$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft File: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json) Hash identifier: MERZkR7PhhXfwx5SfXfdxVJ/263CIrQ+tw5cVWAe2Z8= Subject key identifier: 23:E6:8B:22:3C:DD:0A:2B:28:61:9C:85:11:60:BB:8E:88:C5:76:04 Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 Certificate issuer: /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Certificate serial: 0DAE83EDC9ED14EB82BE850B5A116C2F1511147D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft Manifest number: 0257 Signing time: Mon 30 Jun 2025 20:13:21 +0000 Manifest this update: Mon 30 Jun 2025 20:08:21 +0000 Manifest next update: Tue 01 Jul 2025 20:47:21 +0000 Files and hashes: 1: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=) 2: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: fiRVbRlt9lz31GxJ2thYT1ZcDga31rFm2IDUMiXB/EU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 20:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ae:83:ed:c9:ed:14:eb:82:be:85:0b:5a:11:6c:2f:15:11:14:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Validity Not Before: Jun 30 20:08:21 2025 GMT Not After : Jul 1 20:47:21 2025 GMT Subject: CN=23E68B223CDD0A2B28619C851160BB8E88C57604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:bb:b6:61:9d:2b:af:f8:32:ac:73:0a:2a: f0:e8:5c:91:d0:4d:cb:5c:8e:8a:53:a1:07:35:d4: e6:f6:b7:e6:3c:ee:a9:d9:db:4f:63:5c:c4:4b:03: ba:f8:5a:96:59:b7:9c:9b:0d:0a:d5:37:85:49:e5: df:0a:63:cd:29:b7:66:92:83:10:a5:cb:8c:58:85: 74:3b:e7:83:e7:58:d9:aa:ca:b1:4f:7a:0d:fd:39: 17:f0:4c:ae:7a:a3:fa:bb:aa:9c:ec:e3:34:c7:c1: 4d:f0:b7:9e:0b:a0:b6:f7:72:40:38:ec:70:ec:31: f2:3f:1c:de:51:7c:9b:fd:0e:f2:1f:65:fb:50:f1: b6:b2:32:86:a4:96:b5:d6:be:e4:1a:40:59:a5:da: 2b:5e:31:c2:f2:83:8b:f2:25:d5:c0:6b:32:80:a6: ba:e1:96:d8:97:d1:61:c3:a4:95:a7:dc:7d:23:f4: ee:0a:d9:c9:a5:ef:00:cd:15:e5:d8:13:7b:b7:67: 73:6d:d4:b7:8e:05:0e:2b:af:4e:50:c9:9c:ed:92: c8:05:1b:8d:bb:d1:9c:58:1d:74:9f:ef:3a:cd:0f: 2d:b3:66:3f:9b:ec:ea:1f:a3:de:8b:48:d0:8b:d5: f7:09:d0:6b:7b:47:81:3c:46:f2:54:d6:21:55:8b: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:8B:22:3C:DD:0A:2B:28:61:9C:85:11:60:BB:8E:88:C5:76:04 X509v3 Authority Key Identifier: keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:85:8e:04:7e:e1:83:71:44:e7:89:ef:c1:a1:da:08:48:3c: e3:9b:ef:a1:5c:47:86:62:01:25:1d:9a:d1:13:c3:38:da:dc: 3a:6b:81:c6:8e:5a:61:d1:f8:71:cc:cf:cf:c2:2a:46:08:a6: 02:53:d8:53:e1:48:ac:d7:25:f2:96:ee:d3:8a:c9:28:09:0a: 98:4a:57:89:b6:80:bc:d9:18:77:14:9f:4e:d0:e9:90:a6:98: 47:a8:10:ba:91:3b:44:d4:e2:a2:79:7c:9a:1d:8c:58:7a:6d: a2:df:b3:93:61:34:d6:f5:f0:c8:66:77:58:48:3c:57:00:f0: e2:8c:62:d9:54:a5:62:6a:c8:7f:41:fa:ba:98:dd:de:d3:d2: f6:b7:c9:af:f6:f5:ae:41:dc:1b:6f:8e:02:e1:26:cc:22:e0: d3:18:46:d4:60:9f:68:e7:cb:e6:a9:d4:5f:12:fa:6d:e1:c7: bc:1c:2e:72:17:3e:0d:6f:6d:d8:2a:2c:29:73:3e:a2:6f:1a: 2f:99:e4:8c:f3:9b:63:c9:e4:64:1b:cd:de:b0:1f:ef:fd:20: 0a:86:44:be:d6:0f:7a:61:06:48:06:4d:88:ad:ec:ab:6a:53: 42:0b:2e:ae:f8:2c:18:b5:ec:cf:01:62:1b:b0:14:d7:f9:34: c6:e5:6e:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDa6D7cntFOuCvoULWhFsLxURFH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdE MkIwNkQ2MjAeFw0yNTA2MzAyMDA4MjFaFw0yNTA3MDEyMDQ3MjFaMDMxMTAvBgNV BAMTKDIzRTY4QjIyM0NERDBBMkIyODYxOUM4NTExNjBCQjhFODhDNTc2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMbu2YZ0rr/gyrHMKKvDoXJHQ TctcjopToQc11Ob2t+Y87qnZ209jXMRLA7r4WpZZt5ybDQrVN4VJ5d8KY80pt2aS gxCly4xYhXQ754PnWNmqyrFPeg39ORfwTK56o/q7qpzs4zTHwU3wt54LoLb3ckA4 7HDsMfI/HN5RfJv9DvIfZftQ8bayMoaklrXWvuQaQFml2iteMcLyg4vyJdXAazKA prrhltiX0WHDpJWn3H0j9O4K2cml7wDNFeXYE3u3Z3Nt1LeOBQ4rr05QyZztksgF G4270ZxYHXSf7zrNDy2zZj+b7Oofo96LSNCL1fcJ0Gt7R4E8RvJU1iFViyNPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI+aLIjzdCisoYZyFEWC7jojFdgQwHwYDVR0j BBgwFoAUlftPeVSnnD6uuRVctfTyR9KwbWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC S2EvMS85NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkI0Rjc5NTRBNzlDM0VB RUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS85 NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqIWOBH7hg3FE54nvwaHaCEg845vvoVxHhmIBJR2a0RPDONrcOmuBxo5aYdH4 cczPz8IqRgimAlPYU+FIrNcl8pbu04rJKAkKmEpXibaAvNkYdxSfTtDpkKaYR6gQ upE7RNTionl8mh2MWHptot+zk2E01vXwyGZ3WEg8VwDw4oxi2VSlYmrIf0H6upjd 3tPS9rfJr/b1rkHcG2+OAuEmzCLg0xhG1GCfaOfL5qnUXxL6beHHvBwuchc+DW9t 2CosKXM+om8aL5nkjPObY8nkZBvN3rAf7/0gCoZEvtYPemEGSAZNiK3sq2pTQgsu rvgsGLXszwFiG7AU1/k0xuVuTA== -----END CERTIFICATE-----Generated at Tue Jul 1 09:15:54 2025 by rpki-client