$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: Y9HnZ1HmSeMXBVDcO5Z4uov8LkyA+ZYxYn4fcrAB4bY= Subject key identifier: FE:DE:EF:96:EB:82:CD:30:08:E9:C4:52:15:A0:2F:05:1E:CF:B9:17 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 3564AEC05DFBA93F7A349534305F3C9AC28B325B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 022C Signing time: Mon 20 Oct 2025 06:14:06 +0000 Manifest this update: Mon 20 Oct 2025 06:09:06 +0000 Manifest next update: Tue 21 Oct 2025 08:24:06 +0000 Files and hashes: 1: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: XyYbxFPZS5/j8RhDv5Ka2jHvnBr9Qy+c0COYAhoKVjo=) 2: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 3: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:ae:c0:5d:fb:a9:3f:7a:34:95:34:30:5f:3c:9a:c2:8b:32:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Oct 20 06:09:06 2025 GMT Not After : Oct 21 08:24:06 2025 GMT Subject: CN=FEDEEF96EB82CD3008E9C45215A02F051ECFB917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:6c:4d:11:fb:48:c2:5f:44:f4:d4:ce:b6: b1:73:c8:46:26:0b:4c:a9:97:0b:6f:7b:8c:13:fe: f4:ce:8b:41:df:23:a7:b7:ba:5a:b7:d5:95:46:ef: a4:8e:4e:1c:22:f2:22:c0:ea:ff:b9:79:20:b5:a4: 0b:11:b5:5c:78:7d:f6:41:bc:bf:04:38:2a:30:2a: 5b:20:98:10:f5:15:5d:b7:89:ca:c1:8c:cf:f7:6a: 8a:40:4e:6c:d4:47:07:f5:fc:ef:c0:a1:8f:cd:3c: 9c:11:2d:d3:3d:dc:1c:4e:24:ce:ec:5f:75:0b:39: eb:b4:18:e8:7f:0b:02:6d:8c:63:71:6f:f2:17:fd: 59:77:6f:70:2d:b5:46:07:50:21:4a:be:0e:de:8c: d7:ae:ed:de:f3:7c:1c:d2:08:4f:bc:63:c6:10:9d: 6a:50:17:34:54:84:82:b3:c1:83:31:90:9d:0f:38: e0:60:f9:d5:10:4f:40:89:fd:cb:48:1c:7a:01:e5: 6c:2a:33:8b:77:3c:b4:f4:70:43:32:71:be:7a:a1: 33:e3:e5:bf:b7:e4:72:f3:9c:5c:e3:a0:e4:60:d4: 92:25:c4:6a:f2:c4:e8:31:aa:34:63:a3:3a:61:01: 40:b7:00:9b:6d:c4:17:26:9a:dd:63:6f:df:ad:65: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DE:EF:96:EB:82:CD:30:08:E9:C4:52:15:A0:2F:05:1E:CF:B9:17 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:96:4b:23:ca:8f:1e:76:a9:b1:bb:a3:50:4e:d3:f2:87:3f: 34:2e:26:50:5e:88:10:c7:74:d8:4c:4c:10:58:f7:18:2b:4d: 07:0e:0b:6c:c4:c8:c6:f5:03:1b:5f:41:79:c5:6e:86:7d:92: e5:fc:f3:f5:20:10:cb:91:7f:9c:a4:5a:61:cb:60:84:ce:d1: a2:a8:3d:2e:19:c0:c9:62:ac:e4:9a:4e:85:68:0b:28:f4:74: f3:ef:51:39:34:84:08:d1:87:0d:0b:f3:30:a2:30:47:26:8a: 34:8b:e3:43:43:59:db:ae:7a:e1:57:37:7c:c6:e0:f4:28:75: 0e:68:fa:7a:6a:2f:0a:f9:86:79:c3:fd:03:b1:08:5c:bb:c8: 6e:00:fb:22:ab:29:aa:6d:77:ef:e9:eb:b0:86:57:a0:31:5a: a5:43:e6:d5:44:49:a3:c6:39:71:3a:9b:a9:22:68:2c:41:bd: c1:ea:d3:2c:98:c3:05:92:2b:6a:83:d7:f0:50:e4:14:da:d4: ec:75:11:61:c4:53:8b:07:17:07:b4:f8:5f:5a:cd:56:20:d7: b4:bf:66:b4:7c:c3:23:49:98:52:38:74:1f:62:5c:2c:32:48: f8:fb:dc:5b:f9:81:89:23:64:d9:3a:e6:f0:ca:47:87:66:c2: e6:db:f6:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNWSuwF37qT96NJU0MF88msKLMlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTEwMjAwNjA5MDZaFw0yNTEwMjEwODI0MDZaMDMxMTAvBgNV BAMTKEZFREVFRjk2RUI4MkNEMzAwOEU5QzQ1MjE1QTAyRjA1MUVDRkI5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqX2xNEftIwl9E9NTOtrFzyEYm C0yplwtve4wT/vTOi0HfI6e3ulq31ZVG76SOThwi8iLA6v+5eSC1pAsRtVx4ffZB vL8EOCowKlsgmBD1FV23icrBjM/3aopATmzURwf1/O/AoY/NPJwRLdM93BxOJM7s X3ULOeu0GOh/CwJtjGNxb/IX/Vl3b3AttUYHUCFKvg7ejNeu7d7zfBzSCE+8Y8YQ nWpQFzRUhIKzwYMxkJ0POOBg+dUQT0CJ/ctIHHoB5WwqM4t3PLT0cEMycb56oTPj 5b+35HLznFzjoORg1JIlxGryxOgxqjRjozphAUC3AJttxBcmmt1jb9+tZRK7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/t7vluuCzTAI6cRSFaAvBR7PuRcwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhZZLI8qPHnapsbujUE7T8oc/NC4mUF6IEMd02ExMEFj3GCtNBw4LbMTIxvUD G19BecVuhn2S5fzz9SAQy5F/nKRaYctghM7Roqg9LhnAyWKs5JpOhWgLKPR08+9R OTSECNGHDQvzMKIwRyaKNIvjQ0NZ26564Vc3fMbg9Ch1Dmj6emovCvmGecP9A7EI XLvIbgD7Iqspqm137+nrsIZXoDFapUPm1URJo8Y5cTqbqSJoLEG9werTLJjDBZIr aoPX8FDkFNrU7HURYcRTiwcXB7T4X1rNViDXtL9mtHzDI0mYUjh0H2JcLDJI+Pvc W/mBiSNk2Trm8MpHh2bC5tv2CQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:10 2025 by rpki-client