$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft File: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft (raw, json) Hash identifier: 3BiRu/6xv8CnbtF3oweJcNJhNTZOc3siPAntjpiDENY= Subject key identifier: 90:02:32:DB:03:6F:3D:73:CF:B9:82:D4:CD:7C:4A:CB:9E:74:8C:90 Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Certificate issuer: /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Certificate serial: 66B11EAE404A2A8805FD398CF836F8248349B35D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft Manifest number: 022A Signing time: Mon 03 Nov 2025 04:05:36 +0000 Manifest this update: Mon 03 Nov 2025 04:00:36 +0000 Manifest next update: Tue 04 Nov 2025 06:26:36 +0000 Files and hashes: 1: 34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (hash: Zg6hu9T5lkAymC5Nn3ylhceH8/l2Ooq76i8se7tccAg=) 2: 34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa (hash: z/al2lqkMwSVa4lBgfCp8J36zpft/JeWe/boU03oLZ4=) 3: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl (hash: qidXjKkUmn+7BfTDOjzHNKeN8v6xQEqQP2MQAiVa8BI=) 4: 34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (hash: Z1jL/gsyMMOX23bFF/05TTpxpCMQIiKAlL299WKVFXQ=) 5: 34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (hash: d3JK5wefkO3IaEmhKjERbIY8TPnMP48SylmDzwiMfvU=) 6: 34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (hash: oveRIeBVElycPcDK2nT/HAVVbZ48NXEOPGn8JgFOp8U=) 7: 34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa (hash: Ghf24KKbyZqb/dydUv1p3KTkYK103rJRmKscSH8CBsc=) 8: 323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (hash: 0qpcJ+tbNfWi5cp85Npzhc8FUFW4hSjAueswNczbmUE=) 9: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (hash: dFQvikjmvgdfS5xzkesm3mLXYzz4UjEfkQPlWOh3gGE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b1:1e:ae:40:4a:2a:88:05:fd:39:8c:f8:36:f8:24:83:49:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Validity Not Before: Nov 3 04:00:36 2025 GMT Not After : Nov 4 06:26:36 2025 GMT Subject: CN=900232DB036F3D73CFB982D4CD7C4ACB9E748C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:45:0b:bb:9c:29:39:89:77:05:a6:43:14:9c: 96:5c:b7:68:a9:3c:a6:15:9c:e9:0d:d9:5f:0b:25: 7e:63:fa:6d:7e:b3:4d:81:35:07:a0:d9:96:16:bf: b2:16:0d:70:ce:4b:a9:b2:86:2b:8c:82:7b:62:00: 14:13:c2:4d:0b:9a:03:5b:85:b8:40:3f:0c:31:1a: 49:4c:ad:a9:cc:35:70:c3:e6:58:3f:3d:6d:e4:8e: a0:03:b8:4e:3c:f6:7a:3e:4e:7c:a3:3d:74:71:5a: 58:f1:5c:98:09:db:d3:79:90:d8:fa:c9:22:c1:d5: e0:e5:84:15:cb:09:3e:7a:f4:e8:cd:02:2e:96:fe: 7a:1c:b6:56:14:78:af:5d:c1:e2:67:08:6e:e0:92: 50:79:96:64:4b:11:70:ad:5e:6f:90:44:73:d7:4f: 27:4a:72:15:4d:6f:11:a8:65:86:9b:a0:cb:45:7d: 