$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft File: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json) Hash identifier: p8O6BYVDQ/YGbTfNOkG6Y5OITTrcqIfe+nW/+BWsVXc= Subject key identifier: 40:EF:E8:C1:8B:CF:35:64:D2:72:88:3B:57:23:96:E1:21:D1:EB:D5 Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 Certificate issuer: /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Certificate serial: 0D11F2BC1B21A9CB260E4DFEA09D949E6A55537F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft Manifest number: 014F Signing time: Mon 03 Nov 2025 19:09:30 +0000 Manifest this update: Mon 03 Nov 2025 19:04:30 +0000 Manifest next update: Tue 04 Nov 2025 22:22:30 +0000 Files and hashes: 1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=) 2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: WP3F1F3+EjZFuUEx//pXe1I9oigxGYLzvtHLfA4uWNM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 22:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:11:f2:bc:1b:21:a9:cb:26:0e:4d:fe:a0:9d:94:9e:6a:55:53:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Validity Not Before: Nov 3 19:04:30 2025 GMT Not After : Nov 4 22:22:30 2025 GMT Subject: CN=40EFE8C18BCF3564D272883B572396E121D1EBD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:41:cd:31:19:b2:38:16:61:f0:ec:44:0d: 12:2f:7f:6b:01:bc:6c:81:15:75:f8:b0:68:2f:27: c0:ed:06:9e:85:2e:24:da:4e:f5:5e:27:3a:85:57: 71:d3:cd:99:82:a3:d3:ab:6b:b0:19:11:72:6a:33: db:30:74:45:36:d7:47:32:46:0c:ac:6d:f8:22:b8: da:62:1b:67:48:68:e1:e8:2f:00:91:6a:bb:1e:81: 98:db:09:88:d0:0d:e4:db:62:3c:aa:7e:1f:4a:0f: 01:5e:51:19:a2:0e:91:3b:2c:82:8f:49:6b:1c:d0: 7a:09:f0:ac:ab:2f:f2:2d:bb:b9:81:0c:f7:72:0e: 9f:af:07:f2:11:8a:ac:52:d2:ac:79:1f:29:bc:77: 6e:85:fe:1e:84:ca:00:0a:c0:a1:99:58:63:4d:27: a0:ec:b8:7d:e2:74:8b:39:f3:0a:1d:6c:d3:ea:b4: 28:3a:cb:a7:16:13:46:17:42:c0:62:17:2f:da:87: 29:82:b8:db:98:d8:a4:52:3f:74:d5:00:ee:30:f7: 07:a9:a8:2f:ac:a5:a0:33:25:6a:8b:4e:bd:f5:ed: 0a:9d:a4:2c:34:46:f6:68:ce:f7:94:68:6a:ea:33: dc:58:97:13:fa:10:75:41:80:f3:33:16:b6:b4:4e: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:E8:C1:8B:CF:35:64:D2:72:88:3B:57:23:96:E1:21:D1:EB:D5 X509v3 Authority Key Identifier: keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1f:27:29:f9:f1:9f:a0:24:66:ce:72:34:02:30:e6:6e:23: 68:c4:83:b2:06:7c:c7:1b:13:0c:1b:a9:52:1d:44:b6:51:a8: d0:80:38:d6:22:42:be:5d:1c:4e:05:37:10:87:74:f2:ab:6a: 9f:a2:36:91:5f:3c:39:8b:e3:a4:91:87:48:25:79:91:4c:62: 7f:96:7f:9f:23:ef:3f:e1:f8:e7:dc:a7:57:3f:b7:95:46:90: d3:16:26:e4:2b:af:38:27:a1:63:9e:1c:5e:53:71:f0:38:e7: c3:39:d4:7c:2d:4c:b3:5e:f9:00:2a:d9:8a:ac:fe:eb:f1:53: 85:9f:0c:87:ad:6b:88:15:38:32:fd:c3:87:3c:14:47:f4:1c: f0:8d:ca:4d:99:3e:59:d6:ef:a2:cd:2f:cc:79:fc:1f:09:43: 3b:88:dc:6d:f6:6b:f8:19:3c:c1:89:6a:10:1e:ba:f1:02:16: d5:be:c0:df:cc:3d:ef:b7:a3:88:12:2b:b0:8a:32:99:65:ea: cc:5e:5d:ff:ca:c7:8b:d4:e0:57:26:87:87:ed:b5:55:05:16: 88:3b:c1:b7:d7:7f:3b:c8:61:2e:a6:7c:6e:0f:ea:ec:7e:5e: fd:9b:33:5d:37:0f:fb:1a:d9:85:ee:60:55:b5:e0:f3:4e:25: 60:3a:3a:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDRHyvBshqcsmDk3+oJ2UnmpVU38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE MEVGQjc4MTAeFw0yNTExMDMxOTA0MzBaFw0yNTExMDQyMjIyMzBaMDMxMTAvBgNV BAMTKDQwRUZFOEMxOEJDRjM1NjREMjcyODgzQjU3MjM5NkUxMjFEMUVCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEUHNMRmyOBZh8OxEDRIvf2sB vGyBFXX4sGgvJ8DtBp6FLiTaTvVeJzqFV3HTzZmCo9Ora7AZEXJqM9swdEU210cy RgysbfgiuNpiG2dIaOHoLwCRarsegZjbCYjQDeTbYjyqfh9KDwFeURmiDpE7LIKP SWsc0HoJ8KyrL/Itu7mBDPdyDp+vB/IRiqxS0qx5Hym8d26F/h6EygAKwKGZWGNN J6DsuH3idIs58wodbNPqtCg6y6cWE0YXQsBiFy/ahymCuNuY2KRSP3TVAO4w9wep qC+spaAzJWqLTr317QqdpCw0RvZozveUaGrqM9xYlxP6EHVBgPMzFra0Th8NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQO/owYvPNWTScog7VyOW4SHR69UwHwYDVR0j BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85 NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOB8nKfnxn6AkZs5yNAIw5m4jaMSDsgZ8xxsTDBupUh1EtlGo0IA41iJCvl0c TgU3EId08qtqn6I2kV88OYvjpJGHSCV5kUxif5Z/nyPvP+H459ynVz+3lUaQ0xYm 5CuvOCehY54cXlNx8DjnwznUfC1Ms175ACrZiqz+6/FThZ8Mh61riBU4Mv3DhzwU R/Qc8I3KTZk+Wdbvos0vzHn8HwlDO4jcbfZr+Bk8wYlqEB668QIW1b7A38w977ej iBIrsIoymWXqzF5d/8rHi9TgVyaHh+21VQUWiDvBt9d/O8hhLqZ8bg/q7H5e/Zsz XTcP+xrZhe5gVbXg804lYDo6Sw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:52 2025 by rpki-client