$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft File: D95EAB9296B47F53E06E1370749CCDB5566F072F.mft (raw, json) Hash identifier: S3t5lMgsY8KagwlRXdErHL+oX24rCHEOUjon7/7tR+4= Subject key identifier: 34:F4:38:17:09:C9:EC:73:35:4D:34:E1:71:EB:A9:35:91:19:4F:5D Authority key identifier: D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F Certificate issuer: /CN=D95EAB9296B47F53E06E1370749CCDB5566F072F Certificate serial: 27DDF2358E0DA3058BF758C351CDFF72A05F5981 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer Subject info access: rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft Manifest number: 0115 Signing time: Mon 20 Oct 2025 02:38:41 +0000 Manifest this update: Mon 20 Oct 2025 02:33:41 +0000 Manifest next update: Tue 21 Oct 2025 04:44:41 +0000 Files and hashes: 1: D95EAB9296B47F53E06E1370749CCDB5566F072F.crl (hash: gYMCMHM0vOtvx6Mhq1zkQb4NbOUb93bMAxknSvVADRA=) 2: 3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (hash: jExsfog9IFzuMeux5ajiGsQ/P3fwEZzxI5InNQT4MkE=) 3: 323830343a333465633a3a2f33322d3336203d3e20323635343838.roa (hash: EoIQWpAtn9W4dgL7mYd8yyBRPUlI0HBl+UrrQT4TK+c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dd:f2:35:8e:0d:a3:05:8b:f7:58:c3:51:cd:ff:72:a0:5f:59:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95EAB9296B47F53E06E1370749CCDB5566F072F Validity Not Before: Oct 20 02:33:41 2025 GMT Not After : Oct 21 04:44:41 2025 GMT Subject: CN=34F4381709C9EC73354D34E171EBA93591194F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:8e:f8:a1:b6:31:f2:8d:8c:ec:8b:5e:6f: b0:2e:e5:fa:7e:f8:6d:0e:89:4d:3b:dc:7f:20:77: 1c:7c:07:83:6d:82:6d:a4:72:cd:87:47:21:f0:45: ed:2f:74:1d:09:3d:e1:b0:3e:dc:79:48:db:49:b7: 95:5d:4a:31:8b:30:54:14:43:7c:e9:f0:d4:a4:33: 5a:28:7a:18:1d:d9:2a:f6:ca:e2:c3:ce:34:b2:5b: 0b:8f:cc:0b:0b:29:49:60:7a:f7:24:2b:2a:dd:a6: 0f:c6:bb:91:fc:b3:f6:ae:8f:2f:a2:29:a0:3c:75: d7:ac:56:3b:c1:92:03:06:a1:60:8c:4a:dc:a1:d0: 73:1f:a0:cb:8d:7c:9b:91:5d:dc:5a:3c:71:30:ca: 6f:8c:3c:ee:7a:1b:67:d8:4f:68:5c:42:43:66:4a: 20:2f:9f:28:2a:d5:ac:de:aa:43:68:be:4d:37:ef: 83:69:b8:e3:49:44:4b:d6:45:20:f4:9b:7e:be:09: 8a:b8:97:9b:77:22:59:8a:bb:2d:98:25:c8:92:c3: 2f:ae:9e:71:ba:6b:e6:a2:bf:16:f6:cc:2b:ca:4f: 49:00:d9:e6:79:ef:03:ff:21:db:5a:a5:5c:78:64: ad:e7:b7:d1:3f:1c:0a:a3:14:81:94:41:a6:b1:30: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:38:17:09:C9:EC:73:35:4D:34:E1:71:EB:A9:35:91:19:4F:5D X509v3 Authority Key Identifier: keyid:D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:34:86:0d:9b:51:74:81:a4:07:b6:a4:c9:b1:64:59:58:73: 