$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: EPaMbpM7fBVzG3lIhXFIunAGbA8KhstDBgE7e80a8lM= Subject key identifier: 43:42:4F:8F:2F:6D:BD:6B:06:1E:96:DE:4E:7B:A7:C9:85:E2:DF:C9 Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 5CF2B192436EAED3B69F1290083540BC9103EFD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 13:59:58 +0000 Manifest this update: Tue 04 Nov 2025 13:54:58 +0000 Manifest next update: Wed 05 Nov 2025 14:17:58 +0000 Files and hashes: 1: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 2: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: dwYv5WBbgaYE0ZnWJxG8Ls832pxbcCxT0EmLZyoYpro=) 3: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f2:b1:92:43:6e:ae:d3:b6:9f:12:90:08:35:40:bc:91:03:ef:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Nov 4 13:54:58 2025 GMT Not After : Nov 5 14:17:58 2025 GMT Subject: CN=43424F8F2F6DBD6B061E96DE4E7BA7C985E2DFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:60:f2:74:33:e3:11:64:7b:ec:ec:91:98: 5b:66:b2:34:57:a7:f4:bb:fe:8b:d8:e7:16:32:dc: a9:24:13:60:e0:90:a0:db:9d:b2:67:f8:d8:4e:a6: 01:76:85:f1:60:60:1c:fe:fe:14:af:b3:8e:30:a4: 58:92:ba:8d:76:68:ef:f0:79:89:75:ec:9c:76:ab: 9f:ef:51:4f:d4:b7:c2:26:83:71:3f:4c:4a:84:5b: ef:0e:84:97:9d:91:52:8b:1f:50:46:86:14:bb:32: d3:df:16:98:41:85:b8:1b:31:0a:05:15:f6:00:e4: 59:df:cc:0a:23:3b:2c:ac:70:dc:6d:57:39:cc:d5: c8:46:fa:2a:c6:89:d4:ac:8f:b0:89:39:d4:3c:e7: 8b:5e:6a:f2:23:a9:9a:3d:93:41:06:10:b7:88:1c: 37:b6:6f:05:9c:4f:bf:ca:48:ef:94:03:95:8b:f9: 6a:e5:b6:c4:37:d8:38:47:bf:c3:07:58:ee:51:81: f1:94:51:b4:f1:8f:88:ee:94:b9:15:0b:eb:42:c6: 34:90:9a:0b:c3:62:f4:61:d1:5a:fa:78:88:76:69: 69:00:6a:af:c9:1e:31:30:ef:73:e8:90:47:4b:58: 48:61:88:4e:87:3c:68:68:96:79:95:02:a2:f8:47: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:4F:8F:2F:6D:BD:6B:06:1E:96:DE:4E:7B:A7:C9:85:E2:DF:C9 X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:aa:09:a4:93:4b:ae:e0:ea:76:c8:f2:53:ae:c7:2d:55:c7: 8b:03:ea:46:0d:a0:b3:38:3c:03:b8:34:8e:10:c8:d3:4b:c6: dc:60:0c:b4:49:e6:73:4a:11:fa:cd:2f:c2:3c:36:e6:2f:ff: a9:0f:a5:4c:d6:85:32:70:53:fc:a2:69:84:47:e6:91:3a:a4: 4e:42:40:0a:ec:c4:80:75:19:92:ec:56:45:49:d9:c0:ba:e6: be:75:4a:df:df:ca:a4:a5:70:65:00:24:10:96:03:51:eb:85: 09:e7:41:e8:bb:4d:82:9b:38:b4:43:2b:2a:55:9d:55:22:7d: 9d:e4:a1:e6:25:7b:54:88:b3:3b:39:2e:cf:62:69:c9:5d:75: 24:b1:3e:e2:a9:3f:97:e8:eb:a4:33:af:af:ff:f9:e5:20:04: 4d:a9:9d:4d:6f:d0:33:6b:e4:2a:97:96:cf:e1:44:52:e2:3c: 26:4f:06:eb:db:0a:e6:7f:49:d4:6e:10:2d:f8:10:5b:15:34: 2f:fc:5e:a6:8d:df:e3:66:02:64:9d:d8:1d:b4:75:99:85:c5: 74:19:61:09:ad:4e:db:8e:61:56:3e:67:dc:dc:36:00:eb:f9: fb:89:ba:1f:cd:35:55:b0:4d:fc:a9:37:82:fb:94:95:5c:ce: 5f:8e:44:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXPKxkkNurtO2nxKQCDVAvJED79AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTExMDQxMzU0NThaFw0yNTExMDUxNDE3NThaMDMxMTAvBgNV BAMTKDQzNDI0RjhGMkY2REJENkIwNjFFOTZERTRFN0JBN0M5ODVFMkRGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOWDydDPjEWR77OyRmFtmsjRX p/S7/ovY5xYy3KkkE2DgkKDbnbJn+NhOpgF2hfFgYBz+/hSvs44wpFiSuo12aO/w eYl17Jx2q5/vUU/Ut8Img3E/TEqEW+8OhJedkVKLH1BGhhS7MtPfFphBhbgbMQoF FfYA5FnfzAojOyyscNxtVznM1chG+irGidSsj7CJOdQ854teavIjqZo9k0EGELeI HDe2bwWcT7/KSO+UA5WL+WrltsQ32DhHv8MHWO5RgfGUUbTxj4julLkVC+tCxjSQ mgvDYvRh0Vr6eIh2aWkAaq/JHjEw73PokEdLWEhhiE6HPGholnmVAqL4R8+FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ0JPjy9tvWsGHpbeTnunyYXi38kwHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdKoJpJNLruDqdsjyU67HLVXHiwPqRg2gszg8A7g0jhDI00vG3GAMtEnmc0oR +s0vwjw25i//qQ+lTNaFMnBT/KJphEfmkTqkTkJACuzEgHUZkuxWRUnZwLrmvnVK 39/KpKVwZQAkEJYDUeuFCedB6LtNgps4tEMrKlWdVSJ9neSh5iV7VIizOzkuz2Jp yV11JLE+4qk/l+jrpDOvr//55SAETamdTW/QM2vkKpeWz+FEUuI8Jk8G69sK5n9J 1G4QLfgQWxU0L/xepo3f42YCZJ3YHbR1mYXFdBlhCa1O245hVj5n3Nw2AOv5+4m6 H801VbBN/Kk3gvuUlVzOX45EKA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:52 2025 by rpki-client