$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json) Hash identifier: JxHww3s+A9Bm2Cm+9wD2y6i+rZ9oMrHg0kHbiat4qtE= Subject key identifier: B2:DD:5E:43:87:72:82:90:C5:0F:D4:8E:CE:22:C6:BD:4C:C6:0E:8D Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Certificate serial: 1FF0251B74A2ED6B3CC660A90C8D48BB56EBC910 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 13:02:17 +0000 Manifest this update: Wed 05 Nov 2025 12:57:17 +0000 Manifest next update: Thu 06 Nov 2025 16:13:17 +0000 Files and hashes: 1: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: 0B5ZkjfsZPhCzLUqZt1J1E+yqhvBxXNjYqwUE+SdhhE=) 2: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: V1QDtG5/6mZyaom0qLY64DZx50lLzCOOwWYYnxJfjIY=) 3: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: 0+yYrRYF3DnkZpf5I1MIj3HpO9zYE9gRE6VsrC5/q7A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f0:25:1b:74:a2:ed:6b:3c:c6:60:a9:0c:8d:48:bb:56:eb:c9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Validity Not Before: Nov 5 12:57:17 2025 GMT Not After : Nov 6 16:13:17 2025 GMT Subject: CN=B2DD5E4387728290C50FD48ECE22C6BD4CC60E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:b3:1c:a9:a0:09:0b:6a:ea:97:af:ca:e4: e7:87:1f:de:c0:5a:4c:3e:b3:f1:1a:8b:0c:ec:09: da:86:19:c9:bb:1f:9a:85:70:b4:c7:05:04:a7:8a: 2c:02:2e:44:8f:19:73:38:29:12:c3:de:f3:c3:ce: a8:4c:87:47:b3:98:3a:1a:19:fc:d5:65:10:6e:98: b0:e9:38:78:e7:02:f3:95:00:8a:21:1b:e9:d3:16: 4b:b7:50:4d:f4:0e:78:ec:0c:0f:c3:db:7b:b3:35: f1:bd:a7:6a:e8:b7:34:6f:65:24:d8:03:ac:6b:1f: 6d:cc:58:ce:87:e2:4a:98:fc:62:84:cf:c0:80:1a: 65:67:63:08:8e:d0:8a:19:86:d0:c6:c0:ba:34:05: 28:73:f9:87:45:3e:81:77:93:c1:8b:b5:90:88:97: 9d:dd:f3:aa:6c:78:e8:8f:2b:89:bb:57:14:de:5d: 69:09:3c:9f:11:08:aa:f6:01:4c:cb:fa:02:f2:44: 1c:7a:c6:61:56:df:db:0d:1f:7b:6f:b4:0f:07:18: 11:e4:61:f3:ff:ff:8b:41:63:88:b7:a8:a3:69:0c: 4a:c5:3e:37:7c:a0:25:c3:0f:5c:f3:e9:27:3f:63: 18:9e:a7:22:f6:da:be:63:f4:e2:66:3f:ab:f7:83: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:5E:43:87:72:82:90:C5:0F:D4:8E:CE:22:C6:BD:4C:C6:0E:8D X509v3 Authority Key Identifier: keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:23:b9:90:e9:65:bc:04:67:57:26:2b:ff:d0:24:d5:b9:82: d9:fa:27:b0:db:d4:53:24:4d:58:b5:b6:7a:ac:40:57:0f:63: 72:1e:19:9d:bd:cd:30:f0:d5:2a:4d:28:90:ef:50:06:81:b0: f7:e3:d4:70:21:1a:aa:f0:a1:77:2f:27:71:89:2c:64:57:53: 02:d7:52:0f:c9:7d:71:85:ce:d8:73:6e:a3:2b:34:d5:88:2d: bb:8e:93:64:21:e5:1c:58:5c:41:f3:56:6d:42:98:64:66:e5: 48:0a:38:4a:ac:88:2e:3a:0d:e8:47:81:bd:c2:30:36:e9:35: e8:3f:87:f8:39:80:0a:d5:db:e0:1e:d9:e4:7e:78:f9:4c:2d: e7:e5:70:a8:38:de:2f:5a:48:5a:8e:da:bd:d4:6f:4f:fd:0e: 9a:ef:f6:c6:a9:e0:37:da:74:ce:ed:4d:07:70:fe:ba:78:88: bf:db:26:5e:4d:d3:a1:f8:ad:07:88:77:b6:d3:a7:7c:b9:c3: 07:c1:cf:9e:93:f6:f4:ed:fe:66:e5:7a:0b:ae:b7:0a:95:32: da:e8:ab:28:71:a7:ea:76:99:06:a2:4a:af:c9:58:97:82:ba: fb:09:a7:91:7c:3b:f9:3e:eb:80:10:3f:3e:64:19:5e:a0:ff: 04:7c:0a:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH/AlG3Si7Ws8xmCpDI1Iu1bryRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0 QkFGQ0I0MTAeFw0yNTExMDUxMjU3MTdaFw0yNTExMDYxNjEzMTdaMDMxMTAvBgNV BAMTKEIyREQ1RTQzODc3MjgyOTBDNTBGRDQ4RUNFMjJDNkJENENDNjBFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG7McqaAJC2rql6/K5OeHH97A Wkw+s/EaiwzsCdqGGcm7H5qFcLTHBQSniiwCLkSPGXM4KRLD3vPDzqhMh0ezmDoa GfzVZRBumLDpOHjnAvOVAIohG+nTFku3UE30DnjsDA/D23uzNfG9p2rotzRvZSTY A6xrH23MWM6H4kqY/GKEz8CAGmVnYwiO0IoZhtDGwLo0BShz+YdFPoF3k8GLtZCI l53d86pseOiPK4m7VxTeXWkJPJ8RCKr2AUzL+gLyRBx6xmFW39sNH3tvtA8HGBHk YfP//4tBY4i3qKNpDErFPjd8oCXDD1zz6Sc/YxiepyL22r5j9OJmP6v3g/WrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUst1eQ4dygpDFD9SOziLGvUzGDo0wHwYDVR0j BBgwFoAUIzwPC1cf2hwzE7+K99aGx0uvy0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFB ZjMvMS8yMzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzM0MwRjBCNTcxRkRBMUMz MzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8y MzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKiO5kOllvARnVyYr/9Ak1bmC2fonsNvUUyRNWLW2eqxAVw9jch4Znb3NMPDV Kk0okO9QBoGw9+PUcCEaqvChdy8ncYksZFdTAtdSD8l9cYXO2HNuoys01Ygtu46T ZCHlHFhcQfNWbUKYZGblSAo4SqyILjoN6EeBvcIwNuk16D+H+DmACtXb4B7Z5H54 +Uwt5+VwqDjeL1pIWo7avdRvT/0Omu/2xqngN9p0zu1NB3D+uniIv9smXk3Tofit B4h3ttOnfLnDB8HPnpP29O3+ZuV6C663CpUy2uirKHGn6naZBqJKr8lYl4K6+wmn kXw7+T7rgBA/PmQZXqD/BHwKwA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:29 2025 by rpki-client