$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft File: 23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft (raw, json) Hash identifier: qZx2N8RQrGB5SiO0YyntfBXSTREdS4orDop2c5hU4WM= Subject key identifier: 42:AF:90:2F:71:D5:C2:8B:07:DA:45:07:3D:C7:CC:01:1A:CD:04:48 Authority key identifier: 23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD Certificate issuer: /CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD Certificate serial: 2EA3393F4F0E4F71D0BD2B0AA8547D2E654F034B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer Subject info access: rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft Manifest number: 0134 Signing time: Mon 20 Oct 2025 08:13:00 +0000 Manifest this update: Mon 20 Oct 2025 08:08:00 +0000 Manifest next update: Tue 21 Oct 2025 08:26:00 +0000 Files and hashes: 1: 3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa (hash: OV2uokFJtII8YGfyjdpA+Gxu38CgOM5DTIjyKyhHqJA=) 2: 323830343a373330633a3a2f33322d3334203d3e20323730383932.roa (hash: 25HfBB+yrVqfXG5hgm/wReJjkNqFdEgoiPCBzOf68Bo=) 3: 23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl (hash: ItSGrGh3Drhzk33yKlazvtMIo4jF2BW7fQob1hln9Pc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a3:39:3f:4f:0e:4f:71:d0:bd:2b:0a:a8:54:7d:2e:65:4f:03:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD Validity Not Before: Oct 20 08:08:00 2025 GMT Not After : Oct 21 08:26:00 2025 GMT Subject: CN=42AF902F71D5C28B07DA45073DC7CC011ACD0448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:52:da:de:87:69:23:84:68:2e:f3:ca:87: b5:a7:f7:7e:0d:5f:28:e0:6f:d8:e6:de:78:2d:f8: fd:e9:3e:e9:02:fe:d4:9f:30:e7:f2:ef:93:73:7b: 54:8b:c8:01:61:da:ba:07:5c:2a:7d:f6:b0:f8:2d: d2:d1:d3:97:a5:c8:98:b9:f3:3c:c9:0c:fa:35:a6: b6:0a:53:f3:db:14:5c:c3:d5:dc:c0:ae:b7:90:1d: d2:42:94:cf:e5:d7:2a:62:fb:d4:58:6a:e0:ce:95: 46:50:cd:6b:02:19:41:29:a4:fd:3b:a8:7f:52:be: 24:19:84:60:5a:64:0c:76:7e:f7:24:d3:64:e0:12: aa:f0:94:37:ad:ce:be:e9:34:79:2d:04:4e:6b:fe: 13:d5:f5:b8:bc:27:c6:e3:52:df:ba:76:b1:54:b5: 3a:02:33:c6:ce:8c:33:36:f8:47:37:94:b6:b3:5c: 28:8a:ed:c9:3d:dc:c2:28:36:86:31:d5:f6:98:dc: 0d:24:04:91:b6:b0:0b:1d:d2:66:90:85:db:e2:8f: ab:90:52:6e:27:d4:7d:a6:de:d1:e1:5b:50:1d:63: 82:78:0d:40:16:45:9e:a7:6a:76:57:2d:d7:91:f1: 10:64:21:7f:20:09:ba:7c:6e:68:e2:7a:a4:9b:07: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:90:2F:71:D5:C2:8B:07:DA:45:07:3D:C7:CC:01:1A:CD:04:48 X509v3 Authority Key Identifier: keyid:23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:47:3d:9e:89:5f:06:55:09:38:0a:c4:e9:1e:b4:7f:dc:13: