$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft File: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json) Hash identifier: xciDcDbWY4HYyCHRmF1vnCzYYXKI3wIMe7+jereSwEg= Subject key identifier: 0A:B7:76:29:6F:71:93:60:E0:B8:91:E5:37:28:FE:C1:2F:E2:1A:0C Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 65727477F6A34932CB9476BCE0EAE3100EA83505 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft Manifest number: 0142 Signing time: Mon 20 Oct 2025 05:04:44 +0000 Manifest this update: Mon 20 Oct 2025 04:59:44 +0000 Manifest next update: Tue 21 Oct 2025 07:02:44 +0000 Files and hashes: 1: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: fnh0ESskr/VjHvCeSJYSJ+yhqrvpgXqsJ2QHzdbAUrc=) 2: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: ZeYgp7BvXvd74/k48bnu+qRITehFL0rvHom26iEGLjk=) 3: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: P72Vo0+btTdKLtZrwM6d6w1d0tSzgvKj3HQWGsIM80w=) 4: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: HDx54wdTXW76T09og51BV5Z57Cx2GSP0rNDysCobcg4=) 5: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: j7yRviWUtBR47diRRZQSwOhBel2iKKRcdCzb2LcKh5U=) 6: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: YSeBPg2lex9h3YRA+gBpl4SonB4GrQPdQMUbhsffoPg=) 7: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: 7xYxxrOSzrS8k5y97eIDahGvI9CFe6PC4Z6wgywaHcA=) 8: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: 87P4ZthL45ryd5ao/4BROx3S+QtsOjAMhagAkYjLUrs=) 9: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: HpEEDz0SGmZuCTiB2WRYUvaYO0gVRzUCdu5824wi6Ew=) 10: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: MO6euXOe3+e/c5Y8E5tznHMe0mpIDKm2mZmkPoTVZII=) 11: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: nIftzw3+iZpcDi7LXAU8XgDFUdrkMrxxET01lz87b78=) 12: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: /1pYXUGiJNlzcrDlu+7hGgbwVbBdHLvZnAiIEDJ3mgY=) 13: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: lguYh5w5dNrq0UrKdLCv4CFC1nfIhlvZWlOtyNuVXS4=) 14: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: FVJlg76zsiFIfRzwHjWJZAiSFiMl0j2j2H/CwENa5OQ=) 15: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: hTxBNdPsHdR1pRLMbwfTzlRUFGvMXwjPrS7ZVuQLTBI=) 16: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: 5qYxf8RXkN8h2eEpN2bZTKCxHdo3reMiK56wr54VAQM=) 17: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 2R2Rf6MPjaw0vHm+MKMheF1N2EcLNQp7FDpH/+osnZs=) 18: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: R241NIE5eErEAQdwLYr0SIplvpzgtNrTTFwlfX2dXfY=) 19: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: 2PavSs/XlyAnstVNXVfHqNUh15pZH0dOS5gkVJPXKtM=) 20: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: zbCbYNA/Sv7aeTAlT2UCgGMCCpHHDrdhHwaAb6T7RlA=) 21: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: I7xu8XqiplgU4PCcvipFhnLFR9uYEyMAQwYnkk8pujw=) 22: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: M5gd/5b8yphWCNw+C9KUG3jIlSUAJO8pUTrE9dAxLXI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:72:74:77:f6:a3:49:32:cb:94:76:bc:e0:ea:e3:10:0e:a8:35:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Oct 20 04:59:44 2025 GMT Not After : Oct 21 