$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft File: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft (raw, json) Hash identifier: J3bzjL5Odo6uY2Wtt2ENB94ADxvU6Dr9CtDoJz36ygo= Subject key identifier: D0:02:7D:30:B5:F0:78:E0:20:FD:71:6A:E8:FC:40:3B:3A:FC:7F:32 Authority key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE Certificate issuer: /CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Certificate serial: 3CA44F1DEB376716102B106E58D5E8277C8BF36E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft Manifest number: 02AC Signing time: Thu 18 Sep 2025 03:21:38 +0000 Manifest this update: Thu 18 Sep 2025 03:16:38 +0000 Manifest next update: Fri 19 Sep 2025 06:05:38 +0000 Files and hashes: 1: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl (hash: gXjAtQ728d7USRj1m2Rqu2yrRlWGJVuAA8C4lf2xgbI=) 2: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: qelJjM5d33Imc6UYcUNyfhiBYBiDTusid0cQJFtvHZ8=) 3: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: RJ1WZFBfEzWGniIdzhAmmz9+gLm7fbEqwNn3B6soCOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 06:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a4:4f:1d:eb:37:67:16:10:2b:10:6e:58:d5:e8:27:7c:8b:f3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Validity Not Before: Sep 18 03:16:38 2025 GMT Not After : Sep 19 06:05:38 2025 GMT Subject: CN=D0027D30B5F078E020FD716AE8FC403B3AFC7F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:80:c2:18:50:99:3a:c9:8e:2d:c4:30:9a: d9:56:90:59:e6:e1:a8:8f:f3:49:b3:b8:4b:eb:91: 7e:bd:7a:e5:f1:e8:d5:02:db:44:64:73:a2:37:12: 3c:6d:f1:81:4e:64:15:b3:10:2f:71:40:44:22:66: bf:30:fc:07:c6:6f:b0:c2:e9:1c:d0:53:e2:46:85: e3:e1:9f:1f:08:b8:e4:9f:6e:68:6a:8b:fa:0c:66: 48:08:87:f1:05:50:8f:d0:9d:04:59:71:f0:95:92: 01:77:9a:23:ff:19:10:52:60:43:58:5d:56:ad:b7: 5c:85:b0:c8:1a:8c:06:1f:73:ea:cf:3b:a4:94:d7: cc:25:31:1c:24:15:46:96:ba:06:08:ff:21:bf:86: b6:7f:9b:89:ce:7b:fb:d0:bc:10:9a:1f:9e:f9:7f: 3d:68:69:f4:4b:b0:73:67:7f:55:95:e0:dc:a7:5a: fc:73:a0:55:6e:16:c5:f7:1f:b0:71:eb:c6:d1:f5: 71:d0:41:7c:38:56:8f:7a:b8:39:01:28:d8:ce:30: 11:3a:ab:49:e3:a8:ed:e6:2f:98:7b:36:2c:1d:d0: 9e:4d:bc:f2:39:38:f1:e7:df:6c:c5:e4:22:7f:cd: cf:ad:d4:69:f3:e6:03:2f:12:08:2a:fa:92:01:9f: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:02:7D:30:B5:F0:78:E0:20:FD:71:6A:E8:FC:40:3B:3A:FC:7F:32 X509v3 Authority Key Identifier: keyid:21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:74:ad:f7:9e:05:02:a8:70:cb:cf:19:ce:e1:72:ee:44:b9: 69:14:8e:bf:4a:98:05:20:b8:b9:4e:e4:27:3a:49:70:c7:c8: 2f:55:08:aa:97:96:0e:3f:ff:18:55:74:45:26:54:6e:33:a8: 7b:4f:05:59:56:93:96:33:a5:8d:74:d6:02:2a:bd:22:99:a7: fe:80:e1:49:e9:b6:54:2b:57:df:0a:18:99:c4:c7:9a:40:f7: cd:72:9f:40:64:55:5a:52:39:b0:fc:23:ac:4d:d9:70:25:19: 07:95:8b:f7:3b:54:50:83:b9:08:cb:fe:59:c5:f8:d0:cc:db: 17:80:27:7f:f9:00:0e:9e:2e:41:e6:39:75:d4:a1:77:fa:6f: db:98:14:02:f6:ed:ed:44:e8:91:a0:4d:41:a7:cc:90:66:5d: 0b:a9:ba:4a:7e:72:81:ac:82:02:3f:22:e2:ba:25:be:c1:7d: a1:79:84:26:be:77:33:69:bb:f3:23:0d:83:0a:b9:43:24:fc: 74:00:a6:4a:8c:4a:bd:4b:26:64:54:2a:86:cc:b3:9e:69:e4: 68:a6:fe:e6:4d:b0:7d:6f:72:b4:34:44:72:a0:7f:9f:8e:50: 74:23:88:f6:56:bc:11:a2:ea:53:c1:38:97:66:b1:49:84:b0: 99:aa:4e:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPKRPHes3ZxYQKxBuWNXoJ3yL824wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExRjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBE M0I4NENCRTAeFw0yNTA5MTgwMzE2MzhaFw0yNTA5MTkwNjA1MzhaMDMxMTAvBgNV BAMTKEQwMDI3RDMwQjVGMDc4RTAyMEZENzE2QUU4RkM0MDNCM0FGQzdGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1IDCGFCZOsmOLcQwmtlWkFnm 4aiP80mzuEvrkX69euXx6NUC20Rkc6I3Ejxt8YFOZBWzEC9xQEQiZr8w/AfGb7DC 6RzQU+JGhePhnx8IuOSfbmhqi/oMZkgIh/EFUI/QnQRZcfCVkgF3miP/GRBSYENY XVatt1yFsMgajAYfc+rPO6SU18wlMRwkFUaWugYI/yG/hrZ/m4nOe/vQvBCaH575 fz1oafRLsHNnf1WV4NynWvxzoFVuFsX3H7Bx68bR9XHQQXw4Vo96uDkBKNjOMBE6 q0njqO3mL5h7Niwd0J5NvPI5OPHn32zF5CJ/zc+t1Gnz5gMvEggq+pIBnzsTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0AJ9MLXweOAg/XFq6PxAOzr8fzIwHwYDVR0j BBgwFoAUIR89QgoTauc5WjZ8DcLHMNO4TL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4 UnIvMC8yMTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUYzRDQyMEExMzZBRTcz OTVBMzY3QzBEQzJDNzMwRDNCODRDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8y MTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZHSt954FAqhwy88ZzuFy7kS5aRSOv0qYBSC4uU7kJzpJcMfIL1UIqpeWDj// GFV0RSZUbjOoe08FWVaTljOljXTWAiq9Ipmn/oDhSem2VCtX3woYmcTHmkD3zXKf QGRVWlI5sPwjrE3ZcCUZB5WL9ztUUIO5CMv+WcX40MzbF4Anf/kADp4uQeY5ddSh d/pv25gUAvbt7UTokaBNQafMkGZdC6m6Sn5ygayCAj8i4rolvsF9oXmEJr53M2m7 8yMNgwq5QyT8dACmSoxKvUsmZFQqhsyznmnkaKb+5k2wfW9ytDREcqB/n45QdCOI 9la8EaLqU8E4l2axSYSwmapOcA== -----END CERTIFICATE-----Generated at Thu Sep 18 19:16:57 2025 by rpki-client