$ rpki-client -vvf rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.mft File: 237DE4AEE652C4BCE6906C919A2AD10D01776AF4.mft (raw, json) Hash identifier: G+Xgb4PqmdxRKwW9zb50tPYP/Q17eWV7V1i7A5/cSx4= Subject key identifier: BC:6A:BF:BE:1B:6A:46:50:35:D4:9C:9C:DB:2A:20:CE:14:2A:F6:0D Authority key identifier: 23:7D:E4:AE:E6:52:C4:BC:E6:90:6C:91:9A:2A:D1:0D:01:77:6A:F4 Certificate issuer: /CN=237DE4AEE652C4BCE6906C919A2AD10D01776AF4 Certificate serial: 1B29E769C9FC972D34E330DCF9F1411720B1142D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.cer Subject info access: rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.mft Manifest number: 4A Signing time: Sun 19 Oct 2025 19:27:15 +0000 Manifest this update: Sun 19 Oct 2025 19:22:15 +0000 Manifest next update: Mon 20 Oct 2025 20:08:15 +0000 Files and hashes: 1: 237DE4AEE652C4BCE6906C919A2AD10D01776AF4.crl (hash: ReNg3Jb4ktY2pH3Kpq0EHP0xYprLw2YW5ubg37zzNrA=) 2: 3138362e3139352e3136342e302f32342d3234203d3e20323734373232.roa (hash: 60h48FS4RrCtaCttVjlYIax2xIaScB7PY9XK6pOH/D8=) 3: 323830343a393239633a3a2f33322d3332203d3e20323734373232.roa (hash: 0pi6I8qL2HXpOawQFqYfpFh3DTwAgzCSZrBJpMkJcp8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.crl rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 20:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:29:e7:69:c9:fc:97:2d:34:e3:30:dc:f9:f1:41:17:20:b1:14:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237DE4AEE652C4BCE6906C919A2AD10D01776AF4 Validity Not Before: Oct 19 19:22:15 2025 GMT Not After : Oct 20 20:08:15 2025 GMT Subject: CN=BC6ABFBE1B6A465035D49C9CDB2A20CE142AF60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:65:96:76:1e:4a:61:88:60:1e:0a:65:3c: b9:7a:86:94:48:84:12:c7:ed:b1:b9:7d:09:b0:4a: 06:36:26:18:d3:7c:75:f5:a7:2c:35:d7:9f:ed:07: 19:75:9d:1f:3a:f2:99:92:61:25:d8:a8:a4:78:0b: 5b:9f:75:08:c7:55:b2:64:a5:37:01:5d:6c:01:40: 20:25:d7:db:43:c6:81:86:2e:87:45:5a:af:4b:97: 25:ea:18:51:0c:e4:98:73:de:7e:91:01:23:5c:8a: 26:c3:be:74:4d:96:86:2f:16:39:76:4c:0c:0f:6a: 11:db:a4:fb:97:01:9f:95:cb:c0:fa:93:e8:ea:3d: 22:92:0d:f6:71:b1:dd:50:46:62:26:df:7e:26:12: 81:5c:15:99:95:f7:e7:56:f3:ab:3e:b5:8c:9c:86: 9a:2e:ec:d0:ac:64:db:c1:45:6f:64:fc:a0:5d:6c: cc:30:35:fd:94:c9:81:4c:2e:8e:88:d5:4a:0c:01: e6:32:6d:93:5a:f0:88:48:d8:78:57:6a:f6:b3:c8: b8:9e:08:d3:65:ba:9a:0d:39:44:1b:09:a7:9f:4e: fe:b8:bc:25:16:4f:20:66:43:f8:65:ca:8d:ea:02: c9:03:e4:b0:88:a2:35:74:cb:f8:95:16:76:d3:34: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6A:BF:BE:1B:6A:46:50:35:D4:9C:9C:DB:2A:20:CE:14:2A:F6:0D X509v3 Authority Key Identifier: