$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: tNNJrOzon/uHkieLQDi+rQvRUiXZjUtUqrp6w9IW/9E= Subject key identifier: B8:84:78:F0:C0:32:74:74:30:59:67:8F:1C:CD:6E:E6:FE:F2:1B:E1 Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 77DB8608EDB3008286E0DB7C003BAF8EF2F114C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: 06 Signing time: Sat 23 Aug 2025 09:28:15 +0000 Manifest this update: Sat 23 Aug 2025 09:23:15 +0000 Manifest next update: Sun 24 Aug 2025 10:44:15 +0000 Files and hashes: 1: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) 2: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) 3: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: jCLd2QWf2Sn7jhf/k8cb4aUbRaGR+PxfIcm5WszHwQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:db:86:08:ed:b3:00:82:86:e0:db:7c:00:3b:af:8e:f2:f1:14:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Aug 23 09:23:15 2025 GMT Not After : Aug 24 10:44:15 2025 GMT Subject: CN=B88478F0C03274743059678F1CCD6EE6FEF21BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:1d:61:5d:fe:22:ce:43:09:eb:ae:56:b1: ad:ab:08:c8:71:c6:b3:02:c1:89:dc:49:af:20:72: dc:40:0c:f4:fa:f0:2d:40:c3:ea:2f:35:e0:27:79: 02:e7:b2:f4:e3:5a:52:b4:83:ce:eb:92:20:ac:04: c0:8c:26:28:7b:fb:30:c2:a8:c1:36:aa:6d:23:30: 79:93:7c:57:f1:69:3d:a4:ad:b4:cd:c2:08:cc:63: 10:c2:eb:9a:95:87:b2:ef:48:7b:7c:07:af:da:39: 6a:d7:10:b2:c2:af:de:73:2c:2c:bf:a5:78:9a:9d: 94:30:68:e8:83:53:77:1a:a3:9e:cc:28:15:33:a2: 38:90:5a:d0:53:3a:b4:4d:70:c8:e4:71:44:e1:6b: 7a:f4:13:1b:e9:1c:2b:b2:24:11:40:67:73:2b:b7: 9b:8d:c7:37:38:0f:a0:62:c4:11:9e:4c:42:45:83: 1e:fa:5e:f2:bb:af:f9:1f:2d:5a:9b:c8:5d:17:a9: a9:39:12:f3:f7:d6:43:18:9d:03:da:80:48:93:3f: aa:31:b7:e1:0c:b6:cd:22:a9:b2:55:b2:82:c3:16: 69:ec:8a:5f:fb:34:32:fd:cb:87:49:36:e6:9d:b7: f1:5d:f0:77:a7:b9:80:db:b9:eb:3e:8b:cd:22:42: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:78:F0:C0:32:74:74:30:59:67:8F:1C:CD:6E:E6:FE:F2:1B:E1 X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:dd:e5:42:f0:91:7e:10:c8:c1:db:39:b2:43:06:f6:94:47: 3d:11:5f:25:f6:6e:e4:a9:1d:ca:22:35:2d:63:1b:95:29:2c: c5:f7:66:d0:ce:40:ea:23:b7:e9:74:ca:54:28:94:66:c4:03: 17:0c:1c:6b:89:c3:3e:6f:e3:fa:1a:37:33:ae:d0:9c:3c:50: d9:6f:02:f5:eb:2d:dd:f8:a3:45:b2:f8:71:5c:db:2d:26:35: 3b:6d:a9:49:d9:af:8b:40:a8:ee:b0:85:56:97:d0:03:c5:53: 63:52:6f:11:cc:c1:cb:c9:d5:44:17:8e:95:12:97:99:de:d5: 12:52:12:5d:3c:c6:ba:5d:e8:e0:5d:c9:6e:1a:4d:75:40:d7: 6a:7e:84:f7:7b:64:7f:5a:79:03:04:0b:40:4b:29:36:ab:da: 97:b9:39:5c:11:29:5d:4b:e1:24:1e:70:54:da:67:a3:4c:04: e4:0d:78:c1:2a:ed:d6:26:47:24:20:8e:53:0c:d0:3e:d4:51: 9f:79:38:27:46:b4:72:c9:4b:75:06:34:2c:7a:6d:10:4d:bc: 0b:c1:82:cd:0b:8b:3b:25:bf:b6:d7:7f:17:0d:bf:4b:e3:8c: c7:7e:a4:bf:49:9b:f2:b1:1f:44:9a:8e:9c:49:e6:98:f4:53: dd:f3:5f:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd9uGCO2zAIKG4Nt8ADuvjvLxFMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTA4MjMwOTIzMTVaFw0yNTA4MjQxMDQ0MTVaMDMxMTAvBgNV BAMTKEI4ODQ3OEYwQzAzMjc0NzQzMDU5Njc4RjFDQ0Q2RUU2RkVGMjFCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LR1hXf4izkMJ665Wsa2rCMhx xrMCwYncSa8gctxADPT68C1Aw+ovNeAneQLnsvTjWlK0g87rkiCsBMCMJih7+zDC qME2qm0jMHmTfFfxaT2krbTNwgjMYxDC65qVh7LvSHt8B6/aOWrXELLCr95zLCy/ pXianZQwaOiDU3cao57MKBUzojiQWtBTOrRNcMjkcUTha3r0ExvpHCuyJBFAZ3Mr t5uNxzc4D6BixBGeTEJFgx76XvK7r/kfLVqbyF0Xqak5EvP31kMYnQPagEiTP6ox t+EMts0iqbJVsoLDFmnsil/7NDL9y4dJNuadt/Fd8HenuYDbues+i80iQjiNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuIR48MAydHQwWWePHM1u5v7yG+EwHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHt3lQvCRfhDIwds5skMG9pRHPRFfJfZu5KkdyiI1LWMblSksxfdm0M5A6iO3 6XTKVCiUZsQDFwwca4nDPm/j+ho3M67QnDxQ2W8C9est3fijRbL4cVzbLSY1O22p Sdmvi0Co7rCFVpfQA8VTY1JvEczBy8nVRBeOlRKXmd7VElISXTzGul3o4F3JbhpN dUDXan6E93tkf1p5AwQLQEspNqval7k5XBEpXUvhJB5wVNpno0wE5A14wSrt1iZH JCCOUwzQPtRRn3k4J0a0cslLdQY0LHptEE28C8GCzQuLOyW/ttd/Fw2/S+OMx36k v0mb8rEfRJqOnEnmmPRT3fNfOg== -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:01 2025 by rpki-client