$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: Cubp7CyanxuUQWSOkxcVxDp/XXb5Wk8G3yj6poAzMv8= Subject key identifier: D7:BD:7B:F5:EB:15:E7:3F:2E:F3:2A:F2:BE:24:65:16:3D:50:1F:A6 Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 5F304BEB62C82492F571F85D14A9CCF84949EB23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: 52 Signing time: Sun 19 Oct 2025 21:43:15 +0000 Manifest this update: Sun 19 Oct 2025 21:38:15 +0000 Manifest next update: Mon 20 Oct 2025 23:40:15 +0000 Files and hashes: 1: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) 2: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: tiHIxXrus/X0ymkOJNV5ttLsMT2xATftvLGOh2Eihq4=) 3: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:30:4b:eb:62:c8:24:92:f5:71:f8:5d:14:a9:cc:f8:49:49:eb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Oct 19 21:38:15 2025 GMT Not After : Oct 20 23:40:15 2025 GMT Subject: CN=D7BD7BF5EB15E73F2EF32AF2BE2465163D501FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:0d:87:57:e4:3a:f7:d2:1d:d8:2b:42:2f: e0:95:f5:57:19:c2:e8:8b:7b:6a:ed:1f:e6:cb:34: 44:a2:92:74:71:7d:72:f4:82:17:3c:89:d5:15:44: 63:00:98:81:ee:dd:0f:7b:8e:3f:1b:b0:cb:ad:65: af:14:74:4a:59:f7:c1:90:d1:f0:b5:53:e2:84:9a: d1:cf:03:5b:bb:81:ef:08:69:ca:9c:99:e5:3f:f7: 86:c4:c6:d1:75:72:f3:23:8d:63:27:c4:6f:01:a7: d9:21:30:ad:58:68:5e:1d:73:5d:80:f4:9c:68:28: 53:07:25:11:ad:b9:a4:ce:5c:f7:f8:6d:14:9c:33: 36:44:b7:ff:fe:93:8f:4b:26:b5:59:a0:48:0c:30: db:c3:db:3f:33:5e:8f:66:b0:b3:ce:da:b3:c2:4f: 55:af:86:c2:ae:7b:64:17:60:4c:ae:4d:e3:38:98: c7:bb:a4:df:77:1b:fa:7b:98:56:ec:c9:fc:4a:94: 89:ed:8e:94:a2:16:6d:df:1a:da:1f:3d:c0:c3:c9: 2f:88:bd:37:a1:f4:1b:04:bc:1d:82:63:02:12:bc: 53:c4:c2:bb:48:d8:31:82:f4:61:78:1c:95:50:69: 2f:a9:ae:99:5b:f7:38:1f:8b:d7:72:0a:75:b1:62: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BD:7B:F5:EB:15:E7:3F:2E:F3:2A:F2:BE:24:65:16:3D:50:1F:A6 X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c1:67:29:f2:17:0d:8f:b6:14:e1:06:12:11:cb:9a:87:c4: 62:46:a8:80:2b:f0:0b:5d:ea:24:64:b9:1c:33:be:1f:fd:fd: 80:b0:1a:90:45:7c:97:c2:50:e1:4c:fb:60:59:eb:32:cb:1c: e9:72:21:e7:1d:85:e2:81:91:78:45:14:53:55:af:f7:25:c6: 0c:9a:8a:fd:7c:36:0a:8f:e4:08:af:ee:1c:9c:02:15:dd:e2: 01:b1:fd:04:6b:8c:0f:90:0b:f3:2a:44:69:68:ac:1c:ee:46: d5:4b:94:b0:38:1f:51:db:4f:24:7f:97:24:8c:2b:95:cb:f2: 4a:09:d0:81:5a:45:00:e4:90:6a:72:34:e4:ee:a6:fb:b2:cf: 05:63:e1:cd:1d:64:d2:31:46:33:92:cd:df:d9:de:24:d5:d7: df:80:9d:70:73:b1:ee:70:a6:dc:fc:93:89:04:91:6f:9d:01: 4c:0e:1c:84:3d:20:75:a0:c3:ed:02:c4:93:25:47:6d:8e:cc: c5:fe:81:88:27:4c:46:a9:a9:86:20:fc:0b:a4:00:af:dd:15: 5e:d1:da:17:d9:0e:84:28:ff:53:01:a0:6b:fa:34:f0:7a:0f: 70:a7:68:ff:96:5e:14:d5:89:30:c9:13:ca:79:29:72:cc:bd: 60:8b:1a:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXzBL62LIJJL1cfhdFKnM+ElJ6yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTEwMTkyMTM4MTVaFw0yNTEwMjAyMzQwMTVaMDMxMTAvBgNV BAMTKEQ3QkQ3QkY1RUIxNUU3M0YyRUYzMkFGMkJFMjQ2NTE2M0Q1MDFGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90g2HV+Q699Id2CtCL+CV9VcZ wuiLe2rtH+bLNESiknRxfXL0ghc8idUVRGMAmIHu3Q97jj8bsMutZa8UdEpZ98GQ 0fC1U+KEmtHPA1u7ge8IacqcmeU/94bExtF1cvMjjWMnxG8Bp9khMK1YaF4dc12A 9JxoKFMHJRGtuaTOXPf4bRScMzZEt//+k49LJrVZoEgMMNvD2z8zXo9msLPO2rPC T1WvhsKue2QXYEyuTeM4mMe7pN93G/p7mFbsyfxKlIntjpSiFm3fGtofPcDDyS+I vTeh9BsEvB2CYwISvFPEwrtI2DGC9GF4HJVQaS+prplb9zgfi9dyCnWxYs7JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU17179esV5z8u8yryviRlFj1QH6YwHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicFnKfIXDY+2FOEGEhHLmofEYkaogCvwC13qJGS5HDO+H/39gLAakEV8l8JQ 4Uz7YFnrMssc6XIh5x2F4oGReEUUU1Wv9yXGDJqK/Xw2Co/kCK/uHJwCFd3iAbH9 BGuMD5AL8ypEaWisHO5G1UuUsDgfUdtPJH+XJIwrlcvySgnQgVpFAOSQanI05O6m +7LPBWPhzR1k0jFGM5LN39neJNXX34CdcHOx7nCm3PyTiQSRb50BTA4chD0gdaDD 7QLEkyVHbY7Mxf6BiCdMRqmphiD8C6QAr90VXtHaF9kOhCj/UwGga/o08HoPcKdo /5ZeFNWJMMkTynkpcsy9YIsafw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:33 2025 by rpki-client