$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft File: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft (raw, json) Hash identifier: HWHdkWlP7HbRDU+jljg77vM102bF8XSx+0Jt0VR1n9E= Subject key identifier: A1:24:2B:EC:D0:77:80:38:8A:30:6C:A9:9D:E8:0C:17:8D:70:26:83 Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Certificate serial: 4ED0FA9736080ED655D1C0FCFC57A1EBD57E8BF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft Manifest number: 99 Signing time: Fri 22 Aug 2025 21:43:34 +0000 Manifest this update: Fri 22 Aug 2025 21:38:34 +0000 Manifest next update: Sun 24 Aug 2025 00:39:34 +0000 Files and hashes: 1: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl (hash: kmjjxb5UHG3cOh1ZGEz4QamVkJpwDmho49vxyusGvD8=) 2: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (hash: NcZvtk9vtk4cBlbbop46EV0A+5s9d/7hpHIDDTwgZ0w=) 3: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (hash: fZuxL2H/McwhqF3eWGOSLVFPaLHn9GVCUQ5HIDIvm7w=) 4: 34352e3137302e35382e302f32332d3233203d3e20323638313438.roa (hash: j8GbTlImInggLXV7UaiaKTq2/ezww6Fce25zlRuDPh8=) 5: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (hash: l0BuCzH66s+VtkrxcQvmTEBH0+FHi0YOqD0wKrMk7Tw=) 6: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (hash: sQjnBNpY0cCeByw2MJZ0cFZXN5mlrSoantEDSz97YB8=) 7: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (hash: SoekstKv8f+pkK/WwzhieixqQG0KM+o03cw/55GYLlg=) 8: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (hash: J300dFXZr5KKTkTQzQCo+VuABspi5UhFx/KywDZmrV4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 00:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d0:fa:97:36:08:0e:d6:55:d1:c0:fc:fc:57:a1:eb:d5:7e:8b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Validity Not Before: Aug 22 21:38:34 2025 GMT Not After : Aug 24 00:39:34 2025 GMT Subject: CN=A1242BECD07780388A306CA99DE80C178D702683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:5f:11:3f:aa:9b:8e:99:9b:ef:89:a1:82: c7:58:93:8e:90:82:76:95:bb:19:52:21:21:87:15: 70:30:a1:8d:3d:e9:47:05:80:bd:ec:79:ea:86:23: b6:c6:c5:9a:e9:f2:31:bc:d1:c3:3c:85:ae:de:5f: 28:07:6b:38:45:0d:9b:c4:bb:00:18:9d:25:4c:ca: 15:79:7a:a7:66:41:de:4d:3b:d8:8c:66:80:7a:ea: 7e:32:7e:03:5d:f0:4b:2b:07:5c:44:8f:2a:f0:b0: 43:0f:61:72:a0:fa:22:14:9a:15:4d:8a:25:8b:45: ee:dc:a0:c2:e9:df:c0:1c:47:fe:10:cc:e1:12:34: 79:bb:e7:f6:c5:98:de:86:e8:e0:4f:a1:04:c4:75: 39:9d:fb:c7:a3:bc:4e:0d:f8:36:ec:82:10:fe:b0: 71:f2:b6:96:89:d3:57:ca:4c:b5:32:66:5f:3a:73: 21:9f:5e:4e:ee:9b:a8:5c:ec:fe:cd:92:b8:75:5f: 57:b1:9c:9e:11:f8:74:d2:8b:0d:c4:67:21:99:c0: 81:84:cb:a2:68:49:6a:8c:86:f6:7b:e1:e8:21:11: 