$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft File: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft (raw, json) Hash identifier: xv87KCt7KsS++iIH09LcuSmrsrN9mCV7pbu6jGFPNcQ= Subject key identifier: EE:CA:58:4F:71:42:A1:EA:A0:7F:95:F9:16:35:03:A4:EF:89:92:0D Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Certificate issuer: /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Certificate serial: 16DC961262A68241BDE6E2C0BD686DE77B90FD8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft Manifest number: 022D Signing time: Wed 05 Nov 2025 13:01:48 +0000 Manifest this update: Wed 05 Nov 2025 12:56:48 +0000 Manifest next update: Thu 06 Nov 2025 14:20:48 +0000 Files and hashes: 1: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl (hash: GpUjIx4DbZLHoCXfZTR6Wq8+V13V2bSwWudKr+uVkHg=) 2: 323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (hash: 0qpcJ+tbNfWi5cp85Npzhc8FUFW4hSjAueswNczbmUE=) 3: 34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (hash: Zg6hu9T5lkAymC5Nn3ylhceH8/l2Ooq76i8se7tccAg=) 4: 34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa (hash: Ghf24KKbyZqb/dydUv1p3KTkYK103rJRmKscSH8CBsc=) 5: 34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa (hash: z/al2lqkMwSVa4lBgfCp8J36zpft/JeWe/boU03oLZ4=) 6: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (hash: dFQvikjmvgdfS5xzkesm3mLXYzz4UjEfkQPlWOh3gGE=) 7: 34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (hash: Z1jL/gsyMMOX23bFF/05TTpxpCMQIiKAlL299WKVFXQ=) 8: 34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (hash: oveRIeBVElycPcDK2nT/HAVVbZ48NXEOPGn8JgFOp8U=) 9: 34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (hash: d3JK5wefkO3IaEmhKjERbIY8TPnMP48SylmDzwiMfvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:dc:96:12:62:a6:82:41:bd:e6:e2:c0:bd:68:6d:e7:7b:90:fd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Validity Not Before: Nov 5 12:56:48 2025 GMT Not After : Nov 6 14:20:48 2025 GMT Subject: CN=EECA584F7142A1EAA07F95F9163503A4EF89920D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f1:f3:7b:36:b3:fe:a8:e9:8f:16:da:b6:67: c6:1e:45:d7:84:05:22:5c:7c:19:ed:3f:2e:f7:1e: 59:9b:f6:23:3a:7b:70:34:0a:53:a6:c8:8a:6c:78: b2:28:78:09:da:44:98:16:4c:58:64:90:17:f8:83: 41:4f:8d:cb:6c:8b:e3:e2:29:9f:fd:a6:1d:78:c3: 10:48:e0:44:e6:fc:a1:c3:94:d1:3a:14:3c:10:2e: c1:9e:35:d7:18:cb:90:e1:1d:00:4f:d5:ec:c7:3a: 08:89:b9:df:c5:bc:e9:72:83:43:6b:66:f6:05:b9: 10:bb:37:47:2f:ba:81:91:96:43:7d:5c:89:5b:c1: 0e:96:d6:d2:fd:6b:04:00:a3:28:51:5e:b2:13:9c: a3:0a:92:c0:c6:f2:ce:4d:dc:42:a5:83:cf:ba:04: