$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft File: 21619A6DD05DB15FE1B213C8C5C580B755346175.mft (raw, json) Hash identifier: 5GSUabuWUDsd3IpWYSE6+djeQ5tLEMx7eEzAJ4vUZlI= Subject key identifier: EF:8D:9C:45:3A:61:39:72:28:12:8E:08:E1:B6:52:45:FF:DF:C5:F1 Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75 Certificate issuer: /CN=21619A6DD05DB15FE1B213C8C5C580B755346175 Certificate serial: 038F64676ED460C7F14331EB14616217895E9AD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer Subject info access: rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 16:30:35 +0000 Manifest this update: Sat 23 Aug 2025 16:25:35 +0000 Manifest next update: Sun 24 Aug 2025 19:23:35 +0000 Files and hashes: 1: 3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (hash: XyS3jblFpiG2drdAu8D6HmYv5cLQOXgbSYQCQvhd0M8=) 2: 21619A6DD05DB15FE1B213C8C5C580B755346175.crl (hash: QEJTP1DveGY4OhFohhBgjDpQkuke0KYTX78EiaYCQb8=) 3: 323830343a3964343a3a2f33322d313238203d3e20323632393936.roa (hash: tzrgGr/KPcXclXzmZkaYFGbc/XdqrbnWYA+YSUhH6Ew=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 19:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8f:64:67:6e:d4:60:c7:f1:43:31:eb:14:61:62:17:89:5e:9a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175 Validity Not Before: Aug 23 16:25:35 2025 GMT Not After : Aug 24 19:23:35 2025 GMT Subject: CN=EF8D9C453A61397228128E08E1B65245FFDFC5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:57:f6:bb:e0:92:6a:2e:86:e2:76:07:fa: ec:52:d3:5b:1c:e0:df:35:18:75:2d:00:a7:4d:09: 49:e1:31:a2:74:0a:23:98:36:af:cd:26:16:26:d0: a6:ac:f5:51:1e:10:ff:25:2d:98:1a:39:91:62:fa: db:69:5c:15:f7:75:9f:c1:ef:61:81:41:a4:fc:10: 6c:f1:40:38:df:1d:73:1d:ca:2c:32:21:d4:ab:64: 30:e1:06:da:5e:79:80:da:e6:c0:0f:8a:29:2f:6a: 58:9d:d9:47:f9:7e:1c:11:cc:da:33:ed:a0:5c:09: 1f:de:40:80:42:f7:78:33:6f:4f:de:d1:fd:73:c9: c4:ae:5d:05:19:b8:50:43:9f:d8:7c:7b:4a:a2:be: f7:c6:8a:f2:a7:5d:29:10:4d:98:a4:35:9b:2c:a1: 64:9d:00:30:75:9c:1c:d7:85:7b:6c:07:37:8c:2c: 7f:09:75:ab:ea:dd:f8:d8:ca:0e:d0:07:a6:98:23: 03:ac:a4:87:3c:ed:53:54:b0:c1:37:32:9b:b4:c9: c3:7f:5b:cf:c0:a1:2f:8c:25:2a:25:72:b6:54:5d: 5d:34:a1:e3:e4:c6:4c:4f:1b:c9:05:4d:e9:53:90: 08:cc:e7:17:ea:08:33:5e:ec:48:72:e1:3c:a3:05: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:9C:45:3A:61:39:72:28:12:8E:08:E1:B6:52:45:FF:DF:C5:F1 X509v3 Authority Key Identifier: keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e1:89:71:a7:bd:34:b9:a2:73:6c:40:98:f0:1a:b1:11:d8: 