6f:f4:49:9b:09:d2:93:75:8b:96:a0:b2:ea:82:58: a2:91:11:8d:f8:03:cd:e5:51:c1:b1:74:fb:a0:53: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:2B:EC:D0:77:80:38:8A:30:6C:A9:9D:E8:0C:17:8D:70:26:83 X509v3 Authority Key Identifier: keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f6:6f:53:40:7f:39:0f:22:5e:42:f5:af:b4:90:53:b0:e0: 33:ce:92:22:f1:78:99:42:4e:e3:97:37:00:30:bf:01:26:24: 55:e2:9f:19:67:8d:92:de:50:f9:69:51:45:d7:b6:09:ab:32: 08:3a:f7:64:3c:13:b4:5f:f2:bf:a7:fe:ed:55:aa:47:2d:bf: 22:db:a5:06:e5:86:cd:95:3c:d5:20:17:25:70:bd:2f:28:88: bb:42:b7:f7:21:0d:5a:6c:a1:2c:e3:25:02:06:93:b7:4e:e6: 04:93:57:74:bb:f3:e7:a7:19:a0:aa:f1:c5:fc:b6:69:82:82: 5c:bc:90:c0:8b:53:4e:be:80:8d:15:cf:8c:d5:7d:e4:fd:82: ff:ca:0c:c0:85:3c:59:a7:fd:98:ee:bb:bf:0b:23:86:99:7c: 54:31:a7:6c:82:28:2e:89:e9:b5:ed:46:5e:49:92:c1:3f:6e: 7b:9c:ec:5c:54:19:38:19:7d:7a:87:b2:7d:e3:a1:e2:13:b4: a5:a5:f2:66:5a:98:03:e3:1b:28:e2:f3:e4:ec:00:7c:0f:fc: 1e:6e:12:10:a4:ad:f2:e0:36:e3:60:fc:eb:02:59:68:91:07: 7e:e2:35:87:f0:cc:92:68:36:73:ab:19:0c:ce:d5:0a:2c:63: 47:c4:8f:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTtD6lzYIDtZV0cD8/Feh69V+i/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDVBMEE2QUE4NEFDRURCNDQ1RjFBNzNEMDdERDND MEE0QTM3MjAeFw0yNTA4MjIyMTM4MzRaFw0yNTA4MjQwMDM5MzRaMDMxMTAvBgNV BAMTKEExMjQyQkVDRDA3NzgwMzg4QTMwNkNBOTlERTgwQzE3OEQ3MDI2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKF8RP6qbjpmb74mhgsdYk46Q gnaVuxlSISGHFXAwoY096UcFgL3seeqGI7bGxZrp8jG80cM8ha7eXygHazhFDZvE uwAYnSVMyhV5eqdmQd5NO9iMZoB66n4yfgNd8EsrB1xEjyrwsEMPYXKg+iIUmhVN iiWLRe7coMLp38AcR/4QzOESNHm75/bFmN6G6OBPoQTEdTmd+8ejvE4N+DbsghD+ sHHytpaJ01fKTLUyZl86cyGfXk7um6hc7P7Nkrh1X1exnJ4R+HTSiw3EZyGZwIGE y6JoSWqMhvZ74eghEW/0SZsJ0pN1i5agsuqCWKKREY34A83lUcGxdPugUzCrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoSQr7NB3gDiKMGypnegMF41wJoMwHwYDVR0j BBgwFoAUIf1aCmqoSs7bRF8ac9B908Cko3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hM emIvMC8yMUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRkQ1QTBBNkFBODRBQ0VE QjQ0NUYxQTczRDA3REQzQzBBNEEzNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hMemIvMC8y MUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVPZvU0B/OQ8iXkL1r7SQU7DgM86SIvF4mUJO45c3ADC/ASYkVeKfGWeNkt5Q +WlRRde2CasyCDr3ZDwTtF/yv6f+7VWqRy2/ItulBuWGzZU81SAXJXC9LyiIu0K3 9yENWmyhLOMlAgaTt07mBJNXdLvz56cZoKrxxfy2aYKCXLyQwItTTr6AjRXPjNV9 5P2C/8oMwIU8Waf9mO67vwsjhpl8VDGnbIIoLonpte1GXkmSwT9ue5zsXFQZOBl9 eoeyfeOh4hO0paXyZlqYA+MbKOLz5OwAfA/8Hm4SEKSt8uA242D86wJZaJEHfuI1 h/DMkmg2c6sZDM7VCixjR8SPxQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:22 2025 by rpki-client