$ rpki-client -vvf rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft File: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft (raw, json) Hash identifier: yDZcTk11CLtRvzYH2QDw6S3XXYv29Oo74XPIsbu8B0k= Subject key identifier: 96:F4:B7:0D:F5:97:0E:CF:46:3D:AE:26:0C:89:A3:AE:54:51:15:43 Authority key identifier: 23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE Certificate issuer: /CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Certificate serial: 36C83AA236710FE729D32885AAAFEE40ED5447CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft Manifest number: 01A7 Signing time: Fri 22 Aug 2025 23:45:50 +0000 Manifest this update: Fri 22 Aug 2025 23:40:50 +0000 Manifest next update: Sun 24 Aug 2025 03:00:50 +0000 Files and hashes: 1: 323830343a353137633a3a2f33322d313238203d3e20323638343535.roa (hash: kYM3XC/wI7ECSPT+HPn4WPHV7AW9Yh9Wby+jSh5s3V8=) 2: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl (hash: hZelVjbwzS4gw3m/e72UpNbvjSrVrisOPH1/l1TWXl4=) 3: 34352e3136312e36382e302f32322d3332203d3e20323638343535.roa (hash: xCtQZyFdO/CnIWoNrgcqWtU9sPdnzvX3Otkw+IWxknI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c8:3a:a2:36:71:0f:e7:29:d3:28:85:aa:af:ee:40:ed:54:47:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Validity Not Before: Aug 22 23:40:50 2025 GMT Not After : Aug 24 03:00:50 2025 GMT Subject: CN=96F4B70DF5970ECF463DAE260C89A3AE54511543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:f5:08:13:62:d9:e4:9e:57:5a:31:c8:7e: 31:dc:67:c8:1f:10:10:9f:94:35:5b:1f:dc:11:5d: 7d:dd:f8:7a:df:fe:b7:c4:a9:f5:a1:42:7e:9a:a8: 11:91:79:2d:6c:20:b0:f0:01:8d:eb:e3:17:47:fe: a1:e1:0a:41:67:11:3b:4d:65:be:d7:e6:c5:f7:90: f9:eb:df:79:dd:82:4f:8f:34:07:89:9d:08:bc:0a: 5f:02:8d:ac:f0:01:7a:0f:06:d6:bb:ac:5b:d8:77: ab:2e:33:22:ec:06:f8:49:b4:b4:53:ab:3a:d1:47: 9a:e0:95:47:d8:6e:8d:ec:a7:e6:9a:ae:97:3e:6d: d4:eb:d4:ec:5c:e3:ea:61:45:b3:e7:7b:12:fa:85: e6:5c:7d:6d:dc:ba:03:55:94:e6:ef:64:b0:ef:e3: 2d:ed:4e:80:af:af:8a:20:6e:bd:ad:7c:35:19:c8: a8:83:4a:17:f2:17:ac:34:a8:22:7f:4a:ac:74:34: 9a:ad:a5:2f:de:c4:25:e5:89:89:08:50:90:d7:64: 25:e8:30:ed:09:ca:79:68:95:a2:61:ab:7a:e9:b0: 75:09:04:f2:53:f6:2d:fc:fd:de:6e:02:ed:4e:24: f3:a3:20:96:d1:f6:9b:b5:80:2a:eb:4b:67:8e:88: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F4:B7:0D:F5:97:0E:CF:46:3D:AE:26:0C:89:A3:AE:54:51:15:43 X509v3 Authority Key Identifier: keyid:23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:44:52:5f:8c:8b:ef:5e:31:36:96:3b:b6:dd:eb:2b:8b:9c: b5:c2:58:13:ab:22:b3:4e:73:05:df:5c:f3:c9:a8:58:28:33: b5:0a:c5:d4:47:e9:93:6d:cc:94:0d:03:24:dc:87:b0:72:f2: f4:cc:f7:18:2f:1f:db:ee:72:3e:dd:94:3c:b1:1a:5d:48:73: 44:6e:18:52:c1:b1:e8:b2:ef:1f:5e:fe:c3:65:b5:d2:8c:ed: c5:e4:36:e0:46:6e:8a:1d:90:18:07:57:03:83:8d:92:23:3e: 23:83:90:9e:52:09:ae:87:ec:a2:2b:02:d0:7d:fc:cc:71:7a: fc:0e:83:92:1e:f6:0c:ca:67:15:59:21:94:9d:0a:9c:fa:e0: 68:45:e6:3b:e7:e9:70:58:e8:05:0d:82:d8:98:60:17:c6:2d: ff:78:93:40:4a:02:7c:35:65:9e:b5:7d:6b:eb:ce:f1:02:d8: d6:2d:cd:e2:6d:a3:ac:c8:a3:58:86:0a:d2:7f:96:70:7a:d7: 55:b0:90:8b:b9:34:74:03:3b:f2:bc:14:bb:24:8d:32:84:47: 3b:de:c2:2f:85:5d:07:9e:eb:3d:82:40:8e:4b:76:a6:65:c7: b2:ea:0e:35:e9:96:fe:c9:96:29:38:11:91:33:e0:bf:f6:f9: 20:aa:3b:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNsg6ojZxD+cp0yiFqq/uQO1UR80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFMTY2MEFCNDgwQzFDOUQzMEY3OTI4QTdBRDVDNzAz OUMxMzJGRTAeFw0yNTA4MjIyMzQwNTBaFw0yNTA4MjQwMzAwNTBaMDMxMTAvBgNV BAMTKDk2RjRCNzBERjU5NzBFQ0Y0NjNEQUUyNjBDODlBM0FFNTQ1MTE1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjPUIE2LZ5J5XWjHIfjHcZ8gf EBCflDVbH9wRXX3d+Hrf/rfEqfWhQn6aqBGReS1sILDwAY3r4xdH/qHhCkFnETtN Zb7X5sX3kPnr33ndgk+PNAeJnQi8Cl8CjazwAXoPBta7rFvYd6suMyLsBvhJtLRT qzrRR5rglUfYbo3sp+aarpc+bdTr1Oxc4+phRbPnexL6heZcfW3cugNVlObvZLDv 4y3tToCvr4ogbr2tfDUZyKiDShfyF6w0qCJ/Sqx0NJqtpS/exCXliYkIUJDXZCXo MO0JynlolaJhq3rpsHUJBPJT9i38/d5uAu1OJPOjIJbR9pu1gCrrS2eOiEmdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlvS3DfWXDs9GPa4mDImjrlRRFUMwHwYDVR0j BBgwFoAUI+FmCrSAwcnTD3kop61ccDnBMv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdw d0wvMC8yM0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzRTE2NjBBQjQ4MEMxQzlE MzBGNzkyOEE3QUQ1QzcwMzlDMTMyRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdwd0wvMC8y M0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgERSX4yL714xNpY7tt3rK4uctcJYE6sis05zBd9c88moWCgztQrF1Efpk23M lA0DJNyHsHLy9Mz3GC8f2+5yPt2UPLEaXUhzRG4YUsGx6LLvH17+w2W10oztxeQ2 4EZuih2QGAdXA4ONkiM+I4OQnlIJrofsoisC0H38zHF6/A6Dkh72DMpnFVkhlJ0K nPrgaEXmO+fpcFjoBQ2C2JhgF8Yt/3iTQEoCfDVlnrV9a+vO8QLY1i3N4m2jrMij WIYK0n+WcHrXVbCQi7k0dAM78rwUuySNMoRHO97CL4VdB57rPYJAjkt2pmXHsuoO NemW/smWKTgRkTPgv/b5IKo7LA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:22 2025 by rpki-client