$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: lhwRkl6jETApLV7rXcSU7LKCgaXcinJS5MPBOJaNt5I= Subject key identifier: 98:6B:F0:32:03:5D:B1:E7:C5:AF:AF:8F:7F:3F:34:34:25:16:FC:CF Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 1EC1311F3BBD09B95BAB0BA65313BFFD2964784B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 028E Signing time: Fri 08 Aug 2025 06:27:45 +0000 Manifest this update: Fri 08 Aug 2025 06:22:45 +0000 Manifest next update: Sat 09 Aug 2025 08:59:45 +0000 Files and hashes: 1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) 2: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 3: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: OrXlqPZNeTR/0PVKf/MaUlVg7NFGBrJFpiFKEfNANDs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 08:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c1:31:1f:3b:bd:09:b9:5b:ab:0b:a6:53:13:bf:fd:29:64:78:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Aug 8 06:22:45 2025 GMT Not After : Aug 9 08:59:45 2025 GMT Subject: CN=986BF032035DB1E7C5AFAF8F7F3F34342516FCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:be:bb:cb:db:c7:33:40:90:ba:14:45:55: 50:39:92:73:c9:e4:33:f6:8e:00:6b:19:8f:30:f4: 11:a7:1d:48:cb:95:9c:63:c7:06:0c:95:df:2a:a2: 24:a1:9f:bc:6d:36:ae:b8:ed:98:ea:4a:e9:be:7e: a4:e8:eb:dd:63:c1:08:1a:23:68:54:92:06:e6:fa: 1e:46:cd:f5:ed:be:d8:2d:18:db:1c:6b:19:66:44: b9:e5:03:36:fb:6c:8d:de:14:ed:0b:82:f0:f1:f8: 42:61:3c:e0:a5:74:ed:ed:e4:7d:f6:37:b7:46:91: ea:a9:ee:19:2f:80:37:4c:f4:d7:17:8b:95:ac:7a: d3:a8:27:e4:80:5b:31:db:ae:d0:e8:e4:d3:ea:13: 88:cd:09:d7:9c:15:99:cb:75:a3:7c:09:5a:15:1c: 05:a2:61:99:94:ea:3f:58:db:58:4f:ce:6a:7c:8e: a9:70:0e:88:06:56:18:aa:3b:53:67:de:b3:5a:06: bb:e6:03:2e:b6:4a:4b:44:fe:69:79:c1:cd:62:78: fe:57:85:89:1f:64:bd:d9:f4:a8:4d:e3:26:ba:c5: be:b0:f8:25:07:83:8d:bd:ab:6e:71:c8:42:3b:b5: 3d:07:f5:5a:b0:6e:5a:a3:ff:80:02:9c:cc:11:9e: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6B:F0:32:03:5D:B1:E7:C5:AF:AF:8F:7F:3F:34:34:25:16:FC:CF X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:22:b3:cf:97:d1:2b:30:9e:8d:4c:94:fd:51:ae:23:9a:89: 18:15:a1:f3:73:89:e0:ef:e2:f5:9e:56:7b:1f:6a:74:5f:a1: 39:5e:a1:85:ce:87:70:05:45:83:23:76:0b:d4:2d:19:86:44: 61:c8:7e:62:64:4e:d5:67:09:15:84:d5:5c:af:d8:1a:f0:bf: 21:3d:ee:09:52:9f:86:3f:50:0b:01:fe:92:d2:a0:a5:71:d0: 3e:34:82:28:65:c4:09:a1:aa:d7:17:bd:5a:59:f2:a3:70:c5: 2d:92:2f:5f:4e:5e:a9:72:25:2f:c6:89:b6:37:f0:fa:cb:a2: fc:d3:35:75:7b:c3:3e:e1:fa:96:41:12:99:3a:11:9f:92:c4: b7:1b:69:60:ae:0c:43:da:a3:e4:74:68:59:35:50:ed:0d:dd: b9:7a:42:9c:c4:64:be:a6:6f:53:c0:16:92:87:fb:00:e3:fc: f7:86:71:e3:37:f8:28:77:ed:c8:4a:ce:36:be:48:2c:ab:01: 90:2f:25:3b:44:85:1f:c9:f0:f9:4e:75:ad:cc:9b:42:40:99: 44:f4:35:08:c1:a2:87:66:e9:69:37:51:ea:03:b9:5c:cb:7d: c5:e3:b2:b5:72:86:ed:6f:63:7c:13:f7:b6:b5:ac:02:5a:c5: 1d:a2:4c:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHsExHzu9CblbqwumUxO//SlkeEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTA4MDgwNjIyNDVaFw0yNTA4MDkwODU5NDVaMDMxMTAvBgNV BAMTKDk4NkJGMDMyMDM1REIxRTdDNUFGQUY4RjdGM0YzNDM0MjUxNkZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr767y9vHM0CQuhRFVVA5knPJ 5DP2jgBrGY8w9BGnHUjLlZxjxwYMld8qoiShn7xtNq647ZjqSum+fqTo691jwQga I2hUkgbm+h5GzfXtvtgtGNscaxlmRLnlAzb7bI3eFO0LgvDx+EJhPOCldO3t5H32 N7dGkeqp7hkvgDdM9NcXi5WsetOoJ+SAWzHbrtDo5NPqE4jNCdecFZnLdaN8CVoV HAWiYZmU6j9Y21hPzmp8jqlwDogGVhiqO1Nn3rNaBrvmAy62SktE/ml5wc1ieP5X hYkfZL3Z9KhN4ya6xb6w+CUHg429q25xyEI7tT0H9Vqwblqj/4ACnMwRnkWlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmGvwMgNdsefFr6+Pfz80NCUW/M8wHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSKzz5fRKzCejUyU/VGuI5qJGBWh83OJ4O/i9Z5Wex9qdF+hOV6hhc6HcAVF gyN2C9QtGYZEYch+YmRO1WcJFYTVXK/YGvC/IT3uCVKfhj9QCwH+ktKgpXHQPjSC KGXECaGq1xe9Wlnyo3DFLZIvX05eqXIlL8aJtjfw+sui/NM1dXvDPuH6lkESmToR n5LEtxtpYK4MQ9qj5HRoWTVQ7Q3duXpCnMRkvqZvU8AWkof7AOP894Zx4zf4KHft yErONr5ILKsBkC8lO0SFH8nw+U51rcybQkCZRPQ1CMGih2bpaTdR6gO5XMt9xeOy tXKG7W9jfBP3trWsAlrFHaJMwg== -----END CERTIFICATE-----Generated at Fri Aug 8 13:01:33 2025 by rpki-client