$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft File: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft (raw, json) Hash identifier: Bvl+3T+F5pXKaclqFuEPwTh4n8TEMguGrSMxq0mvcFc= Subject key identifier: 65:C7:34:AB:6E:FF:76:AD:E3:22:9A:81:E9:6E:33:D6:63:C1:02:8B Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6 Certificate issuer: /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6 Certificate serial: 1A9C9FDEE52E50B00B5E05E1DE6C5DAC5A00CA1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft Manifest number: 0132 Signing time: Mon 20 Oct 2025 01:10:10 +0000 Manifest this update: Mon 20 Oct 2025 01:05:10 +0000 Manifest next update: Tue 21 Oct 2025 05:03:10 +0000 Files and hashes: 1: 323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (hash: 9q+3WZCQelpJ82GHGMPZnl7Km+15Ep1MFsxC6afmR5c=) 2: 323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa (hash: sTMl5oOR+PB27IkCFATLub4H/wVGJc4jQBSRkZbaLIo=) 3: 323830343a386166383a3a2f33342d3334203d3e20323733373034.roa (hash: QXrOFT2cUsRU2r0pxCN+XM3aulT9UCyMbe+iqjUwCNQ=) 4: 3137372e38342e33312e302f32342d3234203d3e20323733373034.roa (hash: YTpdZsMpLF8I+1J7/jW48bSzCvcUNVp1vm4xp3Q7+BU=) 5: 323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa (hash: qAf22STPntaWt88qJT4dHNuQuRpFDP4chhOnFhx0vko=) 6: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl (hash: vwav3U2Rcm4hzjgArJsR9sIGqiNzg66RGeDuMSEDcFo=) 7: 323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (hash: HYoFVQcqZGemQ3ppyPtnBcGaTkZRv9Y586oS+HeRgn0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9c:9f:de:e5:2e:50:b0:0b:5e:05:e1:de:6c:5d:ac:5a:00:ca:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6 Validity Not Before: Oct 20 01:05:10 2025 GMT Not After : Oct 21 05:03:10 2025 GMT Subject: CN=65C734AB6EFF76ADE3229A81E96E33D663C1028B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:a6:1f:b2:4f:e7:c8:7e:f5:c0:7b:3a:d1: e2:b5:e8:90:58:05:cb:22:2d:89:68:f2:d4:f1:8d: 5e:3a:5f:ea:df:84:17:fd:bd:e5:61:22:36:a0:c8: 6d:34:ab:0c:0c:cc:f1:9c:85:40:6b:b1:3d:47:ea: 9b:2a:35:4f:bb:0a:a3:1c:8d:b6:e0:dd:72:13:1a: e4:28:75:56:b3:50:b9:c7:f1:90:92:0e:c4:12:f7: 87:f3:83:19:d6:7f:68:8f:97:51:4b:80:f3:41:b8: 2d:5d:0e:7a:c6:2a:92:4c:e2:d8:dc:5f:92:77:9d: 99:76:66:5f:dd:12:ae:59:f5:5b:a6:e1:be:89:3c: 91:26:f6:95:74:3b:7c:96:2f:8b:b8:7a:55:94:b8: c5:f6:d7:7d:e9:aa:dc:a1:59:0e:ed:d9:d0:aa:80: 27:84:e9:ff:b5:30:e0:62:8c:30:b5:88:76:a6:d9: 5b:16:b9:12:59:54:b4:87:d5:68:05:cf:60:00:19: 1a:87:39:0b:ae:5b:d7:da:f1:dd:4b:29:21:cf:21: 35:b5:5b:dc:1a:5a:fd:16:9e:56:0b:8e:3a:49:d3: 1e:81:b9:3f:dc:f5:a1:56:e6:53:ad:b2:4e:10:22: