$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft File: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft (raw, json) Hash identifier: bEZAvC5PKrBS+xdLYM4rXNasI0xNwkS2rXgKfoGUt/4= Subject key identifier: 6A:EF:12:6F:F2:53:E8:1E:9E:7C:60:07:F3:80:7D:D1:E1:2A:BC:80 Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Certificate serial: 155C4C0258D5D032F0F2529E689E8E17CA1EF9C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft Manifest number: BC Signing time: Thu 18 Sep 2025 07:01:04 +0000 Manifest this update: Thu 18 Sep 2025 06:56:04 +0000 Manifest next update: Fri 19 Sep 2025 09:49:04 +0000 Files and hashes: 1: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (hash: fZuxL2H/McwhqF3eWGOSLVFPaLHn9GVCUQ5HIDIvm7w=) 2: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (hash: SoekstKv8f+pkK/WwzhieixqQG0KM+o03cw/55GYLlg=) 3: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (hash: NcZvtk9vtk4cBlbbop46EV0A+5s9d/7hpHIDDTwgZ0w=) 4: 34352e3137302e35382e302f32332d3233203d3e20323638313438.roa (hash: j8GbTlImInggLXV7UaiaKTq2/ezww6Fce25zlRuDPh8=) 5: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (hash: sQjnBNpY0cCeByw2MJZ0cFZXN5mlrSoantEDSz97YB8=) 6: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (hash: J300dFXZr5KKTkTQzQCo+VuABspi5UhFx/KywDZmrV4=) 7: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl (hash: S/3Nj9qJhH/vCaNt2aT8uK9ljz13NkUnuehi4OaeCAQ=) 8: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (hash: l0BuCzH66s+VtkrxcQvmTEBH0+FHi0YOqD0wKrMk7Tw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5c:4c:02:58:d5:d0:32:f0:f2:52:9e:68:9e:8e:17:ca:1e:f9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Validity Not Before: Sep 18 06:56:04 2025 GMT Not After : Sep 19 09:49:04 2025 GMT Subject: CN=6AEF126FF253E81E9E7C6007F3807DD1E12ABC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:62:c1:7e:57:c2:a1:a4:1d:4e:f7:16:45: ae:59:1e:79:ab:4e:93:99:b3:a2:c5:7c:80:4a:a7: 1a:c4:fe:5e:b5:f0:18:bb:32:ab:7a:c6:08:ae:0a: 0a:45:e4:13:65:69:18:94:83:e4:38:81:f0:1b:89: 40:c0:a5:77:17:0d:c1:9e:34:5b:e2:93:f1:27:33: 23:08:66:47:a6:ab:0e:14:f6:bb:bf:25:26:14:07: 0f:69:ee:cc:36:6a:4b:9e:36:b6:19:b9:2f:76:4d: a5:69:11:91:2b:6b:06:10:8d:db:42:0a:cc:2b:4b: d6:f9:af:39:20:dc:46:64:b5:5d:05:c8:1b:6f:9a: b0:5a:ef:2d:df:50:31:35:9b:21:7e:a5:a4:71:a3: 52:f6:3e:2f:61:17:91:09:49:f5:ca:0a:37:71:17: b4:da:a9:7a:6f:b9:80:9a:39:2d:fd:2b:ab:ba:9b: 72:c3:39:da:bb:43:00:bb:ae:65:0f:6f:35:02:bb: a1:d8:a7:38:41:87:b3:ef:10:0c:76:9e:c4:14:2d: b1:6b:3d:b7:3e:32:1e:83:71:a3:5c:72:c9:8a:c0: 91:d9:28:14:6d:54:ba:31:83:0f:c0:0a:dd:9d:ea: 