$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft File: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft (raw, json) Hash identifier: eoaC+1y9eWfW1Pm00bkD9SLULrvYfHUoC+SFgKL2JWU= Subject key identifier: 3C:56:66:62:D9:5F:A2:4C:ED:36:8F:E4:EB:87:6E:AF:C4:C9:01:2A Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Certificate issuer: /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Certificate serial: 5CAED7DBCF44511B7A3A499E4D90D0378DDBD7D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft Manifest number: 0217 Signing time: Sun 19 Oct 2025 17:50:36 +0000 Manifest this update: Sun 19 Oct 2025 17:45:36 +0000 Manifest next update: Mon 20 Oct 2025 18:33:36 +0000 Files and hashes: 1: 34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (hash: Z1jL/gsyMMOX23bFF/05TTpxpCMQIiKAlL299WKVFXQ=) 2: 34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (hash: d3JK5wefkO3IaEmhKjERbIY8TPnMP48SylmDzwiMfvU=) 3: 34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (hash: oveRIeBVElycPcDK2nT/HAVVbZ48NXEOPGn8JgFOp8U=) 4: 34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (hash: Zg6hu9T5lkAymC5Nn3ylhceH8/l2Ooq76i8se7tccAg=) 5: 34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa (hash: z/al2lqkMwSVa4lBgfCp8J36zpft/JeWe/boU03oLZ4=) 6: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl (hash: ZJYLclaGbh8iY+1ryp5/B6H6NaAef1uCNVS+XGDPlm8=) 7: 34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa (hash: Ghf24KKbyZqb/dydUv1p3KTkYK103rJRmKscSH8CBsc=) 8: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (hash: dFQvikjmvgdfS5xzkesm3mLXYzz4UjEfkQPlWOh3gGE=) 9: 323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (hash: 0qpcJ+tbNfWi5cp85Npzhc8FUFW4hSjAueswNczbmUE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 18:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ae:d7:db:cf:44:51:1b:7a:3a:49:9e:4d:90:d0:37:8d:db:d7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Validity Not Before: Oct 19 17:45:36 2025 GMT Not After : Oct 20 18:33:36 2025 GMT Subject: CN=3C566662D95FA24CED368FE4EB876EAFC4C9012A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:a9:43:27:3c:33:ca:fa:3e:76:ee:33:14: d6:6e:9f:59:c9:3d:17:e8:12:56:d3:8d:fe:94:7d: f5:91:16:58:0e:21:4e:40:9d:ae:79:49:0a:34:f4: 65:9a:75:c1:04:4f:2a:78:48:f4:58:5e:b5:35:cf: b5:19:08:10:1c:d3:38:b8:55:db:a4:51:e4:8f:0d: 8f:b5:00:85:c6:79:02:f7:d1:55:a2:05:56:cf:76: c3:7e:f3:6f:fb:46:ba:e8:97:a2:0b:c7:b3:8c:f5: f9:4c:7e:90:62:0a:22:98:41:97:c4:03:40:73:92: 49:2f:87:0c:86:6a:ae:98:1c:e5:78:ad:45:1c:a8: 53:67:99:d9:c1:29:20:34:7c:2b:4e:46:16:00:40: d3:51:6a:6f:eb:a7:8b:04:55:34:c7:76:0f:8a:bc: 