ac:b9:71:dd:8e:d3:b6:a5:dd:8d:a4:47:a4:2e:91:ed:91:7e: a6:a3:ad:8c:41:29:1b:6d:bd:5a:c1:f0:39:a1:06:eb:39:7c: 59:26:b6:63:09:9f:ba:22:50:75:ac:12:e1:46:1f:38:e0:99: 20:24:6b:a9:c2:03:67:39:78:e9:b8:95:1f:6c:40:40:60:cd: 51:89:a7:49:d9:cf:0b:c6:54:44:27:f5:15:c5:4e:65:a8:42: 95:81:e0:b3:26:8d:ca:92:a2:9a:ce:6b:78:d8:91:1a:18:b3: dc:30:66:66:74:9c:c7:db:10:05:61:48:0e:e7:d8:50:15:8a: d4:62:8c:04:80:ac:1f:71:0d:86:7c:81:6b:c4:f4:6d:c0:8f: 61:02:2f:31:39:ad:0e:1b:88:01:72:a8:a8:65:14:3c:64:3e: 1f:ad:1a:17:a8:83:b4:92:8c:b8:e2:90:81:65:dd:1e:12:58: bd:12:c8:43:94:3a:dc:7d:94:6b:15:bd:a8:e2:24:62:58:99: 3f:cc:e7:d9:f0:c7:cc:36:7e:c3:b5:ed:e0:f5:24:53:dc:c0: 63:96:3c:4b:9a:c7:d8:b7:79:a0:5c:cd:77:a5:d7:80:f9:01: bc:bd:96:c9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIULqM5P08OT3HQvSsKqFR9LmVPA0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDMEFDQURBNzAzMjFFQjM5NDJGMEZGMDMwQjcwQUQ5 OTA0RENBRDAeFw0yNTEwMjAwODA4MDBaFw0yNTEwMjEwODI2MDBaMDMxMTAvBgNV BAMTKDQyQUY5MDJGNzFENUMyOEIwN0RBNDUwNzNEQzdDQzAxMUFDRDA0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOlLa3odpI4RoLvPKh7Wn934N Xyjgb9jm3ngt+P3pPukC/tSfMOfy75Nze1SLyAFh2roHXCp99rD4LdLR05elyJi5 8zzJDPo1prYKU/PbFFzD1dzArreQHdJClM/l1ypi+9RYauDOlUZQzWsCGUEppP07 qH9SviQZhGBaZAx2fvck02TgEqrwlDetzr7pNHktBE5r/hPV9bi8J8bjUt+6drFU tToCM8bOjDM2+Ec3lLazXCiK7ck93MIoNoYx1faY3A0kBJG2sAsd0maQhdvij6uQ Um4n1H2m3tHhW1AdY4J4DUAWRZ6nanZXLdeR8RBkIX8gCbp8bmjieqSbB0XZAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUQq+QL3HVwosH2kUHPcfMARrNBEgwHwYDVR0j BBgwFoAUI8CsracDIes5QvD/AwtwrZkE3K0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby96bWlmamYzN21uUHFzSnpmYzdaZWJ6WkNQQTdHWEFLN1lMUzZYR2o3YUNF LzAvMjNDMEFDQURBNzAzMjFFQjM5NDJGMEZGMDMwQjcwQUQ5OTA0RENBRC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yM0MwQUNBREE3MDMyMUVCMzk0 MkYwRkYwMzBCNzBBRDk5MDREQ0FELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3pt aWZqZjM3bW5QcXNKemZjN1plYnpaQ1BBN0dYQUs3WUxTNlhHajdhQ0UvMC8yM0Mw QUNBREE3MDMyMUVCMzk0MkYwRkYwMzBCNzBBRDk5MDREQ0FELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA NEc9nolfBlUJOArE6R60f9wTrLlx3Y7TtqXdjaRHpC6R7ZF+pqOtjEEpG229WsHw OaEG6zl8WSa2YwmfuiJQdawS4UYfOOCZICRrqcIDZzl46biVH2xAQGDNUYmnSdnP C8ZURCf1FcVOZahClYHgsyaNypKims5reNiRGhiz3DBmZnScx9sQBWFIDufYUBWK 1GKMBICsH3ENhnyBa8T0bcCPYQIvMTmtDhuIAXKoqGUUPGQ+H60aF6iDtJKMuOKQ gWXdHhJYvRLIQ5Q63H2UaxW9qOIkYliZP8zn2fDHzDZ+w7Xt4PUkU9zAY5Y8S5rH 2Ld5oFzNd6XXgPkBvL2WyQ== -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:38 2025 by rpki-client