$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft File: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json) Hash identifier: 9RRAyFR0uVuIS71wvBoUA5N+ItyinOG3tgO5n5RWZAY= Subject key identifier: 38:1A:D6:1D:A3:93:42:D0:9C:60:78:88:C8:08:58:EC:20:CC:82:F2 Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 Certificate issuer: /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Certificate serial: 7970EBB9E8A8DCC31002CB542C60ED6B3EF36EF8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft Manifest number: 029A Signing time: Wed 20 Aug 2025 09:42:05 +0000 Manifest this update: Wed 20 Aug 2025 09:37:05 +0000 Manifest next update: Thu 21 Aug 2025 11:53:05 +0000 Files and hashes: 1: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: rSIX6JNybqsLWEgOH+oslXOEJ8C/5EOw9kia/frWnQQ=) 2: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:70:eb:b9:e8:a8:dc:c3:10:02:cb:54:2c:60:ed:6b:3e:f3:6e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Validity Not Before: Aug 20 09:37:05 2025 GMT Not After : Aug 21 11:53:05 2025 GMT Subject: CN=381AD61DA39342D09C607888C80858EC20CC82F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:23:1d:70:af:10:b1:45:3f:3e:a2:5b:e1: 28:b2:55:55:8e:38:f5:07:fc:15:36:e4:4d:7f:93: 4c:c5:2e:d0:d2:6f:61:72:68:1c:9f:de:e3:c2:06: 5d:4e:d4:a0:44:ff:d5:b7:0f:8a:6c:c7:a8:f0:05: 97:69:46:07:16:08:a8:ee:c8:c7:99:90:da:6e:00: 40:89:8b:b2:db:67:d3:17:df:7b:55:44:cc:e7:83: 82:27:fa:cf:df:cf:5d:97:38:22:63:f6:9f:26:c7: 28:38:9c:15:bc:5a:eb:c2:c6:c8:32:ab:d9:5d:34: 32:a8:d9:69:75:11:56:3e:e3:66:05:96:64:c4:3b: 1e:31:34:f0:32:9f:02:6d:eb:ac:64:ec:fb:14:15: ef:e2:c3:e9:12:e8:01:b1:29:0e:ba:45:74:37:2b: 21:ac:11:a5:04:4c:d4:89:bd:48:0e:d6:c5:7a:e0: e7:53:0d:f3:76:c6:23:5f:18:26:14:a4:8c:76:01: 61:83:2e:86:1e:6f:ab:23:15:95:07:fa:57:13:78: 86:20:96:02:2f:7d:11:49:f5:39:52:70:53:49:78: 4b:6e:ab:5e:b9:f0:0d:4f:56:7a:f5:fa:ab:31:6c: 9c:e7:09:d4:b5:a0:5b:33:19:12:e7:b9:26:55:56: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1A:D6:1D:A3:93:42:D0:9C:60:78:88:C8:08:58:EC:20:CC:82:F2 X509v3 Authority Key Identifier: keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:11:8e:a6:42:7c:7a:65:cb:99:cc:28:5a:39:b8:74:1b:01: 88:88:bc:86:9c:ea:5e:4c:49:c0:2f:51:80:d2:bd:27:14:76: f6:3f:02:5a:27:78:5a:40:99:85:1f:57:17:f6:92:ed:9e:cb: 34:ba:20:af:6f:25:a3:a4:76:64:1d:16:70:ba:a4:56:01:4c: 3a:09:53:ca:e2:bb:a6:18:07:27:dd:b0:cf:fe:95:85:58:90: ae:2a:7b:6e:65:60:08:e9:d5:4f:81:35:34:b2:f0:39:ce:fc: 69:f4:16:2a:b3:6e:c5:a0:00:6d:58:a7:2a:41:8d:e3:24:db: 32:c8:65:50:8c:ef:44:8f:89:96:a0:b0:7c:5a:60:8c:49:91: fa:be:f6:40:6b:ee:7a:4d:69:53:93:d3:76:ef:c9:9a:a4:67: d2:dc:6d:a2:f6:05:5e:88:a8:b9:c9:71:95:6a:eb:5b:d0:2d: fb:25:39:ac:90:cd:2c:0e:34:f0:19:f6:7a:9a:41:40:0f:10: 4b:27:5d:5b:77:ff:d6:9b:be:86:cd:2e:8b:41:59:52:11:b6: 62:20:12:33:09:c1:77:50:9e:86:83:93:9d:b9:ad:fd:43:81: 78:a3:5e:77:e1:27:92:a7:ed:dc:d6:b0:90:8e:39:38:f3:1d: 01:e3:5a:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeXDrueio3MMQAstULGDtaz7zbvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdE MkIwNkQ2MjAeFw0yNTA4MjAwOTM3MDVaFw0yNTA4MjExMTUzMDVaMDMxMTAvBgNV BAMTKDM4MUFENjFEQTM5MzQyRDA5QzYwNzg4OEM4MDg1OEVDMjBDQzgyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOISMdcK8QsUU/PqJb4SiyVVWO OPUH/BU25E1/k0zFLtDSb2FyaByf3uPCBl1O1KBE/9W3D4psx6jwBZdpRgcWCKju yMeZkNpuAECJi7LbZ9MX33tVRMzng4In+s/fz12XOCJj9p8mxyg4nBW8WuvCxsgy q9ldNDKo2Wl1EVY+42YFlmTEOx4xNPAynwJt66xk7PsUFe/iw+kS6AGxKQ66RXQ3 KyGsEaUETNSJvUgO1sV64OdTDfN2xiNfGCYUpIx2AWGDLoYeb6sjFZUH+lcTeIYg lgIvfRFJ9TlScFNJeEtuq1658A1PVnr1+qsxbJznCdS1oFszGRLnuSZVVn1TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOBrWHaOTQtCcYHiIyAhY7CDMgvIwHwYDVR0j BBgwFoAUlftPeVSnnD6uuRVctfTyR9KwbWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC S2EvMS85NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkI0Rjc5NTRBNzlDM0VB RUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS85 NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcRGOpkJ8emXLmcwoWjm4dBsBiIi8hpzqXkxJwC9RgNK9JxR29j8CWid4WkCZ hR9XF/aS7Z7LNLogr28lo6R2ZB0WcLqkVgFMOglTyuK7phgHJ92wz/6VhViQrip7 bmVgCOnVT4E1NLLwOc78afQWKrNuxaAAbVinKkGN4yTbMshlUIzvRI+JlqCwfFpg jEmR+r72QGvuek1pU5PTdu/JmqRn0txtovYFXoiouclxlWrrW9At+yU5rJDNLA40 8Bn2eppBQA8QSyddW3f/1pu+hs0ui0FZUhG2YiASMwnBd1CehoOTnbmt/UOBeKNe d+Enkqft3NawkI45OPMdAeNaJg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:18:23 2025 by rpki-client