2f:03:d6:fa:58:e9:a5:c4:74:a8:a2:dd:c3:68:3a: 29:e4:f6:cb:00:55:a0:ca:3e:98:9a:9e:9d:50:64: 21:dc:22:d5:1c:32:1b:1f:6a:e3:b1:d1:84:84:ce: b8:29:f5:fb:73:40:83:d7:54:97:a4:c7:73:4b:44: e9:63:e1:d3:77:1c:80:49:46:4d:3a:17:40:62:99: ba:6a:b0:a6:d1:6e:7d:24:53:34:e2:5d:a7:47:3f: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:66:62:D9:5F:A2:4C:ED:36:8F:E4:EB:87:6E:AF:C4:C9:01:2A X509v3 Authority Key Identifier: keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5a:db:fd:85:b1:ce:b4:2a:91:cf:b0:14:bd:bf:e7:8d:c0: f9:73:7d:87:57:43:b2:ea:01:e0:d1:ff:a4:5d:47:9b:d3:a4: 72:5f:39:6d:88:8d:79:4a:4d:11:a4:3c:41:98:59:5b:c8:62: d8:1d:f8:3d:c0:9e:53:8e:14:f0:94:48:94:84:06:b2:4b:ab: b3:ea:e1:48:0a:11:c9:5c:a9:6f:90:45:8a:7d:78:80:22:fe: 19:04:8d:f5:0a:18:2c:47:fa:4f:37:b4:5d:21:c3:86:07:8b: bb:ca:9b:d6:fe:d7:62:19:7a:26:f3:1b:bc:41:cc:40:a3:10: be:dd:68:46:a9:d8:54:95:65:86:1b:ef:4b:59:17:d4:64:28: c8:e8:1e:ba:59:38:8c:ea:cc:5d:1f:f6:93:71:21:ed:77:04: ea:3c:5f:0c:4e:e3:d7:2d:55:10:dd:76:93:65:8b:3a:e9:fd: 12:c2:8b:da:a0:fe:92:df:75:65:10:44:81:cb:78:8f:ac:99: cc:97:26:d5:02:64:62:69:5a:58:76:df:d9:b1:a5:26:20:fc: 0b:7c:37:26:00:fd:8e:54:ab:73:df:4b:22:a6:db:c2:a6:24: 12:66:d8:5b:c4:c4:ab:21:c3:b2:0a:af:e4:b8:56:13:05:bf: a9:8d:3e:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXK7X289EURt6OkmeTZDQN43b19AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF M0NEMEFEQzAeFw0yNTEwMTkxNzQ1MzZaFw0yNTEwMjAxODMzMzZaMDMxMTAvBgNV BAMTKDNDNTY2NjYyRDk1RkEyNENFRDM2OEZFNEVCODc2RUFGQzRDOTAxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExKlDJzwzyvo+du4zFNZun1nJ PRfoElbTjf6UffWRFlgOIU5Ana55SQo09GWadcEETyp4SPRYXrU1z7UZCBAc0zi4 VdukUeSPDY+1AIXGeQL30VWiBVbPdsN+82/7Rrrol6ILx7OM9flMfpBiCiKYQZfE A0BzkkkvhwyGaq6YHOV4rUUcqFNnmdnBKSA0fCtORhYAQNNRam/rp4sEVTTHdg+K vC8D1vpY6aXEdKii3cNoOink9ssAVaDKPpianp1QZCHcItUcMhsfauOx0YSEzrgp 9ftzQIPXVJekx3NLROlj4dN3HIBJRk06F0BimbpqsKbRbn0kUzTiXadHPyrNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPFZmYtlfokztNo/k64dur8TJASowHwYDVR0j BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4 MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZMU1QvMC8y MUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUFrb/YWxzrQqkc+wFL2/543A+XN9h1dDsuoB4NH/pF1Hm9Okcl85bYiNeUpN EaQ8QZhZW8hi2B34PcCeU44U8JRIlIQGskurs+rhSAoRyVypb5BFin14gCL+GQSN 9QoYLEf6Tze0XSHDhgeLu8qb1v7XYhl6JvMbvEHMQKMQvt1oRqnYVJVlhhvvS1kX 1GQoyOgeulk4jOrMXR/2k3Eh7XcE6jxfDE7j1y1VEN12k2WLOun9EsKL2qD+kt91 ZRBEgct4j6yZzJcm1QJkYmlaWHbf2bGlJiD8C3w3JgD9jlSrc99LIqbbwqYkEmbY W8TEqyHDsgqv5LhWEwW/qY0++Q== -----END CERTIFICATE-----Generated at Mon Oct 20 09:09:51 2025 by rpki-client