$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft File: C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json) Hash identifier: 4920Jw20hBp962jnD7qhCfS9LWM9xltBOOTYHi97ckc= Subject key identifier: 05:20:39:21:EC:2D:A4:32:55:C9:03:10:DB:9A:93:0D:52:3D:AB:2E Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10 Certificate issuer: /CN=C952C93A676BA611AEC114DD4983F2B03168FE10 Certificate serial: 1DE90F3839A049A818A620DE70BDE8512218110E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft Manifest number: 70 Signing time: Mon 20 Oct 2025 12:02:02 +0000 Manifest this update: Mon 20 Oct 2025 11:57:02 +0000 Manifest next update: Tue 21 Oct 2025 13:12:02 +0000 Files and hashes: 1: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: DRkK5+uUNOB2S/9ThKg5HWQbRdOrsZGk9C/FMy2y25k=) 2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: FX7CxEwMe77oGVOke0pJc/KWM5ZKvh54JurYKVnN8TM=) 3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: CinqX1j3jyRc5maom4CkOjawfLigGHk+YxdzO16vL9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e9:0f:38:39:a0:49:a8:18:a6:20:de:70:bd:e8:51:22:18:11:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10 Validity Not Before: Oct 20 11:57:02 2025 GMT Not After : Oct 21 13:12:02 2025 GMT Subject: CN=05203921EC2DA43255C90310DB9A930D523DAB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:45:24:41:e7:42:c8:78:9d:06:f7:81:4a: 7d:6b:b1:e4:b2:d2:64:f3:c6:61:75:fe:1f:2d:c9: c1:ea:54:6a:66:ff:f5:aa:40:51:4a:87:b7:c2:bd: 05:48:8e:6a:b2:fe:a7:b2:19:0a:26:13:04:6a:45: 93:89:d5:02:53:e8:87:aa:84:60:84:1e:42:2f:63: 08:69:05:cb:f3:5b:84:5c:89:04:fd:d9:1b:cf:3e: 4a:9a:31:a1:e8:1e:b9:aa:95:3e:71:07:40:ed:a7: e2:44:c5:a6:bb:ca:52:05:12:33:51:e4:4a:64:02: b2:eb:bc:9b:0d:ad:03:c2:2d:8e:16:7e:a9:95:3d: 09:e3:06:c4:d0:34:2a:0d:c4:82:ad:b9:20:8e:0f: c2:0a:6e:2d:7f:6a:c3:91:e3:c7:79:5f:67:6d:99: 94:10:81:df:4a:51:2f:23:d1:87:08:e4:3a:fe:e1: f7:0d:f7:62:59:b8:6d:f3:fe:a3:32:b8:0f:29:9d: 1c:e1:d9:3d:95:e6:43:97:94:c3:67:65:24:aa:63: 89:4d:b3:0d:e3:1a:85:ec:d2:c9:59:67:19:2a:e4: 96:f0:16:f3:52:de:87:08:30:0b:15:42:47:58:8d: 32:c0:17:03:a2:b5:18:a3:42:3d:13:3e:dd:7e:93: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:20:39:21:EC:2D:A4:32:55:C9:03:10:DB:9A:93:0D:52:3D:AB:2E X509v3 Authority Key Identifier: keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:66:b1:ea:2d:f5:a6:ed:46:b1:0b:4b:c0:a4:52:04:dd: 14:9d:64:20:fa:a1:9e:84:f0:ae:cb:18:9c:8c:28:1b:82:42: 58:9e:94:4f:69:2c:e7:67:84:fb:f5:1b:a0:12:c3:00:03:5e: e9:9e:ce:d9:a3:ee:97:ee:0c:12:c0:07:97:0c:f5:f5:0d:41: fb:8f:f0:49:64:1c:c5:da:e8:98:c6:ca:97:cc:3d:29:4a:38: 4c:5e:fd:0c:fe:03:b9:d6:60:14:da:ca:35:17:f3:9b:9f:cb: 44:18:70:dd:46:0a:cd:d0:62:c1:58:6a:e9:06:9d:43:e8:ff: f1:af:6c:f5:a3:bf:d7:52:4e:00:bd:95:2f:76:ea:4a:47:77: 17:f1:a5:86:47:65:08:33:c8:0e:81:a7:d1:80:2e:84:95:16: d6:92:42:b8:72:03:8e:97:47:b3:e7:fb:5f:02:e7:d4:ef:15: eb:c2:8b:21:71:ad:79:11:80:71:e5:6a:45:ec:0c:6e:db:cf: aa:13:d4:f6:8e:33:45:e6:a0:17:1a:da:25:5c:8d:20:cd:7b: 9f:3d:be:39:9d:90:3c:07:59:c7:f3:f8:73:e6:ee:c4:10:99: 56:41:97:4d:36:40:1c:08:1e:51:c8:ea:47:8e:77:f0:de:f9: e8:cd:92:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHekPODmgSagYpiDecL3oUSIYEQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MkM5M0E2NzZCQTYxMUFFQzExNERENDk4M0YyQjAz MTY4RkUxMDAeFw0yNTEwMjAxMTU3MDJaFw0yNTEwMjExMzEyMDJaMDMxMTAvBgNV BAMTKDA1MjAzOTIxRUMyREE0MzI1NUM5MDMxMERCOUE5MzBENTIzREFCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/UUkQedCyHidBveBSn1rseSy 0mTzxmF1/h8tycHqVGpm//WqQFFKh7fCvQVIjmqy/qeyGQomEwRqRZOJ1QJT6Ieq hGCEHkIvYwhpBcvzW4RciQT92RvPPkqaMaHoHrmqlT5xB0Dtp+JExaa7ylIFEjNR 5EpkArLrvJsNrQPCLY4WfqmVPQnjBsTQNCoNxIKtuSCOD8IKbi1/asOR48d5X2dt mZQQgd9KUS8j0YcI5Dr+4fcN92JZuG3z/qMyuA8pnRzh2T2V5kOXlMNnZSSqY4lN sw3jGoXs0slZZxkq5JbwFvNS3ocIMAsVQkdYjTLAFwOitRijQj0TPt1+k28tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBSA5IewtpDJVyQMQ25qTDVI9qy4wHwYDVR0j BBgwFoAUyVLJOmdrphGuwRTdSYPysDFo/hAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC9DOTUyQzkzQTY3NkJBNjExQUVDMTE0REQ0OTgzRjJCMDMxNjhGRTEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NTJDOTNBNjc2QkE2MTFB RUMxMTRERDQ5ODNGMkIwMzE2OEZFMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC9D OTUyQzkzQTY3NkJBNjExQUVDMTE0REQ0OTgzRjJCMDMxNjhGRTEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAho9mseot9abtRrELS8CkUgTdFJ1kIPqhnoTwrssYnIwoG4JCWJ6UT2ks52eE +/UboBLDAANe6Z7O2aPul+4MEsAHlwz19Q1B+4/wSWQcxdromMbKl8w9KUo4TF79 DP4DudZgFNrKNRfzm5/LRBhw3UYKzdBiwVhq6QadQ+j/8a9s9aO/11JOAL2VL3bq Skd3F/GlhkdlCDPIDoGn0YAuhJUW1pJCuHIDjpdHs+f7XwLn1O8V68KLIXGteRGA ceVqRewMbtvPqhPU9o4zReagFxraJVyNIM17nz2+OZ2QPAdZx/P4c+buxBCZVkGX TTZAHAgeUcjqR4538N756M2Spw== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:27 2025 by rpki-client