72:c5:f8:c2:0c:47:07:69:b8:d3:36:d8:77:84:84:9e:df:d2: 70:44:99:3d:73:4a:d6:7a:55:f9:bf:39:6d:eb:9a:fa:8b:f9: 4e:da:b6:07:02:57:7f:e9:94:f3:ef:69:b0:55:28:c0:fd:9b: 2b:cc:ba:f4:51:c9:5f:0b:03:47:41:a0:27:7a:d9:15:54:ea: f1:67:ad:16:14:27:97:1d:d7:28:98:cc:fc:13:28:cd:40:4f: 04:e9:bc:8f:2c:ba:b4:82:81:ed:7e:d1:63:e8:0e:40:1f:95: 54:51:3a:32:fa:a7:8a:c9:1a:30:ba:51:c0:71:19:84:a0:f7: 33:fb:5a:e6:9d:d8:17:7a:68:7e:d9:14:dc:e2:5e:d2:a9:87: 46:cb:f5:7b:83:f1:cc:a3:c4:c8:f0:84:c3:12:d9:4c:63:d2: d1:d6:97:8b:39:c2:5d:85:62:92:1b:88:53:bd:bb:f4:39:1f: 1b:0a:9c:25:24:a2:c0:c6:7d:9e:6c:11:3e:d7:55:0b:42:59: 31:6e:7c:27:6c:6b:d3:d7:6f:93:91:39:a9:ba:a9:96:e8:62: 45:73:a6:c0:a2:a0:9a:6b:63:f4:93:e0:d0:fe:fe:16:4e:05: 56:f0:11:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ93yNY4NowWL91jDUc3/cqBfWYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1RUFCOTI5NkI0N0Y1M0UwNkUxMzcwNzQ5Q0NEQjU1 NjZGMDcyRjAeFw0yNTEwMjAwMjMzNDFaFw0yNTEwMjEwNDQ0NDFaMDMxMTAvBgNV BAMTKDM0RjQzODE3MDlDOUVDNzMzNTREMzRFMTcxRUJBOTM1OTExOTRGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2go74obYx8o2M7Iteb7Au5fp+ +G0OiU073H8gdxx8B4Ntgm2kcs2HRyHwRe0vdB0JPeGwPtx5SNtJt5VdSjGLMFQU Q3zp8NSkM1ooehgd2Sr2yuLDzjSyWwuPzAsLKUlgevckKyrdpg/Gu5H8s/aujy+i KaA8ddesVjvBkgMGoWCMStyh0HMfoMuNfJuRXdxaPHEwym+MPO56G2fYT2hcQkNm SiAvnygq1azeqkNovk0374NpuONJREvWRSD0m36+CYq4l5t3IlmKuy2YJciSwy+u nnG6a+aivxb2zCvKT0kA2eZ57wP/IdtapVx4ZK3nt9E/HAqjFIGUQaaxMBM9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNPQ4FwnJ7HM1TTThceupNZEZT10wHwYDVR0j BBgwFoAU2V6rkpa0f1PgbhNwdJzNtVZvBy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTZYcThSRno4Y2RWcEJONk5WY0ZqOUpkMUdZb0RxdHVFenpSemZGcTVK QjUvMC9EOTVFQUI5Mjk2QjQ3RjUzRTA2RTEzNzA3NDlDQ0RCNTU2NkYwNzJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUVBQjkyOTZCNDdGNTNF MDZFMTM3MDc0OUNDREI1NTY2RjA3MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RTZYcThSRno4Y2RWcEJONk5WY0ZqOUpkMUdZb0RxdHVFenpSemZGcTVKQjUvMC9E OTVFQUI5Mjk2QjQ3RjUzRTA2RTEzNzA3NDlDQ0RCNTU2NkYwNzJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlzSGDZtRdIGkB7akybFkWVhzcsX4wgxHB2m40zbYd4SEnt/ScESZPXNK1npV +b85beua+ov5Ttq2BwJXf+mU8+9psFUowP2bK8y69FHJXwsDR0GgJ3rZFVTq8Wet FhQnlx3XKJjM/BMozUBPBOm8jyy6tIKB7X7RY+gOQB+VVFE6MvqniskaMLpRwHEZ hKD3M/ta5p3YF3poftkU3OJe0qmHRsv1e4PxzKPEyPCEwxLZTGPS0daXiznCXYVi khuIU7279DkfGwqcJSSiwMZ9nmwRPtdVC0JZMW58J2xr09dvk5E5qbqpluhiRXOm wKKgmmtj9JPg0P7+Fk4FVvARdQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:23 2025 by rpki-client