$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft File: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json) Hash identifier: UZlLbfRj+2yRzs5dGkS4+/2/ZhgeWel7IwSlO16m38g= Subject key identifier: 24:6D:DC:1B:F0:44:71:44:E4:54:14:09:2D:B0:80:81:DC:B4:A5:09 Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 Certificate issuer: /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Certificate serial: 72C70BC21C86397D38A0DD036250F8B6459EA3CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject info access: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft Manifest number: BE Signing time: Sun 19 Oct 2025 19:45:56 +0000 Manifest this update: Sun 19 Oct 2025 19:40:56 +0000 Manifest next update: Mon 20 Oct 2025 21:09:56 +0000 Files and hashes: 1: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=) 2: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=) 3: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: DI5LwmeXXVbPyF+Yun7m7WyvbCaYx22lhk0YU+nLKMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:0b:c2:1c:86:39:7d:38:a0:dd:03:62:50:f8:b6:45:9e:a3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Validity Not Before: Oct 19 19:40:56 2025 GMT Not After : Oct 20 21:09:56 2025 GMT Subject: CN=246DDC1BF0447144E45414092DB08081DCB4A509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:ff:11:8f:bf:94:f1:bf:c9:ef:94:ea:8a: e6:10:9f:b6:07:67:85:fb:ca:0d:2e:b9:7d:76:9a: 33:16:16:b3:d5:33:0e:07:66:d5:02:29:a9:c4:6e: c6:9b:e4:ab:52:ed:a1:d7:d5:b6:99:a5:49:83:02: 4f:bc:be:2b:44:7f:47:25:58:b8:b0:13:df:82:d9: 2a:f2:73:eb:92:5c:a6:6f:7c:bd:ec:54:89:bf:73: df:85:7c:67:c0:cb:b8:38:1a:2e:64:1a:2f:9d:c6: bd:8e:4d:8a:cd:46:52:9b:73:99:b1:98:ff:7e:b5: 8d:a0:a3:e4:28:68:a4:8b:e4:3a:d5:6c:61:82:9b: a5:20:e9:74:f9:50:b9:5b:ac:e9:f7:78:da:20:d5: cc:97:38:3f:04:0d:7e:f6:20:c4:08:fc:da:ae:28: b5:89:79:46:84:5c:04:00:54:65:5b:77:87:97:46: 2f:b7:05:c5:ec:b8:04:a6:24:06:26:ab:1a:ef:7d: f3:c4:5f:79:f3:2c:4e:a1:40:ab:9e:10:eb:25:9c: bc:6d:99:8d:ae:60:2a:b9:9c:16:2f:bf:5f:24:cc: ad:c5:33:7b:1d:fd:4e:55:47:24:34:fd:52:a3:30: a1:34:0d:12:e1:61:22:42:2d:65:33:ae:32:67:a3: b0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6D:DC:1B:F0:44:71:44:E4:54:14:09:2D:B0:80:81:DC:B4:A5:09 X509v3 Authority Key Identifier: keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7a:32:f2:4c:4f:53:80:22:d2:95:03:63:45:6f:06:1e:ab: 20:62:d4:20:76:ac:bc:b2:9f:fa:ec:93:0f:12:9d:fd:ab:7e: 37:c9:c2:33:b8:08:ed:33:58:d2:8e:9c:0d:95:70:e7:f2:75: f8:ef:c7:8f:99:28:aa:6b:33:85:70:9d:14:ef:34:01:d5:e2: d2:85:8e:e1:e9:bd:bc:b3:fd:e9:7e:83:79:eb:82:ec:f5:fb: e1:df:c4:36:7e:de:28:ac:a0:e3:e4:bd:e7:9b:8d:40:68:38: e9:99:fb:72:67:63:a3:05:1f:ca:ea:02:b4:62:d7:9d:c4:3c: 45:2c:af:b1:53:8b:b8:8f:83:27:e8:8b:f0:0d:bf:78:a1:f1: 12:e4:98:af:1d:ef:76:97:35:94:85:99:ec:32:94:5e:11:c7: 54:ed:33:01:31:bc:d3:27:7f:0c:2b:91:1b:3d:58:12:e8:d0: 6e:63:ef:65:de:6d:28:b7:ff:89:da:1e:c1:88:27:fd:bd:8f: 60:e8:fc:8e:20:68:61:a1:ac:b3:67:46:00:63:54:bf:53:52: aa:e9:cb:ac:0f:68:0e:4c:f0:ac:ad:59:5a:1c:b6:93:d5:40: a9:ab:2e:ab:4f:61:64:b6:b9:99:07:90:e5:f1:c8:2d:02:fb: 0d:db:94:60 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUcscLwhyGOX04oN0DYlD4tkWeo8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1 QjVBQTQwNzAeFw0yNTEwMTkxOTQwNTZaFw0yNTEwMjAyMTA5NTZaMDMxMTAvBgNV BAMTKDI0NkREQzFCRjA0NDcxNDRFNDU0MTQwOTJEQjA4MDgxRENCNEE1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/v8Rj7+U8b/J75TqiuYQn7YH Z4X7yg0uuX12mjMWFrPVMw4HZtUCKanEbsab5KtS7aHX1baZpUmDAk+8vitEf0cl WLiwE9+C2Sryc+uSXKZvfL3sVIm/c9+FfGfAy7g4Gi5kGi+dxr2OTYrNRlKbc5mx mP9+tY2go+QoaKSL5DrVbGGCm6Ug6XT5ULlbrOn3eNog1cyXOD8EDX72IMQI/Nqu KLWJeUaEXAQAVGVbd4eXRi+3BcXsuASmJAYmqxrvffPEX3nzLE6hQKueEOslnLxt mY2uYCq5nBYvv18kzK3FM3sd/U5VRyQ0/VKjMKE0DRLhYSJCLWUzrjJno7DVAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUJG3cG/BEcUTkVBQJLbCAgdy0pQkwHwYDVR0j BBgwFoAUMySh1yxcAZHaG0e4v9G8hFtapAcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ldFNMVm54eDUyWG0xdkdLdVhOazRiclBFblJHRTNWUVFFN3FVYjZFcFFK LzAvMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1QjVBQTQwNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzI0QTFENzJDNUMwMTkxREEx QjQ3QjhCRkQxQkM4NDVCNUFBNDA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2V0 U0xWbnh4NTJYbTF2R0t1WE5rNGJyUEVuUkdFM1ZRUUU3cVViNkVwUUovMC8zMzI0 QTFENzJDNUMwMTkxREExQjQ3QjhCRkQxQkM4NDVCNUFBNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA JHoy8kxPU4Ai0pUDY0VvBh6rIGLUIHasvLKf+uyTDxKd/at+N8nCM7gI7TNY0o6c DZVw5/J1+O/Hj5koqmszhXCdFO80AdXi0oWO4em9vLP96X6DeeuC7PX74d/ENn7e KKyg4+S955uNQGg46Zn7cmdjowUfyuoCtGLXncQ8RSyvsVOLuI+DJ+iL8A2/eKHx EuSYrx3vdpc1lIWZ7DKUXhHHVO0zATG80yd/DCuRGz1YEujQbmPvZd5tKLf/idoe wYgn/b2PYOj8jiBoYaGss2dGAGNUv1NSqunLrA9oDkzwrK1ZWhy2k9VAqasuq09h ZLa5mQeQ5fHILQL7DduUYA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:55 2025 by rpki-client