
$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json)
Hash identifier: bTy5fLfUY11f8gjRfi0zNLN2pK5JqLssBCfVyWM0dj0=
Subject key identifier: 2F:52:59:23:C0:A3:7F:5C:71:64:C0:0E:B3:7A:BF:90:3D:D9:47:CD
Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Certificate serial: 77243141505CD27F3A28743997A0C7EA794D39AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
Manifest number: 0172
Signing time: Sun 24 May 2026 11:03:19 +0000
Manifest this update: Sun 24 May 2026 10:58:19 +0000
Manifest next update: Mon 25 May 2026 12:12:19 +0000
Files and hashes: 1: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=)
2: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=)
3: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: P0Do0ohssR4+8e6QQ4Rm+H5n1mBXV7SxOWTc4kw2ygQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:24:31:41:50:5c:d2:7f:3a:28:74:39:97:a0:c7:ea:79:4d:39:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Validity
Not Before: May 24 10:58:19 2026 GMT
Not After : May 25 12:12:19 2026 GMT
Subject: CN=2F525923C0A37F5C7164C00EB37ABF903DD947CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:ad:5a:ec:76:53:79:62:43:21:03:fc:43:
54:98:f2:c8:ea:8b:0b:47:d6:7e:36:fe:aa:33:58:
49:96:93:42:46:27:62:69:fc:8f:f6:d4:0a:c5:9b:
92:e0:50:1f:6d:cd:7a:d6:04:b0:9e:89:7c:c5:26:
9b:99:5a:67:fd:c8:79:cb:ec:42:01:70:02:2a:95:
d5:e6:be:dd:42:42:03:92:8a:45:85:47:86:c9:1e:
86:64:f8:12:f7:44:85:54:26:dd:9b:37:1e:ad:e2:
a6:a1:85:f5:45:5a:37:29:a0:29:08:8f:59:b3:a2:
e1:fd:26:11:79:9d:11:c5:d8:38:22:90:5e:7c:4b:
c5:df:a2:af:83:25:aa:99:8b:cf:6a:ab:4c:5f:8d:
21:ef:45:6b:96:74:45:74:f4:ab:4a:67:5d:49:6f:
19:79:e9:f0:67:c5:ef:db:3f:fb:5a:5e:d6:49:4a:
c3:df:5b:25:59:33:2a:d6:59:23:05:42:62:45:1b:
46:0f:b0:b0:8a:ca:9e:7d:9d:1b:88:08:f3:e7:89:
68:55:b2:f7:c9:a5:cb:af:c5:f3:80:ce:85:8a:ee:
e4:02:b5:17:56:73:b7:93:15:b2:e8:a9:aa:3a:f1:
8c:7d:a8:a5:3f:d9:82:2d:90:6e:da:50:61:e4:4d:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:59:23:C0:A3:7F:5C:71:64:C0:0E:B3:7A:BF:90:3D:D9:47:CD
X509v3 Authority Key Identifier:
keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:28:19:d4:32:37:96:84:51:b8:84:52:7e:1b:5a:5a:c1:a9:
8c:a0:04:ed:65:ee:a8:d5:81:41:2b:2b:44:03:90:d8:09:3a:
ec:1f:10:ad:4d:c3:c2:34:fb:68:6b:3b:02:38:74:a4:60:8d:
48:89:39:e8:b0:ca:27:f5:89:d1:9c:85:52:33:bf:83:28:76:
6f:68:e6:46:a3:0d:85:24:0b:18:70:a3:36:79:ac:05:df:ce:
2e:00:02:13:01:81:e4:5b:af:3f:ec:bc:f3:44:28:0d:fe:ec:
3e:db:a4:18:8c:2d:01:fb:78:43:f9:2a:3d:0f:44:64:c6:24:
f0:ef:90:c5:38:91:fe:51:b0:2c:80:24:81:d2:ff:f8:b1:07:
d2:cb:18:60:61:20:53:b1:66:d5:b0:e6:3d:a8:97:03:33:a3:
31:b7:76:99:39:30:51:23:a9:fb:8a:b4:02:0d:0c:b9:2a:bd:
dc:94:c0:0a:9a:7f:fb:1c:61:b4:9c:54:82:f8:c8:5b:d3:41:
22:f4:6f:d5:03:fb:06:b9:5b:97:44:c9:50:19:ba:b9:64:a9:
ed:6d:b6:fe:68:b9:4c:fa:6b:de:6e:de:e5:06:70:c1:a4:62:
08:aa:b6:8c:fd:fb:5c:90:88:16:3b:8e:52:d5:11:18:0a:84:
dc:5c:e0:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdyQxQVBc0n86KHQ5l6DH6nlNOaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4
REEyNUJFMDAeFw0yNjA1MjQxMDU4MTlaFw0yNjA1MjUxMjEyMTlaMDMxMTAvBgNV
BAMTKDJGNTI1OTIzQzBBMzdGNUM3MTY0QzAwRUIzN0FCRjkwM0REOTQ3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5X61a7HZTeWJDIQP8Q1SY8sjq
iwtH1n42/qozWEmWk0JGJ2Jp/I/21ArFm5LgUB9tzXrWBLCeiXzFJpuZWmf9yHnL
7EIBcAIqldXmvt1CQgOSikWFR4bJHoZk+BL3RIVUJt2bNx6t4qahhfVFWjcpoCkI
j1mzouH9JhF5nRHF2DgikF58S8Xfoq+DJaqZi89qq0xfjSHvRWuWdEV09KtKZ11J
bxl56fBnxe/bP/taXtZJSsPfWyVZMyrWWSMFQmJFG0YPsLCKyp59nRuICPPniWhV
svfJpcuvxfOAzoWK7uQCtRdWc7eTFbLoqao68Yx9qKU/2YItkG7aUGHkTVMdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUL1JZI8Cjf1xxZMAOs3q/kD3ZR80wHwYDVR0j
BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT
OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB
NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y
M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnygZ1DI3loRRuIRSfhtaWsGpjKAE7WXuqNWBQSsrRAOQ2Ak67B8QrU3DwjT7
aGs7Ajh0pGCNSIk56LDKJ/WJ0ZyFUjO/gyh2b2jmRqMNhSQLGHCjNnmsBd/OLgAC
EwGB5FuvP+y880QoDf7sPtukGIwtAft4Q/kqPQ9EZMYk8O+QxTiR/lGwLIAkgdL/
+LEH0ssYYGEgU7Fm1bDmPaiXAzOjMbd2mTkwUSOp+4q0Ag0MuSq93JTACpp/+xxh
tJxUgvjIW9NBIvRv1QP7Brlbl0TJUBm6uWSp7W22/mi5TPpr3m7e5QZwwaRiCKq2
jP37XJCIFjuOUtURGAqE3FzgrA==
-----END CERTIFICATE-----
Generated at Sun May 24 14:12:26 2026 by rpki-client