$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: GnlZv3gEnXv9vaNzUhJzOGi7GyegOExM+RVQLHVWD6s= Subject key identifier: AD:12:7D:B8:19:22:10:3E:E5:33:3F:A7:00:CC:93:F4:C6:D7:C5:52 Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 3D34CACD15F5B1E16DF3BA77E67F48F87C20889F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 05:25:21 +0000 Manifest this update: Mon 20 Oct 2025 05:20:21 +0000 Manifest next update: Tue 21 Oct 2025 09:01:21 +0000 Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=) 2: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=) 3: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: 2ZUTBjhXOtVb4925hvwwzXWtb8FW2mj0gP0nWXYZlaI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:34:ca:cd:15:f5:b1:e1:6d:f3:ba:77:e6:7f:48:f8:7c:20:88:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Oct 20 05:20:21 2025 GMT Not After : Oct 21 09:01:21 2025 GMT Subject: CN=AD127DB81922103EE5333FA700CC93F4C6D7C552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:41:cc:fb:75:a7:b1:cc:be:aa:ad:ba:8c: 05:05:15:b6:70:15:02:af:be:ff:80:fa:c5:9a:19: 4b:14:9c:38:a3:99:70:43:61:34:b3:0e:5c:70:fe: 8f:64:75:f5:58:30:0e:05:f7:af:fd:2c:64:c4:00: c6:70:c1:0b:d0:4e:b2:a2:b3:4c:4e:64:66:d4:cf: 0a:1e:dc:c6:8c:7b:d5:ea:aa:e8:a4:da:94:85:ac: 3c:39:22:8e:26:d9:dd:92:65:7e:02:10:7e:64:37: c8:58:08:d1:d1:71:2a:da:23:d7:80:96:cd:52:e7: ec:84:00:38:89:49:1c:30:c4:6b:3d:71:5e:1d:c5: ba:f1:d2:d9:26:d5:93:3c:46:e2:81:41:ab:09:34: 62:7a:63:39:e2:a1:36:e2:18:53:f0:12:f9:45:e1: 68:84:30:77:72:20:39:77:1f:56:35:77:b9:78:dc: 77:31:99:9e:f0:1b:f2:6b:61:ce:f2:fd:64:71:09: 00:b1:b9:38:c2:3a:98:bb:db:a6:32:09:2d:af:7f: 1a:fc:8b:cf:8c:3b:fa:fc:f2:65:c8:7b:4f:7b:f4: c2:e5:27:08:13:29:b3:d8:5b:42:6d:48:2c:bf:b8: 1a:d3:34:0a:30:3f:4e:f8:58:b8:0c:b9:1f:b7:82: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:12:7D:B8:19:22:10:3E:E5:33:3F:A7:00:CC:93:F4:C6:D7:C5:52 X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:14:bc:d2:ac:d7:e0:f1:8f:4a:dd:23:d2:d5:eb:87:b8:5b: bb:d1:69:b1:ac:cb:af:5f:57:13:a7:a6:b9:54:76:6e:1c:a7: 8f:22:19:46:1e:de:67:b3:2a:0b:46:84:55:1e:2a:99:7e:0d: 11:9c:f7:bf:3e:8a:df:ce:94:dd:99:e0:97:b6:c2:67:22:94: 70:57:c6:d8:b6:d1:e9:e1:6a:e3:75:46:17:b9:dc:6b:35:1f: fc:17:66:58:0f:a7:e4:5f:bf:0f:60:1a:da:aa:98:99:a9:6e: f3:f0:33:3e:74:22:7c:c9:0e:04:d5:4e:55:6f:31:fc:22:e0: a7:c7:f1:95:f4:2d:eb:20:7c:bb:7f:13:32:28:50:0b:ed:8b: ac:3f:6d:6f:67:bf:37:5c:24:3e:3a:fd:f7:b3:26:f2:d9:bb: f4:9d:4d:c1:ef:56:ab:e1:cd:ec:28:11:d8:c5:c2:af:a3:47: 7f:13:0c:e0:38:fe:95:8d:61:96:3e:2d:d6:39:27:37:92:46: cb:c7:7b:5c:43:a1:cd:ee:68:16:c0:69:54:8d:4f:4f:b1:fb: 01:89:04:29:16:fa:b4:69:fe:6e:26:67:d5:02:31:4b:8d:bb: 27:b4:fb:94:4e:30:b2:5a:f9:13:4b:e6:4a:d5:00:55:80:eb: 1f:84:43:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPTTKzRX1seFt87p35n9I+HwgiJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTEwMjAwNTIwMjFaFw0yNTEwMjEwOTAxMjFaMDMxMTAvBgNV BAMTKEFEMTI3REI4MTkyMjEwM0VFNTMzM0ZBNzAwQ0M5M0Y0QzZEN0M1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6z0HM+3Wnscy+qq26jAUFFbZw FQKvvv+A+sWaGUsUnDijmXBDYTSzDlxw/o9kdfVYMA4F96/9LGTEAMZwwQvQTrKi s0xOZGbUzwoe3MaMe9Xqquik2pSFrDw5Io4m2d2SZX4CEH5kN8hYCNHRcSraI9eA ls1S5+yEADiJSRwwxGs9cV4dxbrx0tkm1ZM8RuKBQasJNGJ6YznioTbiGFPwEvlF 4WiEMHdyIDl3H1Y1d7l43HcxmZ7wG/JrYc7y/WRxCQCxuTjCOpi726YyCS2vfxr8 i8+MO/r88mXIe0979MLlJwgTKbPYW0JtSCy/uBrTNAowP074WLgMuR+3glJFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrRJ9uBkiED7lMz+nAMyT9MbXxVIwHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAShS80qzX4PGPSt0j0tXrh7hbu9FpsazLr19XE6emuVR2bhynjyIZRh7eZ7Mq C0aEVR4qmX4NEZz3vz6K386U3Zngl7bCZyKUcFfG2LbR6eFq43VGF7ncazUf/Bdm WA+n5F+/D2Aa2qqYmalu8/AzPnQifMkOBNVOVW8x/CLgp8fxlfQt6yB8u38TMihQ C+2LrD9tb2e/N1wkPjr997Mm8tm79J1Nwe9Wq+HN7CgR2MXCr6NHfxMM4Dj+lY1h lj4t1jknN5JGy8d7XEOhze5oFsBpVI1PT7H7AYkEKRb6tGn+biZn1QIxS427J7T7 lE4wslr5E0vmStUAVYDrH4RDWQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:43 2025 by rpki-client