$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: 2X6CknJpODmJ1SgUTSu1IfiJJ5Gz6wFmzIag+hwSJY0= Subject key identifier: BC:A8:60:9C:9F:5F:21:40:2C:D0:62:25:F3:00:53:8C:A5:9B:BD:53 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 041E58A5F4399D560B50AF477922EA18A7408C8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 0242 Signing time: Wed 05 Nov 2025 13:59:13 +0000 Manifest this update: Wed 05 Nov 2025 13:54:13 +0000 Manifest next update: Thu 06 Nov 2025 14:41:13 +0000 Files and hashes: 1: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 2: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: 22aAtnhvRndyVs6eopGbrn2lrZJx20m1v+AnfYft41w=) 3: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1e:58:a5:f4:39:9d:56:0b:50:af:47:79:22:ea:18:a7:40:8c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Nov 5 13:54:13 2025 GMT Not After : Nov 6 14:41:13 2025 GMT Subject: CN=BCA8609C9F5F21402CD06225F300538CA59BBD53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:ca:14:a4:33:27:47:92:bf:23:4d:f6:b8: 33:2f:8f:d0:88:18:94:db:de:06:f1:42:df:19:8c: 11:b8:ee:32:62:ec:d3:91:e8:6a:13:7e:96:ce:ce: 6a:d0:ee:1b:6c:26:53:da:35:f3:6a:aa:9d:e0:26: b4:93:8c:63:6d:9b:16:01:41:3d:56:cd:f8:51:23: 77:4e:2e:c3:8e:dc:2c:60:35:a2:19:62:e1:58:2c: 19:08:c8:6f:75:ab:f7:02:e4:40:5c:35:cd:04:f6: 51:81:7e:5e:42:4d:3c:ce:aa:f7:fb:9a:24:a8:0c: 65:a9:92:a3:eb:8b:f1:b7:a6:b3:db:4a:34:46:57: 82:84:ff:c1:57:f5:c0:b3:eb:00:0b:84:a9:40:b0: f2:99:e9:4d:25:85:a6:f1:2e:1c:95:d9:50:fb:62: ea:61:b1:b8:0e:87:db:81:33:05:60:4f:06:32:01: a0:b4:9b:ac:b5:2e:e6:b9:1b:00:45:03:50:ee:bd: a2:a1:7c:93:00:08:c0:90:c0:4b:4e:32:80:d7:1a: a4:d8:e4:bf:f6:f9:67:0e:cd:f4:6f:ef:ee:f1:ca: ff:96:d2:51:58:a0:a6:82:69:ba:e0:17:73:e2:a1: cc:f0:a2:77:11:45:56:46:1e:1f:96:75:62:59:d5: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:60:9C:9F:5F:21:40:2C:D0:62:25:F3:00:53:8C:A5:9B:BD:53 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a5:c9:2b:e8:62:4e:31:da:9f:15:99:2c:ac:e0:ac:91:37: 11:6f:e4:68:9b:98:f6:5b:06:aa:c7:c0:1d:49:74:92:7c:71: fe:fa:f5:c1:fa:93:43:af:33:ee:97:9f:65:60:97:00:1b:b3: de:93:df:82:50:4d:a0:a1:28:4c:7e:31:e8:13:0b:99:68:5f: a5:05:6f:f0:97:15:8a:e0:64:1e:54:42:00:f9:a1:57:d3:3b: aa:ce:7b:45:c9:25:76:a0:31:38:b3:46:2a:d1:34:68:c1:df: ed:6d:ab:b2:e4:a0:67:dc:73:44:28:d0:72:99:c4:ae:ed:74: 39:60:36:a7:ed:63:2b:71:48:33:9b:ca:52:94:da:80:05:35: 4b:1a:85:38:cc:f1:f7:d6:a6:a5:b1:6d:85:2e:a5:aa:40:0b: e0:fb:11:b2:46:73:28:7c:6f:d0:be:84:33:07:6b:3d:34:8e: 23:8f:e7:97:64:bf:46:b6:24:1c:f5:bb:d5:ab:87:02:bf:7f: 38:28:68:a2:9c:73:f3:6f:fa:63:a3:ed:d7:10:e3:eb:33:f9: e8:95:3c:1e:fd:23:52:e2:71:00:05:f0:70:35:c7:01:b8:c9: 75:bc:f1:49:d5:10:67:da:ca:1e:81:5d:54:45:a8:bf:9e:fe: e6:d9:0c:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBB5YpfQ5nVYLUK9HeSLqGKdAjI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTExMDUxMzU0MTNaFw0yNTExMDYxNDQxMTNaMDMxMTAvBgNV BAMTKEJDQTg2MDlDOUY1RjIxNDAyQ0QwNjIyNUYzMDA1MzhDQTU5QkJENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdMoUpDMnR5K/I032uDMvj9CI GJTb3gbxQt8ZjBG47jJi7NOR6GoTfpbOzmrQ7htsJlPaNfNqqp3gJrSTjGNtmxYB QT1WzfhRI3dOLsOO3CxgNaIZYuFYLBkIyG91q/cC5EBcNc0E9lGBfl5CTTzOqvf7 miSoDGWpkqPri/G3prPbSjRGV4KE/8FX9cCz6wALhKlAsPKZ6U0lhabxLhyV2VD7 YuphsbgOh9uBMwVgTwYyAaC0m6y1Lua5GwBFA1DuvaKhfJMACMCQwEtOMoDXGqTY 5L/2+WcOzfRv7+7xyv+W0lFYoKaCabrgF3PioczwoncRRVZGHh+WdWJZ1YvPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvKhgnJ9fIUAs0GIl8wBTjKWbvVMwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq6XJK+hiTjHanxWZLKzgrJE3EW/kaJuY9lsGqsfAHUl0knxx/vr1wfqTQ68z 7pefZWCXABuz3pPfglBNoKEoTH4x6BMLmWhfpQVv8JcViuBkHlRCAPmhV9M7qs57 RckldqAxOLNGKtE0aMHf7W2rsuSgZ9xzRCjQcpnEru10OWA2p+1jK3FIM5vKUpTa gAU1SxqFOMzx99ampbFthS6lqkAL4PsRskZzKHxv0L6EMwdrPTSOI4/nl2S/RrYk HPW71auHAr9/OChoopxz82/6Y6Pt1xDj6zP56JU8Hv0jUuJxAAXwcDXHAbjJdbzx SdUQZ9rKHoFdVEWov57+5tkM1A== -----END CERTIFICATE-----Generated at Wed Nov 5 19:24:10 2025 by rpki-client