$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json) Hash identifier: HhUgMJ+dhI+rKw3ybO4LdgHg2NlqV7lVFg88PKnELpU= Subject key identifier: 60:49:2A:8E:C3:BC:C3:CF:7C:31:73:4D:34:94:07:44:03:30:48:62 Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Certificate issuer: /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Certificate serial: 4D24C469FD65438FCEB184367021C51B424A75BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft Manifest number: 02A0 Signing time: Wed 05 Nov 2025 00:26:18 +0000 Manifest this update: Wed 05 Nov 2025 00:21:18 +0000 Manifest next update: Thu 06 Nov 2025 02:41:18 +0000 Files and hashes: 1: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=) 2: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=) 3: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: jRTseOWA9lV/1+9tsEHq8WPMqY4KtkEg859iznoirXE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:24:c4:69:fd:65:43:8f:ce:b1:84:36:70:21:c5:1b:42:4a:75:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Validity Not Before: Nov 5 00:21:18 2025 GMT Not After : Nov 6 02:41:18 2025 GMT Subject: CN=60492A8EC3BCC3CF7C31734D3494074403304862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:7a:a7:3f:e2:51:62:f2:1d:b3:19:9c:3b: 4e:05:a9:3d:02:77:70:ef:9f:eb:42:f2:d0:f2:ee: f9:d1:6d:ee:fa:c3:55:50:47:44:81:bd:b2:ff:fe: 8c:58:ff:82:3a:77:8a:77:64:bf:59:fb:b1:3c:26: 79:ee:d6:38:5d:3a:4d:37:35:91:f2:86:e7:f0:08: 23:ce:3c:8c:8b:e3:a1:e3:25:3e:85:53:9c:89:0d: 9c:25:b3:12:11:29:30:7f:a1:f1:c7:01:35:29:ee: 3b:48:51:49:79:48:9a:79:f5:61:a5:a1:2a:d6:e9: 3a:fb:03:bb:d4:ba:8f:96:11:0a:a3:03:59:1b:1b: 03:37:db:12:89:61:88:5d:cf:95:73:8d:d0:1b:e2: 23:2d:d0:fa:5e:3d:d3:c2:55:dd:76:f3:b0:c6:19: 32:38:72:f7:b7:90:e5:d8:68:05:01:28:76:0a:09: 36:da:e3:0a:db:62:51:f5:ac:50:7a:51:fe:9c:94: c9:f4:7e:2f:e7:54:3c:c5:b0:45:5e:d3:62:bb:64: 1a:ba:59:f0:9d:74:7a:bc:1c:a7:3c:ae:78:54:40: 72:7b:2d:77:3d:e9:bf:32:29:f2:6f:bb:70:f6:d7: 9e:ef:82:45:db:2a:4e:5d:b3:c3:8a:d1:54:1f:c5: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:49:2A:8E:C3:BC:C3:CF:7C:31:73:4D:34:94:07:44:03:30:48:62 X509v3 Authority Key Identifier: keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c0:db:ba:dd:11:86:d6:ea:bc:c8:90:0f:ac:9f:e8:29:97: 5c:04:38:5d:99:3a:1b:2c:a9:f2:26:33:25:2c:91:d1:54:a3: 29:f6:7b:b7:68:4c:fe:79:a5:f7:0c:5f:2c:a6:e8:ee:db:92: 09:a5:a9:b7:42:66:53:b1:a1:8b:14:d0:a6:83:5c:c8:d0:cc: 5e:a8:bf:cd:b7:9d:48:78:f1:bb:b7:6b:44:ff:df:7b:8d:25: 8d:c2:9d:6a:3e:53:c0:ef:de:52:2e:8a:5e:80:7c:91:46:6e: 32:e8:7e:fb:d4:ec:4f:c2:ff:9d:ea:39:7b:36:0d:08:e3:79: ea:b7:96:fa:0a:81:c7:3b:9e:df:dd:fc:e4:16:4d:49:1d:85: 66:bc:65:b9:88:bb:cf:51:17:d9:e3:11:f5:08:f4:33:72:22: d0:ca:09:e1:dd:6e:ee:f3:f6:9e:0f:8b:b0:3e:d3:bd:b1:1d: 0d:da:c8:41:36:11:9a:4f:d6:18:d4:ff:9e:bf:74:23:41:76: 4e:18:13:59:2b:fd:92:72:04:70:87:84:fe:97:7f:50:f7:41: dd:95:86:89:fb:93:f6:90:7d:72:fa:af:ce:d8:e6:bf:bf:55: 15:1e:6e:76:87:5e:72:9b:f8:b3:59:78:fc:8b:aa:23:67:93: 00:2e:08:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTSTEaf1lQ4/OsYQ2cCHFG0JKdbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4 RTgyNzdEQTAeFw0yNTExMDUwMDIxMThaFw0yNTExMDYwMjQxMThaMDMxMTAvBgNV BAMTKDYwNDkyQThFQzNCQ0MzQ0Y3QzMxNzM0RDM0OTQwNzQ0MDMzMDQ4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMXqnP+JRYvIdsxmcO04FqT0C d3Dvn+tC8tDy7vnRbe76w1VQR0SBvbL//oxY/4I6d4p3ZL9Z+7E8Jnnu1jhdOk03 NZHyhufwCCPOPIyL46HjJT6FU5yJDZwlsxIRKTB/ofHHATUp7jtIUUl5SJp59WGl oSrW6Tr7A7vUuo+WEQqjA1kbGwM32xKJYYhdz5VzjdAb4iMt0PpePdPCVd1287DG GTI4cve3kOXYaAUBKHYKCTba4wrbYlH1rFB6Uf6clMn0fi/nVDzFsEVe02K7ZBq6 WfCddHq8HKc8rnhUQHJ7LXc96b8yKfJvu3D2157vgkXbKk5ds8OK0VQfxUgFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYEkqjsO8w898MXNNNJQHRAMwSGIwHwYDVR0j BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5 MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8y M0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATcDbut0RhtbqvMiQD6yf6CmXXAQ4XZk6Gyyp8iYzJSyR0VSjKfZ7t2hM/nml 9wxfLKbo7tuSCaWpt0JmU7GhixTQpoNcyNDMXqi/zbedSHjxu7drRP/fe40ljcKd aj5TwO/eUi6KXoB8kUZuMuh++9TsT8L/neo5ezYNCON56reW+gqBxzue39385BZN SR2FZrxluYi7z1EX2eMR9Qj0M3Ii0MoJ4d1u7vP2ng+LsD7TvbEdDdrIQTYRmk/W GNT/nr90I0F2ThgTWSv9knIEcIeE/pd/UPdB3ZWGifuT9pB9cvqvztjmv79VFR5u dodecpv4s1l4/IuqI2eTAC4Ikw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:16:54 2025 by rpki-client