$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: Xo8LKFh0cgB01N3R4izs0I6GFRVQOJoDHoolUzMJZmU= Subject key identifier: C2:B9:8E:C0:3B:43:65:B2:20:60:53:1A:6F:61:1C:A3:A8:86:96:D8 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 2CC6212DDE236F00511E68A7A01D04CFD7F7309A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 030E Signing time: Wed 05 Nov 2025 09:40:00 +0000 Manifest this update: Wed 05 Nov 2025 09:35:00 +0000 Manifest next update: Thu 06 Nov 2025 09:54:00 +0000 Files and hashes: 1: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 2: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: XTvtebp7oM9owviERxilfDQ7pM/0nW6KsEuwtKryh3E=) 3: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: lMbzZzLONPhDqzu8Ew7CqIRLrzwVN77/vPCf64HpMzc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c6:21:2d:de:23:6f:00:51:1e:68:a7:a0:1d:04:cf:d7:f7:30:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Nov 5 09:35:00 2025 GMT Not After : Nov 6 09:54:00 2025 GMT Subject: CN=C2B98EC03B4365B22060531A6F611CA3A88696D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:c9:5e:58:51:2b:23:26:50:f0:db:64:96: e2:f6:83:0e:8f:66:99:73:4e:2c:15:c9:8d:7d:da: d8:ca:55:15:62:44:d6:bd:12:f9:17:5e:c5:08:7a: 8e:bb:82:9a:98:1d:26:ad:fa:71:dd:3b:4d:db:1e: 4e:c0:3d:65:12:67:eb:24:ca:b1:78:a2:67:09:2e: 0b:c8:d0:0b:9a:39:49:09:49:ae:12:ad:74:a5:18: a7:9a:e6:87:bf:4d:90:27:8f:88:db:3b:b1:54:7c: a6:8d:cf:ae:5f:26:4c:bf:23:66:0c:86:44:48:e7: 0d:30:9b:f7:05:7f:34:c7:2f:28:aa:cd:7b:02:21: 6f:9e:6d:8d:7f:7b:50:b9:5c:9c:58:5e:3c:30:01: ae:04:b4:ca:2c:c3:2c:2e:cd:d6:d5:21:7d:e0:c5: fb:ff:d2:8b:c8:47:6f:45:9e:b1:04:ff:bb:cc:40: 92:6a:a4:06:9f:dc:30:8f:58:ea:a1:45:fb:db:78: dd:0e:6a:e6:15:46:99:54:36:ac:9f:59:62:b7:8e: aa:f4:71:f7:ff:5b:07:c2:17:81:2e:43:29:3a:24: 59:0c:40:0f:e7:ed:49:fb:be:e6:e0:62:3d:85:60: 27:f9:1c:15:02:2b:90:08:87:ba:9b:9a:2d:1a:d7: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:8E:C0:3B:43:65:B2:20:60:53:1A:6F:61:1C:A3:A8:86:96:D8 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:88:cd:01:a1:4a:60:ed:a5:aa:f7:67:7f:39:7e:31:c8:9f: f7:20:2c:4b:f3:a9:90:69:c9:b4:55:86:c8:d9:2b:2d:a3:be: 89:f6:25:b9:8f:2a:bb:ac:a3:83:a2:d7:02:d0:d6:6b:c1:c6: b8:ad:04:b0:b0:8f:e9:a2:21:32:5e:5e:a9:a3:18:37:c7:e2: 73:38:fd:cd:3d:7c:ab:a5:d0:e0:18:cc:f3:6c:1f:36:13:27: f2:e0:81:99:57:53:b2:6d:8b:57:4f:16:46:ff:39:17:70:cf: 32:96:78:4b:c5:d1:fe:5a:d0:79:15:a3:b7:78:0f:d5:87:ad: 40:e8:3e:12:ba:5e:28:4b:8e:c9:6c:8b:f1:12:be:66:75:10: 89:1c:bc:88:09:2c:bc:33:f8:20:01:4f:17:15:d5:bd:be:67: 38:83:4e:4d:52:e9:21:f3:82:c2:e3:f8:39:c9:3d:5c:5f:24: 1a:d0:a2:8e:77:32:1f:3f:ee:0c:a4:ac:36:6d:b9:df:84:5d: 79:fb:48:46:12:fd:42:71:a9:bd:5c:7d:31:22:27:36:15:bf: 73:7d:2c:dc:cf:8e:23:fd:71:e2:5b:03:27:2c:76:2d:41:4c: bc:a2:59:72:c3:4d:64:37:1c:2c:7b:f0:ee:53:b9:1e:2f:1b: b9:61:6a:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULMYhLd4jbwBRHminoB0Ez9f3MJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNTExMDUwOTM1MDBaFw0yNTExMDYwOTU0MDBaMDMxMTAvBgNV BAMTKEMyQjk4RUMwM0I0MzY1QjIyMDYwNTMxQTZGNjExQ0EzQTg4Njk2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3j8leWFErIyZQ8NtkluL2gw6P ZplzTiwVyY192tjKVRViRNa9EvkXXsUIeo67gpqYHSat+nHdO03bHk7APWUSZ+sk yrF4omcJLgvI0AuaOUkJSa4SrXSlGKea5oe/TZAnj4jbO7FUfKaNz65fJky/I2YM hkRI5w0wm/cFfzTHLyiqzXsCIW+ebY1/e1C5XJxYXjwwAa4EtMoswywuzdbVIX3g xfv/0ovIR29FnrEE/7vMQJJqpAaf3DCPWOqhRfvbeN0OauYVRplUNqyfWWK3jqr0 cff/WwfCF4EuQyk6JFkMQA/n7Un7vubgYj2FYCf5HBUCK5AIh7qbmi0a12I/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwrmOwDtDZbIgYFMab2Eco6iGltgwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoIjNAaFKYO2lqvdnfzl+Mcif9yAsS/OpkGnJtFWGyNkrLaO+ifYluY8qu6yj g6LXAtDWa8HGuK0EsLCP6aIhMl5eqaMYN8ficzj9zT18q6XQ4BjM82wfNhMn8uCB mVdTsm2LV08WRv85F3DPMpZ4S8XR/lrQeRWjt3gP1YetQOg+ErpeKEuOyWyL8RK+ ZnUQiRy8iAksvDP4IAFPFxXVvb5nOINOTVLpIfOCwuP4Ock9XF8kGtCijncyHz/u DKSsNm2534RdeftIRhL9QnGpvVx9MSInNhW/c30s3M+OI/1x4lsDJyx2LUFMvKJZ csNNZDccLHvw7lO5Hi8buWFqkw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:08 2025 by rpki-client