$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft File: 04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft (raw, json) Hash identifier: oy2cUuJDVBL7nDq2E1xjJhRyo7MblUYiL48R1ddNmpc= Subject key identifier: 33:C8:3C:92:6B:B4:17:5C:2B:4F:77:BA:CA:37:F1:00:5A:DE:55:2C Authority key identifier: 04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87 Certificate issuer: /CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87 Certificate serial: 2F65F929D4512AB2EC44CF21D53B0B0286961D0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft Manifest number: 21 Signing time: Fri 04 Jul 2025 23:10:44 +0000 Manifest this update: Fri 04 Jul 2025 23:05:44 +0000 Manifest next update: Sat 05 Jul 2025 23:20:44 +0000 Files and hashes: 1: 323830343a346332383a3a2f33322d3438203d3e20323637333533.roa (hash: bmT09xDutoa9PvJahu2aOyeKWMXErbCwcThQLbnkXm0=) 2: 04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl (hash: bUiCkTTmMgy7JPHIjDhUnG2leF2NtRnWQ3joh7EzRJM=) 3: 34352e3233342e34382e302f32322d3234203d3e20323637333533.roa (hash: eoUHwMrI3zAiw9wLJNrGheTpcxxSu5ipNJzZq/fBJdU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 23:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:65:f9:29:d4:51:2a:b2:ec:44:cf:21:d5:3b:0b:02:86:96:1d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87 Validity Not Before: Jul 4 23:05:44 2025 GMT Not After : Jul 5 23:20:44 2025 GMT Subject: CN=33C83C926BB4175C2B4F77BACA37F1005ADE552C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:a3:c4:6a:d0:d5:02:14:3e:66:04:de:fa: a0:52:43:0f:4e:17:a1:00:0d:70:11:31:6a:9f:be: 86:a6:62:6c:a5:ba:04:8a:ad:bc:fd:73:56:44:df: 7b:bf:69:eb:75:ab:a1:f0:f3:a1:25:ab:84:bd:b2: 20:02:a5:30:d2:06:1e:11:6e:7f:42:64:81:32:69: 4d:e6:a2:d6:5f:a6:fc:87:5d:db:bb:2e:9a:6f:40: a7:1e:61:67:e6:79:2f:ec:1f:41:3b:19:b6:ad:8f: 0a:1e:32:ac:93:19:06:dc:61:47:e0:96:23:b5:24: d2:85:d9:87:bc:c2:60:d8:dd:83:37:6a:6b:4a:96: b7:d5:be:fc:75:42:9d:7b:23:b6:e7:8e:80:b2:23: 38:de:e5:60:02:4d:24:3b:cf:73:63:26:a3:1b:6d: 5f:45:8b:cd:10:79:a4:a0:0e:48:95:0e:81:1f:b5: 43:37:24:83:3f:84:61:2c:2f:84:8d:8c:87:a3:2a: b3:87:7f:d7:90:41:f8:cb:11:79:f8:a4:cc:27:dc: 10:fa:d5:d8:44:ce:78:f8:61:34:23:d9:9f:e4:f2: 02:fe:d5:90:7b:9d:37:76:42:ef:97:d0:76:06:75: 79:da:45:55:cc:37:b1:6b:41:2e:20:c2:76:f0:89: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:3C:92:6B:B4:17:5C:2B:4F:77:BA:CA:37:F1:00:5A:DE:55:2C X509v3 Authority Key Identifier: