$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: RVJi8aXneTZ76ZnsYCnUl9wZNox/ancmt3UeaqZ1krg= Subject key identifier: 5C:A6:84:8D:22:E9:FD:3E:1F:B3:52:BA:F8:9D:8A:F1:A9:6E:19:E5 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 6A47980F3894CE929D73443B4C600B5050EF32CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 01DF Signing time: Sat 23 Aug 2025 08:04:59 +0000 Manifest this update: Sat 23 Aug 2025 07:59:59 +0000 Manifest next update: Sun 24 Aug 2025 10:43:59 +0000 Files and hashes: 1: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 2: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) 3: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: Y3FZHzNcKXvVQ+/83JjcdoZ62DCN9LxYU0KpVi5FNmg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:47:98:0f:38:94:ce:92:9d:73:44:3b:4c:60:0b:50:50:ef:32:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Aug 23 07:59:59 2025 GMT Not After : Aug 24 10:43:59 2025 GMT Subject: CN=5CA6848D22E9FD3E1FB352BAF89D8AF1A96E19E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:35:65:a8:e8:9b:75:3e:49:e9:cb:7e:74: 0b:ce:93:66:d8:b3:23:7a:91:4f:71:be:41:ec:31: 80:db:6c:d5:f4:70:90:a3:07:dd:51:55:ab:3a:72: 32:be:9a:81:42:b7:ea:70:da:5b:8f:86:f8:56:d9: 60:41:0c:c5:86:58:2f:d5:c5:e8:6f:f1:fd:81:1e: 82:d7:13:5b:a5:e8:fb:f3:43:5d:f8:5d:cc:6e:f4: bf:5c:fb:1e:e9:4a:34:08:d7:3c:1f:c1:1a:af:ef: 16:f7:c5:07:dd:2f:dc:1c:c1:6a:e4:25:bd:33:bd: 88:63:10:ce:84:1d:7e:66:13:70:26:9c:bd:aa:1f: 32:c4:d4:24:ff:6a:76:65:57:3c:61:7e:bb:7f:7b: 01:89:2a:24:eb:6b:68:7e:0e:2e:80:0c:21:ab:e2: 55:17:20:b2:b0:c3:a7:dd:67:b3:d6:cc:23:09:7e: f0:b9:90:2f:20:7f:83:f5:10:39:72:98:ce:fa:e3: 58:e3:07:64:b3:58:f0:eb:f8:0d:2d:44:2a:4a:47: 58:83:df:19:18:50:40:5d:33:92:53:4c:bb:07:f9: 27:d0:d6:37:57:bf:46:75:4c:82:8a:6e:47:83:5c: 1e:5e:f4:55:7f:7e:33:db:51:a8:4d:7d:5a:6f:7d: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:84:8D:22:E9:FD:3E:1F:B3:52:BA:F8:9D:8A:F1:A9:6E:19:E5 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:94:97:74:7c:e1:dc:4e:fe:de:89:66:95:f7:d5:a2:29: 61:5c:15:84:39:91:ec:73:97:7f:4d:06:ca:fa:3d:90:9a:2f: 4d:36:d8:39:4c:cc:74:55:00:92:9d:c7:04:1d:a2:eb:95:3a: c1:41:cf:60:22:dc:1a:c2:61:6a:ec:f5:7a:f7:80:15:19:ba: 77:ae:6d:a8:7a:6d:b5:f0:4c:85:86:a9:63:3b:7c:4f:75:c9: 29:a2:10:3b:fc:7c:69:ca:54:b5:9e:75:98:a5:bf:ce:20:9b: 04:8b:d0:6a:25:99:3e:44:64:30:a5:6d:53:18:01:6e:d8:56: bf:71:53:ae:cf:52:7b:7b:e5:33:4d:be:84:2d:97:4b:e6:b2: 10:c5:b4:35:21:22:8c:0a:aa:cb:22:ee:c8:81:99:7e:b2:d3: 56:1c:e1:5b:50:14:18:99:f8:01:15:d3:f6:e9:fe:aa:94:e8: df:22:22:f2:a0:2d:f5:85:aa:ed:4b:df:dc:38:f9:1a:8a:8c: cd:2d:3b:b6:f3:74:53:26:06:02:c6:d1:0e:a7:4e:5b:36:10: 4e:33:b9:61:ae:08:22:da:59:b3:49:62:c6:e6:bc:b3:bf:ea: e0:7d:d8:72:cd:76:49:11:7a:f7:96:28:b0:a4:57:89:17:fb: eb:df:b8:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUakeYDziUzpKdc0Q7TGALUFDvMsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTA4MjMwNzU5NTlaFw0yNTA4MjQxMDQzNTlaMDMxMTAvBgNV BAMTKDVDQTY4NDhEMjJFOUZEM0UxRkIzNTJCQUY4OUQ4QUYxQTk2RTE5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLzVlqOibdT5J6ct+dAvOk2bY syN6kU9xvkHsMYDbbNX0cJCjB91RVas6cjK+moFCt+pw2luPhvhW2WBBDMWGWC/V xehv8f2BHoLXE1ul6PvzQ134Xcxu9L9c+x7pSjQI1zwfwRqv7xb3xQfdL9wcwWrk Jb0zvYhjEM6EHX5mE3AmnL2qHzLE1CT/anZlVzxhfrt/ewGJKiTra2h+Di6ADCGr 4lUXILKww6fdZ7PWzCMJfvC5kC8gf4P1EDlymM7641jjB2SzWPDr+A0tRCpKR1iD 3xkYUEBdM5JTTLsH+SfQ1jdXv0Z1TIKKbkeDXB5e9FV/fjPbUahNfVpvfeAFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXKaEjSLp/T4fs1K6+J2K8aluGeUwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkiUl3R84dxO/t6JZpX31aIpYVwVhDmR7HOXf00Gyvo9kJovTTbYOUzMdFUA kp3HBB2i65U6wUHPYCLcGsJhauz1eveAFRm6d65tqHpttfBMhYapYzt8T3XJKaIQ O/x8acpUtZ51mKW/ziCbBIvQaiWZPkRkMKVtUxgBbthWv3FTrs9Se3vlM02+hC2X S+ayEMW0NSEijAqqyyLuyIGZfrLTVhzhW1AUGJn4ARXT9un+qpTo3yIi8qAt9YWq 7Uvf3Dj5GoqMzS07tvN0UyYGAsbRDqdOWzYQTjO5Ya4IItpZs0lixua8s7/q4H3Y cs12SRF695YosKRXiRf769+4xA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:59 2025 by rpki-client