$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: 35pdiftyeBfzinW672K37w+ATkdQClVFqWBDpoEJVNs= Subject key identifier: 5E:A8:18:DE:49:0A:57:1C:8D:23:11:16:F7:B2:8A:7F:5D:C5:82:48 Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 3939A8C5A3E4F368A98A74BC66697F2838D9CD42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: 68 Signing time: Wed 05 Nov 2025 15:23:15 +0000 Manifest this update: Wed 05 Nov 2025 15:18:15 +0000 Manifest next update: Thu 06 Nov 2025 17:05:15 +0000 Files and hashes: 1: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: hLzqg2iUGRxDzY42nnnwfBD/3MnLTXr2Q7YdjEd6ZZo=) 2: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) 3: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:39:a8:c5:a3:e4:f3:68:a9:8a:74:bc:66:69:7f:28:38:d9:cd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Nov 5 15:18:15 2025 GMT Not After : Nov 6 17:05:15 2025 GMT Subject: CN=5EA818DE490A571C8D231116F7B28A7F5DC58248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:70:df:99:5e:7a:6c:17:82:27:62:9e:0f: c9:4b:b5:2e:01:11:c2:8c:fb:f1:a1:4f:08:68:6d: 79:c3:12:12:29:01:27:92:5d:5e:d8:ce:ae:b4:d4: 78:67:c3:54:a7:96:96:82:80:ca:b4:67:e3:ae:3d: 30:78:4d:4a:f1:4e:7f:93:72:b8:1b:31:9f:99:3d: 29:01:b1:6b:73:2d:f9:b6:f5:28:10:e7:48:67:c6: 63:4c:52:b8:38:3e:31:65:0e:35:8b:43:83:25:d2: d4:bf:c1:cb:08:b7:ca:b8:d3:5b:56:49:b3:c2:ba: e1:58:da:ad:ff:dc:2e:6b:9a:2d:92:f0:73:ed:ab: b1:52:f8:be:25:ed:89:a3:63:65:e5:7a:eb:29:9a: 9c:2d:e0:2e:c6:e7:f2:b3:9f:74:8a:85:6d:ab:7f: 18:44:10:2a:f3:17:ae:e1:80:bf:cf:8a:ac:c0:ae: 42:05:12:59:b7:b5:a9:5c:bf:2d:21:1f:a4:42:6b: 25:5f:c3:34:7b:ca:7a:c1:75:2c:f1:8f:7a:5f:f3: b5:3b:18:9d:42:f1:8c:5f:1f:69:16:00:a7:01:93: b0:69:87:18:48:9c:5a:c5:d7:68:a8:35:86:05:03: 7b:e7:9b:2a:96:e0:47:89:8c:23:69:9c:91:7d:41: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A8:18:DE:49:0A:57:1C:8D:23:11:16:F7:B2:8A:7F:5D:C5:82:48 X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:75:16:2a:2d:e4:be:58:26:88:41:d1:bd:fc:65:f9:10:6b: 28:4a:cc:3e:21:09:3a:c7:c2:88:a2:4b:6f:16:87:ba:81:31: 55:c6:8b:f0:06:07:ed:34:b2:4a:92:04:2f:39:14:6e:ff:6f: 02:4f:ce:b4:c6:92:68:42:3e:97:05:ad:82:11:97:7a:71:70: 0f:8f:01:a8:ae:11:7f:ee:f8:99:8d:7c:49:3a:c0:01:70:e9: 5c:fa:60:73:67:26:5b:f1:2d:bc:c8:b0:a4:8f:66:ed:17:45: 8c:d4:d8:e7:af:b2:fb:28:dc:9c:e0:04:25:c6:fe:af:2e:4e: d9:69:29:fe:4a:79:9d:a5:4b:bc:c8:e0:03:f9:f8:10:40:00: c1:3d:11:da:ef:84:ee:de:ae:40:74:85:71:d1:3a:75:52:0b: d0:58:de:38:58:07:76:16:24:26:3c:c6:5e:17:7b:e3:43:26: 29:0b:ae:cb:70:3f:e5:7e:d5:38:f3:15:be:cb:3c:35:71:e6: 48:76:2a:e2:a4:da:43:f1:4a:64:cf:3b:5b:cc:5f:5f:b4:e5: 9f:5d:68:38:9e:5d:3b:f7:ef:b9:d1:61:c7:83:b3:d3:f5:5d: b7:71:6b:0a:7c:3e:09:7c:6f:bd:a3:df:cb:7c:24:d0:b6:e0: eb:53:0e:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOTmoxaPk82ipinS8Zml/KDjZzUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTExMDUxNTE4MTVaFw0yNTExMDYxNzA1MTVaMDMxMTAvBgNV BAMTKDVFQTgxOERFNDkwQTU3MUM4RDIzMTExNkY3QjI4QTdGNURDNTgyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5nDfmV56bBeCJ2KeD8lLtS4B EcKM+/GhTwhobXnDEhIpASeSXV7Yzq601Hhnw1SnlpaCgMq0Z+OuPTB4TUrxTn+T crgbMZ+ZPSkBsWtzLfm29SgQ50hnxmNMUrg4PjFlDjWLQ4Ml0tS/wcsIt8q401tW SbPCuuFY2q3/3C5rmi2S8HPtq7FS+L4l7YmjY2Xleuspmpwt4C7G5/Kzn3SKhW2r fxhEECrzF67hgL/PiqzArkIFElm3talcvy0hH6RCayVfwzR7ynrBdSzxj3pf87U7 GJ1C8YxfH2kWAKcBk7BphxhInFrF12ioNYYFA3vnmyqW4EeJjCNpnJF9QUaXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXqgY3kkKVxyNIxEW97KKf13FgkgwHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABnUWKi3kvlgmiEHRvfxl+RBrKErMPiEJOsfCiKJLbxaHuoExVcaL8AYH7TSy SpIELzkUbv9vAk/OtMaSaEI+lwWtghGXenFwD48BqK4Rf+74mY18STrAAXDpXPpg c2cmW/EtvMiwpI9m7RdFjNTY56+y+yjcnOAEJcb+ry5O2Wkp/kp5naVLvMjgA/n4 EEAAwT0R2u+E7t6uQHSFcdE6dVIL0FjeOFgHdhYkJjzGXhd740MmKQuuy3A/5X7V OPMVvss8NXHmSHYq4qTaQ/FKZM87W8xfX7Tln11oOJ5dO/fvudFhx4Oz0/Vdt3Fr Cnw+CXxvvaPfy3wk0Lbg61MO7g== -----END CERTIFICATE-----Generated at Thu Nov 6 01:46:14 2025 by rpki-client