$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: IXBSZsIUFQq2dALSCzGH6bDKog8670FlAwo4+BIi2hI= Subject key identifier: 9E:E8:84:C0:36:3A:65:AE:6A:F2:00:A6:AA:FE:2A:53:A0:61:BC:A7 Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 5FA4C98A93CFDDD5F589CB4D2575C8F5215BAB1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 02EF Signing time: Mon 20 Oct 2025 14:44:55 +0000 Manifest this update: Mon 20 Oct 2025 14:39:55 +0000 Manifest next update: Tue 21 Oct 2025 18:30:55 +0000 Files and hashes: 1: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: aDCvLH5dwHjiVZ3TDclm0F2WlpyYRLr5lrwujTac8RI=) 2: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 3: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a4:c9:8a:93:cf:dd:d5:f5:89:cb:4d:25:75:c8:f5:21:5b:ab:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Oct 20 14:39:55 2025 GMT Not After : Oct 21 18:30:55 2025 GMT Subject: CN=9EE884C0363A65AE6AF200A6AAFE2A53A061BCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:bd:c7:76:3c:e1:65:4f:a8:3d:f0:ad:a2: 3a:c2:2b:1a:e4:ae:78:a9:4c:b9:e9:64:d3:3e:d8: 58:9d:06:56:0c:d7:d6:78:3d:19:06:fb:53:90:de: be:aa:68:ff:ef:56:97:9e:db:32:88:d0:c1:6c:9c: 1b:f0:02:51:80:79:eb:a1:24:32:7c:5d:82:ad:fa: c0:95:4a:b4:ef:20:0f:46:89:d4:a1:8e:88:57:15: cc:e9:6b:c5:69:99:ad:52:b1:7d:4b:1e:45:aa:f1: dc:61:ee:55:a3:f9:ec:3c:cc:14:c8:5b:7a:1b:3b: 50:dd:8a:9b:07:b1:1c:70:fa:5f:01:a7:63:4b:43: 65:48:49:d7:54:22:1f:f5:86:af:bc:37:d2:20:f4: 6f:45:90:a2:3e:ba:08:95:a8:ab:cf:08:e7:81:5e: a6:96:93:03:31:30:3a:2e:08:d3:45:48:e5:bf:f3: ba:61:6c:c9:b7:8e:37:23:69:e7:95:20:1d:9c:77: 9e:c0:fa:ad:26:33:47:8b:73:2b:86:9f:6a:85:79: fa:53:ca:c8:e0:a7:a0:48:23:59:91:64:cf:aa:90: 43:12:7b:1a:e1:75:68:f6:1e:59:00:c8:4c:32:97: 83:e5:01:d3:a0:89:fc:d4:0d:2d:f5:2a:7f:a6:81: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:84:C0:36:3A:65:AE:6A:F2:00:A6:AA:FE:2A:53:A0:61:BC:A7 X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3e:1e:89:03:71:71:e3:f1:c5:3a:9a:44:0d:e2:4e:c5:b8: 6a:e3:5b:1b:dc:ae:62:e7:fd:ed:71:08:cd:0b:18:9e:a2:88: a6:3b:5d:82:54:3b:34:84:d5:27:c5:42:9a:0d:4a:69:dc:7e: ae:40:7f:46:7e:22:ae:f5:24:99:7b:13:a5:4e:aa:5a:d7:62: 38:ff:81:40:eb:14:fb:44:4e:41:7a:89:5b:f1:35:49:c5:98: ac:30:7e:86:7e:ab:23:17:e7:73:c8:2f:06:b2:82:9b:59:c0: 59:f5:bf:7d:d9:22:18:67:4d:cf:23:ee:3b:9d:5c:7f:6b:77: cd:a3:7c:1b:a9:56:75:c2:93:b5:54:32:1d:9d:b3:b9:74:17: 19:db:5b:ef:7e:7b:a2:be:86:de:80:70:54:0a:0d:52:bf:7c: 1c:08:f5:c1:40:6f:44:8f:83:3e:a4:c4:33:b0:be:bb:2a:6d: b3:89:46:c5:9c:74:e5:8a:39:1c:f3:5f:e3:7d:f0:0e:a5:16: 90:70:a8:33:24:16:80:17:c1:c9:53:be:7e:3c:c7:7c:b4:25: 67:39:81:c0:fa:e7:43:c5:e5:30:78:b4:00:df:a2:f9:a4:39: 36:77:4f:a5:18:f7:e0:a3:cb:3e:15:5d:6e:16:9d:a9:f4:16: 9b:57:97:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX6TJipPP3dX1ictNJXXI9SFbqxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTEwMjAxNDM5NTVaFw0yNTEwMjExODMwNTVaMDMxMTAvBgNV BAMTKDlFRTg4NEMwMzYzQTY1QUU2QUYyMDBBNkFBRkUyQTUzQTA2MUJDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/r3HdjzhZU+oPfCtojrCKxrk rnipTLnpZNM+2FidBlYM19Z4PRkG+1OQ3r6qaP/vVpee2zKI0MFsnBvwAlGAeeuh JDJ8XYKt+sCVSrTvIA9GidShjohXFczpa8Vpma1SsX1LHkWq8dxh7lWj+ew8zBTI W3obO1DdipsHsRxw+l8Bp2NLQ2VISddUIh/1hq+8N9Ig9G9FkKI+ugiVqKvPCOeB XqaWkwMxMDouCNNFSOW/87phbMm3jjcjaeeVIB2cd57A+q0mM0eLcyuGn2qFefpT ysjgp6BII1mRZM+qkEMSexrhdWj2HlkAyEwyl4PlAdOgifzUDS31Kn+mgfbbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnuiEwDY6Za5q8gCmqv4qU6BhvKcwHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWj4eiQNxcePxxTqaRA3iTsW4auNbG9yuYuf97XEIzQsYnqKIpjtdglQ7NITV J8VCmg1Kadx+rkB/Rn4irvUkmXsTpU6qWtdiOP+BQOsU+0ROQXqJW/E1ScWYrDB+ hn6rIxfnc8gvBrKCm1nAWfW/fdkiGGdNzyPuO51cf2t3zaN8G6lWdcKTtVQyHZ2z uXQXGdtb7357or6G3oBwVAoNUr98HAj1wUBvRI+DPqTEM7C+uypts4lGxZx05Yo5 HPNf433wDqUWkHCoMyQWgBfByVO+fjzHfLQlZzmBwPrnQ8XlMHi0AN+i+aQ5NndP pRj34KPLPhVdbhadqfQWm1eX6w== -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:35 2025 by rpki-client