$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft File: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json) Hash identifier: eX4DrUXd7WiGyJPxMRtMA/mZY1dDk/r2P01l94SfXRI= Subject key identifier: 25:5A:D8:22:CE:0B:89:9E:73:27:32:25:D8:4C:58:D3:89:D3:36:F4 Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 Certificate issuer: /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Certificate serial: 4E47BCDA083664980AC8509ABA484FB3AD494C96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft Manifest number: 02EA Signing time: Mon 20 Oct 2025 06:10:32 +0000 Manifest this update: Mon 20 Oct 2025 06:05:32 +0000 Manifest next update: Tue 21 Oct 2025 10:01:32 +0000 Files and hashes: 1: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=) 2: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: WxCDTU7srIjQaW+29IxtbUEDQZ4YVcB23K0g62xjz6s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:47:bc:da:08:36:64:98:0a:c8:50:9a:ba:48:4f:b3:ad:49:4c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Validity Not Before: Oct 20 06:05:32 2025 GMT Not After : Oct 21 10:01:32 2025 GMT Subject: CN=255AD822CE0B899E73273225D84C58D389D336F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:44:90:94:ce:85:4d:be:74:c5:51:26:65: 3f:9e:dd:99:6d:1c:da:a2:a6:95:9f:7d:9e:8e:f0: 98:30:8e:f3:aa:48:bf:9f:39:55:0d:d9:19:de:87: ff:f7:49:aa:b2:1e:a1:94:9d:59:ca:c8:0e:80:4f: d6:72:d1:73:28:3e:b7:15:e9:57:f2:b1:2c:0d:0a: e5:95:19:8f:ad:1b:e3:eb:68:eb:3e:db:37:33:2c: f2:d0:da:c0:9f:69:d7:b6:9d:7d:a7:ec:5c:40:8a: eb:ee:58:4f:a6:0c:0c:0e:7c:4f:00:0d:ff:33:84: 73:23:ea:75:38:34:a0:45:1f:cb:b8:60:e8:b4:48: 3c:e2:03:e6:e2:b7:d4:60:8e:0d:9b:56:12:d5:ef: 9f:16:8b:c7:a8:58:9a:c2:11:44:8d:56:43:2e:97: 3c:9f:01:84:e6:86:7e:11:4d:ab:17:82:24:12:c4: cb:2a:0e:24:2d:00:ae:97:80:02:cb:0d:6f:f1:a6: f2:b3:f2:af:31:a9:d1:d1:a0:fe:3b:ee:32:ae:7a: c0:69:52:b1:f3:3d:d9:03:e2:07:29:0d:09:6c:94: c4:65:54:c0:ec:c9:ab:bb:6e:31:76:e2:09:4a:05: be:ba:63:2e:9b:36:bc:8e:ca:4f:fc:8b:91:44:b1: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5A:D8:22:CE:0B:89:9E:73:27:32:25:D8:4C:58:D3:89:D3:36:F4 X509v3 Authority Key Identifier: keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:6a:85:54:55:bd:6b:7f:3e:7f:6b:01:03:42:d4:0e:0e:4c: 50:eb:1e:9f:73:23:f3:81:9a:71:e8:df:b5:f4:8e:2c:23:4a: d3:33:b2:b8:53:4f:d3:a8:4f:97:a3:72:ef:ef:b3:65:f0:91: 84:6e:55:6a:a6:9c:08:45:32:ef:75:ac:fd:a0:ed:cf:ca:0e: 41:3f:b6:46:7c:d2:1c:d4:e3:7c:a1:aa:09:f7:2a:28:4c:f7: 01:d2:5d:17:b6:66:30:a5:56:b0:e4:c8:76:44:84:e0:26:f7: ee:99:e8:eb:17:07:e9:e7:c1:32:3b:d5:9b:dd:ed:09:29:21: 35:09:c4:7c:90:89:ad:be:fe:3e:64:f1:45:19:79:ed:75:b3: 25:81:b4:e5:be:8d:fe:92:9c:e8:55:ce:ff:dd:f3:50:8c:11: d0:1e:79:8f:33:d1:93:a7:43:77:84:a8:2b:e1:c6:25:31:aa: bf:65:83:54:af:8a:b3:01:d4:94:f7:20:3d:86:21:a2:87:cd: dd:6f:90:2a:3f:e5:e3:06:40:17:22:b1:8f:0a:0c:9e:85:f4: 69:ac:24:70:6f:4d:43:dd:56:05:4d:a2:63:4e:0d:0c:fb:12: 84:e8:f7:85:96:10:47:e7:30:57:fc:fe:da:7b:45:7b:78:6b: b4:00:57:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTke82gg2ZJgKyFCaukhPs61JTJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdE MkIwNkQ2MjAeFw0yNTEwMjAwNjA1MzJaFw0yNTEwMjExMDAxMzJaMDMxMTAvBgNV BAMTKDI1NUFEODIyQ0UwQjg5OUU3MzI3MzIyNUQ4NEM1OEQzODlEMzM2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8kSQlM6FTb50xVEmZT+e3Zlt HNqippWffZ6O8JgwjvOqSL+fOVUN2Rneh//3SaqyHqGUnVnKyA6AT9Zy0XMoPrcV 6VfysSwNCuWVGY+tG+PraOs+2zczLPLQ2sCfade2nX2n7FxAiuvuWE+mDAwOfE8A Df8zhHMj6nU4NKBFH8u4YOi0SDziA+bit9Rgjg2bVhLV758Wi8eoWJrCEUSNVkMu lzyfAYTmhn4RTasXgiQSxMsqDiQtAK6XgALLDW/xpvKz8q8xqdHRoP477jKuesBp UrHzPdkD4gcpDQlslMRlVMDsyau7bjF24glKBb66Yy6bNryOyk/8i5FEsWaFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJVrYIs4LiZ5zJzIl2ExY04nTNvQwHwYDVR0j BBgwFoAUlftPeVSnnD6uuRVctfTyR9KwbWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC S2EvMS85NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkI0Rjc5NTRBNzlDM0VB RUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS85 NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1mqFVFW9a38+f2sBA0LUDg5MUOsen3Mj84GacejftfSOLCNK0zOyuFNP06hP l6Ny7++zZfCRhG5VaqacCEUy73Ws/aDtz8oOQT+2RnzSHNTjfKGqCfcqKEz3AdJd F7ZmMKVWsOTIdkSE4Cb37pno6xcH6efBMjvVm93tCSkhNQnEfJCJrb7+PmTxRRl5 7XWzJYG05b6N/pKc6FXO/93zUIwR0B55jzPRk6dDd4SoK+HGJTGqv2WDVK+KswHU lPcgPYYhoofN3W+QKj/l4wZAFyKxjwoMnoX0aawkcG9NQ91WBU2iY04NDPsShOj3 hZYQR+cwV/z+2ntFe3hrtABXZg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:53 2025 by rpki-client