$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json) Hash identifier: PPdRHdZMq6kb8wCKGKhFFDzHlPUmzJK8VqYm00Kj24E= Subject key identifier: 23:C1:F6:61:76:01:6F:84:1B:0F:15:5E:F4:FE:B4:83:3A:88:61:80 Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Certificate serial: 4325063FE689B488143E3D1CE5BC35E05F94F687 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft Manifest number: 0306 Signing time: Mon 03 Nov 2025 23:37:16 +0000 Manifest this update: Mon 03 Nov 2025 23:32:16 +0000 Manifest next update: Wed 05 Nov 2025 01:22:16 +0000 Files and hashes: 1: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: V1QDtG5/6mZyaom0qLY64DZx50lLzCOOwWYYnxJfjIY=) 2: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: vOeK0XtG1nxrloq2fTrO8t6rfmvp7p8591fbfBkCVFU=) 3: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: 0+yYrRYF3DnkZpf5I1MIj3HpO9zYE9gRE6VsrC5/q7A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:25:06:3f:e6:89:b4:88:14:3e:3d:1c:e5:bc:35:e0:5f:94:f6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Validity Not Before: Nov 3 23:32:16 2025 GMT Not After : Nov 5 01:22:16 2025 GMT Subject: CN=23C1F66176016F841B0F155EF4FEB4833A886180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:11:d8:8e:bd:0b:17:d0:a6:42:e1:0d:fd: 5c:0c:4f:23:7f:0b:38:24:61:46:18:5c:a9:cf:fd: 1b:a6:e7:fe:a0:9d:ad:4b:ae:2d:5d:cd:ed:ca:e5: a8:bb:56:ae:55:3a:f2:20:cf:d0:c4:6f:57:8d:70: b3:16:f0:c0:1a:8b:09:d7:e1:ca:91:ff:6d:17:83: b6:dc:e9:99:62:d1:c7:8e:04:0f:71:3d:f0:32:dc: 7a:1b:4a:85:ae:9a:a9:34:da:d7:54:49:55:1f:9f: 3f:a1:02:0d:1a:59:48:33:30:ea:92:62:e7:da:89: 32:92:e5:9b:b3:82:e1:43:34:9d:d1:a8:87:2d:56: ce:9c:f0:95:43:14:47:2a:a4:c7:4b:cf:ed:07:e2: 52:db:70:ff:12:6d:ed:6e:1f:25:ff:18:fb:eb:3d: 0e:92:22:1b:b6:48:e5:03:01:63:97:be:9c:dc:4f: 6a:90:6e:62:be:79:82:39:8b:84:21:59:21:c2:4a: dc:c3:ad:60:a2:6f:56:21:32:f6:c6:2a:67:2e:15: 3f:81:ef:af:33:0a:ce:e6:63:61:d3:f0:bd:a2:e5: f3:f8:39:d4:e2:09:82:35:da:1a:b7:c9:98:ab:1c: 51:e1:0c:f2:87:e9:8e:58:7e:fa:6e:6c:7f:ae:6b: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:F6:61:76:01:6F:84:1B:0F:15:5E:F4:FE:B4:83:3A:88:61:80 X509v3 Authority Key Identifier: keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a0:a8:d7:2a:ea:7c:cf:95:ca:06:c9:c7:d6:55:c5:c7:58: f2:cc:e9:70:57:1b:cd:37:b5:66:73:ad:1c:c0:46:9c:7d:be: fd:60:40:da:35:c1:b3:7f:52:ef:69:13:ef:1d:2b:b8:3c:df: 93:49:cc:87:25:a8:4a:7b:6e:f9:63:7f:9c:1a:4c:28:46:d7: a8:38:b5:a6:1b:02:0e:b5:ec:f9:23:98:4b:65:df:dd:d3:b6: ec:01:43:75:3f:6a:6c:76:de:2b:c3:97:48:73:c2:43:05:19: 76:de:f2:9b:4f:f9:f9:0b:c2:b3:fd:f9:8b:2f:38:fb:ad:ad: bf:3a:4b:c4:4e:0d:a3:62:23:95:34:03:a5:93:48:93:e2:e0: 86:41:3c:c9:ff:69:90:14:c9:e7:11:16:87:4b:ec:fa:4b:0f: 17:96:ce:d5:e9:a5:37:53:d6:9e:72:c7:d8:a2:16:8d:22:fa: 31:72:07:bc:fa:01:32:d1:cd:42:6b:76:67:80:27:8f:24:ea: a8:eb:71:fa:99:c8:a3:5d:b2:35:b6:07:c1:0c:0e:8f:ea:f9: 62:66:eb:71:9a:04:b7:61:84:8a:95:6c:48:05:fa:60:73:74: f0:91:9d:50:69:be:89:b6:f7:f9:3f:3d:ef:30:66:b7:d0:57: 0d:d9:1d:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQyUGP+aJtIgUPj0c5bw14F+U9ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0 QkFGQ0I0MTAeFw0yNTExMDMyMzMyMTZaFw0yNTExMDUwMTIyMTZaMDMxMTAvBgNV BAMTKDIzQzFGNjYxNzYwMTZGODQxQjBGMTU1RUY0RkVCNDgzM0E4ODYxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMRHYjr0LF9CmQuEN/VwMTyN/ CzgkYUYYXKnP/Rum5/6gna1Lri1dze3K5ai7Vq5VOvIgz9DEb1eNcLMW8MAaiwnX 4cqR/20Xg7bc6Zli0ceOBA9xPfAy3HobSoWumqk02tdUSVUfnz+hAg0aWUgzMOqS YufaiTKS5ZuzguFDNJ3RqIctVs6c8JVDFEcqpMdLz+0H4lLbcP8Sbe1uHyX/GPvr PQ6SIhu2SOUDAWOXvpzcT2qQbmK+eYI5i4QhWSHCStzDrWCib1YhMvbGKmcuFT+B 768zCs7mY2HT8L2i5fP4OdTiCYI12hq3yZirHFHhDPKH6Y5YfvpubH+ua74tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI8H2YXYBb4QbDxVe9P60gzqIYYAwHwYDVR0j BBgwFoAUIzwPC1cf2hwzE7+K99aGx0uvy0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFB ZjMvMS8yMzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzM0MwRjBCNTcxRkRBMUMz MzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8y MzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaKCo1yrqfM+VygbJx9ZVxcdY8szpcFcbzTe1ZnOtHMBGnH2+/WBA2jXBs39S 72kT7x0ruDzfk0nMhyWoSntu+WN/nBpMKEbXqDi1phsCDrXs+SOYS2Xf3dO27AFD dT9qbHbeK8OXSHPCQwUZdt7ym0/5+QvCs/35iy84+62tvzpLxE4No2IjlTQDpZNI k+LghkE8yf9pkBTJ5xEWh0vs+ksPF5bO1emlN1PWnnLH2KIWjSL6MXIHvPoBMtHN Qmt2Z4AnjyTqqOtx+pnIo12yNbYHwQwOj+r5YmbrcZoEt2GEipVsSAX6YHN08JGd UGm+ibb3+T897zBmt9BXDdkd4Q== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:55 2025 by rpki-client