$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft File: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json) Hash identifier: HrM9pl4zdgXHKZ0EzVcG4aPwCOeBCVN8oRRWFDTmN08= Subject key identifier: AD:EC:23:E4:F3:94:90:AB:08:62:C3:B4:66:06:D9:B5:62:93:E6:C1 Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 Certificate issuer: /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Certificate serial: 3F5D970F97E686CDE57CEE1D05929BBF82DD1D39 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft Manifest number: 8A Signing time: Mon 09 Jun 2025 14:38:17 +0000 Manifest this update: Mon 09 Jun 2025 14:33:17 +0000 Manifest next update: Tue 10 Jun 2025 18:11:17 +0000 Files and hashes: 1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=) 2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: NZS54D4Yx/nECgXzX0iVf0rcBNKDqJm6eHCWk2FB/ZA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 16:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5d:97:0f:97:e6:86:cd:e5:7c:ee:1d:05:92:9b:bf:82:dd:1d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Validity Not Before: Jun 9 14:33:17 2025 GMT Not After : Jun 10 18:11:17 2025 GMT Subject: CN=ADEC23E4F39490AB0862C3B46606D9B56293E6C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:00:ab:72:c5:b0:02:a5:3d:9b:74:14:28: 85:fd:7f:23:00:17:89:06:4b:4d:91:27:92:b5:23: 42:36:cd:af:09:35:71:fb:7d:c9:a1:ac:8f:8e:cf: 4c:e7:fe:4d:71:bc:51:25:25:45:a6:7b:b2:b1:29: dd:3a:cd:fd:4c:84:d0:f4:b0:9b:38:8f:30:7c:7d: d5:99:63:61:97:d1:82:57:09:25:81:8f:00:c0:d6: 0d:97:84:da:89:09:5d:15:1e:9d:90:13:2f:8d:24: f2:ca:1f:a2:30:df:5b:bc:81:15:a9:fa:8d:f1:fe: 7d:47:bb:73:a4:6b:e9:42:c7:55:9c:22:c2:8a:4b: a7:98:36:02:a4:89:0b:1a:c0:75:4f:2c:4c:04:89: 69:57:54:5a:7d:d0:f1:99:33:3e:0b:28:e1:9e:fa: 2d:8c:93:81:2b:a8:d3:bd:c3:3a:ce:0c:04:7e:70: 07:f6:98:93:61:80:bb:a3:06:41:17:9b:a5:d9:cf: b5:df:44:b4:f9:4d:5c:d5:d9:61:f5:01:c2:2f:a1: b8:2f:f0:f4:86:09:f9:a5:04:8a:b3:63:74:b6:b6: 84:f9:a5:91:7f:20:6d:dc:1e:5e:22:63:99:1b:7a: 40:44:92:2c:bf:8a:8b:d2:59:74:33:90:23:86:56: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EC:23:E4:F3:94:90:AB:08:62:C3:B4:66:06:D9:B5:62:93:E6:C1 X509v3 Authority Key Identifier: keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:86:6d:35:80:2e:ee:c8:85:fc:6f:ea:63:1c:65:08:49:09: 45:8d:3e:2f:67:e5:d1:b5:97:af:19:2d:43:88:ce:63:a4:e7: 3d:b0:17:be:78:3b:97:b2:85:73:bf:b5:7c:2d:1e:b0:c2:77: 8c:e5:4e:8f:ff:1f:44:2c:b5:c0:56:5b:65:4c:e0:01:de:42: ad:46:43:e4:90:f0:f4:ae:e9:f4:f4:05:de:17:68:0c:9c:27: 53:63:f5:d9:6e:5a:66:75:b3:2a:89:c5:4c:81:f6:b7:2d:14: bc:74:64:48:e9:59:0c:27:0c:41:c4:c8:ac:7a:dc:29:7f:11: d3:9c:5b:9c:d6:b5:78:2d:8c:fa:70:94:d7:d9:c2:b3:66:32: 52:ca:30:8d:9f:01:50:d2:7d:a5:3d:42:41:78:16:a6:37:17: e8:c5:f1:02:47:ba:75:06:fc:ca:23:b3:1e:c1:23:78:96:ad: ee:9e:5f:d6:90:00:c9:dc:e7:c3:ca:87:c4:01:92:6c:1d:ff: b2:04:c1:94:bb:3b:79:80:b8:8d:cc:12:30:c3:26:c9:08:20: e1:d2:a8:df:34:55:17:b3:1f:3f:a2:98:c4:3d:32:55:e2:70: 59:a8:8a:67:3b:17:4c:99:70:1b:f6:26:5a:73:3d:eb:fc:32: c9:93:64:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP12XD5fmhs3lfO4dBZKbv4LdHTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE MEVGQjc4MTAeFw0yNTA2MDkxNDMzMTdaFw0yNTA2MTAxODExMTdaMDMxMTAvBgNV BAMTKEFERUMyM0U0RjM5NDkwQUIwODYyQzNCNDY2MDZEOUI1NjI5M0U2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHwCrcsWwAqU9m3QUKIX9fyMA F4kGS02RJ5K1I0I2za8JNXH7fcmhrI+Oz0zn/k1xvFElJUWme7KxKd06zf1MhND0 sJs4jzB8fdWZY2GX0YJXCSWBjwDA1g2XhNqJCV0VHp2QEy+NJPLKH6Iw31u8gRWp +o3x/n1Hu3Oka+lCx1WcIsKKS6eYNgKkiQsawHVPLEwEiWlXVFp90PGZMz4LKOGe +i2Mk4ErqNO9wzrODAR+cAf2mJNhgLujBkEXm6XZz7XfRLT5TVzV2WH1AcIvobgv 8PSGCfmlBIqzY3S2toT5pZF/IG3cHl4iY5kbekBEkiy/iovSWXQzkCOGVrmfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrewj5POUkKsIYsO0ZgbZtWKT5sEwHwYDVR0j BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85 NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkIZtNYAu7siF/G/qYxxlCEkJRY0+L2fl0bWXrxktQ4jOY6TnPbAXvng7l7KF c7+1fC0esMJ3jOVOj/8fRCy1wFZbZUzgAd5CrUZD5JDw9K7p9PQF3hdoDJwnU2P1 2W5aZnWzKonFTIH2ty0UvHRkSOlZDCcMQcTIrHrcKX8R05xbnNa1eC2M+nCU19nC s2YyUsowjZ8BUNJ9pT1CQXgWpjcX6MXxAke6dQb8yiOzHsEjeJat7p5f1pAAydzn w8qHxAGSbB3/sgTBlLs7eYC4jcwSMMMmyQgg4dKo3zRVF7MfP6KYxD0yVeJwWaiK ZzsXTJlwG/YmWnM96/wyyZNkqw== -----END CERTIFICATE-----Generated at Mon Jun 9 16:44:15 2025 by rpki-client