$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: /ClltLwV2OcEbicHHEJHNQwtV1bkm0vItKxmQSATwSc= Subject key identifier: 76:92:DC:DF:1A:0C:3D:C4:45:20:CF:61:28:17:C7:5F:9F:23:39:51 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 177D9718EB0F3161EDC5CDD2089E99992BD0D2DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 01CD Signing time: Sat 09 Aug 2025 16:38:44 +0000 Manifest this update: Sat 09 Aug 2025 16:33:44 +0000 Manifest next update: Sun 10 Aug 2025 19:11:44 +0000 Files and hashes: 1: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 2: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: hp8HA14WPhpmDRm+VTr6/ua8gkpMtNKYcS2cTAsdIY4=) 3: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7d:97:18:eb:0f:31:61:ed:c5:cd:d2:08:9e:99:99:2b:d0:d2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Aug 9 16:33:44 2025 GMT Not After : Aug 10 19:11:44 2025 GMT Subject: CN=7692DCDF1A0C3DC44520CF612817C75F9F233951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:c9:d0:6e:04:6b:27:2d:c2:7b:c6:77:ac: 10:96:b4:79:f5:28:4f:dd:a2:4b:41:df:67:e4:b1: 7b:4e:d1:84:d5:db:87:ea:f4:c8:78:16:ab:35:0b: fb:c4:cf:95:eb:96:ba:51:57:77:7e:69:1a:77:69: 3c:9d:ad:1d:93:04:6d:cb:3a:23:b5:d0:0d:2e:ba: 75:c0:9b:67:2d:d4:c9:d2:c7:fb:80:4c:b2:52:3d: 53:f6:04:1c:e1:1a:d2:0e:0d:dd:4b:02:46:21:90: 4c:18:11:28:de:3d:47:b8:fa:3c:ce:80:1b:fa:0f: dd:27:87:13:47:fd:6a:5f:4d:2d:5c:b5:94:cb:9b: 4a:a3:28:5d:71:5e:f1:94:a0:68:d8:aa:ae:11:6c: 27:55:e8:5a:c1:c3:29:f1:0e:be:4a:4b:f1:d4:5e: 3c:cf:32:ff:17:df:8a:c5:9a:e7:16:f4:7c:3e:aa: e8:9a:e2:a0:05:b3:c0:11:9f:fd:d0:d0:68:be:db: e9:28:0f:7c:9d:cf:5d:51:29:df:6b:5a:fc:18:8d: b8:67:55:96:5f:08:75:a3:95:01:53:23:5e:ac:7c: b4:ea:40:7a:5e:a0:e2:7f:7d:ba:04:48:5d:1f:10: 72:85:56:a9:6d:c2:a8:87:08:65:d2:21:98:99:55: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:92:DC:DF:1A:0C:3D:C4:45:20:CF:61:28:17:C7:5F:9F:23:39:51 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ec:88:db:a3:fb:bf:ae:8d:38:20:c7:ed:ec:d2:21:08:2c: d4:3e:be:53:15:29:7e:5e:af:78:5c:72:90:9e:c8:d3:fd:b4: 92:71:69:19:9b:1b:be:1f:27:e6:b1:38:41:14:16:fa:30:d7: d0:bf:e5:d5:88:5f:fd:ee:d2:08:fd:40:c7:e7:b9:c5:7f:77: d0:9f:93:e6:41:3a:d6:2f:fc:e7:bc:f6:3d:17:ee:df:0b:75: 0c:36:ea:bf:70:ca:3e:f7:06:f4:cc:a0:53:7a:fd:f6:e9:ba: 71:12:63:20:77:37:02:1f:c9:48:3f:bc:22:ff:e7:00:0e:6b: 2e:ce:ea:c1:99:75:7d:5a:0b:3e:17:2b:64:6c:10:16:21:df: c3:7c:a2:26:27:ed:5d:92:58:67:8d:22:84:81:2e:53:d0:28: 1e:db:64:da:25:82:ce:1b:e2:dd:17:83:4b:6e:43:3d:99:63: c7:55:46:69:81:65:9c:26:6b:e3:c0:60:44:81:b5:2a:09:71: 07:ff:be:36:2d:fb:88:72:1e:6f:f7:de:0a:f6:d9:45:7d:5f: 7e:ba:f4:73:ac:29:dd:a9:8b:98:72:94:2c:1e:ad:41:21:b1: 6e:15:f0:60:43:a3:13:9c:4b:1f:90:c7:b2:6e:84:47:32:c6: ea:8e:46:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF32XGOsPMWHtxc3SCJ6ZmSvQ0t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTA4MDkxNjMzNDRaFw0yNTA4MTAxOTExNDRaMDMxMTAvBgNV BAMTKDc2OTJEQ0RGMUEwQzNEQzQ0NTIwQ0Y2MTI4MTdDNzVGOUYyMzM5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM5snQbgRrJy3Ce8Z3rBCWtHn1 KE/doktB32fksXtO0YTV24fq9Mh4Fqs1C/vEz5XrlrpRV3d+aRp3aTydrR2TBG3L OiO10A0uunXAm2ct1MnSx/uATLJSPVP2BBzhGtIODd1LAkYhkEwYESjePUe4+jzO gBv6D90nhxNH/WpfTS1ctZTLm0qjKF1xXvGUoGjYqq4RbCdV6FrBwynxDr5KS/HU XjzPMv8X34rFmucW9Hw+quia4qAFs8ARn/3Q0Gi+2+koD3ydz11RKd9rWvwYjbhn VZZfCHWjlQFTI16sfLTqQHpeoOJ/fboESF0fEHKFVqltwqiHCGXSIZiZVRYxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdpLc3xoMPcRFIM9hKBfHX58jOVEwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAceyI26P7v66NOCDH7ezSIQgs1D6+UxUpfl6veFxykJ7I0/20knFpGZsbvh8n 5rE4QRQW+jDX0L/l1Yhf/e7SCP1Ax+e5xX930J+T5kE61i/857z2PRfu3wt1DDbq v3DKPvcG9MygU3r99um6cRJjIHc3Ah/JSD+8Iv/nAA5rLs7qwZl1fVoLPhcrZGwQ FiHfw3yiJiftXZJYZ40ihIEuU9AoHttk2iWCzhvi3ReDS25DPZljx1VGaYFlnCZr 48BgRIG1KglxB/++Ni37iHIeb/feCvbZRX1ffrr0c6wp3amLmHKULB6tQSGxbhXw YEOjE5xLH5DHsm6ERzLG6o5Gow== -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:01 2025 by rpki-client