$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json) Hash identifier: G3OAJqqT+agT4nZbFuwdK9mDj2F2gu/Jdrtlq4g9efg= Subject key identifier: 2A:0A:64:5C:78:9C:A6:5A:65:BB:82:12:C9:B2:A3:D9:9B:86:71:70 Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Certificate serial: 28726A2675BB6E6341E0BAE9B5B6D72E24C4E604 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 04:11:57 +0000 Manifest this update: Sat 23 Aug 2025 04:06:57 +0000 Manifest next update: Sun 24 Aug 2025 05:30:57 +0000 Files and hashes: 1: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: 0+yYrRYF3DnkZpf5I1MIj3HpO9zYE9gRE6VsrC5/q7A=) 2: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: onuNzUoZtxm7+5DfH89FnRNVMeDqW6Wtogz13qWnCRY=) 3: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: V1QDtG5/6mZyaom0qLY64DZx50lLzCOOwWYYnxJfjIY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:72:6a:26:75:bb:6e:63:41:e0:ba:e9:b5:b6:d7:2e:24:c4:e6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Validity Not Before: Aug 23 04:06:57 2025 GMT Not After : Aug 24 05:30:57 2025 GMT Subject: CN=2A0A645C789CA65A65BB8212C9B2A3D99B867170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:78:5b:aa:d5:2a:ec:98:08:5c:f3:ed:66:8f: 4f:13:1b:af:bd:fb:e1:54:bb:a0:73:83:06:eb:a6: 9d:ea:79:83:38:c8:21:2d:fe:87:d8:9c:7d:33:02: 87:48:aa:c1:2f:00:10:a8:f3:6e:17:5f:26:53:0c: 2f:f1:43:ba:80:6a:42:38:cc:fe:e2:89:ae:b7:bc: 4a:0f:a5:81:f8:c8:dc:24:37:4a:81:8b:c7:41:44: f5:22:d6:92:50:11:9f:85:86:5b:cc:89:9b:ad:5a: 2e:40:2e:4e:43:3c:fc:a2:2e:6d:81:fa:70:9f:83: b3:33:b8:69:56:2a:e2:b1:36:fb:3d:2b:88:d8:5a: 2f:bb:c0:2b:3c:8b:2a:eb:f7:57:89:3e:21:bb:cd: cf:d2:3f:c6:4d:e1:55:f4:38:39:d6:7e:a1:17:31: 1b:82:56:d4:3d:a2:e1:94:e3:7a:8d:a3:67:d5:e7: e2:dd:22:7b:7a:9a:da:7e:5b:39:fe:32:3c:65:0c: 01:09:17:45:fc:05:aa:e4:13:00:7e:66:18:fd:69: bf:bb:e5:3b:03:7c:dd:c7:00:91:96:52:8b:29:5c: dc:aa:d4:1c:04:4d:93:aa:94:1a:c2:3f:9f:7c:6e: a8:e2:0c:1c:d1:e0:b0:21:af:04:d8:98:d4:16:c2: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0A:64:5C:78:9C:A6:5A:65:BB:82:12:C9:B2:A3:D9:9B:86:71:70 X509v3 Authority Key Identifier: keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fe:2a:8e:1c:cd:c4:6b:2c:88:b8:e5:47:f1:55:f5:60:65: de:3a:9e:11:c7:12:36:d7:ff:63:88:78:97:97:8b:77:cd:4e: 8e:d6:99:ef:af:4c:78:e0:56:24:bc:de:42:ed:05:a6:2f:5c: 2a:dc:8c:8c:a7:ae:1a:cd:0e:1c:98:8e:b6:b8:9f:30:24:b3: 16:7e:51:2f:1a:ab:37:9a:91:45:ea:af:37:0f:05:db:63:3d: 98:2d:9f:ab:07:b5:e5:50:b0:a2:98:4f:2e:99:d0:8d:6f:5e: 5a:9e:2c:df:66:46:23:fa:11:31:1c:a7:8d:63:03:16:e6:6f: 0d:fa:ac:a5:65:3a:6b:81:43:c6:4d:04:23:20:31:58:ec:38: 27:9e:f3:1e:7c:b0:b7:66:20:3a:95:30:60:4f:ec:5b:fe:5a: 3c:f2:6e:ea:d4:14:2f:1a:c3:bb:e1:f0:01:af:2e:18:ea:73: 0e:39:b3:67:ae:11:a5:1b:41:25:51:5d:fb:13:4e:1b:dc:d8: f7:90:94:bc:66:ad:a4:d5:cd:80:94:9c:f3:5a:56:2d:ca:5d: 38:45:4e:67:d9:b1:b0:45:73:ac:2c:be:4b:41:24:fb:38:ca: fa:0d:ea:51:a5:3e:c6:48:12:27:bc:20:1e:cb:ac:99:4b:49: b3:c0:79:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKHJqJnW7bmNB4LrptbbXLiTE5gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0 QkFGQ0I0MTAeFw0yNTA4MjMwNDA2NTdaFw0yNTA4MjQwNTMwNTdaMDMxMTAvBgNV BAMTKDJBMEE2NDVDNzg5Q0E2NUE2NUJCODIxMkM5QjJBM0Q5OUI4NjcxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDteFuq1SrsmAhc8+1mj08TG6+9 ++FUu6Bzgwbrpp3qeYM4yCEt/ofYnH0zAodIqsEvABCo824XXyZTDC/xQ7qAakI4 zP7iia63vEoPpYH4yNwkN0qBi8dBRPUi1pJQEZ+FhlvMiZutWi5ALk5DPPyiLm2B +nCfg7MzuGlWKuKxNvs9K4jYWi+7wCs8iyrr91eJPiG7zc/SP8ZN4VX0ODnWfqEX MRuCVtQ9ouGU43qNo2fV5+LdInt6mtp+Wzn+MjxlDAEJF0X8BarkEwB+Zhj9ab+7 5TsDfN3HAJGWUospXNyq1BwETZOqlBrCP598bqjiDBzR4LAhrwTYmNQWwpsFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKgpkXHicplplu4ISybKj2ZuGcXAwHwYDVR0j BBgwFoAUIzwPC1cf2hwzE7+K99aGx0uvy0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFB ZjMvMS8yMzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzM0MwRjBCNTcxRkRBMUMz MzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8y MzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMf4qjhzNxGssiLjlR/FV9WBl3jqeEccSNtf/Y4h4l5eLd81OjtaZ769MeOBW JLzeQu0Fpi9cKtyMjKeuGs0OHJiOtrifMCSzFn5RLxqrN5qRReqvNw8F22M9mC2f qwe15VCwophPLpnQjW9eWp4s32ZGI/oRMRynjWMDFuZvDfqspWU6a4FDxk0EIyAx WOw4J57zHnywt2YgOpUwYE/sW/5aPPJu6tQULxrDu+HwAa8uGOpzDjmzZ64RpRtB JVFd+xNOG9zY95CUvGatpNXNgJSc81pWLcpdOEVOZ9mxsEVzrCy+S0Ek+zjK+g3q UaU+xkgSJ7wgHsusmUtJs8B5Sg== -----END CERTIFICATE-----Generated at Sat Aug 23 22:14:40 2025 by rpki-client