$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft File: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft (raw, json) Hash identifier: sMsM6AjfmpdiDqkQPeY1Y0DUdGv/ZkW0SY6sxUSFjAc= Subject key identifier: 56:F1:A4:2B:4F:0D:C9:F8:82:95:CA:D6:90:61:EA:D2:C4:1C:A2:4C Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Certificate serial: 57929B24D72C291430B2A5CD0EF8F6A3FBF52FC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft Manifest number: 53 Signing time: Tue 01 Jul 2025 08:06:21 +0000 Manifest this update: Tue 01 Jul 2025 08:01:21 +0000 Manifest next update: Wed 02 Jul 2025 09:02:21 +0000 Files and hashes: 1: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (hash: SoekstKv8f+pkK/WwzhieixqQG0KM+o03cw/55GYLlg=) 2: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (hash: fZuxL2H/McwhqF3eWGOSLVFPaLHn9GVCUQ5HIDIvm7w=) 3: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (hash: NcZvtk9vtk4cBlbbop46EV0A+5s9d/7hpHIDDTwgZ0w=) 4: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl (hash: Wyr51J40Tv+Hkp6RhDjFmmiShR0+wlsswo8qD5ZQL7Y=) 5: 34352e3137302e35382e302f32332d3233203d3e20323638313438.roa (hash: j8GbTlImInggLXV7UaiaKTq2/ezww6Fce25zlRuDPh8=) 6: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (hash: sQjnBNpY0cCeByw2MJZ0cFZXN5mlrSoantEDSz97YB8=) 7: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (hash: J300dFXZr5KKTkTQzQCo+VuABspi5UhFx/KywDZmrV4=) 8: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (hash: l0BuCzH66s+VtkrxcQvmTEBH0+FHi0YOqD0wKrMk7Tw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 09:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:92:9b:24:d7:2c:29:14:30:b2:a5:cd:0e:f8:f6:a3:fb:f5:2f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Validity Not Before: Jul 1 08:01:21 2025 GMT Not After : Jul 2 09:02:21 2025 GMT Subject: CN=56F1A42B4F0DC9F88295CAD69061EAD2C41CA24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:f5:41:f1:8b:eb:e3:61:27:2d:d8:81:7c: e5:10:04:bd:4c:6f:58:c9:0f:e0:ba:be:4e:bd:ee: ab:41:ca:77:08:c5:c6:72:9d:8f:8f:a4:a1:3f:09: c5:9d:e1:87:b7:a1:57:d3:fe:c3:8b:13:6b:71:52: 64:eb:4e:a1:c5:21:fe:75:b2:0a:84:42:75:2a:fe: a7:3c:e4:1b:48:f3:5e:1c:ca:27:64:30:40:b6:18: 7f:7b:81:cc:0d:97:e7:55:02:89:0d:0f:a0:f9:5e: 78:8a:34:1c:58:13:2b:69:b6:96:c0:e3:a8:6e:c9: ea:91:12:7d:7b:ee:e6:db:03:3f:5d:3a:1d:d1:bb: 3d:86:f4:b1:6b:97:d4:bd:63:3c:1a:0e:a6:a4:9e: 98:a0:ac:6a:ff:4b:9d:e3:ee:1f:38:8b:68:0b:79: fc:5b:3a:d4:9e:b5:55:ea:e6:59:57:b6:f0:13:ed: 38:06:a1:82:68:40:06:a9:64:6d:22:16:95:65:84: f1:91:ed:b6:a9:af:7d:89:16:37:83:d5:a0:a9:b7: f9:d9:87:f4:ef:3e:3d:4b:f1:fc:0f:9d:ca:33:1d: