$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: OjULPpYUWHEXgfHDJz9XNzD9NuHvSvzXgWI9sg3bCy0= Subject key identifier: 43:84:33:E4:F6:BE:C7:17:D6:AD:23:83:59:27:46:24:81:BA:26:63 Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 298D576C6E4E5CC99AEE5B0062724261A2C37BAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: 65 Signing time: Mon 03 Nov 2025 07:38:15 +0000 Manifest this update: Mon 03 Nov 2025 07:33:15 +0000 Manifest next update: Tue 04 Nov 2025 11:00:15 +0000 Files and hashes: 1: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) 2: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: EhixE2pbKgb3J4W/1M3BB6WYSBT94tm93AFnrBGeUwA=) 3: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8d:57:6c:6e:4e:5c:c9:9a:ee:5b:00:62:72:42:61:a2:c3:7b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Nov 3 07:33:15 2025 GMT Not After : Nov 4 11:00:15 2025 GMT Subject: CN=438433E4F6BEC717D6AD23835927462481BA2663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:03:e0:a5:15:5d:09:97:af:ac:06:d0:a9: a2:a3:a2:ed:36:31:3b:81:ab:3b:0c:98:8b:e8:35: 6b:6c:ad:68:f9:2d:34:af:07:af:22:62:76:9e:0a: 90:9e:ac:97:24:05:e6:6f:f6:0f:e3:62:a3:90:0c: 2c:0e:e7:f3:cf:1a:73:40:7e:f2:f5:f7:6c:04:b2: b4:3c:1f:04:d6:d2:a9:6e:84:14:49:0a:b2:0d:c1: ac:42:94:db:b0:cf:47:db:37:13:0b:c3:8f:8f:a0: 21:da:40:de:ab:3c:f3:93:d2:d1:f1:bb:fe:88:f1: 73:9b:70:bf:11:b0:94:a7:1b:8b:2e:57:fe:7a:78: 29:1e:e2:fb:90:6f:07:6e:e9:6a:4f:bc:bb:9a:de: a3:e7:c3:aa:2e:4e:8a:94:13:44:1b:4c:cb:d8:37: 75:aa:f1:49:47:20:05:fd:9a:c2:8d:33:18:29:38: 07:5e:1e:a6:09:a8:00:e9:a3:80:b9:fc:c5:c4:db: 52:fa:52:c5:fe:14:07:ae:ba:66:36:b9:a9:43:e9: 57:12:b2:10:1c:06:59:2a:d8:7e:60:60:00:12:19: ec:6f:b3:45:57:ad:24:8c:b6:dd:d3:0b:5f:42:60: 78:c6:2b:e6:49:98:23:4b:69:1f:ca:2c:9e:2c:b4: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:84:33:E4:F6:BE:C7:17:D6:AD:23:83:59:27:46:24:81:BA:26:63 X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:29:e4:a0:50:b8:20:f2:ad:99:a3:52:e5:68:5f:f7:0f:f9: 48:af:ed:16:7e:8d:28:a6:9b:0c:67:04:6d:b6:ac:a9:16:07: 26:d2:21:fb:25:3e:f2:76:9b:bd:48:f8:06:04:99:3f:cf:fe: d8:19:04:ff:62:0e:02:18:23:de:9d:7a:52:a8:b1:7c:23:ec: 50:7c:53:52:1c:f8:4a:a6:3c:37:7f:18:00:82:9c:1a:c6:ae: 28:cf:db:fa:21:93:ab:9e:f0:83:99:61:8b:18:40:28:12:86: 1f:0c:5a:fd:6f:26:7e:12:93:b9:cd:91:48:35:db:5f:f2:43: a8:f1:8e:f3:3e:59:2c:64:aa:1c:9b:03:fa:47:b2:e3:f0:21: 28:34:bd:48:3c:d8:3f:11:71:17:41:e8:69:bf:c0:d0:37:6f: ec:23:9e:4d:05:ce:74:65:45:bc:d4:1d:b8:c8:9c:0c:1d:76: 8f:04:99:67:93:57:59:27:db:01:c5:b7:a8:eb:9b:f8:68:09: 44:97:76:9d:5e:9d:1f:dc:f5:12:df:83:e1:d1:d5:3a:a9:03: 85:21:67:a8:e0:b9:69:76:d1:f9:b0:28:2a:b8:1a:c7:78:4a: cd:48:db:91:d2:ac:d7:cb:5b:54:c7:e7:21:db:44:ac:61:02: 65:6c:39:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKY1XbG5OXMma7lsAYnJCYaLDe6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTExMDMwNzMzMTVaFw0yNTExMDQxMTAwMTVaMDMxMTAvBgNV BAMTKDQzODQzM0U0RjZCRUM3MTdENkFEMjM4MzU5Mjc0NjI0ODFCQTI2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteQPgpRVdCZevrAbQqaKjou02 MTuBqzsMmIvoNWtsrWj5LTSvB68iYnaeCpCerJckBeZv9g/jYqOQDCwO5/PPGnNA fvL192wEsrQ8HwTW0qluhBRJCrINwaxClNuwz0fbNxMLw4+PoCHaQN6rPPOT0tHx u/6I8XObcL8RsJSnG4suV/56eCke4vuQbwdu6WpPvLua3qPnw6ouToqUE0QbTMvY N3Wq8UlHIAX9msKNMxgpOAdeHqYJqADpo4C5/MXE21L6UsX+FAeuumY2ualD6VcS shAcBlkq2H5gYAASGexvs0VXrSSMtt3TC19CYHjGK+ZJmCNLaR/KLJ4stNhLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ4Qz5Pa+xxfWrSODWSdGJIG6JmMwHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSnkoFC4IPKtmaNS5Whf9w/5SK/tFn6NKKabDGcEbbasqRYHJtIh+yU+8nab vUj4BgSZP8/+2BkE/2IOAhgj3p16UqixfCPsUHxTUhz4SqY8N38YAIKcGsauKM/b +iGTq57wg5lhixhAKBKGHwxa/W8mfhKTuc2RSDXbX/JDqPGO8z5ZLGSqHJsD+key 4/AhKDS9SDzYPxFxF0Hoab/A0Ddv7COeTQXOdGVFvNQduMicDB12jwSZZ5NXWSfb AcW3qOub+GgJRJd2nV6dH9z1Et+D4dHVOqkDhSFnqOC5aXbR+bAoKrgax3hKzUjb kdKs18tbVMfnIdtErGECZWw5gA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:12:29 2025 by rpki-client