$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft File: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json) Hash identifier: KdOprh6i/73sTLwsIyINb/vDbwLVWdX/fG7zLUPk0Hg= Subject key identifier: 1D:34:C1:70:0B:75:BC:FD:73:E9:0F:1D:A8:1E:F2:84:B8:87:A7:0A Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 76C2C61263EB6164C28C5871F11D85C4A166FC00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft Manifest number: 0154 Signing time: Sun 02 Nov 2025 22:11:14 +0000 Manifest this update: Sun 02 Nov 2025 22:06:14 +0000 Manifest next update: Tue 04 Nov 2025 00:24:14 +0000 Files and hashes: 1: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: j7yRviWUtBR47diRRZQSwOhBel2iKKRcdCzb2LcKh5U=) 2: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: /1pYXUGiJNlzcrDlu+7hGgbwVbBdHLvZnAiIEDJ3mgY=) 3: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: 87P4ZthL45ryd5ao/4BROx3S+QtsOjAMhagAkYjLUrs=) 4: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: HpEEDz0SGmZuCTiB2WRYUvaYO0gVRzUCdu5824wi6Ew=) 5: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: nIftzw3+iZpcDi7LXAU8XgDFUdrkMrxxET01lz87b78=) 6: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: zbCbYNA/Sv7aeTAlT2UCgGMCCpHHDrdhHwaAb6T7RlA=) 7: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: P72Vo0+btTdKLtZrwM6d6w1d0tSzgvKj3HQWGsIM80w=) 8: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: 7xYxxrOSzrS8k5y97eIDahGvI9CFe6PC4Z6wgywaHcA=) 9: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: fnh0ESskr/VjHvCeSJYSJ+yhqrvpgXqsJ2QHzdbAUrc=) 10: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 2R2Rf6MPjaw0vHm+MKMheF1N2EcLNQp7FDpH/+osnZs=) 11: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: 2PavSs/XlyAnstVNXVfHqNUh15pZH0dOS5gkVJPXKtM=) 12: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: R241NIE5eErEAQdwLYr0SIplvpzgtNrTTFwlfX2dXfY=) 13: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: ZeYgp7BvXvd74/k48bnu+qRITehFL0rvHom26iEGLjk=) 14: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: HDx54wdTXW76T09og51BV5Z57Cx2GSP0rNDysCobcg4=) 15: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: FVJlg76zsiFIfRzwHjWJZAiSFiMl0j2j2H/CwENa5OQ=) 16: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: sYvhVCzeSaLocIBK3q5MTBTx4ZXtD2pesV619zSUDwg=) 17: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: M5gd/5b8yphWCNw+C9KUG3jIlSUAJO8pUTrE9dAxLXI=) 18: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: 5qYxf8RXkN8h2eEpN2bZTKCxHdo3reMiK56wr54VAQM=) 19: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: MO6euXOe3+e/c5Y8E5tznHMe0mpIDKm2mZmkPoTVZII=) 20: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: YSeBPg2lex9h3YRA+gBpl4SonB4GrQPdQMUbhsffoPg=) 21: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: I7xu8XqiplgU4PCcvipFhnLFR9uYEyMAQwYnkk8pujw=) 22: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: hTxBNdPsHdR1pRLMbwfTzlRUFGvMXwjPrS7ZVuQLTBI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c2:c6:12:63:eb:61:64:c2:8c:58:71:f1:1d:85:c4:a1:66:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Nov 2 22:06:14 2025 GMT Not After : Nov 4 