$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft File: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json) Hash identifier: 5UscmFMSurd4sZWJTv3JZKZhOct4G5Wpo9UIOMh/CPk= Subject key identifier: 7E:76:B4:84:6D:39:6D:B7:C4:25:E3:8E:1F:8A:5D:DC:A2:1B:5A:CE Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 Certificate issuer: /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Certificate serial: 3C158CCB971B0399593D55C5FB5B798355BAE7D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft Manifest number: EA Signing time: Wed 20 Aug 2025 05:20:54 +0000 Manifest this update: Wed 20 Aug 2025 05:15:54 +0000 Manifest next update: Thu 21 Aug 2025 07:32:54 +0000 Files and hashes: 1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=) 2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: cwUiQRjMAWRvcj5fcX+XiBSfs5KccLwrYcm8/4nYRdw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:15:8c:cb:97:1b:03:99:59:3d:55:c5:fb:5b:79:83:55:ba:e7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Validity Not Before: Aug 20 05:15:54 2025 GMT Not After : Aug 21 07:32:54 2025 GMT Subject: CN=7E76B4846D396DB7C425E38E1F8A5DDCA21B5ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:00:65:89:e1:15:c0:8b:f2:46:4a:52:9e: 55:0f:7b:54:05:e5:6d:0f:e4:90:c6:24:c5:8f:74: a2:2c:78:fb:dd:af:cc:81:24:16:8d:cb:6a:d4:34: a8:87:a7:86:14:06:35:16:b7:30:05:57:1f:4b:7c: 9a:3c:ff:7e:3f:75:a1:b2:4b:ab:97:dc:9b:6d:6f: e6:c8:05:ef:ad:e7:7c:59:84:49:3d:e5:19:e6:f3: 34:81:ba:87:57:2e:65:3a:0e:5b:f4:38:e1:2a:e8: 20:d2:68:4e:fc:6e:cc:5d:69:f7:f9:d3:b9:30:81: 94:1e:d8:99:cc:3a:97:55:f2:d0:6a:c2:83:2f:9c: 9e:47:25:d8:72:1c:1e:c7:34:69:99:a0:6b:b9:a3: f7:6b:01:14:d9:e2:f5:58:84:e6:26:29:d4:ff:43: 44:8c:71:76:9f:5d:09:b5:56:dd:84:24:00:25:d9: 56:09:5a:70:6e:49:63:00:01:a6:3f:96:3f:4f:2b: 12:61:56:40:31:55:a4:b1:dd:ef:19:73:f4:7f:90: fc:3e:46:28:1b:42:25:e7:25:44:d8:35:cc:7c:4f: 56:a1:a9:67:ea:a0:4f:c5:07:b1:ea:64:67:aa:23: 38:82:58:34:a4:e1:76:b9:66:0d:62:1b:3f:c6:c3: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:76:B4:84:6D:39:6D:B7:C4:25:E3:8E:1F:8A:5D:DC:A2:1B:5A:CE X509v3 Authority Key Identifier: keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9f:a1:c7:90:51:bc:f1:dd:07:cd:45:e3:a9:25:f7:bf:72: 7d:25:79:b9:ca:0a:a0:b8:88:81:53:c2:2f:a1:85:1d:33:68: 86:56:4a:1b:ce:1a:2d:b4:e5:e1:07:9c:9f:86:6c:58:d6:cb: bb:f6:25:71:ba:82:8f:90:98:18:29:b6:a3:05:24:fe:b8:4c: 65:ca:0b:da:39:64:99:03:2f:33:60:f0:23:f7:3e:96:62:11: 80:69:53:de:82:15:a1:12:dd:2c:5c:4d:be:d9:1d:c3:03:2c: fd:97:17:44:96:40:24:b4:0a:64:ac:10:71:87:66:b5:43:c0: 49:0f:78:7a:db:9f:d8:27:99:2b:3c:2a:a9:9d:e2:2c:be:7f: cd:0f:01:16:61:56:95:3a:bc:cc:af:6c:f2:b8:23:cb:47:dc: 32:da:cf:86:56:b7:a4:be:3b:07:9f:be:6e:d7:6b:eb:75:f2: ba:f5:da:9c:76:39:55:58:7e:df:57:6f:b0:89:bb:74:2f:02: fe:47:b5:71:50:59:b6:a9:55:e2:70:38:0e:04:3b:ea:e0:8e: 5b:f7:5e:2c:71:36:9b:d9:79:07:3c:99:21:18:9b:3b:32:7c: ef:6d:d8:6d:4a:cd:12:83:d3:9f:3d:f6:cd:ef:a5:a1:92:1b: 02:47:e0:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPBWMy5cbA5lZPVXF+1t5g1W659QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE MEVGQjc4MTAeFw0yNTA4MjAwNTE1NTRaFw0yNTA4MjEwNzMyNTRaMDMxMTAvBgNV BAMTKDdFNzZCNDg0NkQzOTZEQjdDNDI1RTM4RTFGOEE1RERDQTIxQjVBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcABlieEVwIvyRkpSnlUPe1QF 5W0P5JDGJMWPdKIsePvdr8yBJBaNy2rUNKiHp4YUBjUWtzAFVx9LfJo8/34/daGy S6uX3Jttb+bIBe+t53xZhEk95Rnm8zSBuodXLmU6Dlv0OOEq6CDSaE78bsxdaff5 07kwgZQe2JnMOpdV8tBqwoMvnJ5HJdhyHB7HNGmZoGu5o/drARTZ4vVYhOYmKdT/ Q0SMcXafXQm1Vt2EJAAl2VYJWnBuSWMAAaY/lj9PKxJhVkAxVaSx3e8Zc/R/kPw+ RigbQiXnJUTYNcx8T1ahqWfqoE/FB7HqZGeqIziCWDSk4Xa5Zg1iGz/Gw8L5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfna0hG05bbfEJeOOH4pd3KIbWs4wHwYDVR0j BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85 NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWp+hx5BRvPHdB81F46kl979yfSV5ucoKoLiIgVPCL6GFHTNohlZKG84aLbTl 4Qecn4ZsWNbLu/YlcbqCj5CYGCm2owUk/rhMZcoL2jlkmQMvM2DwI/c+lmIRgGlT 3oIVoRLdLFxNvtkdwwMs/ZcXRJZAJLQKZKwQcYdmtUPASQ94etuf2CeZKzwqqZ3i LL5/zQ8BFmFWlTq8zK9s8rgjy0fcMtrPhla3pL47B5++btdr63XyuvXanHY5VVh+ 31dvsIm7dC8C/ke1cVBZtqlV4nA4DgQ76uCOW/deLHE2m9l5BzyZIRibOzJ8723Y bUrNEoPTnz32ze+loZIbAkfgzg== -----END CERTIFICATE-----Generated at Wed Aug 20 19:57:24 2025 by rpki-client