keyid:23:7D:E4:AE:E6:52:C4:BC:E6:90:6C:91:9A:2A:D1:0D:01:77:6A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/27EvXnUhASfVFWik53igHqkyjLY1XV2PvPXE8ASLTncK/0/237DE4AEE652C4BCE6906C919A2AD10D01776AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7e:9b:c1:2f:cf:a1:1c:7a:f0:b2:aa:50:f0:0c:85:28:6b: 88:89:a9:e5:b6:81:3b:7a:b6:36:24:68:da:85:a2:31:28:bc: 05:42:c3:c6:c5:a9:b1:12:3a:f9:80:0e:60:77:67:5d:bc:39: 3b:c0:47:53:ad:54:f0:de:9a:38:7c:4f:f2:ee:a8:45:dd:a2: b2:28:89:90:f9:55:75:6a:f1:2f:f9:54:31:fd:52:64:78:f1: 74:58:01:cf:26:88:4f:e6:83:cd:ff:e3:e6:e6:85:99:0c:bb: e8:fa:34:8f:6c:d3:9f:5e:5b:78:df:09:24:0a:85:7d:c3:d7: 36:8b:cb:ab:fd:10:31:c9:f2:57:4b:2e:c1:3a:f4:9f:c9:1e: b6:7e:b9:85:0d:14:ec:ba:de:cd:1a:ef:b4:a5:a9:d1:db:6f: 5a:d3:0b:d3:89:6e:bf:be:92:42:07:a8:cd:36:a1:c1:d1:29: 95:ef:84:e9:2a:14:ec:d4:30:1e:21:6e:b0:3d:7a:51:03:9e: 98:8a:43:68:41:98:65:7c:68:22:25:a8:71:fc:c5:77:d0:a6: 63:7e:84:ae:21:f0:51:e4:1c:7b:84:9d:8a:ea:30:7d:b8:0b: 05:b2:97:f0:2f:47:36:10:7e:1c:f8:8a:56:5f:c0:ac:a4:3d: e3:dc:09:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGynnacn8ly004zDc+fFBFyCxFC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3REU0QUVFNjUyQzRCQ0U2OTA2QzkxOUEyQUQxMEQw MTc3NkFGNDAeFw0yNTEwMTkxOTIyMTVaFw0yNTEwMjAyMDA4MTVaMDMxMTAvBgNV BAMTKEJDNkFCRkJFMUI2QTQ2NTAzNUQ0OUM5Q0RCMkEyMENFMTQyQUY2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yGWWdh5KYYhgHgplPLl6hpRI hBLH7bG5fQmwSgY2JhjTfHX1pyw115/tBxl1nR868pmSYSXYqKR4C1ufdQjHVbJk pTcBXWwBQCAl19tDxoGGLodFWq9LlyXqGFEM5Jhz3n6RASNciibDvnRNloYvFjl2 TAwPahHbpPuXAZ+Vy8D6k+jqPSKSDfZxsd1QRmIm334mEoFcFZmV9+dW86s+tYyc hpou7NCsZNvBRW9k/KBdbMwwNf2UyYFMLo6I1UoMAeYybZNa8IhI2HhXavazyLie CNNlupoNOUQbCaefTv64vCUWTyBmQ/hlyo3qAskD5LCIojV0y/iVFnbTNDk3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvGq/vhtqRlA11Jyc2yogzhQq9g0wHwYDVR0j BBgwFoAUI33kruZSxLzmkGyRmirRDQF3avQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjdFdlhuVWhBU2ZWRldpazUzaWdIcWt5akxZMVhWMlB2UFhFOEFTTFRu Y0svMC8yMzdERTRBRUU2NTJDNEJDRTY5MDZDOTE5QTJBRDEwRDAxNzc2QUY0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzN0RFNEFFRTY1MkM0QkNF NjkwNkM5MTlBMkFEMTBEMDE3NzZBRjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjdFdlhuVWhBU2ZWRldpazUzaWdIcWt5akxZMVhWMlB2UFhFOEFTTFRuY0svMC8y MzdERTRBRUU2NTJDNEJDRTY5MDZDOTE5QTJBRDEwRDAxNzc2QUY0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKX6bwS/PoRx68LKqUPAMhShriImp5baBO3q2NiRo2oWiMSi8BULDxsWpsRI6 +YAOYHdnXbw5O8BHU61U8N6aOHxP8u6oRd2isiiJkPlVdWrxL/lUMf1SZHjxdFgB zyaIT+aDzf/j5uaFmQy76Po0j2zTn15beN8JJAqFfcPXNovLq/0QMcnyV0suwTr0 n8ketn65hQ0U7LrezRrvtKWp0dtvWtML04luv76SQgeozTahwdEple+E6SoU7NQw HiFusD16UQOemIpDaEGYZXxoIiWocfzFd9CmY36EriHwUeQce4SdiuowfbgLBbKX 8C9HNhB+HPiKVl/ArKQ949wJvw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:12:30 2025 by rpki-client