$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft File: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft (raw, json) Hash identifier: W297NvhpWLUG40NmxR0xSiHYWaW+bZTb4SYcj1Q0OkY= Subject key identifier: 20:8B:E2:29:08:37:2D:08:17:4C:1E:CC:C6:22:DA:B3:37:55:B2:6D Authority key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE Certificate issuer: /CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Certificate serial: 625A67061B6C614069386DAFBBC6EB576918B1D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft Manifest number: 0255 Signing time: Fri 25 Jul 2025 21:36:38 +0000 Manifest this update: Fri 25 Jul 2025 21:31:38 +0000 Manifest next update: Sat 26 Jul 2025 22:47:38 +0000 Files and hashes: 1: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl (hash: CPHGlswXeII0SSpCYkZwKOYHdI5js4aquOOVk4KKwOQ=) 2: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: qelJjM5d33Imc6UYcUNyfhiBYBiDTusid0cQJFtvHZ8=) 3: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: RJ1WZFBfEzWGniIdzhAmmz9+gLm7fbEqwNn3B6soCOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 22:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5a:67:06:1b:6c:61:40:69:38:6d:af:bb:c6:eb:57:69:18:b1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Validity Not Before: Jul 25 21:31:38 2025 GMT Not After : Jul 26 22:47:38 2025 GMT Subject: CN=208BE22908372D08174C1ECCC622DAB33755B26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:01:86:eb:04:ea:5a:b2:d1:02:c1:1b:c1: e8:77:8b:0c:91:3d:7e:84:8a:43:36:0b:5e:bd:54: f7:0d:6d:2d:04:2d:e0:34:1b:7a:26:62:5d:66:52: d1:ff:19:4e:e2:5d:af:b2:1a:d8:67:84:1b:eb:92: 81:0b:8b:17:08:7a:b8:d0:1f:61:3e:eb:b9:d6:d0: 03:f9:ad:d8:31:c0:cf:a3:f3:7f:f1:0b:0d:ce:93: 42:f9:5e:7a:2a:c5:a5:d9:7e:8d:d9:1a:4b:f1:fe: 2c:b1:bc:df:f1:6b:00:23:58:67:63:71:1c:02:0b: 53:cc:30:bc:5b:ce:46:c9:eb:3b:98:eb:fa:49:0f: 90:61:0a:9d:95:e0:d8:86:28:3b:4d:69:ef:80:46: 6d:16:47:f7:3f:d4:ce:9c:dc:cf:27:ae:77:41:bc: 2e:96:24:3c:00:d7:cc:71:f0:ff:81:ab:82:cf:e9: 2d:f0:4b:1c:f5:f7:97:b4:26:f0:a7:b7:15:33:b7: 5e:e0:b2:f4:ed:4d:df:58:17:f7:db:bd:f6:7f:1d: 3e:53:ee:d1:4b:20:0d:2f:41:c1:1a:ad:52:84:7e: 7e:ca:75:44:79:0e:aa:29:70:7e:d8:0d:59:a4:ff: 01:82:71:36:a5:b9:40:48:6e:55:da:7b:ef:c9:d2: bb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:E2:29:08:37:2D:08:17:4C:1E:CC:C6:22:DA:B3:37:55:B2:6D X509v3 Authority Key Identifier: keyid:21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:28:f4:b8:d1:7a:bd:48:a2:85:a0:04:9e:75:63:87:bb:3b: aa:e6:2c:9f:44:67:e7:9d:31:ed:b4:c8:94:3e:34:8a:13:da: 54:5b:16:22:b8:67:06:6f:c8:17:91:30:ce:bb:05:31:82:e7: a0:cc:bd:6a:07:a6:21:ab:1e:8a:80:8f:da:ef:5f:26:26:9c: dc:2f:fb:75:c5:7b:fe:0a:44:92:57:26:9e:d1:22:2f:72:d9: 17:d7:23:cc:31:5a:29:d3:0b:84:ba:30:84:5e:82:d5:b1:15: 04:fb:16:03:17:39:be:0d:b5:a8:22:f0:28:7e:3f:eb:17:50: 0e:10:72:91:ed:e0:03:31:d4:c3:c6:83:6c:aa:40:5d:84:4a: 67:53:89:be:54:65:27:f5:f3:6d:d8:d7:ea:4f:35:5b:23:57: 41:8d:4e:2d:02:75:6c:41:02:0c:9d:47:96:75:2f:7e:5c:27: b7:7c:3c:c6:4c:d0:b7:72:3f:f7:e8:4c:5c:5c:ec:3b:e8:92: a8:a7:2a:6c:77:04:e1:91:a5:bc:6c:8d:28:25:26:2c:87:06: e5:6b:50:56:d9:ca:f2:90:80:a1:39:3a:dd:bf:80:89:7b:fd: d3:f8:ef:4d:d2:7c:7c:42:98:2e:e3:c7:ae:a8:1e:7c:1e:29: e9:a4:14:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYlpnBhtsYUBpOG2vu8brV2kYsdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExRjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBE M0I4NENCRTAeFw0yNTA3MjUyMTMxMzhaFw0yNTA3MjYyMjQ3MzhaMDMxMTAvBgNV BAMTKDIwOEJFMjI5MDgzNzJEMDgxNzRDMUVDQ0M2MjJEQUIzMzc1NUIyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eAGG6wTqWrLRAsEbweh3iwyR PX6EikM2C169VPcNbS0ELeA0G3omYl1mUtH/GU7iXa+yGthnhBvrkoELixcIerjQ H2E+67nW0AP5rdgxwM+j83/xCw3Ok0L5XnoqxaXZfo3ZGkvx/iyxvN/xawAjWGdj cRwCC1PMMLxbzkbJ6zuY6/pJD5BhCp2V4NiGKDtNae+ARm0WR/c/1M6c3M8nrndB vC6WJDwA18xx8P+Bq4LP6S3wSxz195e0JvCntxUzt17gsvTtTd9YF/fbvfZ/HT5T 7tFLIA0vQcEarVKEfn7KdUR5DqopcH7YDVmk/wGCcTaluUBIblXae+/J0ru7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIIviKQg3LQgXTB7MxiLaszdVsm0wHwYDVR0j BBgwFoAUIR89QgoTauc5WjZ8DcLHMNO4TL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4 UnIvMC8yMTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUYzRDQyMEExMzZBRTcz OTVBMzY3QzBEQzJDNzMwRDNCODRDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8y MTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlCj0uNF6vUiihaAEnnVjh7s7quYsn0Rn550x7bTIlD40ihPaVFsWIrhnBm/I F5EwzrsFMYLnoMy9agemIaseioCP2u9fJiac3C/7dcV7/gpEklcmntEiL3LZF9cj zDFaKdMLhLowhF6C1bEVBPsWAxc5vg21qCLwKH4/6xdQDhByke3gAzHUw8aDbKpA XYRKZ1OJvlRlJ/XzbdjX6k81WyNXQY1OLQJ1bEECDJ1HlnUvflwnt3w8xkzQt3I/ 9+hMXFzsO+iSqKcqbHcE4ZGlvGyNKCUmLIcG5WtQVtnK8pCAoTk63b+AiXv90/jv TdJ8fEKYLuPHrqgefB4p6aQUuA== -----END CERTIFICATE-----Generated at Sat Jul 26 00:36:52 2025 by rpki-client