$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: Ub7VCt8w9Gt9R3tWaPP7PkzSBrKG+Sxq7XsC/yxFyLI= Subject key identifier: ED:A7:9D:A1:5D:21:19:D4:37:FA:C3:92:B5:80:76:AD:4D:D3:3A:64 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 7BD16294D9E7AD8AF45F52D52E192538B2F3054C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 0240 Signing time: Tue 04 Nov 2025 03:54:13 +0000 Manifest this update: Tue 04 Nov 2025 03:49:13 +0000 Manifest next update: Wed 05 Nov 2025 05:50:13 +0000 Files and hashes: 1: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: mSj5gXqtot7CVqOg93392q+XUH0b0H1cO0uY297txjo=) 2: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) 3: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 05:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d1:62:94:d9:e7:ad:8a:f4:5f:52:d5:2e:19:25:38:b2:f3:05:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Nov 4 03:49:13 2025 GMT Not After : Nov 5 05:50:13 2025 GMT Subject: CN=EDA79DA15D2119D437FAC392B58076AD4DD33A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:5d:b1:ad:d6:ba:30:5b:f9:36:38:8a:e5: ba:9c:8a:0c:43:39:cb:ba:55:2f:31:ed:68:9d:50: 01:65:c1:da:e0:ee:2a:de:66:7e:cb:a4:87:a7:e9: c7:a7:ca:9e:3f:23:a9:c8:e5:b9:5d:26:f9:79:fb: 36:6c:51:25:40:d5:7f:54:84:f9:af:30:97:f3:bd: ba:e9:7c:41:1d:5f:da:d4:40:f7:44:b8:d8:c2:4e: 40:01:69:e1:01:c4:5d:18:23:a6:ff:42:9b:9d:fb: ed:d5:15:ee:0f:96:b9:c9:78:ec:27:1e:e0:2d:ab: e9:15:e2:68:0d:57:46:f6:d8:b0:95:59:7b:fd:8a: 41:54:51:e0:a0:81:aa:ce:1f:43:eb:16:ff:db:61: 5a:10:28:9a:ed:44:f8:3c:c2:e0:bb:37:a1:e2:d8: 52:c4:39:fb:3c:02:d1:a0:0c:88:b4:c1:1a:d3:fa: d8:d2:c1:c7:90:29:5b:88:f5:6e:b4:39:06:fc:f0: 2d:5e:ee:97:58:1e:71:73:3a:aa:f3:2a:21:83:41: 33:32:96:8c:62:1c:d1:00:c0:7a:5f:71:2f:9c:58: 9a:d0:d9:fd:df:f0:e0:45:35:5a:9c:8f:08:bb:45: c4:45:d8:2a:21:1d:5f:3a:47:85:72:b6:f8:cf:94: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:9D:A1:5D:21:19:D4:37:FA:C3:92:B5:80:76:AD:4D:D3:3A:64 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:21:c1:16:87:c5:ae:72:57:e6:2e:3b:de:0d:06:ff:c3:a1: 41:26:7b:59:e9:f0:6c:d3:00:29:e6:97:be:f5:e2:6d:0b:f6: 0a:b7:27:e8:81:cf:7b:14:94:6c:77:d7:9d:3a:2e:12:9a:8c: 5b:9e:f4:fd:f1:11:bd:f8:68:df:ab:8e:84:0b:22:33:01:77: 3b:53:7c:e7:2e:98:c5:17:ad:90:bb:7a:0e:03:7e:f5:bd:73: 75:90:c8:36:0b:18:83:ea:d0:b8:0b:6b:b6:ff:68:67:e7:6a: 09:6b:3c:33:e0:66:41:d3:0a:7a:58:7d:4b:b5:9b:16:b6:e1: 44:cf:2f:91:ad:45:91:8e:df:71:4e:92:1d:c7:92:b8:df:78: 54:d5:f0:03:7b:37:c8:d7:de:0f:90:ad:95:6c:e2:56:17:f1: b7:28:3d:df:51:f9:6b:af:e9:bd:03:77:71:fe:d5:4c:4d:af: 4d:ac:e1:12:77:ed:ed:49:cd:b6:a1:e0:29:41:c9:41:8c:31: dd:2b:29:c8:de:6f:94:cf:71:7b:48:fe:81:e0:8f:f3:aa:20: aa:ee:13:d8:d6:20:91:7f:cc:d5:8d:8c:3b:d5:5b:06:89:ca: 11:fa:42:a5:55:90:9d:a0:54:9b:6d:05:ce:57:d2:a8:0e:8b: 78:77:a6:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe9FilNnnrYr0X1LVLhklOLLzBUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTExMDQwMzQ5MTNaFw0yNTExMDUwNTUwMTNaMDMxMTAvBgNV BAMTKEVEQTc5REExNUQyMTE5RDQzN0ZBQzM5MkI1ODA3NkFENEREMzNBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+l2xrda6MFv5NjiK5bqcigxD Ocu6VS8x7WidUAFlwdrg7ireZn7LpIen6cenyp4/I6nI5bldJvl5+zZsUSVA1X9U hPmvMJfzvbrpfEEdX9rUQPdEuNjCTkABaeEBxF0YI6b/Qpud++3VFe4PlrnJeOwn HuAtq+kV4mgNV0b22LCVWXv9ikFUUeCggarOH0PrFv/bYVoQKJrtRPg8wuC7N6Hi 2FLEOfs8AtGgDIi0wRrT+tjSwceQKVuI9W60OQb88C1e7pdYHnFzOqrzKiGDQTMy loxiHNEAwHpfcS+cWJrQ2f3f8OBFNVqcjwi7RcRF2CohHV86R4VytvjPlMJVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7aedoV0hGdQ3+sOStYB2rU3TOmQwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAriHBFofFrnJX5i473g0G/8OhQSZ7WenwbNMAKeaXvvXibQv2Crcn6IHPexSU bHfXnTouEpqMW570/fERvfho36uOhAsiMwF3O1N85y6YxRetkLt6DgN+9b1zdZDI NgsYg+rQuAtrtv9oZ+dqCWs8M+BmQdMKelh9S7WbFrbhRM8vka1FkY7fcU6SHceS uN94VNXwA3s3yNfeD5CtlWziVhfxtyg931H5a6/pvQN3cf7VTE2vTazhEnft7UnN tqHgKUHJQYwx3SspyN5vlM9xe0j+geCP86ogqu4T2NYgkX/M1Y2MO9VbBonKEfpC pVWQnaBUm20FzlfSqA6LeHemkQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:40 2025 by rpki-client