keyid:04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ff:9b:64:20:3f:5e:fa:a9:be:8e:96:04:05:e6:49:20:b3: 51:3e:c5:d7:4e:a1:ec:ac:34:38:b6:a0:a9:12:5b:7a:2a:f5: 16:f9:e0:29:76:8f:47:1b:c8:6e:f7:7a:0f:5c:44:5d:4a:ac: 73:f8:74:99:c1:2f:43:b5:9d:f7:f1:55:6b:e8:57:9b:08:83: b6:11:bc:25:6d:71:17:4e:51:3e:1c:01:5c:14:48:d8:20:4e: c6:95:73:15:26:4d:c4:f0:97:5f:04:77:7b:64:15:1c:32:a5: 34:b7:b8:71:d7:24:25:86:3e:54:ab:74:25:ce:a2:ff:7c:16: a8:bf:00:fc:53:25:49:d5:29:12:08:ad:b0:99:d4:85:2c:a2: a8:26:8c:1d:02:4b:a0:83:63:da:7b:50:40:8e:72:f5:f2:07: 08:fe:ee:7f:56:0d:71:6f:d3:e3:4b:43:12:39:bf:d5:3b:84: ad:61:0d:cb:01:e8:b2:5e:18:bd:09:dd:a5:2b:81:ae:27:9a: eb:1e:ad:88:f6:ef:15:67:4e:f9:ba:c3:91:fe:48:16:a6:62: 22:63:56:89:4d:02:20:84:df:1a:ce:f3:52:8e:9e:a3:b8:ce: ec:3a:55:85:11:f2:c9:b3:e3:3d:d2:a3:9c:24:b4:25:df:33: b9:85:24:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL2X5KdRRKrLsRM8h1TsLAoaWHQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4MjFGRjczQkM3QTBGNDU2ODIzQzVERkVCREE4QkI4 QzI1RUI4NzAeFw0yNTA3MDQyMzA1NDRaFw0yNTA3MDUyMzIwNDRaMDMxMTAvBgNV BAMTKDMzQzgzQzkyNkJCNDE3NUMyQjRGNzdCQUNBMzdGMTAwNUFERTU1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1aPEatDVAhQ+ZgTe+qBSQw9O F6EADXARMWqfvoamYmylugSKrbz9c1ZE33u/aet1q6Hw86Elq4S9siACpTDSBh4R bn9CZIEyaU3motZfpvyHXdu7LppvQKceYWfmeS/sH0E7GbatjwoeMqyTGQbcYUfg liO1JNKF2Ye8wmDY3YM3amtKlrfVvvx1Qp17I7bnjoCyIzje5WACTSQ7z3NjJqMb bV9Fi80QeaSgDkiVDoEftUM3JIM/hGEsL4SNjIejKrOHf9eQQfjLEXn4pMwn3BD6 1dhEznj4YTQj2Z/k8gL+1ZB7nTd2Qu+X0HYGdXnaRVXMN7FrQS4gwnbwiTHPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM8g8kmu0F1wrT3e6yjfxAFreVSwwHwYDVR0j BBgwFoAUBIIf9zvHoPRWgjxd/r2ou4wl64cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3Zj OUUvMC8wNDgyMUZGNzNCQzdBMEY0NTY4MjNDNURGRUJEQThCQjhDMjVFQjg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODIxRkY3M0JDN0EwRjQ1 NjgyM0M1REZFQkRBOEJCOEMyNUVCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3ZjOUUvMC8w NDgyMUZGNzNCQzdBMEY0NTY4MjNDNURGRUJEQThCQjhDMjVFQjg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOf+bZCA/Xvqpvo6WBAXmSSCzUT7F106h7Kw0OLagqRJbeir1FvngKXaPRxvI bvd6D1xEXUqsc/h0mcEvQ7Wd9/FVa+hXmwiDthG8JW1xF05RPhwBXBRI2CBOxpVz FSZNxPCXXwR3e2QVHDKlNLe4cdckJYY+VKt0Jc6i/3wWqL8A/FMlSdUpEgitsJnU hSyiqCaMHQJLoINj2ntQQI5y9fIHCP7uf1YNcW/T40tDEjm/1TuErWENywHosl4Y vQndpSuBriea6x6tiPbvFWdO+brDkf5IFqZiImNWiU0CIITfGs7zUo6eo7jO7DpV hRHyybPjPdKjnCS0Jd8zuYUkPg== -----END CERTIFICATE-----Generated at Sat Jul 5 11:11:11 2025 by rpki-client