$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft File: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft (raw, json) Hash identifier: 4t1Il7KYOMqBWa/jQqK2U8u+qtYgeam/Sy0kD2K1ylU= Subject key identifier: 19:B5:B3:F9:9D:0F:59:54:03:42:19:C4:4C:B7:E8:08:5A:3C:8C:08 Authority key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE Certificate issuer: /CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Certificate serial: 014AB44316CCE01AC7C5ECE96209432238097F50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft Manifest number: 02F8 Signing time: Tue 04 Nov 2025 10:51:40 +0000 Manifest this update: Tue 04 Nov 2025 10:46:40 +0000 Manifest next update: Wed 05 Nov 2025 13:25:40 +0000 Files and hashes: 1: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: RJ1WZFBfEzWGniIdzhAmmz9+gLm7fbEqwNn3B6soCOw=) 2: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl (hash: dXYL3wwDPRRDMxi048lHn2VOh8g8ZI5PflBXrzpqh4w=) 3: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: qelJjM5d33Imc6UYcUNyfhiBYBiDTusid0cQJFtvHZ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4a:b4:43:16:cc:e0:1a:c7:c5:ec:e9:62:09:43:22:38:09:7f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Validity Not Before: Nov 4 10:46:40 2025 GMT Not After : Nov 5 13:25:40 2025 GMT Subject: CN=19B5B3F99D0F5954034219C44CB7E8085A3C8C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:69:d1:12:81:f9:bf:8f:fe:bc:4e:20:73: 83:a9:f7:90:53:8c:98:b9:c8:61:f3:54:26:16:46: 22:f1:c3:10:70:5c:5f:3d:3a:c8:ef:b3:39:bb:8f: 3c:6d:bd:c8:19:ff:43:53:ed:69:b9:2d:40:b4:ab: 83:94:1d:14:c4:51:b5:8b:66:83:57:93:fb:75:fa: 52:51:32:39:88:6f:4b:6d:79:15:d5:24:ce:69:46: fa:61:06:43:b5:e2:95:47:bc:27:17:60:30:29:61: 36:8a:25:1d:1a:5e:55:5d:13:50:c1:70:44:2a:88: c4:84:81:8f:2d:9e:a2:66:e0:40:49:76:5a:d1:bb: 37:08:da:8e:93:de:b7:28:c3:8e:cd:84:8c:f0:a3: b6:d2:86:3f:9e:ab:dc:0d:b0:c7:6c:45:de:98:e1: e5:61:2d:dc:06:01:8e:1b:ae:77:4a:66:16:98:09: c4:ea:57:27:aa:a7:a6:09:00:99:d1:3a:4d:06:27: 0b:58:63:32:c8:d3:20:f1:0b:b4:d1:9c:6e:bc:2e: 4a:d4:99:6c:13:c0:f8:16:6c:c2:76:54:bf:90:a1: fe:ac:14:11:26:17:9f:99:62:96:84:87:14:ad:dc: c2:af:4f:8c:40:b3:e9:26:de:62:31:02:21:8b:db: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:B3:F9:9D:0F:59:54:03:42:19:C4:4C:B7:E8:08:5A:3C:8C:08 X509v3 Authority Key Identifier: keyid:21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a6:c7:ab:e2:e4:61:12:ac:db:9b:ed:f2:c0:d7:a5:50:10: 6b:31:c7:38:8b:7b:7c:ee:08:be:3f:76:aa:2b:92:76:9d:e8: 0a:e3:2b:1d:42:ab:a5:b9:e8:f0:10:78:44:f3:b8:da:14:a8: 0a:cc:e6:2d:05:db:f4:69:38:7c:19:16:9d:6f:30:77:58:dd: 04:d0:8c:43:07:f4:32:f9:87:70:1e:99:01:87:f2:44:81:f3: 6f:ac:02:3c:cf:ed:56:7e:b9:0c:97:2f:a2:39:90:cf:94:f7: 60:8e:3e:54:1b:d2:20:3f:89:2d:96:7c:07:4c:58:22:99:f2: 77:85:9d:a1:b2:66:d9:98:35:6f:4c:34:ea:93:7d:ea:55:a4: 39:74:7d:e2:51:08:f6:8d:50:33:db:e6:73:dc:b1:6b:53:db: d3:55:99:42:2e:44:4e:dd:1c:99:f3:8d:79:af:94:0c:97:f9: 32:45:75:a0:5e:37:4d:7b:45:0d:64:95:a0:d8:8f:ea:c1:10: a5:2d:47:5f:14:c5:fe:4a:5e:c2:04:ac:c2:8b:b9:ca:f0:76: 8d:3c:bc:95:c1:d6:04:de:57:fe:88:f8:46:4f:84:dd:66:9e: 3a:45:dd:26:6f:9a:bc:f0:de:d7:6e:b3:41:a0:f5:10:c6:39: 06:d5:95:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAUq0QxbM4BrHxezpYglDIjgJf1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExRjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBE M0I4NENCRTAeFw0yNTExMDQxMDQ2NDBaFw0yNTExMDUxMzI1NDBaMDMxMTAvBgNV BAMTKDE5QjVCM0Y5OUQwRjU5NTQwMzQyMTlDNDRDQjdFODA4NUEzQzhDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPGnREoH5v4/+vE4gc4Op95BT jJi5yGHzVCYWRiLxwxBwXF89Osjvszm7jzxtvcgZ/0NT7Wm5LUC0q4OUHRTEUbWL ZoNXk/t1+lJRMjmIb0tteRXVJM5pRvphBkO14pVHvCcXYDApYTaKJR0aXlVdE1DB cEQqiMSEgY8tnqJm4EBJdlrRuzcI2o6T3rcow47NhIzwo7bShj+eq9wNsMdsRd6Y 4eVhLdwGAY4brndKZhaYCcTqVyeqp6YJAJnROk0GJwtYYzLI0yDxC7TRnG68LkrU mWwTwPgWbMJ2VL+Qof6sFBEmF5+ZYpaEhxSt3MKvT4xAs+km3mIxAiGL27UTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGbWz+Z0PWVQDQhnETLfoCFo8jAgwHwYDVR0j BBgwFoAUIR89QgoTauc5WjZ8DcLHMNO4TL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4 UnIvMC8yMTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUYzRDQyMEExMzZBRTcz OTVBMzY3QzBEQzJDNzMwRDNCODRDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8y MTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYqbHq+LkYRKs25vt8sDXpVAQazHHOIt7fO4Ivj92qiuSdp3oCuMrHUKrpbno 8BB4RPO42hSoCszmLQXb9Gk4fBkWnW8wd1jdBNCMQwf0MvmHcB6ZAYfyRIHzb6wC PM/tVn65DJcvojmQz5T3YI4+VBvSID+JLZZ8B0xYIpnyd4WdobJm2Zg1b0w06pN9 6lWkOXR94lEI9o1QM9vmc9yxa1Pb01WZQi5ETt0cmfONea+UDJf5MkV1oF43TXtF DWSVoNiP6sEQpS1HXxTF/kpewgSswou5yvB2jTy8lcHWBN5X/oj4Rk+E3WaeOkXd Jm+avPDe126zQaD1EMY5BtWV0A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:16:55 2025 by rpki-client