$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft File: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft (raw, json) Hash identifier: gTDHZ0p/k5zSPO5enFzMcMfLcEuZrWwOZwcBu0FqnL8= Subject key identifier: 55:49:3A:FE:4F:C8:32:99:D5:4E:0B:16:DD:5A:C0:5F:B6:07:25:AD Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2 Certificate issuer: /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2 Certificate serial: 4A65BB8F26D09C981ABD9E733CA378F6DB1FCF6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer Subject info access: rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft Manifest number: 034D Signing time: Mon 20 Oct 2025 10:50:00 +0000 Manifest this update: Mon 20 Oct 2025 10:45:00 +0000 Manifest next update: Tue 21 Oct 2025 10:50:00 +0000 Files and hashes: 1: 3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (hash: vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=) 2: 3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (hash: qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=) 3: 3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (hash: TIKPLBcgVkAqPb7AvJ7y3qnvaIg8at7tJhRtw5vlZcA=) 4: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl (hash: vn4T40c8Kuil0wipxW9cIlKu96/mByViP3ExqQFoaso=) 5: 3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (hash: wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=) 6: 3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (hash: saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=) 7: 3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (hash: AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:65:bb:8f:26:d0:9c:98:1a:bd:9e:73:3c:a3:78:f6:db:1f:cf:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2 Validity Not Before: Oct 20 10:45:00 2025 GMT Not After : Oct 21 10:50:00 2025 GMT Subject: CN=3082010A0282010100EDD4EA115D597B958063C9FAB0CB756A75EF85F081BA4D699722A7CE38BCCD34D25EBA555EF8F4B3EE6BE70461FBE7BC58BF06B873811E6163B3FE2E93DF865440D32CA12EFC003C164CBC6990CD49F2690925C8278CA420470D11676575BE0FEBC7BDABD04C0F715446360062CFEE39F14A3C6B1A0275D68AB071F8860C01FED79F1B9FB697F970E982D245680E73BC8BD4338381840F4E42CBFBB9244F750C5D50169ECEA0389452B18230BAA70D6116E726CBF5DA13E746AF81E75526E4E1B9B5F45F2F78679D28C5CAC0BBED9095CC2AB623725229C840A572866D644A3135C0DDE3AF28BDAF9FA1A7EFEFC0F45B046FD3D4E21FA876602338319BE9DC730203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d4:ea:11:5d:59:7b:95:80:63:c9:fa:b0:cb: 75:6a:75:ef:85:f0:81:ba:4d:69:97:22:a7:ce:38: bc:cd:34:d2:5e:ba:55:5e:f8:f4:b3:ee:6b:e7:04: 61:fb:e7:bc:58:bf:06:b8:73:81:1e:61:63:b3:fe: 2e:93:df:86:54:40:d3:2c:a1:2e:fc:00:3c:16:4c: bc:69:90:cd:49:f2:69:09:25:c8:27:8c:a4:20:47: 0d:11:67:65:75:be:0f:eb:c7:bd:ab:d0:4c:0f:71: 54:46:36:00:62:cf:ee:39:f1:4a:3c:6b:1a:02:75: d6:8a:b0:71:f8:86:0c:01:fe:d7:9f:1b:9f:b6:97: f9:70:e9:82:d2:45:68:0e:73:bc:8b:d4:33:83:81: 84:0f:4e:42:cb:fb:b9:24:4f:75:0c:5d:50:16:9e: ce:a0:38:94:52:b1:82:30:ba:a7:0d:61:16:e7:26: cb:f5:da:13:e7:46:af:81:e7:55:26:e4:e1:b9:b5: f4:5f:2f:78:67:9d:28:c5:ca:c0:bb:ed:90:95:cc: 2a:b6:23:72:52:29:c8:40:a5:72:86:6d:64:4a:31: 35:c0:dd:e3:af:28:bd:af:9f:a1:a7:ef:ef:c0:f4: 5b:04:6f:d3:d4:e2:1f:a8:76:60:23:38:31:9b:e9: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:49:3A:FE:4F:C8:32:99:D5:4E:0B:16:DD:5A:C0:5F:B6:07:25:AD