$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: 8IxPUGjm/FmCCpDoSHKh84hjhHIqVDIQK/kPWQV19p0= Subject key identifier: F6:66:AC:6E:3E:8E:39:8B:86:FC:18:8E:CD:03:13:9B:AF:4B:9F:C4 Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 0446D59624CAB1969E81818EB310ABA2C0BFDC12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 02F0 Signing time: Sun 19 Oct 2025 20:51:52 +0000 Manifest this update: Sun 19 Oct 2025 20:46:52 +0000 Manifest next update: Mon 20 Oct 2025 21:21:52 +0000 Files and hashes: 1: 3230312e37312e352e302f32342d3234203d3e20323730323832.roa (hash: GLg2A2guXRKI5hgYOXafpggFO7WhdO5GN/yUMIsCxKw=) 2: 3230312e37312e342e302f32342d3234203d3e20323730323832.roa (hash: 7ef6MTIGvzZEmcBuUoSKVpmybb4snnDytulBwSG3gUU=) 3: 3230312e37312e362e302f32342d3234203d3e20323730323832.roa (hash: cgty3y+WXB77fKXgspObQAAIy86k6JD4z/lljwnVAH0=) 4: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) 5: 323830343a363961343a633030303a3a2f33342d3334203d3e20323730323832.roa (hash: 58YtV/EyutYvuD7ax99x1jtrrKvHc6DLEIj1RSU1WxY=) 6: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: MbojZEjPQwvO0eST14+X23JZa1z7GeTXJ1fZujf9tU4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:46:d5:96:24:ca:b1:96:9e:81:81:8e:b3:10:ab:a2:c0:bf:dc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Oct 19 20:46:52 2025 GMT Not After : Oct 20 21:21:52 2025 GMT Subject: CN=F666AC6E3E8E398B86FC188ECD03139BAF4B9FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ef:e3:d4:f2:55:ed:56:09:2a:7a:cb:0d:df: e3:1a:4e:16:0c:db:83:a0:3b:eb:9f:1b:f5:69:50: c8:25:8d:f0:4b:91:8e:69:44:8c:67:01:91:4a:f4: 53:f7:38:23:96:4a:e2:d9:cd:3b:be:56:d3:c0:5b: 95:b7:ff:eb:65:75:9c:50:6b:e9:f8:29:a8:4c:70: 54:cd:1b:93:c2:3b:b4:36:a8:59:71:94:5f:2c:8a: 98:11:c0:f6:ff:09:98:41:81:18:70:57:fb:48:c3: 3e:4b:29:f6:4d:b3:ef:ae:bd:44:e2:81:9f:5c:e4: c5:4e:e0:12:fa:76:5f:40:13:e2:3f:f0:da:64:79: 8c:c8:07:89:5f:89:3a:a9:c2:23:a1:20:79:05:64: cd:12:df:6c:e3:40:db:79:d8:17:02:18:c2:b9:e8: 90:52:79:1d:51:e8:54:a8:da:57:8f:0a:f8:be:e5: 45:bc:20:a0:28:65:37:32:45:1d:00:80:66:d8:2c: 96:3a:18:f8:99:78:9c:3a:75:5d:4f:f4:26:af:eb: 08:1e:5b:bd:0e:c0:43:26:82:1f:4c:5b:12:89:e2: af:a3:9d:3a:1d:56:a7:ae:b3:65:ba:f2:15:a4:ef: 77:0c:d5:0e:7e:88:43:74:74:44:0a:ed:88:98:c9: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:66:AC:6E:3E:8E:39:8B:86:FC:18:8E:CD:03:13:9B:AF:4B:9F:C4 X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:9c:b9:c8:f1:61:c3:10:2c:bd:15:4c:ba:7b:20:c2:95:ae: 1e:85:54:8b:e5:88:0b:28:20:8f:ed:eb:25:53:c9:a3:36:4f: 71:17:a1:96:6d:e7:c1:2d:a2:66:fb:78:b6:d0:18:18:0d:6e: 28:9c:70:3b:35:ec:2c:81:ae:a0:61:34:c7:c6:32:09:0e:8e: cc:e1:7f:90:78:2a:fe:b1:72:28:ef:f8:5d:8f:6e:98:7c:f0: f4:10:bf:f9:71:26:17:74:13:75:ed:df:b2:8b:9f:69:24:8a: 4f:96:67:3c:8f:49:bb:89:0d:2e:fb:be:1e:3a:1c:88:bd:52: 11:e2:37:e4:1c:fb:42:11:3c:55:f2:2d:ca:ef:e5:a9:a8:85: f7:02:14:9a:99:00:58:34:e0:6d:ba:3b:6b:31:38:7c:14:21: cc:48:d8:5f:ad:db:30:24:50:1f:64:f3:1c:6b:c4:bd:e4:61: 4b:ca:5b:e2:ff:42:c5:c9:c5:73:70:94:8a:ae:9f:ce:9f:00: 06:c3:e9:f7:8c:09:3e:96:de:d5:29:d0:19:c0:e2:06:35:23: 39:2a:a3:d2:83:5c:39:56:3e:ca:71:1d:94:04:ac:e8:04:f6: 1f:a5:f0:41:92:df:53:5c:15:8c:85:28:d8:a5:fc:54:6b:e8: 63:0c:94:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBEbVliTKsZaegYGOsxCrosC/3BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTEwMTkyMDQ2NTJaFw0yNTEwMjAyMTIxNTJaMDMxMTAvBgNV BAMTKEY2NjZBQzZFM0U4RTM5OEI4NkZDMTg4RUNEMDMxMzlCQUY0QjlGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn7+PU8lXtVgkqessN3+MaThYM 24OgO+ufG/VpUMgljfBLkY5pRIxnAZFK9FP3OCOWSuLZzTu+VtPAW5W3/+tldZxQ a+n4KahMcFTNG5PCO7Q2qFlxlF8sipgRwPb/CZhBgRhwV/tIwz5LKfZNs++uvUTi gZ9c5MVO4BL6dl9AE+I/8NpkeYzIB4lfiTqpwiOhIHkFZM0S32zjQNt52BcCGMK5 6JBSeR1R6FSo2lePCvi+5UW8IKAoZTcyRR0AgGbYLJY6GPiZeJw6dV1P9Cav6wge W70OwEMmgh9MWxKJ4q+jnTodVqeus2W68hWk73cM1Q5+iEN0dEQK7YiYyQp7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9masbj6OOYuG/BiOzQMTm69Ln8QwHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAupy5yPFhwxAsvRVMunsgwpWuHoVUi+WICyggj+3rJVPJozZPcRehlm3nwS2i Zvt4ttAYGA1uKJxwOzXsLIGuoGE0x8YyCQ6OzOF/kHgq/rFyKO/4XY9umHzw9BC/ +XEmF3QTde3fsoufaSSKT5ZnPI9Ju4kNLvu+HjociL1SEeI35Bz7QhE8VfItyu/l qaiF9wIUmpkAWDTgbbo7azE4fBQhzEjYX63bMCRQH2TzHGvEveRhS8pb4v9CxcnF c3CUiq6fzp8ABsPp94wJPpbe1SnQGcDiBjUjOSqj0oNcOVY+ynEdlASs6AT2H6Xw QZLfU1wVjIUo2KX8VGvoYwyUtg== -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:54 2025 by rpki-client