07:02:44 2025 GMT Subject: CN=0AB776296F719360E0B891E53728FEC12FE21A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:fb:ed:39:1a:f6:ea:65:a5:dc:09:3d:62: bf:fd:9f:4a:07:d8:7a:c6:de:ff:2d:dd:75:80:e2: 2b:b9:3a:82:8c:14:a0:05:8e:d9:f2:85:5e:7b:51: f6:cc:49:7f:a5:e8:6a:51:87:bd:62:1d:da:f3:42: 73:6f:c1:d9:9c:2a:c4:59:43:5a:62:4f:95:a0:4b: d1:9c:29:0d:55:b1:17:3d:c3:e6:36:9d:70:74:34: a9:2f:b1:93:91:12:e5:75:3e:60:39:d5:c7:04:a2: 3a:33:fa:1d:53:4c:21:86:d4:b7:ea:79:4d:8b:7e: 66:77:21:9a:24:96:ae:c8:10:39:19:be:71:ab:22: f4:22:a4:68:b4:69:ec:75:1a:5c:94:7a:cf:91:3b: df:10:eb:8f:7e:3e:19:fc:aa:76:8a:81:89:18:82: ee:3d:14:d2:a9:98:69:ed:d7:ad:f6:94:d4:9d:a7: ad:cc:55:ad:44:28:c6:d4:53:6f:26:e4:99:7e:4f: 92:14:2e:27:1a:26:3e:84:55:42:19:b0:ed:68:d5: be:47:95:a1:06:2a:1b:93:13:10:a7:0d:5b:45:b5: e7:d4:80:b4:57:be:21:c6:95:66:b0:a6:d9:9e:7b: 1c:f6:b4:61:53:23:c4:26:51:14:c9:0d:f3:98:14: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B7:76:29:6F:71:93:60:E0:B8:91:E5:37:28:FE:C1:2F:E2:1A:0C X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e1:d6:14:0e:24:fb:4e:4f:ae:73:09:90:12:e2:85:0e:02: 12:ca:9f:a4:b7:b2:2c:c4:d4:f4:c1:eb:3b:17:95:3b:5a:c5: 06:9c:d4:f3:ba:65:05:41:d3:a8:d1:75:fc:01:e4:ff:77:46: 6e:ad:15:80:9a:fc:d5:5a:7c:b9:95:7f:10:9a:48:78:97:8e: 99:3b:60:29:67:2d:ba:da:60:86:53:41:b6:53:1b:36:47:1f: e8:c2:22:b2:39:c2:46:c0:50:79:b6:d9:5e:1c:0e:e4:85:35: a5:6a:46:f0:46:ef:6d:1a:b6:83:00:bb:32:9e:9d:9b:1a:2b: 46:2f:9f:76:6e:87:e1:92:77:93:65:66:cd:17:96:11:9c:bc: 3c:f1:81:19:41:65:bc:48:b1:9e:32:08:e7:5c:8b:d1:54:a1: 42:b4:bb:17:8f:a5:74:32:b1:24:b6:b5:52:ce:ac:83:ac:93: cb:2d:2c:6b:93:a0:25:1f:ba:6c:10:9d:02:ee:4d:3a:18:88: 5a:a0:46:6b:82:1a:31:67:0a:ba:e4:56:f9:06:41:f6:b4:06: 5d:e2:4e:c5:fd:cc:68:22:2c:b6:93:26:7b:35:9e:19:7f:52: e3:5b:35:34:3c:a4:b7:a1:85:1c:ae:df:d3:3a:99:b6:23:10: 76:c1:78:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZXJ0d/ajSTLLlHa84OrjEA6oNQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNTEwMjAwNDU5NDRaFw0yNTEwMjEwNzAyNDRaMDMxMTAvBgNV BAMTKDBBQjc3NjI5NkY3MTkzNjBFMEI4OTFFNTM3MjhGRUMxMkZFMjFBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE/vvtORr26mWl3Ak9Yr/9n0oH 2HrG3v8t3XWA4iu5OoKMFKAFjtnyhV57UfbMSX+l6GpRh71iHdrzQnNvwdmcKsRZ Q1piT5WgS9GcKQ1VsRc9w+Y2nXB0NKkvsZOREuV1PmA51ccEojoz+h1TTCGG1Lfq eU2LfmZ3IZoklq7IEDkZvnGrIvQipGi0aex1GlyUes+RO98Q649+Phn8qnaKgYkY gu49FNKpmGnt1632lNSdp63MVa1EKMbUU28m5Jl+T5IULicaJj6EVUIZsO1o1b5H laEGKhuTExCnDVtFtefUgLRXviHGlWawptmeexz2tGFTI8QmURTJDfOYFB7tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCrd2KW9xk2DguJHlNyj+wS/iGgwwHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMC8y MUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsOHWFA4k+05PrnMJkBLihQ4CEsqfpLeyLMTU9MHrOxeVO1rFBpzU87plBUHT qNF1/AHk/3dGbq0VgJr81Vp8uZV/EJpIeJeOmTtgKWctutpghlNBtlMbNkcf6MIi sjnCRsBQebbZXhwO5IU1pWpG8EbvbRq2gwC7Mp6dmxorRi+fdm6H4ZJ3k2VmzReW EZy8PPGBGUFlvEixnjII51yL0VShQrS7F4+ldDKxJLa1Us6sg6yTyy0sa5OgJR+6 bBCdAu5NOhiIWqBGa4IaMWcKuuRW+QZB9rQGXeJOxf3MaCIstpMmezWeGX9S41s1 NDykt6GFHK7f0zqZtiMQdsF4rQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:57 2025 by rpki-client