X509v3 Authority Key Identifier: keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f4:4a:f2:d4:62:cf:20:48:b7:ce:fa:24:0a:b2:b1:b3:7a: d2:67:6a:c1:ec:21:cf:93:f0:45:82:a2:ea:7d:0a:2b:e9:2c: db:ff:48:f1:3f:a0:06:0c:8c:8b:02:f6:26:32:bc:4b:54:55: 0f:16:f8:71:5b:36:71:d1:86:f0:4a:0c:05:c6:4b:f9:f1:35: 7d:7d:68:6e:0f:c7:6f:36:5d:61:2d:d8:d2:43:38:f8:7b:c4: 06:4f:43:79:36:32:20:85:79:13:d1:d3:f6:07:5c:04:ca:48: 0f:f7:83:a0:42:12:28:dc:0d:dc:68:ba:63:4c:95:dd:79:35: 4a:63:f4:ed:4b:6e:9a:b6:ef:3c:85:6e:06:da:a2:4d:59:de: 86:b2:84:2a:95:8b:b3:82:c7:e7:ef:04:11:c9:ee:f4:e4:64: b9:ef:d8:d9:3f:01:f8:a6:bb:fd:9e:08:ec:57:d4:a1:88:95: 17:c3:5a:60:ba:55:06:48:e1:31:2b:30:d8:3a:7f:bf:5e:45: 8e:46:cd:d9:4c:b6:14:96:0a:93:60:17:0d:e9:13:2d:d3:39: 65:93:16:f0:bb:93:f9:b9:56:f8:31:9b:56:0d:79:1e:e4:64: 0c:d4:9f:c4:85:00:50:e3:a1:fa:64:ba:a2:5b:a6:5b:be:13: 22:6e:38:1f -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUSmW7jybQnJgavZ5zPKN49tsfz28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyMUM1MjAwMkYxMjM4NUZFNjFGMzNCRjVGNjkzM0Qw OUVGOEVEMjAeFw0yNTEwMjAxMDQ1MDBaFw0yNTEwMjExMDUwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRURENEVBMTE1RDU5N0I5NTgw NjNDOUZBQjBDQjc1NkE3NUVGODVGMDgxQkE0RDY5OTcyMkE3Q0UzOEJDQ0QzNEQy NUVCQTU1NUVGOEY0QjNFRTZCRTcwNDYxRkJFN0JDNThCRjA2Qjg3MzgxMUU2MTYz QjNGRTJFOTNERjg2NTQ0MEQzMkNBMTJFRkMwMDNDMTY0Q0JDNjk5MENENDlGMjY5 MDkyNUM4Mjc4Q0E0MjA0NzBEMTE2NzY1NzVCRTBGRUJDN0JEQUJEMDRDMEY3MTU0 NDYzNjAwNjJDRkVFMzlGMTRBM0M2QjFBMDI3NUQ2OEFCMDcxRjg4NjBDMDFGRUQ3 OUYxQjlGQjY5N0Y5NzBFOTgyRDI0NTY4MEU3M0JDOEJENDMzODM4MTg0MEY0RTQy Q0JGQkI5MjQ0Rjc1MEM1RDUwMTY5RUNFQTAzODk0NTJCMTgyMzBCQUE3MEQ2MTE2 RTcyNkNCRjVEQTEzRTc0NkFGODFFNzU1MjZFNEUxQjlCNUY0NUYyRjc4Njc5RDI4 QzVDQUMwQkJFRDkwOTVDQzJBQjYyMzcyNTIyOUM4NDBBNTcyODY2RDY0NEEzMTM1 QzBEREUzQUYyOEJEQUY5RkExQTdFRkVGQzBGNDVCMDQ2RkQzRDRFMjFGQTg3NjYw MjMzODMxOUJFOURDNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA7dTqEV1Ze5WAY8n6sMt1anXvhfCBuk1plyKnzji8zTTSXrpVXvj0 s+5r5wRh++e8WL8GuHOBHmFjs/4uk9+GVEDTLKEu/AA8Fky8aZDNSfJpCSXIJ4yk IEcNEWdldb4P68e9q9BMD3FURjYAYs/uOfFKPGsaAnXWirBx+IYMAf7Xnxuftpf5 cOmC0kVoDnO8i9Qzg4GED05Cy/u5JE91DF1QFp7OoDiUUrGCMLqnDWEW5ybL9doT 50avgedVJuThubX0Xy94Z50oxcrAu+2QlcwqtiNyUinIQKVyhm1kSjE1wN3jryi9 r5+hp+/vwPRbBG/T1OIfqHZgIzgxm+nccwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FFVJOv5PyDKZ1U4LFt1awF+2ByWtMB8GA1UdIwQYMBaAFMwhxSAC8SOF/mHzO/X2 kz0J747SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4 NUZFNjFGMzNCRjVGNjkzM0QwOUVGOEVEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4 RUQyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZNWZHa0RM RER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4NUZFNjFG MzNCRjVGNjkzM0QwOUVGOEVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALn0SvLUYs8gSLfO+iQKsrGz etJnasHsIc+T8EWCoup9CivpLNv/SPE/oAYMjIsC9iYyvEtUVQ8W+HFbNnHRhvBK DAXGS/nxNX19aG4Px282XWEt2NJDOPh7xAZPQ3k2MiCFeRPR0/YHXATKSA/3g6BC EijcDdxoumNMld15NUpj9O1Lbpq27zyFbgbaok1Z3oayhCqVi7OCx+fvBBHJ7vTk ZLnv2Nk/Afimu/2eCOxX1KGIlRfDWmC6VQZI4TErMNg6f79eRY5GzdlMthSWCpNg Fw3pEy3TOWWTFvC7k/m5Vvgxm1YNeR7kZAzUn8SFAFDjofpkuqJbplu+EyJuOB8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:04 2025 by rpki-client