$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft File: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json) Hash identifier: CsQnpHPASZRzvrlrIR3SGyuPKvyEEsNvyXsHc+P1dV4= Subject key identifier: D1:82:CE:91:14:EE:1F:E1:58:8F:95:A2:FE:12:5A:49:1F:28:71:71 Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 Certificate issuer: /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Certificate serial: 5ED979DD7D1AD776FD8D8EC6EFB0168DBDCBF2B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft Manifest number: 02FD Signing time: Mon 03 Nov 2025 16:11:37 +0000 Manifest this update: Mon 03 Nov 2025 16:06:37 +0000 Manifest next update: Tue 04 Nov 2025 18:16:37 +0000 Files and hashes: 1: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=) 2: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: 5GloReeVf1Y/FrG1CRAd+UcQtlvEKSfesVs1st9PJ/w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d9:79:dd:7d:1a:d7:76:fd:8d:8e:c6:ef:b0:16:8d:bd:cb:f2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Validity Not Before: Nov 3 16:06:37 2025 GMT Not After : Nov 4 18:16:37 2025 GMT Subject: CN=D182CE9114EE1FE1588F95A2FE125A491F287171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6d:5c:f5:bf:9e:ed:35:e7:ec:46:d6:59:ab: b3:fa:82:46:ff:db:14:82:01:d7:af:f9:8d:7f:55: c6:90:99:54:e6:2b:e3:8a:6d:ec:67:ac:34:d5:b2: 36:bb:bd:43:e1:ab:f3:25:cc:03:c6:ca:79:a3:ae: 22:fb:43:5d:ee:1d:a1:6f:b9:11:13:11:dd:dd:ea: 12:9e:e3:c9:78:71:af:60:6a:58:0b:45:3c:88:2e: e9:42:c5:9e:83:db:11:47:85:29:ce:64:ec:4b:7f: c6:03:cd:91:33:d4:6d:d8:a2:20:63:f7:2e:f9:f5: cf:a5:64:20:99:51:cf:cf:8c:71:18:0f:af:6d:77: 44:e6:c8:86:db:3b:d2:83:70:82:04:41:40:65:f1: dc:6d:8f:c9:2a:2c:8f:95:72:80:20:ae:a1:34:9b: c5:a2:00:c8:0e:ef:71:c5:34:da:fa:79:6a:72:02: 44:b0:16:cb:d1:fe:54:df:b6:4d:f1:a3:b5:4a:77: 50:25:ff:fe:13:00:e9:45:02:44:32:fa:9b:9b:5f: ab:9a:96:fe:f1:2e:d5:80:89:ea:b5:1f:03:a0:a2: 6c:34:a3:57:ea:09:a3:e5:c0:ef:3e:41:ce:0b:9c: b6:55:89:c2:1e:66:90:08:47:bd:9f:e8:fb:a7:98: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:CE:91:14:EE:1F:E1:58:8F:95:A2:FE:12:5A:49:1F:28:71:71 X509v3 Authority Key Identifier: keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5c:45:95:5a:30:98:c1:bc:4a:17:d3:34:a6:12:a2:c4:12: 4e:ab:41:ea:1c:27:64:3b:c0:08:f2:7b:71:56:1a:81:52:ff: c3:c8:42:e6:25:c0:d9:a1:78:41:d4:bd:9e:9c:d9:0c:07:1b: 4c:f1:ab:1e:b6:f3:bf:d0:af:82:b2:0e:ff:a3:e4:38:d0:b0: 51:e4:ba:b8:13:8c:9f:38:c5:58:9c:be:f1:14:2c:f5:75:f0: 45:5d:8a:2e:08:82:e6:57:68:12:9f:c1:4a:c2:fa:cf:4e:79: cf:87:0f:7a:01:ff:0f:b9:1c:be:7b:fc:91:91:c7:82:4d:8f: 64:f3:d3:8b:c1:32:b4:2b:79:c7:a5:7c:1d:4b:21:10:56:6d: 3a:4d:46:bb:f9:9c:1e:09:12:d8:e5:1c:88:04:60:51:15:7b: c1:23:db:d7:26:19:35:c1:41:bb:c3:16:ef:76:b0:5c:24:23: 6f:fd:5a:0e:7d:20:e9:80:53:c9:89:e9:d7:29:67:82:5a:37: 0d:b6:33:4a:b8:58:57:43:59:7d:22:b0:31:49:74:62:6e:78: 18:2a:e4:47:cb:b9:11:80:78:31:f6:79:91:b4:85:a2:97:58: 11:00:d9:6c:b1:c4:a0:3f:ad:47:ca:41:eb:57:19:b5:2c:08: b0:4e:2e:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXtl53X0a13b9jY7G77AWjb3L8rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdE MkIwNkQ2MjAeFw0yNTExMDMxNjA2MzdaFw0yNTExMDQxODE2MzdaMDMxMTAvBgNV BAMTKEQxODJDRTkxMTRFRTFGRTE1ODhGOTVBMkZFMTI1QTQ5MUYyODcxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzbVz1v57tNefsRtZZq7P6gkb/ 2xSCAdev+Y1/VcaQmVTmK+OKbexnrDTVsja7vUPhq/MlzAPGynmjriL7Q13uHaFv uRETEd3d6hKe48l4ca9galgLRTyILulCxZ6D2xFHhSnOZOxLf8YDzZEz1G3YoiBj 9y759c+lZCCZUc/PjHEYD69td0TmyIbbO9KDcIIEQUBl8dxtj8kqLI+VcoAgrqE0 m8WiAMgO73HFNNr6eWpyAkSwFsvR/lTftk3xo7VKd1Al//4TAOlFAkQy+pubX6ua lv7xLtWAieq1HwOgomw0o1fqCaPlwO8+Qc4LnLZVicIeZpAIR72f6PunmHZ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0YLOkRTuH+FYj5Wi/hJaSR8ocXEwHwYDVR0j BBgwFoAUlftPeVSnnD6uuRVctfTyR9KwbWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC S2EvMS85NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkI0Rjc5NTRBNzlDM0VB RUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS85 NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASlxFlVowmMG8ShfTNKYSosQSTqtB6hwnZDvACPJ7cVYagVL/w8hC5iXA2aF4 QdS9npzZDAcbTPGrHrbzv9CvgrIO/6PkONCwUeS6uBOMnzjFWJy+8RQs9XXwRV2K LgiC5ldoEp/BSsL6z055z4cPegH/D7kcvnv8kZHHgk2PZPPTi8EytCt5x6V8HUsh EFZtOk1Gu/mcHgkS2OUciARgURV7wSPb1yYZNcFBu8MW73awXCQjb/1aDn0g6YBT yYnp1ylnglo3DbYzSrhYV0NZfSKwMUl0Ym54GCrkR8u5EYB4MfZ5kbSFopdYEQDZ bLHEoD+tR8pB61cZtSwIsE4u8Q== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:20 2025 by rpki-client