$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: 3FNd4c7NJxeEghoMqGSihSJfzJgmkXMX6jtOHrzbqnk= Subject key identifier: BB:EC:36:34:E7:07:B9:7F:17:8C:D9:AC:78:3A:25:B9:69:4D:D4:A3 Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 3DC93F92610128246D8872050A21165AF7D59B1E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 01:39:56 +0000 Manifest this update: Mon 03 Nov 2025 01:34:56 +0000 Manifest next update: Tue 04 Nov 2025 03:21:56 +0000 Files and hashes: 1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) 2: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 3: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: riAAf8rx4H0LwaBSKsXXpm4hm+KgV+0PUoBHY81I2W0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c9:3f:92:61:01:28:24:6d:88:72:05:0a:21:16:5a:f7:d5:9b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Nov 3 01:34:56 2025 GMT Not After : Nov 4 03:21:56 2025 GMT Subject: CN=BBEC3634E707B97F178CD9AC783A25B9694DD4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:71:5f:a8:d1:9a:a0:5a:e2:07:19:cc:ee:f1: 48:19:25:fc:db:6f:73:01:42:63:87:c4:64:38:69: fd:ba:19:ab:b6:34:13:a8:ef:3a:79:9f:e4:ba:09: e3:68:3f:b4:91:13:ee:65:57:94:88:47:65:51:8a: 9e:28:c7:de:b8:c9:b3:14:b3:61:d1:73:9d:25:49: 87:a3:17:59:01:3a:a1:bc:89:dc:eb:dd:4e:7e:a0: ab:d9:32:48:05:29:e4:ae:c1:81:7e:7d:4e:e5:77: 00:7e:1a:06:4f:56:2a:3e:d5:ad:14:22:1a:4d:52: 2c:fc:9f:bb:7f:59:ef:ae:0d:27:97:ee:81:c1:2c: ad:03:49:bf:a1:d0:0d:f0:5a:04:a6:7c:f3:22:26: fc:db:c0:7b:52:ac:bd:54:2d:99:4e:4c:c6:7a:2d: 46:e2:43:50:44:ea:5e:25:9e:32:52:45:ad:fe:72: c2:0e:87:31:bd:c8:38:ab:f5:61:86:67:6e:ee:27: e5:87:ce:b1:eb:bd:6d:90:7d:73:9c:2a:79:f3:ce: f2:3d:62:ce:0e:cd:54:88:22:66:31:f9:87:f9:a0: dc:cb:68:c4:fe:57:f8:02:b3:c5:a0:30:55:a3:65: 06:2b:b5:31:9c:a0:2c:d0:9e:c6:8c:6d:ff:04:18: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EC:36:34:E7:07:B9:7F:17:8C:D9:AC:78:3A:25:B9:69:4D:D4:A3 X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:18:78:d4:a3:a2:dd:a4:f2:a3:3a:e2:da:33:a5:61:b6:02: a4:78:ca:6b:2b:78:6d:cb:b5:de:6c:88:b7:17:90:dd:73:61: f6:d3:47:cd:55:e3:a6:45:2d:d2:0e:bc:d5:02:d5:27:8f:07: 1f:fd:e2:a5:90:b0:18:c0:3e:bc:2a:dc:aa:a1:84:fa:da:3d: b9:0e:f4:00:9a:5a:01:7a:96:80:9c:25:1d:83:24:5d:4b:7e: 68:86:a5:7c:02:e3:33:cd:8e:6b:6e:94:e9:d0:11:aa:49:64: e5:55:32:89:cd:a5:17:77:e4:7a:92:b3:d9:13:7b:33:13:e9: ec:ee:4b:b9:39:fe:6e:e7:a5:90:b2:37:cb:30:de:55:74:e5: bc:f1:c1:7e:a0:af:84:74:62:24:ac:04:b1:ec:cb:cd:c6:81: e9:99:29:f5:d0:09:a7:39:49:44:18:c2:fa:f8:2a:20:63:2e: 90:aa:cf:be:57:4a:cb:f7:15:15:78:de:50:15:0c:fd:bd:0a: 23:f1:64:2a:5c:1b:ef:7c:5e:be:f2:28:9d:7d:e0:81:34:35: e1:e2:65:72:d7:e8:27:1b:27:e0:80:00:b1:46:bc:d8:53:c1: d2:ae:4d:c4:2f:6b:5a:14:50:de:a2:f0:39:38:85:9f:32:79: d8:8b:15:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPck/kmEBKCRtiHIFCiEWWvfVmx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTExMDMwMTM0NTZaFw0yNTExMDQwMzIxNTZaMDMxMTAvBgNV BAMTKEJCRUMzNjM0RTcwN0I5N0YxNzhDRDlBQzc4M0EyNUI5Njk0REQ0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3cV+o0ZqgWuIHGczu8UgZJfzb b3MBQmOHxGQ4af26Gau2NBOo7zp5n+S6CeNoP7SRE+5lV5SIR2VRip4ox964ybMU s2HRc50lSYejF1kBOqG8idzr3U5+oKvZMkgFKeSuwYF+fU7ldwB+GgZPVio+1a0U IhpNUiz8n7t/We+uDSeX7oHBLK0DSb+h0A3wWgSmfPMiJvzbwHtSrL1ULZlOTMZ6 LUbiQ1BE6l4lnjJSRa3+csIOhzG9yDir9WGGZ27uJ+WHzrHrvW2QfXOcKnnzzvI9 Ys4OzVSIImYx+Yf5oNzLaMT+V/gCs8WgMFWjZQYrtTGcoCzQnsaMbf8EGAQrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu+w2NOcHuX8XjNmseDoluWlN1KMwHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhh41KOi3aTyozri2jOlYbYCpHjKayt4bcu13myItxeQ3XNh9tNHzVXjpkUt 0g681QLVJ48HH/3ipZCwGMA+vCrcqqGE+to9uQ70AJpaAXqWgJwlHYMkXUt+aIal fALjM82Oa26U6dARqklk5VUyic2lF3fkepKz2RN7MxPp7O5LuTn+buelkLI3yzDe VXTlvPHBfqCvhHRiJKwEsezLzcaB6Zkp9dAJpzlJRBjC+vgqIGMukKrPvldKy/cV FXjeUBUM/b0KI/FkKlwb73xevvIonX3ggTQ14eJlctfoJxsn4IAAsUa82FPB0q5N xC9rWhRQ3qLwOTiFnzJ52IsVvw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:50 2025 by rpki-client