bc:fe:8e:c8:f4:f7:75:bb:13:8e:07:77:91:e0:59: 38:9e:a9:6a:a6:5f:30:40:b7:22:85:a9:d2:b7:50: 8b:a4:3d:f3:35:fc:fb:69:31:ef:c8:c1:15:3c:0b: 42:30:f7:2a:47:64:58:4d:7d:23:47:c4:b7:eb:b1: 3f:a6:d7:50:c3:7a:d2:f3:51:ae:b1:61:86:2b:05: bc:41:96:6f:4b:14:03:15:1e:2f:de:6f:6d:98:0e: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:58:4F:71:42:A1:EA:A0:7F:95:F9:16:35:03:A4:EF:89:92:0D X509v3 Authority Key Identifier: keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:17:fe:d1:38:48:c0:7f:ea:3a:b0:a8:10:0a:a2:24:20:c3: a8:a6:da:c0:bc:66:dc:cc:70:71:41:b6:80:f2:91:56:fb:56: e5:87:25:4e:b1:ae:3d:63:55:ff:b6:d1:d2:e4:bb:25:89:c1: ad:4e:2d:49:82:79:84:ba:99:62:e7:13:47:c9:5b:d7:a8:e7: f4:71:5f:f1:2f:0e:68:22:41:04:ea:a3:82:e4:97:fb:c4:f6: 33:e0:f1:35:ea:2a:37:df:a6:60:60:d5:82:b9:74:4a:f1:d4: 1e:5f:b0:0d:1f:48:f9:8f:37:2e:1f:12:59:1f:c1:a8:87:10: 66:83:b2:0a:a4:09:04:52:2b:ba:86:f9:cf:a9:93:59:1c:a3: 7b:fc:7e:66:2e:96:e1:31:aa:d3:26:fa:80:59:8f:7e:56:9e: 11:5f:72:e0:8b:09:a9:f6:1e:5a:50:8b:8b:c1:ae:ce:b4:12: be:6c:93:63:f1:a9:7c:60:51:6d:04:44:0a:54:22:f3:93:99: 18:9b:6c:c5:3a:aa:25:1d:47:b6:62:27:bb:bf:96:ed:7b:e3: e7:52:25:ea:69:f0:cb:cb:c7:40:c8:54:c1:89:47:a7:bf:44: 9f:3a:3d:33:30:10:77:6e:78:f7:90:0a:f0:43:86:3b:a0:07: be:a0:79:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFtyWEmKmgkG95uLAvWht53uQ/YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF M0NEMEFEQzAeFw0yNTExMDUxMjU2NDhaFw0yNTExMDYxNDIwNDhaMDMxMTAvBgNV BAMTKEVFQ0E1ODRGNzE0MkExRUFBMDdGOTVGOTE2MzUwM0E0RUY4OTkyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu8fN7NrP+qOmPFtq2Z8YeRdeE BSJcfBntPy73Hlmb9iM6e3A0ClOmyIpseLIoeAnaRJgWTFhkkBf4g0FPjctsi+Pi KZ/9ph14wxBI4ETm/KHDlNE6FDwQLsGeNdcYy5DhHQBP1ezHOgiJud/FvOlyg0Nr ZvYFuRC7N0cvuoGRlkN9XIlbwQ6W1tL9awQAoyhRXrITnKMKksDG8s5N3EKlg8+6 BLz+jsj093W7E44Hd5HgWTieqWqmXzBAtyKFqdK3UIukPfM1/PtpMe/IwRU8C0Iw 9ypHZFhNfSNHxLfrsT+m11DDetLzUa6xYYYrBbxBlm9LFAMVHi/eb22YDtVVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7spYT3FCoeqgf5X5FjUDpO+Jkg0wHwYDVR0j BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4 MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZMU1QvMC8y MUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALBf+0ThIwH/qOrCoEAqiJCDDqKbawLxm3MxwcUG2gPKRVvtW5YclTrGuPWNV /7bR0uS7JYnBrU4tSYJ5hLqZYucTR8lb16jn9HFf8S8OaCJBBOqjguSX+8T2M+Dx NeoqN9+mYGDVgrl0SvHUHl+wDR9I+Y83Lh8SWR/BqIcQZoOyCqQJBFIruob5z6mT WRyje/x+Zi6W4TGq0yb6gFmPflaeEV9y4IsJqfYeWlCLi8GuzrQSvmyTY/GpfGBR bQREClQi85OZGJtsxTqqJR1HtmInu7+W7Xvj51Il6mnwy8vHQMhUwYlHp79Enzo9 MzAQd25495AK8EOGO6AHvqB5pg== -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:17 2025 by rpki-client