73:31:b3:01:37:8d:b4:42:08:ae:82:68:1c:56:7d: f8:bd:8e:98:98:0c:06:e0:92:fa:29:d3:3b:69:ac: 68:64:d9:13:9d:87:d5:e5:02:33:d4:a2:8a:46:21: e8:73:a7:73:46:2b:54:ab:f5:9d:24:0d:5a:be:0a: 14:e5:9e:cf:5a:d3:b4:bf:77:a1:60:5f:aa:d5:37: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:02:32:DB:03:6F:3D:73:CF:B9:82:D4:CD:7C:4A:CB:9E:74:8C:90 X509v3 Authority Key Identifier: keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:01:c2:ad:e4:df:66:ae:82:e0:fe:c0:f8:2c:f3:32:10:c3: bd:57:3c:57:1e:4a:7d:9e:9b:da:06:16:19:80:66:db:9b:04: 09:c1:fd:5f:06:37:97:7e:d9:10:54:10:51:a9:50:02:46:5c: 63:df:56:d4:86:51:c0:b1:0a:55:24:03:a8:8d:49:b3:23:dd: 15:2a:ef:69:58:9e:2e:30:96:92:46:5b:81:25:d9:d3:64:f7: 76:7a:b5:f9:9c:e0:a2:75:0e:c2:76:6b:92:08:47:85:c9:c0: b6:eb:a0:7d:93:7c:df:5b:34:7d:43:35:75:05:74:6f:b5:fa: bb:62:32:cc:dd:a8:4e:4d:af:71:25:1b:a4:c9:1b:1b:c8:71: 7f:4c:11:85:c3:c9:e3:be:8c:05:10:94:7b:7a:62:63:09:4d: d5:1d:a7:f1:14:83:3a:91:82:8d:f6:5e:92:1f:4d:ce:4e:03: ff:5e:cc:01:5a:e4:e7:44:6a:2e:c1:70:ef:39:9d:28:9e:06: c6:e9:6e:a9:bf:f0:a8:02:22:6d:52:7e:f4:d2:11:51:75:4f: 68:de:3e:59:59:b9:d2:ba:62:31:6a:c4:ce:01:6f:a0:7a:53: 6c:50:27:24:bc:0e:a9:b3:08:d4:2e:44:64:8a:e4:c6:e9:45: 82:18:33:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZrEerkBKKogF/TmM+Db4JINJs10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF M0NEMEFEQzAeFw0yNTExMDMwNDAwMzZaFw0yNTExMDQwNjI2MzZaMDMxMTAvBgNV BAMTKDkwMDIzMkRCMDM2RjNENzNDRkI5ODJENENEN0M0QUNCOUU3NDhDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfRQu7nCk5iXcFpkMUnJZct2ip PKYVnOkN2V8LJX5j+m1+s02BNQeg2ZYWv7IWDXDOS6myhiuMgntiABQTwk0LmgNb hbhAPwwxGklMranMNXDD5lg/PW3kjqADuE489no+TnyjPXRxWljxXJgJ29N5kNj6 ySLB1eDlhBXLCT569OjNAi6W/noctlYUeK9dweJnCG7gklB5lmRLEXCtXm+QRHPX TydKchVNbxGoZYaboMtFfXMxswE3jbRCCK6CaBxWffi9jpiYDAbgkvop0ztprGhk 2ROdh9XlAjPUoopGIehzp3NGK1Sr9Z0kDVq+ChTlns9a07S/d6FgX6rVNzztAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkAIy2wNvPXPPuYLUzXxKy550jJAwHwYDVR0j BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4 MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZMU1QvMC8y MUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAwHCreTfZq6C4P7A+CzzMhDDvVc8Vx5KfZ6b2gYWGYBm25sECcH9XwY3l37Z EFQQUalQAkZcY99W1IZRwLEKVSQDqI1JsyPdFSrvaVieLjCWkkZbgSXZ02T3dnq1 +ZzgonUOwnZrkghHhcnAtuugfZN831s0fUM1dQV0b7X6u2IyzN2oTk2vcSUbpMkb G8hxf0wRhcPJ476MBRCUe3piYwlN1R2n8RSDOpGCjfZekh9Nzk4D/17MAVrk50Rq LsFw7zmdKJ4Gxuluqb/wqAIibVJ+9NIRUXVPaN4+WVm50rpiMWrEzgFvoHpTbFAn JLwOqbMI1C5EZIrkxulFghgz+w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:17 2025 by rpki-client