32:9f:c3:bf:42:32:34:9a:59:70:48:d2:1d:ec:dd:b6:21:1d: 00:8e:75:f7:85:eb:22:d6:62:98:c5:ea:4c:6a:a4:01:c8:bb: 74:0e:fc:8b:73:4e:2e:58:4c:74:dc:98:44:84:e1:c8:22:d5: c0:32:fc:06:ff:b0:6e:75:30:79:2d:29:aa:dd:24:08:53:c1: 54:58:df:0a:37:21:4b:c9:a3:82:6e:8f:9e:36:cc:13:25:04: 44:76:09:da:4a:35:67:11:77:50:64:2e:e1:a7:d2:b8:91:24: 58:63:19:77:94:2d:9e:d7:e2:00:ec:7c:7f:96:86:c5:f7:de: 29:a2:da:f4:8e:c6:0a:1b:b2:05:af:52:b9:91:76:aa:55:87: 4b:41:47:c9:90:c4:22:94:c5:7b:3c:30:47:1a:fe:0e:94:90: f9:7e:84:52:6f:39:c3:c5:25:47:49:ea:71:98:f1:04:a8:cb: 9d:a7:bb:a6:61:d9:9d:c7:1e:c9:8a:48:eb:99:3e:4f:83:0d: f7:c3:a2:71:02:59:d0:5f:1c:0e:1f:d6:e3:f2:99:44:d3:08: 85:80:93:10:4b:90:6f:64:33:f7:8e:bd:3c:45:11:36:8d:d9: ed:f6:08:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA49kZ27UYMfxQzHrFGFiF4lemtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE2MTlBNkREMDVEQjE1RkUxQjIxM0M4QzVDNTgwQjc1 NTM0NjE3NTAeFw0yNTA4MjMxNjI1MzVaFw0yNTA4MjQxOTIzMzVaMDMxMTAvBgNV BAMTKEVGOEQ5QzQ1M0E2MTM5NzIyODEyOEUwOEUxQjY1MjQ1RkZERkM1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBi1f2u+CSai6G4nYH+uxS01sc 4N81GHUtAKdNCUnhMaJ0CiOYNq/NJhYm0Kas9VEeEP8lLZgaOZFi+ttpXBX3dZ/B 72GBQaT8EGzxQDjfHXMdyiwyIdSrZDDhBtpeeYDa5sAPiikvalid2Uf5fhwRzNoz 7aBcCR/eQIBC93gzb0/e0f1zycSuXQUZuFBDn9h8e0qivvfGivKnXSkQTZikNZss oWSdADB1nBzXhXtsBzeMLH8Jdavq3fjYyg7QB6aYIwOspIc87VNUsME3Mpu0ycN/ W8/AoS+MJSolcrZUXV00oePkxkxPG8kFTelTkAjM5xfqCDNe7Ehy4TyjBUPZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU742cRTphOXIoEo4I4bZSRf/fxfEwHwYDVR0j BBgwFoAUIWGabdBdsV/hshPIxcWAt1U0YXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE5mS2Z5VUFGTkF0em00UkVvajZQY2NFeEU0azV2R1Iza0M2RkdTWHFn RHMvMS8yMTYxOUE2REQwNURCMTVGRTFCMjEzQzhDNUM1ODBCNzU1MzQ2MTc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxNjE5QTZERDA1REIxNUZF MUIyMTNDOEM1QzU4MEI3NTUzNDYxNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE5mS2Z5VUFGTkF0em00UkVvajZQY2NFeEU0azV2R1Iza0M2RkdTWHFnRHMvMS8y MTYxOUE2REQwNURCMTVGRTFCMjEzQzhDNUM1ODBCNzU1MzQ2MTc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATeGJcae9NLmic2xAmPAasRHYMp/Dv0IyNJpZcEjSHezdtiEdAI5194XrItZi mMXqTGqkAci7dA78i3NOLlhMdNyYRIThyCLVwDL8Bv+wbnUweS0pqt0kCFPBVFjf CjchS8mjgm6PnjbMEyUERHYJ2ko1ZxF3UGQu4afSuJEkWGMZd5QtntfiAOx8f5aG xffeKaLa9I7GChuyBa9SuZF2qlWHS0FHyZDEIpTFezwwRxr+DpSQ+X6EUm85w8Ul R0nqcZjxBKjLnae7pmHZncceyYpI65k+T4MN98OicQJZ0F8cDh/W4/KZRNMIhYCT EEuQb2Qz9469PEURNo3Z7fYI2A== -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:38 2025 by rpki-client