f6:9c:b7:88:60:e5:68:9b:cb:7f:63:d0:63:cf:28: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C7:34:AB:6E:FF:76:AD:E3:22:9A:81:E9:6E:33:D6:63:C1:02:8B X509v3 Authority Key Identifier: keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e1:df:f4:da:07:52:46:7f:5a:47:ea:37:88:b5:ab:43:4a: 00:f9:b7:a3:69:25:87:8a:3e:13:14:da:87:eb:94:21:e8:d9: e5:e6:61:32:dd:19:d0:38:6f:b0:75:06:eb:0e:df:63:47:71: 8b:13:a3:6f:4a:20:17:3a:55:72:bd:6b:ce:8d:a0:0d:d1:f2: be:27:d8:70:ec:2f:3e:b5:0d:c2:46:07:98:95:f1:a3:3b:09: 16:51:dc:ac:10:80:ac:dc:f2:79:8f:77:1a:c2:81:36:6d:c2: e0:b6:95:b5:5d:9b:c7:78:66:27:8b:ce:14:01:e4:8d:76:b4: 32:08:d1:8a:dd:2e:f4:63:a3:d6:ab:e9:86:9d:9d:1b:71:ab: 59:d6:ec:66:30:c5:2f:17:6d:f6:c6:79:d3:c0:41:2e:f1:83: 1a:e4:6b:92:75:94:55:5f:76:c0:49:6a:4a:1a:1f:8f:2a:65: ba:b9:d6:a2:59:c9:e3:2a:f2:c5:0f:7c:ae:c8:68:1c:98:17: df:f5:f0:79:e0:cc:0c:f5:36:b9:1f:b1:90:94:46:6c:c8:c8: d3:b2:d7:6c:c1:b7:20:95:c1:62:1b:36:54:fe:bc:16:e6:9b: 55:e1:86:df:de:f1:6e:2d:14:8c:3b:16:d6:75:68:85:fc:6c: b0:33:65:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGpyf3uUuULALXgXh3mxdrFoAyh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMjJFNjdDOUZFOUI1ODkyNzVENUMxNDkwMkZGN0M1 MURBREJGNjAeFw0yNTEwMjAwMTA1MTBaFw0yNTEwMjEwNTAzMTBaMDMxMTAvBgNV BAMTKDY1QzczNEFCNkVGRjc2QURFMzIyOUE4MUU5NkUzM0Q2NjNDMTAyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC506Yfsk/nyH71wHs60eK16JBY BcsiLYlo8tTxjV46X+rfhBf9veVhIjagyG00qwwMzPGchUBrsT1H6psqNU+7CqMc jbbg3XITGuQodVazULnH8ZCSDsQS94fzgxnWf2iPl1FLgPNBuC1dDnrGKpJM4tjc X5J3nZl2Zl/dEq5Z9Vum4b6JPJEm9pV0O3yWL4u4elWUuMX2133pqtyhWQ7t2dCq gCeE6f+1MOBijDC1iHam2VsWuRJZVLSH1WgFz2AAGRqHOQuuW9fa8d1LKSHPITW1 W9waWv0WnlYLjjpJ0x6BuT/c9aFW5lOtsk4QIvact4hg5Wiby39j0GPPKJHpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZcc0q27/dq3jIpqB6W4z1mPBAoswHwYDVR0j BBgwFoAUI6IuZ8n+m1iSddXBSQL/fFHa2/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW WGovMC8yM0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTIyRTY3QzlGRTlCNTg5 Mjc1RDVDMTQ5MDJGRjdDNTFEQURCRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdWWGovMC8y M0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhuHf9NoHUkZ/WkfqN4i1q0NKAPm3o2klh4o+ExTah+uUIejZ5eZhMt0Z0Dhv sHUG6w7fY0dxixOjb0ogFzpVcr1rzo2gDdHyvifYcOwvPrUNwkYHmJXxozsJFlHc rBCArNzyeY93GsKBNm3C4LaVtV2bx3hmJ4vOFAHkjXa0MgjRit0u9GOj1qvphp2d G3GrWdbsZjDFLxdt9sZ508BBLvGDGuRrknWUVV92wElqShofjyplurnWolnJ4yry xQ98rshoHJgX3/XweeDMDPU2uR+xkJRGbMjI07LXbMG3IJXBYhs2VP68FuabVeGG 397xbi0UjDsW1nVohfxssDNlYQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:02 2025 by rpki-client