$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: 6E9EKUcoz8hJsorqB16htCb9uRo7klLNHhMUBVJocYo= Subject key identifier: 7F:4E:35:E9:C8:A8:F9:90:4C:47:29:75:15:0B:32:35:8C:42:A4:A9 Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 2BD12B4A0E20C8D621D5C8812E86128E35482928 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 025E Signing time: Tue 01 Jul 2025 13:46:43 +0000 Manifest this update: Tue 01 Jul 2025 13:41:43 +0000 Manifest next update: Wed 02 Jul 2025 17:04:43 +0000 Files and hashes: 1: 3230312e37312e342e302f32342d3234203d3e20323730323832.roa (hash: 7ef6MTIGvzZEmcBuUoSKVpmybb4snnDytulBwSG3gUU=) 2: 3230312e37312e362e302f32342d3234203d3e20323730323832.roa (hash: cgty3y+WXB77fKXgspObQAAIy86k6JD4z/lljwnVAH0=) 3: 3230312e37312e352e302f32342d3234203d3e20323730323832.roa (hash: GLg2A2guXRKI5hgYOXafpggFO7WhdO5GN/yUMIsCxKw=) 4: 323830343a363961343a633030303a3a2f33342d3334203d3e20323730323832.roa (hash: 58YtV/EyutYvuD7ax99x1jtrrKvHc6DLEIj1RSU1WxY=) 5: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: wKbbMLu0f7p3BaYJVRR1RooaiX5j2Vxf3vW58G4TwQE=) 6: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 17:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d1:2b:4a:0e:20:c8:d6:21:d5:c8:81:2e:86:12:8e:35:48:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Jul 1 13:41:43 2025 GMT Not After : Jul 2 17:04:43 2025 GMT Subject: CN=7F4E35E9C8A8F9904C472975150B32358C42A4A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:e1:aa:4c:4d:5e:00:69:30:58:ea:47:6e: fb:eb:1d:bd:72:84:e3:9c:f9:e9:0b:12:d3:76:99: 47:0b:11:7f:b3:bd:fe:88:c3:85:99:b3:67:2d:b7: 83:51:c9:2b:0b:83:63:f4:5b:b0:c2:67:c4:32:05: 64:ff:b2:6f:bf:0c:f0:44:a5:e4:e0:42:87:0c:97: d9:21:f0:67:12:ec:53:af:09:ea:da:5d:24:c9:ba: f2:e0:e6:12:7f:f6:90:d2:90:59:42:dd:e2:9c:0d: ee:27:d2:98:9c:57:c3:06:b0:75:16:dd:b2:a7:48: 43:ad:4f:45:52:cf:3b:e4:36:63:77:5a:a8:dd:fa: 39:a4:3a:7e:3d:a1:f4:aa:1a:30:fb:20:d9:64:03: a2:09:b7:43:d3:17:17:02:5c:db:43:14:07:dc:bb: 30:1b:e9:d1:85:f5:7f:b5:bd:52:4d:16:c8:31:83: 78:61:19:a6:f9:e6:1e:93:15:a3:ae:65:c1:6f:4a: 5d:a4:e7:1c:f9:89:dd:13:fe:cd:ad:32:ea:61:27: 2b:ea:30:34:50:4d:bc:a3:0d:39:29:dc:85:5a:df: e8:62:ad:76:97:3a:54:be:c1:66:65:94:bd:d5:e4: f5:b5:78:bb:35:85:10:f9:09:ea:3d:9c:6c:d6:40: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4E:35:E9:C8:A8:F9:90:4C:47:29:75:15:0B:32:35:8C:42:A4:A9 X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ba:1e:c5:12:fd:ae:cf:f0:25:fc:e5:f9:99:80:e6:75:fa: 93:ce:a5:24:a0:85:df:2a:77:ed:6c:bd:9c:7e:ca:e1:b2:57: e7:ed:9e:01:f7:b4:54:6c:91:60:ae:cf:6f:85:a3:66:cb:e0: 5b:22:dc:e6:2c:25:2b:3e:6f:8c:47:5a:5a:a6:d6:7e:53:7b: ee:d9:06:6c:e9:fe:55:a9:c7:79:85:bf:ce:d9:10:45:78:3a: 53:01:48:1c:61:1f:d1:d1:be:c9:90:18:f3:4b:ca:93:9e:52: 3f:a5:9d:bc:2d:39:09:4f:8c:b8:50:4d:fb:fb:2f:96:7a:6e: 76:c4:78:40:19:e8:0f:d8:7f:38:ab:96:7e:a0:de:4d:94:a6: 04:78:95:3e:5f:f8:f4:6c:d9:d2:96:69:64:8d:a7:66:d1:75: 1e:99:29:27:07:15:1d:33:18:da:0c:3e:e7:39:4c:7d:1b:7f: d0:13:ab:e5:38:2a:1b:a4:3e:0d:2e:40:28:bb:08:78:b4:53: 63:14:33:f0:86:37:9e:6c:27:6e:71:dd:4a:32:f0:f7:ab:58: fb:e6:f1:f0:e3:93:b7:96:9d:1c:04:72:5d:59:59:63:5f:d6: 6c:1a:9e:1f:61:4a:5a:06:90:c8:5d:c4:d1:86:6f:f8:a7:7d: 54:c5:f4:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK9ErSg4gyNYh1ciBLoYSjjVIKSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA3MDExMzQxNDNaFw0yNTA3MDIxNzA0NDNaMDMxMTAvBgNV BAMTKDdGNEUzNUU5QzhBOEY5OTA0QzQ3Mjk3NTE1MEIzMjM1OEM0MkE0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSOGqTE1eAGkwWOpHbvvrHb1y hOOc+ekLEtN2mUcLEX+zvf6Iw4WZs2ctt4NRySsLg2P0W7DCZ8QyBWT/sm+/DPBE peTgQocMl9kh8GcS7FOvCeraXSTJuvLg5hJ/9pDSkFlC3eKcDe4n0picV8MGsHUW 3bKnSEOtT0VSzzvkNmN3Wqjd+jmkOn49ofSqGjD7INlkA6IJt0PTFxcCXNtDFAfc uzAb6dGF9X+1vVJNFsgxg3hhGab55h6TFaOuZcFvSl2k5xz5id0T/s2tMuphJyvq MDRQTbyjDTkp3IVa3+hirXaXOlS+wWZllL3V5PW1eLs1hRD5Ceo9nGzWQOhrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf0416cio+ZBMRyl1FQsyNYxCpKkwHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZLoexRL9rs/wJfzl+ZmA5nX6k86lJKCF3yp37Wy9nH7K4bJX5+2eAfe0VGyR YK7Pb4WjZsvgWyLc5iwlKz5vjEdaWqbWflN77tkGbOn+VanHeYW/ztkQRXg6UwFI HGEf0dG+yZAY80vKk55SP6WdvC05CU+MuFBN+/svlnpudsR4QBnoD9h/OKuWfqDe TZSmBHiVPl/49GzZ0pZpZI2nZtF1HpkpJwcVHTMY2gw+5zlMfRt/0BOr5TgqG6Q+ DS5AKLsIeLRTYxQz8IY3nmwnbnHdSjLw96tY++bx8OOTt5adHARyXVlZY1/WbBqe H2FKWgaQyF3E0YZv+Kd9VMX0NQ== -----END CERTIFICATE-----Generated at Wed Jul 2 05:33:30 2025 by rpki-client