de:52:cc:61:7b:55:8c:4b:3f:2c:4c:1e:5d:b9:f8: 14:08:9f:1c:35:92:3f:4c:54:5b:0b:e6:f4:d9:ea: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:A4:2B:4F:0D:C9:F8:82:95:CA:D6:90:61:EA:D2:C4:1C:A2:4C X509v3 Authority Key Identifier: keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ec:f8:d3:2e:e1:0c:ad:b6:a3:26:61:75:22:fb:9f:00:c6: 21:96:91:a5:fd:3c:58:8e:af:99:60:b6:1f:63:59:bc:8c:8b: 40:ae:15:57:a8:d0:39:33:d4:56:8c:b6:db:0b:bf:55:b4:0d: 8b:9b:48:e5:05:20:e9:ff:9f:fe:cb:1c:84:f5:51:3b:11:f6: 93:86:a0:f2:d7:68:d4:78:23:f4:33:4e:50:d1:dd:62:70:03: 79:aa:de:fb:31:aa:12:d6:cc:ab:3a:f3:51:d0:4b:cb:e2:55: 82:82:7a:4d:05:b7:1f:81:08:d4:d0:9d:f8:a6:c9:71:dc:d6: d2:78:dc:48:e1:31:36:04:89:18:e5:66:25:73:2f:49:e8:b5: 0d:c0:bd:ce:8a:ae:a0:c5:58:d7:43:f7:95:e5:f6:54:fb:4e: 5c:26:56:ec:51:b8:04:3f:c4:7e:8d:7c:af:a6:a8:8c:a1:e9: d7:8c:46:c0:ed:d8:16:63:d3:cf:0d:b2:25:26:b0:24:04:20: 13:11:4e:22:63:56:be:b5:dc:8f:24:40:b9:94:5c:4d:95:c3: 14:e4:8c:43:ce:c4:63:0b:3a:55:fd:4b:07:a3:1e:e3:8a:5a: c5:33:c0:9b:24:ca:25:c1:33:9c:55:43:13:8d:96:61:de:17: 3e:cc:d6:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV5KbJNcsKRQwsqXNDvj2o/v1L8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDVBMEE2QUE4NEFDRURCNDQ1RjFBNzNEMDdERDND MEE0QTM3MjAeFw0yNTA3MDEwODAxMjFaFw0yNTA3MDIwOTAyMjFaMDMxMTAvBgNV BAMTKDU2RjFBNDJCNEYwREM5Rjg4Mjk1Q0FENjkwNjFFQUQyQzQxQ0EyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVD/VB8Yvr42EnLdiBfOUQBL1M b1jJD+C6vk697qtByncIxcZynY+PpKE/CcWd4Ye3oVfT/sOLE2txUmTrTqHFIf51 sgqEQnUq/qc85BtI814cyidkMEC2GH97gcwNl+dVAokND6D5XniKNBxYEytptpbA 46huyeqREn177ubbAz9dOh3Ruz2G9LFrl9S9YzwaDqaknpigrGr/S53j7h84i2gL efxbOtSetVXq5llXtvAT7TgGoYJoQAapZG0iFpVlhPGR7bapr32JFjeD1aCpt/nZ h/TvPj1L8fwPncozHd5SzGF7VYxLPyxMHl25+BQInxw1kj9MVFsL5vTZ6t5XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVvGkK08NyfiClcrWkGHq0sQcokwwHwYDVR0j BBgwFoAUIf1aCmqoSs7bRF8ac9B908Cko3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hM emIvMC8yMUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRkQ1QTBBNkFBODRBQ0VE QjQ0NUYxQTczRDA3REQzQzBBNEEzNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hMemIvMC8y MUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOz40y7hDK22oyZhdSL7nwDGIZaRpf08WI6vmWC2H2NZvIyLQK4VV6jQOTPU Voy22wu/VbQNi5tI5QUg6f+f/sschPVROxH2k4ag8tdo1Hgj9DNOUNHdYnADeare +zGqEtbMqzrzUdBLy+JVgoJ6TQW3H4EI1NCd+KbJcdzW0njcSOExNgSJGOVmJXMv Sei1DcC9zoquoMVY10P3leX2VPtOXCZW7FG4BD/Efo18r6aojKHp14xGwO3YFmPT zw2yJSawJAQgExFOImNWvrXcjyRAuZRcTZXDFOSMQ87EYws6Vf1LB6Me44paxTPA myTKJcEznFVDE42WYd4XPszWHQ== -----END CERTIFICATE-----Generated at Tue Jul 1 17:56:40 2025 by rpki-client