$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: xmdDZFeJ9SDlwH4JopVCzQNXtLgFtRSzJ22YARksoyQ= Subject key identifier: 06:A1:79:C5:E1:E9:FA:19:90:D3:B7:D6:9D:8F:A5:E6:B8:7C:6A:6F Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 0A3F00C4CBC0E111161A2540F3DC810A829506C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 12:05:49 +0000 Manifest this update: Sat 23 Aug 2025 12:00:49 +0000 Manifest next update: Sun 24 Aug 2025 15:12:49 +0000 Files and hashes: 1: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: ++9vyc7Cy7p93uPHTZWjz/BZEVWcY9k483OuRR8k2TA=) 2: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) 3: 3230312e37312e362e302f32342d3234203d3e20323730323832.roa (hash: cgty3y+WXB77fKXgspObQAAIy86k6JD4z/lljwnVAH0=) 4: 323830343a363961343a633030303a3a2f33342d3334203d3e20323730323832.roa (hash: 58YtV/EyutYvuD7ax99x1jtrrKvHc6DLEIj1RSU1WxY=) 5: 3230312e37312e342e302f32342d3234203d3e20323730323832.roa (hash: 7ef6MTIGvzZEmcBuUoSKVpmybb4snnDytulBwSG3gUU=) 6: 3230312e37312e352e302f32342d3234203d3e20323730323832.roa (hash: GLg2A2guXRKI5hgYOXafpggFO7WhdO5GN/yUMIsCxKw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:00:c4:cb:c0:e1:11:16:1a:25:40:f3:dc:81:0a:82:95:06:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Aug 23 12:00:49 2025 GMT Not After : Aug 24 15:12:49 2025 GMT Subject: CN=06A179C5E1E9FA1990D3B7D69D8FA5E6B87C6A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:bc:83:46:72:c9:97:88:83:30:6c:66:76: a8:d4:3f:e5:fa:d1:f9:8b:22:59:bb:7d:88:3f:7b: 25:5b:76:35:53:51:b4:98:8d:7c:a4:53:5f:10:1f: 69:82:ef:f9:b8:3f:f3:91:27:20:3f:65:95:27:ee: 59:2a:6b:9b:93:d6:60:8b:26:7f:6f:89:1b:b2:f4: 72:86:a0:f0:73:5f:a1:74:ba:cf:81:92:d4:3f:6a: 27:cd:92:64:12:2d:82:42:61:7c:86:a2:76:86:df: 37:f3:ee:65:c5:ea:38:60:5d:7d:78:d3:18:b4:bf: 58:fe:bb:39:96:eb:62:66:da:8c:74:7f:fb:82:61: fa:fc:51:c0:1e:fd:cc:19:85:8b:64:81:1b:f3:e8: 6b:81:73:61:ff:47:8c:23:74:22:64:62:4a:dd:ee: ee:0f:de:b3:b5:52:a9:64:71:00:cb:43:f8:fe:50: 85:f5:c5:b4:59:cf:84:de:0b:99:9d:57:56:74:10: 31:dd:ab:89:b2:2b:f9:ca:4f:4b:52:37:87:80:d2: e3:99:06:96:a5:02:a2:13:37:76:df:76:ad:2e:3b: 8e:93:36:19:fa:c2:d6:b7:36:fe:af:84:e8:79:e7: 69:46:fc:09:c4:76:5a:09:1f:9d:52:55:d3:03:74: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A1:79:C5:E1:E9:FA:19:90:D3:B7:D6:9D:8F:A5:E6:B8:7C:6A:6F X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:06:6d:5e:72:04:ac:8a:1a:59:5d:3d:1d:06:de:21:83:f7: 1e:a3:72:04:51:c1:51:9a:d1:db:ac:69:79:53:7d:f1:fa:2f: d8:67:ca:33:9b:aa:11:83:e8:20:6a:15:a1:3e:30:ab:85:69: d6:9a:16:5c:0f:11:a7:3e:87:63:da:91:aa:07:26:8d:1e:b3: e8:63:b0:6b:2f:5f:3c:a8:01:aa:e8:f3:13:70:e8:58:fc:3b: 65:0c:c4:e4:c5:9d:c6:57:37:38:1b:2b:bc:3e:36:29:70:43: 46:af:13:d1:d8:a4:03:17:92:df:7f:89:40:2b:3a:41:18:3d: 3f:df:ee:8f:d2:29:83:14:19:b5:4a:eb:fb:a3:23:6e:65:3c: 24:e8:b1:e2:9d:6a:0e:87:fe:1c:62:82:b3:ea:e4:23:df:61: 08:76:c5:a5:82:89:80:34:8a:65:b6:1f:1c:68:fb:47:7b:56: 45:fc:e0:ab:c9:e6:de:7d:8c:72:04:cf:17:59:90:61:57:cb: 93:e2:e8:5c:91:08:21:94:d9:e8:aa:63:34:69:7a:96:25:fa: fd:56:07:1e:de:12:46:61:64:ff:00:b1:dd:aa:49:14:45:76: 27:ff:e6:29:ff:4c:ee:88:15:f8:7e:02:b6:be:a7:33:4c:05: 65:6a:30:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCj8AxMvA4REWGiVA89yBCoKVBsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA4MjMxMjAwNDlaFw0yNTA4MjQxNTEyNDlaMDMxMTAvBgNV BAMTKDA2QTE3OUM1RTFFOUZBMTk5MEQzQjdENjlEOEZBNUU2Qjg3QzZBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDLyDRnLJl4iDMGxmdqjUP+X6 0fmLIlm7fYg/eyVbdjVTUbSYjXykU18QH2mC7/m4P/ORJyA/ZZUn7lkqa5uT1mCL Jn9viRuy9HKGoPBzX6F0us+BktQ/aifNkmQSLYJCYXyGonaG3zfz7mXF6jhgXX14 0xi0v1j+uzmW62Jm2ox0f/uCYfr8UcAe/cwZhYtkgRvz6GuBc2H/R4wjdCJkYkrd 7u4P3rO1UqlkcQDLQ/j+UIX1xbRZz4TeC5mdV1Z0EDHdq4myK/nKT0tSN4eA0uOZ BpalAqITN3bfdq0uO46TNhn6wta3Nv6vhOh552lG/AnEdloJH51SVdMDdM1lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBqF5xeHp+hmQ07fWnY+l5rh8am8wHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADgZtXnIErIoaWV09HQbeIYP3HqNyBFHBUZrR26xpeVN98fov2GfKM5uqEYPo IGoVoT4wq4Vp1poWXA8Rpz6HY9qRqgcmjR6z6GOway9fPKgBqujzE3DoWPw7ZQzE 5MWdxlc3OBsrvD42KXBDRq8T0dikAxeS33+JQCs6QRg9P9/uj9IpgxQZtUrr+6Mj bmU8JOix4p1qDof+HGKCs+rkI99hCHbFpYKJgDSKZbYfHGj7R3tWRfzgq8nm3n2M cgTPF1mQYVfLk+LoXJEIIZTZ6KpjNGl6liX6/VYHHt4SRmFk/wCx3apJFEV2J//m Kf9M7ogV+H4Ctr6nM0wFZWowPQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:06 2025 by rpki-client