77:e9:79:5b:bd:66:f1:83:53:5e:f3:66:37:1c:0a: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EF:12:6F:F2:53:E8:1E:9E:7C:60:07:F3:80:7D:D1:E1:2A:BC:80 X509v3 Authority Key Identifier: keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:94:37:93:69:ae:1b:21:31:a4:1a:68:93:f8:90:05:ca:e9: 44:14:b5:14:fb:82:e4:4c:47:95:2c:b8:c6:9d:7e:e7:05:ad: d1:49:b5:4a:35:02:d7:38:e5:b5:31:87:83:52:67:76:39:b7: 95:54:89:7c:d6:20:73:6f:79:98:ae:15:b7:36:a7:24:03:6c: 22:3b:35:d6:af:84:2e:87:3c:32:41:bf:dd:bb:49:15:0c:9e: de:4f:85:ba:e0:9c:87:1b:bc:b7:e8:a6:85:21:42:14:2d:aa: a0:2a:ad:0c:60:34:e5:e9:64:ae:89:c1:e6:f4:f2:8e:6a:d8: 44:e3:2a:2d:b9:b9:cf:0d:76:70:d5:12:d0:5e:93:38:8a:8c: 47:ba:41:f7:4a:8d:b5:b7:23:70:30:d5:d1:84:36:31:03:c1: c7:97:75:c6:5d:94:98:d2:4a:44:2f:dc:d1:f0:cc:96:61:e7: cf:55:9c:78:60:5e:e2:83:3d:73:85:83:1a:be:85:2b:e0:36: a8:05:7a:f1:ae:55:fc:6b:03:ec:1d:42:fd:ed:4d:f2:4d:b6: 29:08:e8:f0:04:d9:e8:08:5d:27:c2:ff:8d:21:85:01:04:16: b0:5b:56:f5:ed:58:34:9f:57:1f:f2:dc:3a:e3:e8:97:8b:ea: 2d:89:05:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFVxMAljV0DLw8lKeaJ6OF8oe+cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDVBMEE2QUE4NEFDRURCNDQ1RjFBNzNEMDdERDND MEE0QTM3MjAeFw0yNTA5MTgwNjU2MDRaFw0yNTA5MTkwOTQ5MDRaMDMxMTAvBgNV BAMTKDZBRUYxMjZGRjI1M0U4MUU5RTdDNjAwN0YzODA3REQxRTEyQUJDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5WLBflfCoaQdTvcWRa5ZHnmr TpOZs6LFfIBKpxrE/l618Bi7Mqt6xgiuCgpF5BNlaRiUg+Q4gfAbiUDApXcXDcGe NFvik/EnMyMIZkemqw4U9ru/JSYUBw9p7sw2akueNrYZuS92TaVpEZErawYQjdtC CswrS9b5rzkg3EZktV0FyBtvmrBa7y3fUDE1myF+paRxo1L2Pi9hF5EJSfXKCjdx F7TaqXpvuYCaOS39K6u6m3LDOdq7QwC7rmUPbzUCu6HYpzhBh7PvEAx2nsQULbFr Pbc+Mh6DcaNccsmKwJHZKBRtVLoxgw/ACt2d6nfpeVu9ZvGDU17zZjccCpDpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUau8Sb/JT6B6efGAH84B90eEqvIAwHwYDVR0j BBgwFoAUIf1aCmqoSs7bRF8ac9B908Cko3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hM emIvMC8yMUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRkQ1QTBBNkFBODRBQ0VE QjQ0NUYxQTczRDA3REQzQzBBNEEzNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hMemIvMC8y MUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5Q3k2muGyExpBpok/iQBcrpRBS1FPuC5ExHlSy4xp1+5wWt0Um1SjUC1zjl tTGHg1Jndjm3lVSJfNYgc295mK4VtzanJANsIjs11q+ELoc8MkG/3btJFQye3k+F uuCchxu8t+imhSFCFC2qoCqtDGA05elkronB5vTyjmrYROMqLbm5zw12cNUS0F6T OIqMR7pB90qNtbcjcDDV0YQ2MQPBx5d1xl2UmNJKRC/c0fDMlmHnz1WceGBe4oM9 c4WDGr6FK+A2qAV68a5V/GsD7B1C/e1N8k22KQjo8ATZ6AhdJ8L/jSGFAQQWsFtW 9e1YNJ9XH/LcOuPol4vqLYkFjQ== -----END CERTIFICATE-----Generated at Thu Sep 18 10:54:41 2025 by rpki-client