$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: HErzXc0WBYTl0c5746RrDNfc1N1YBc77uLlT7kH++O4= Subject key identifier: CE:56:FC:E3:CC:08:CA:37:0C:E5:12:85:E1:FA:32:C6:BF:4D:D6:54 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 2F1B380A424F72C494868DAB71AA801B552DC590 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 0199 Signing time: Wed 02 Jul 2025 17:15:07 +0000 Manifest this update: Wed 02 Jul 2025 17:10:07 +0000 Manifest next update: Thu 03 Jul 2025 18:29:07 +0000 Files and hashes: 1: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: 7jDkrLp4ayTzOL5LqdZDvV5/Cuvygbg0upRrXyrXxkE=) 2: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: 6szg7DBeNfCDyyVjdS9beSfI5nbAK853VFa32L1aUlk=) 3: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: +myJ7NbRQaOc2kZxIwNb0puC3GWw6lW4wnVrQC24gtM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 18:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1b:38:0a:42:4f:72:c4:94:86:8d:ab:71:aa:80:1b:55:2d:c5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Jul 2 17:10:07 2025 GMT Not After : Jul 3 18:29:07 2025 GMT Subject: CN=CE56FCE3CC08CA370CE51285E1FA32C6BF4DD654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:8b:86:20:94:e2:0d:d3:e9:ce:91:38:be: c5:52:5c:3f:8e:2a:7d:bb:54:62:a8:9f:b0:c5:bc: 7e:3b:8a:e1:c7:57:88:ec:c3:0e:a6:02:53:35:e2: f1:99:e6:e2:53:4b:19:02:80:1e:2e:14:d1:ec:be: 53:94:56:d9:7f:91:df:56:af:7e:e7:b9:5b:4d:78: f4:5d:99:4f:5c:91:5f:1b:cb:45:11:82:f9:e2:3b: 40:0e:ad:68:ba:a3:45:c1:2e:68:38:b0:d7:8d:7b: 78:1f:c9:11:5a:4b:00:d2:ad:98:86:d1:c7:92:e4: 09:a2:bc:56:47:16:45:e3:56:38:55:4e:8c:dc:57: a9:d8:ba:e7:61:6c:75:61:f1:1b:bf:2d:84:f6:ba: 5d:e8:11:63:13:85:20:06:a7:4f:52:27:84:15:61: 21:ad:b8:7f:e4:d1:f6:16:8f:1b:29:9a:94:33:59: 89:ee:25:1b:12:b3:5c:ed:00:9b:36:2a:30:2c:4b: b4:3e:64:aa:ce:f4:b3:ab:dc:f4:5a:8f:2d:51:31: 3f:e5:36:60:8a:e2:c2:8a:b2:6d:01:dc:95:aa:10: 47:75:96:e0:a2:09:79:1f:49:1e:04:22:93:6a:ee: 04:5f:c1:c4:3d:fb:89:5f:05:99:bf:3d:c8:c1:89: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:56:FC:E3:CC:08:CA:37:0C:E5:12:85:E1:FA:32:C6:BF:4D:D6:54 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c5:04:5d:3b:07:84:79:04:50:32:8f:c0:59:d1:c3:82:2a: d6:47:a1:22:52:af:16:aa:3e:70:fa:3e:2b:33:93:0f:77:59: e9:0a:10:be:bf:d9:c3:fc:45:a4:78:ae:33:a5:03:2f:af:d6: ae:25:43:ad:c2:88:33:3b:5b:3e:a9:66:68:30:3d:88:f5:79: a2:96:b0:40:2e:71:d7:2d:e4:a9:08:1e:9d:7a:09:77:20:19: 47:3e:88:cf:76:98:76:2f:25:d6:eb:f1:26:a2:87:5c:4e:66: 67:71:1a:f1:e3:50:2f:df:a3:5c:ee:84:ac:a1:c5:ad:eb:5e: 37:96:09:d7:41:18:61:0a:1d:2e:36:23:2c:88:e4:7a:16:45: bd:5a:f0:ba:80:46:2b:7d:39:f6:a5:7d:3c:64:04:cc:93:7b: 30:73:61:74:2b:ea:30:db:65:97:bd:11:b1:91:8e:80:6d:61: 49:ba:3b:09:d0:f8:8b:b1:86:e3:49:30:b4:59:d3:9a:fc:fe: 29:bd:24:50:b0:41:c3:3c:c3:02:df:f7:d3:5b:be:9d:97:1b: e5:e0:7b:7d:8c:b8:a6:c4:6f:49:8f:83:22:4b:57:06:d2:88: 4e:26:5c:81:92:03:70:c7:05:71:1f:17:3b:c4:83:cf:39:19: 45:24:b5:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULxs4CkJPcsSUho2rcaqAG1UtxZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTA3MDIxNzEwMDdaFw0yNTA3MDMxODI5MDdaMDMxMTAvBgNV BAMTKENFNTZGQ0UzQ0MwOENBMzcwQ0U1MTI4NUUxRkEzMkM2QkY0REQ2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozIuGIJTiDdPpzpE4vsVSXD+O Kn27VGKon7DFvH47iuHHV4jsww6mAlM14vGZ5uJTSxkCgB4uFNHsvlOUVtl/kd9W r37nuVtNePRdmU9ckV8by0URgvniO0AOrWi6o0XBLmg4sNeNe3gfyRFaSwDSrZiG 0ceS5AmivFZHFkXjVjhVTozcV6nYuudhbHVh8Ru/LYT2ul3oEWMThSAGp09SJ4QV YSGtuH/k0fYWjxspmpQzWYnuJRsSs1ztAJs2KjAsS7Q+ZKrO9LOr3PRajy1RMT/l NmCK4sKKsm0B3JWqEEd1luCiCXkfSR4EIpNq7gRfwcQ9+4lfBZm/PcjBiScVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzlb848wIyjcM5RKF4foyxr9N1lQwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPMUEXTsHhHkEUDKPwFnRw4Iq1kehIlKvFqo+cPo+KzOTD3dZ6QoQvr/Zw/xF pHiuM6UDL6/WriVDrcKIMztbPqlmaDA9iPV5opawQC5x1y3kqQgenXoJdyAZRz6I z3aYdi8l1uvxJqKHXE5mZ3Ea8eNQL9+jXO6ErKHFreteN5YJ10EYYQodLjYjLIjk ehZFvVrwuoBGK3059qV9PGQEzJN7MHNhdCvqMNtll70RsZGOgG1hSbo7CdD4i7GG 40kwtFnTmvz+Kb0kULBBwzzDAt/301u+nZcb5eB7fYy4psRvSY+DIktXBtKITiZc gZIDcMcFcR8XO8SDzzkZRSS1Ug== -----END CERTIFICATE-----Generated at Wed Jul 2 23:24:47 2025 by rpki-client