1:8e:df:0c:06:fa:cb:34:70:5c:c6:29: 1b:9d:7d:91:c5:12:28:e0:95:f7:eb:f9:1a:d9:2c:c8:11:57: c2:a1:91:87:31:ea:27:3b:12:4d:ad:bf:44:da:7b:47:33:b0: 97:b9:d0:36:69:02:dc:b7:18:ee:ab:22:02:b0:c3:9e:28:d3: 9b:e0:35:be:64:17:03:36:d4:95:2a:cf:f4:bb:6d:4a:69:5f: 31:c1:56:36:38:38:1a:c8:9d:8e:34:61:49:f7:9c:b4:c7:d5: d1:fb:db:37:09:8e:66:f6:7d:cf:bc:08:a4:2d:22:5e:59:69: 92:77:fe:21:bc:39:36:37:6e:96:89:24:f4:01:fa:43:27:16: 0f:34:1b:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDolDgOHQEWDAhiyrWkfwA7RN7uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNjAzMjYxNDI1NDZaFw0yNjAzMjcxNDMzNDZaMDMxMTAvBgNV BAMTKDRBRTJCQjlFMDhEMUJDOTAwNjExMUUyNzA2NUVDM0QwNzlGRTQ4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ad+mp4at/v3YL1Ss6v6JLBoE lR+rVPb58zqX0RhYjFyRUR7qleNeZIb+Jc6MFf5k4myxt8AdjN5lE8UtYjDjFER4 Stjz+qaCs3GapC3EkOPlU9L7TYW4QPjkU0WCe+mMSoJoEqfV8wXNZr9gtGVHVWA6 lGZ/7GpazISgp2rCtojMS6UXcS2fwC+BAxv6HRI0eAkH4VK/1dzjgXZYtvSykpsM Qo456WNHfEnVqtt6Gkuba4f1XemCpw2h0oFUb2hSW2X9YQZLJSmY2avCOqG4fVK6 FsF3pG7H2jl0k5XA45v7ye61pBAVRJuuJNRGM0Lyjz52Fv42aoypmz3t939xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSuK7ngjRvJAGER4nBl7D0Hn+SMowHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQm9tM55cSurITrcq9ogIQnCDr+mQlOLq9UtDTLe8nQoR78Mgnb0/7IH5TGOX uNCwYf60M7SoieIh7bXS3gOqN05StC0jylc+bsK1RB1Iwt9Czfzgg8Rqc0f+Cxod wG8gxfxNALPHYVBFw2xcuUEwkglI8Y7fDAb6yzRwXMYpG519kcUSKOCV9+v5Gtks yBFXwqGRhzHqJzsSTa2/RNp7RzOwl7nQNmkC3LcY7qsiArDDnijTm+A1vmQXAzbU lSrP9LttSmlfMcFWNjg4GsidjjRhSfectMfV0fvbNwmOZvZ9z7wIpC0iXllpknf+ Ibw5Njdulokk9AH6QycWDzQbxA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:51:49 2026 by rpki-client