00:24:14 2025 GMT Subject: CN=1D34C1700B75BCFD73E90F1DA81EF284B887A70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:df:d7:29:38:9a:bf:37:f5:44:e7:0e:fd: 4b:d8:b6:9d:7a:0b:2d:ce:fe:e3:01:e8:73:a5:b7: 3c:40:02:81:cd:7d:cc:da:bc:7d:68:e2:76:be:e4: b1:84:da:66:a8:5a:ad:ad:b9:f0:c8:11:ab:14:c4: 77:2b:48:73:fc:4a:25:81:54:5b:22:14:6e:0f:85: 31:10:d7:00:ab:51:30:e0:e8:77:ca:b2:86:79:02: 63:4e:5e:93:1a:5d:82:d5:33:29:91:05:12:f6:6b: bb:ab:c1:85:27:40:00:7c:90:48:08:19:7e:17:d8: e1:98:05:f3:b9:d1:5e:04:92:e9:de:90:54:16:6c: e6:47:03:bf:44:91:8f:30:63:bc:c2:aa:71:d9:27: bc:ce:c9:c5:fe:56:7e:aa:74:fd:db:bb:e6:c5:09: e3:9f:cc:a5:42:14:5c:bf:1a:18:8c:af:09:d2:4c: 3c:3e:bb:0b:ce:d9:20:f7:23:63:e2:d0:7a:78:34: 18:d2:92:e3:75:dc:49:e8:43:87:54:80:96:05:e7: 3e:99:cf:9e:eb:0d:96:7a:9d:d9:41:bf:b5:39:1e: bd:0f:3a:fe:a0:43:66:d7:40:7b:f8:88:12:cd:6c: cc:8c:91:23:81:62:fb:e7:f1:6f:22:66:f6:8f:8b: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:C1:70:0B:75:BC:FD:73:E9:0F:1D:A8:1E:F2:84:B8:87:A7:0A X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:01:b3:0b:e9:1f:59:e2:38:a2:2c:db:a9:ce:4b:9f:4e:df: 46:ae:34:6b:13:4d:76:ad:32:72:53:68:fe:ec:93:cb:df:cf: bf:32:3b:1f:b2:eb:3b:22:48:1d:09:e1:8b:a9:30:bb:55:3f: 76:1f:37:0c:5c:50:82:3b:9d:73:d4:54:36:c6:ee:27:e9:35: b3:7e:ad:9f:a1:f3:44:6e:85:4b:43:36:16:58:44:81:93:42: 65:89:c4:1f:42:40:80:79:dc:66:fd:d4:44:f3:ab:9c:98:21: b7:b5:78:c9:2b:0b:75:e4:ea:52:b4:01:05:b7:8e:d5:64:ba: af:f4:bc:90:87:1d:79:57:cc:02:e1:a7:e6:2e:8f:58:20:69: d3:dc:99:a2:60:2f:5c:53:6e:26:92:54:cd:e5:e4:be:77:db: cf:1a:da:a9:31:6a:c4:c3:18:aa:31:6e:6a:11:de:90:b4:1b: 05:57:18:9e:2c:7b:f3:51:2d:29:a3:60:08:f5:27:4f:92:df: 23:c7:2a:c3:eb:19:12:0f:20:76:09:7f:63:f4:3d:f8:ae:7c: f8:83:07:96:b0:4c:a7:ce:31:00:f2:5d:03:43:82:4e:85:ed: 05:95:e6:6c:6c:a9:c7:89:b7:10:de:2c:82:c7:86:e8:6f:44: ec:a1:46:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdsLGEmPrYWTCjFhx8R2FxKFm/AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNTExMDIyMjA2MTRaFw0yNTExMDQwMDI0MTRaMDMxMTAvBgNV BAMTKDFEMzRDMTcwMEI3NUJDRkQ3M0U5MEYxREE4MUVGMjg0Qjg4N0E3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELd/XKTiavzf1ROcO/UvYtp16 Cy3O/uMB6HOltzxAAoHNfczavH1o4na+5LGE2maoWq2tufDIEasUxHcrSHP8SiWB VFsiFG4PhTEQ1wCrUTDg6HfKsoZ5AmNOXpMaXYLVMymRBRL2a7urwYUnQAB8kEgI GX4X2OGYBfO50V4EkunekFQWbOZHA79EkY8wY7zCqnHZJ7zOycX+Vn6qdP3bu+bF CeOfzKVCFFy/GhiMrwnSTDw+uwvO2SD3I2Pi0Hp4NBjSkuN13EnoQ4dUgJYF5z6Z z57rDZZ6ndlBv7U5Hr0POv6gQ2bXQHv4iBLNbMyMkSOBYvvn8W8iZvaPiw15AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHTTBcAt1vP1z6Q8dqB7yhLiHpwowHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMC8y MUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABgGzC+kfWeI4oizbqc5Ln07fRq40axNNdq0yclNo/uyTy9/PvzI7H7LrOyJI HQnhi6kwu1U/dh83DFxQgjudc9RUNsbuJ+k1s36tn6HzRG6FS0M2FlhEgZNCZYnE H0JAgHncZv3URPOrnJght7V4ySsLdeTqUrQBBbeO1WS6r/S8kIcdeVfMAuGn5i6P WCBp09yZomAvXFNuJpJUzeXkvnfbzxraqTFqxMMYqjFuahHekLQbBVcYnix781Et KaNgCPUnT5LfI8cqw+sZEg8gdgl/Y/Q9+K58+IMHlrBMp84xAPJdA0OCToXtBZXm bGypx4m3EN4sgseG6G9E7KFGrg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:54 2025 by rpki-client