$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: RiPHicrDYIxxLmrn7Lxx0anei2z/wRzmv/TN3crN1wg= Subject key identifier: 70:DA:4A:AE:11:CE:8D:9C:04:BD:F9:C5:23:55:7F:49:1B:35:E2:DE Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 7757320FF1BF8831706BCC65924E487C5929475F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: 28 Signing time: Thu 18 Sep 2025 02:13:15 +0000 Manifest this update: Thu 18 Sep 2025 02:08:15 +0000 Manifest next update: Fri 19 Sep 2025 03:32:15 +0000 Files and hashes: 1: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) 2: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) 3: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: GDv36bZbB2tqFbvg5QU3SiyzKsq/RvmSLurg/rTWIik=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 03:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:57:32:0f:f1:bf:88:31:70:6b:cc:65:92:4e:48:7c:59:29:47:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Sep 18 02:08:15 2025 GMT Not After : Sep 19 03:32:15 2025 GMT Subject: CN=70DA4AAE11CE8D9C04BDF9C523557F491B35E2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:ea:4c:69:70:89:7c:f8:e3:83:2c:ca:f6: 92:14:5a:d6:1a:ef:2e:e2:91:4c:ae:f4:cb:eb:dd: 0a:b2:ef:3c:48:2f:e1:2e:84:55:73:94:9b:80:cb: 52:89:af:9e:ce:d2:b4:ac:4c:b7:b2:ba:42:a3:af: a6:ad:2a:fb:2c:ea:3d:7b:dd:6b:5c:47:90:85:7b: 98:32:a2:d5:b7:30:ee:13:06:87:ca:4f:e9:d9:4f: 91:52:40:9d:ff:e4:87:4f:ed:04:c3:2a:e3:70:0e: 45:6e:fc:b5:c7:d9:b8:b6:d0:80:1b:02:6e:6e:c0: e0:33:36:3e:e8:c0:87:0b:c0:ce:30:04:b7:04:8e: 84:0c:64:28:16:db:8f:bc:a3:25:d0:09:84:4f:85: 74:92:fa:33:36:60:45:49:81:e6:ae:2d:1c:cd:ac: 86:98:65:25:2f:14:b9:be:7e:ab:73:bd:0a:01:9e: b4:be:c5:07:da:06:45:f6:99:4f:93:21:c8:48:88: d5:22:a4:67:5a:de:01:02:91:34:2d:4b:0d:e6:da: 57:68:50:b6:11:3e:66:7d:db:95:d7:4b:af:9f:8f: 12:11:49:11:ad:63:a9:20:e9:e7:84:c7:ea:65:e3: c8:97:c6:4c:51:7a:4d:2e:d8:0d:93:8d:55:87:9c: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DA:4A:AE:11:CE:8D:9C:04:BD:F9:C5:23:55:7F:49:1B:35:E2:DE X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f8:5e:a5:8d:e0:0e:44:0a:9d:44:bf:54:d0:ff:62:d2:b7: 69:f3:ff:83:c8:16:b2:dc:9f:8a:4e:d2:cd:48:3f:53:38:f8: 20:87:e9:3d:80:b7:e8:c5:36:06:c6:a4:45:71:46:ed:40:d0: 04:69:26:e9:b1:b2:7f:2a:e4:5b:29:be:9b:6b:d4:8c:b9:f4: 99:1b:22:ff:ba:b9:c6:c5:22:f5:19:22:77:62:e7:2c:03:47: f1:66:fc:e8:68:1d:da:a4:93:10:b5:95:76:81:36:2c:7c:c0: 89:b8:7b:4c:97:5b:74:d9:e5:e8:47:23:5c:3c:19:4c:1b:a5: 22:8b:fe:2c:d4:ba:52:1f:4c:ff:e0:f4:c5:b0:5f:d3:85:52: 0c:3f:e3:f2:ca:f9:c7:e7:3c:10:2b:fd:69:3d:03:ef:d8:46: 7e:e3:22:9e:d6:4f:91:17:7a:f9:d8:c2:99:f5:2c:f1:56:f3: 09:6d:ae:4b:e8:5e:96:0c:e4:1f:8d:e6:06:19:2c:d7:59:e1: 61:91:ed:4d:3e:66:fe:da:94:5a:b8:6e:45:37:b1:9c:41:8a: a9:62:f1:71:59:0b:af:48:f0:43:17:97:0c:0e:53:f1:a0:4f: 83:50:bb:0c:b0:66:50:fe:e0:f7:9d:23:3d:7a:74:5e:39:44: 8e:74:55:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd1cyD/G/iDFwa8xlkk5IfFkpR18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTA5MTgwMjA4MTVaFw0yNTA5MTkwMzMyMTVaMDMxMTAvBgNV BAMTKDcwREE0QUFFMTFDRThEOUMwNEJERjlDNTIzNTU3RjQ5MUIzNUUyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+epMaXCJfPjjgyzK9pIUWtYa 7y7ikUyu9Mvr3Qqy7zxIL+EuhFVzlJuAy1KJr57O0rSsTLeyukKjr6atKvss6j17 3WtcR5CFe5gyotW3MO4TBofKT+nZT5FSQJ3/5IdP7QTDKuNwDkVu/LXH2bi20IAb Am5uwOAzNj7owIcLwM4wBLcEjoQMZCgW24+8oyXQCYRPhXSS+jM2YEVJgeauLRzN rIaYZSUvFLm+fqtzvQoBnrS+xQfaBkX2mU+TIchIiNUipGda3gECkTQtSw3m2ldo ULYRPmZ925XXS6+fjxIRSRGtY6kg6eeEx+pl48iXxkxRek0u2A2TjVWHnAsVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcNpKrhHOjZwEvfnFI1V/SRs14t4wHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABPhepY3gDkQKnUS/VND/YtK3afP/g8gWstyfik7SzUg/Uzj4IIfpPYC36MU2 BsakRXFG7UDQBGkm6bGyfyrkWym+m2vUjLn0mRsi/7q5xsUi9Rkid2LnLANH8Wb8 6Ggd2qSTELWVdoE2LHzAibh7TJdbdNnl6EcjXDwZTBulIov+LNS6Uh9M/+D0xbBf 04VSDD/j8sr5x+c8ECv9aT0D79hGfuMintZPkRd6+djCmfUs8VbzCW2uS+helgzk H43mBhks11nhYZHtTT5m/tqUWrhuRTexnEGKqWLxcVkLr0jwQxeXDA5T8aBPg1C7 DLBmUP7g950jPXp0XjlEjnRVkg== -----END CERTIFICATE-----Generated at Thu Sep 18 13:15:19 2025 by rpki-client