$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft File: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft (raw, json) Hash identifier: AgqUKmW9KQuUyB4xYfdxTff352mF5xpHNKGkyImP10g= Subject key identifier: 5D:1A:9C:52:45:55:64:B1:44:B4:07:A1:49:C5:F2:5B:2F:CE:8F:68 Authority key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE Certificate issuer: /CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Certificate serial: 5B2215A3087E393B451FD9898E0ED990161A42E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft Manifest number: 026D Signing time: Sun 10 Aug 2025 02:01:38 +0000 Manifest this update: Sun 10 Aug 2025 01:56:38 +0000 Manifest next update: Mon 11 Aug 2025 02:15:38 +0000 Files and hashes: 1: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl (hash: kxBtRKqskcnZIV3dTO4/H5eDxQnwmJud6Hlbae6txWU=) 2: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: qelJjM5d33Imc6UYcUNyfhiBYBiDTusid0cQJFtvHZ8=) 3: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: RJ1WZFBfEzWGniIdzhAmmz9+gLm7fbEqwNn3B6soCOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:15:a3:08:7e:39:3b:45:1f:d9:89:8e:0e:d9:90:16:1a:42:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Validity Not Before: Aug 10 01:56:38 2025 GMT Not After : Aug 11 02:15:38 2025 GMT Subject: CN=5D1A9C52455564B144B407A149C5F25B2FCE8F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:63:7f:9c:1f:11:07:b9:b5:fd:d0:50:fc: 0c:b5:c9:b7:9d:a1:a3:f4:e0:10:57:06:a6:69:a0: b8:f7:82:bb:05:12:c4:b4:e1:18:0d:12:83:ae:00: e0:b4:65:ae:25:02:04:c7:e8:3b:f5:bd:b2:1a:08: 9a:67:90:5d:72:d4:82:6f:22:59:22:f0:84:1d:6a: 99:eb:67:3e:5a:47:47:bf:36:68:be:ad:69:74:1d: 84:72:44:0a:56:10:99:31:18:53:a3:bd:ca:05:1e: 37:fb:2d:94:b6:9a:bf:a1:bc:5b:36:2a:20:2f:5d: 00:e2:b7:c4:a2:00:9a:96:ed:cb:b8:ec:0f:4c:67: 0b:8b:c5:90:83:79:5f:3a:65:5d:d1:9c:c3:4a:b3: b4:0c:db:6c:ae:6b:d0:b7:82:46:d2:48:1e:a9:99: ff:c7:e4:9f:55:d4:c5:cb:6f:97:b3:43:e8:20:79: 59:e0:58:c6:01:1e:93:47:8a:7a:50:4e:da:1d:00: ac:12:dd:0e:d6:43:84:3f:4d:4f:1a:c5:fb:fe:e3: 10:fa:45:c0:8e:0e:bd:31:28:c7:d4:2b:ef:42:63: b8:3c:31:0b:5a:50:a1:9e:80:f7:04:7d:d0:26:30: f5:3f:f6:c9:9f:c6:2e:36:51:3a:47:a7:47:ce:4f: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1A:9C:52:45:55:64:B1:44:B4:07:A1:49:C5:F2:5B:2F:CE:8F:68 X509v3 Authority Key Identifier: keyid:21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a8:91:ca:5a:c5:39:6e:05:eb:c0:1d:87:84:0a:0f:b5:b9: 03:56:b8:10:c5:47:3f:3d:64:73:f9:8c:21:1c:d5:9c:f5:4a: ca:eb:13:1d:6d:79:fa:c5:6b:98:f8:19:38:d7:b5:31:1a:ba: c8:87:8d:ea:59:ce:33:33:68:e4:8d:1b:48:0f:ef:7b:45:24: 3c:dd:3f:af:46:cb:9c:7e:65:60:fd:ff:6d:a3:af:73:e5:42: 8b:67:02:19:3b:bd:4a:c2:ed:43:f9:3a:de:9b:33:5f:41:47: 29:41:0b:63:4b:55:42:0d:32:08:db:8c:82:92:68:76:26:af: 30:b1:44:4f:6a:ee:1a:6a:95:9a:0e:5a:9f:6f:bc:66:54:0c: 69:2e:f1:a9:c6:1c:c4:ea:9b:81:fd:80:47:89:a7:5f:98:77: b4:17:7e:70:e2:f3:80:59:17:ce:c5:da:a2:3b:05:66:95:be: 87:db:0c:a4:30:bb:b1:97:2d:c8:8f:c2:9d:88:32:a1:13:6f: ae:b9:1f:c6:e5:d0:82:f2:d5:c8:44:24:ce:4d:6e:40:0e:59: 74:ed:a7:75:9a:bc:d2:5a:52:4e:64:af:67:12:09:db:48:96: 3d:89:43:04:54:9a:d6:de:f8:9f:b0:a4:9e:21:f3:39:03:26: ba:dc:0f:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWyIVowh+OTtFH9mJjg7ZkBYaQucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExRjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBE M0I4NENCRTAeFw0yNTA4MTAwMTU2MzhaFw0yNTA4MTEwMjE1MzhaMDMxMTAvBgNV BAMTKDVEMUE5QzUyNDU1NTY0QjE0NEI0MDdBMTQ5QzVGMjVCMkZDRThGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxmN/nB8RB7m1/dBQ/Ay1ybed oaP04BBXBqZpoLj3grsFEsS04RgNEoOuAOC0Za4lAgTH6Dv1vbIaCJpnkF1y1IJv Ilki8IQdapnrZz5aR0e/Nmi+rWl0HYRyRApWEJkxGFOjvcoFHjf7LZS2mr+hvFs2 KiAvXQDit8SiAJqW7cu47A9MZwuLxZCDeV86ZV3RnMNKs7QM22yua9C3gkbSSB6p mf/H5J9V1MXLb5ezQ+ggeVngWMYBHpNHinpQTtodAKwS3Q7WQ4Q/TU8axfv+4xD6 RcCODr0xKMfUK+9CY7g8MQtaUKGegPcEfdAmMPU/9smfxi42UTpHp0fOT73nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXRqcUkVVZLFEtAehScXyWy/Oj2gwHwYDVR0j BBgwFoAUIR89QgoTauc5WjZ8DcLHMNO4TL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4 UnIvMC8yMTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUYzRDQyMEExMzZBRTcz OTVBMzY3QzBEQzJDNzMwRDNCODRDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8y MTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO6iRylrFOW4F68Adh4QKD7W5A1a4EMVHPz1kc/mMIRzVnPVKyusTHW15+sVr mPgZONe1MRq6yIeN6lnOMzNo5I0bSA/ve0UkPN0/r0bLnH5lYP3/baOvc+VCi2cC GTu9SsLtQ/k63pszX0FHKUELY0tVQg0yCNuMgpJodiavMLFET2ruGmqVmg5an2+8 ZlQMaS7xqcYcxOqbgf2AR4mnX5h3tBd+cOLzgFkXzsXaojsFZpW+h9sMpDC7sZct yI/CnYgyoRNvrrkfxuXQgvLVyEQkzk1uQA5ZdO2ndZq80lpSTmSvZxIJ20iWPYlD BFSa1t74n7CkniHzOQMmutwPsw== -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:46 2025 by rpki-client