$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft File: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json) Hash identifier: 3elZ+IHR6cJRxnBE4g83gg8aUQbuH1owOvN7vT00rw4= Subject key identifier: 8C:CA:07:B1:63:1F:E0:58:1E:58:44:B0:CC:7E:19:86:71:BB:41:B4 Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 Certificate issuer: /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Certificate serial: 3E346F367C06B11480ABD313E7CAF42C94782893 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft Manifest number: 8B Signing time: Tue 10 Jun 2025 10:13:19 +0000 Manifest this update: Tue 10 Jun 2025 10:08:19 +0000 Manifest next update: Wed 11 Jun 2025 13:19:19 +0000 Files and hashes: 1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=) 2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: FfI6shh61uOKF4+Fst4Xh7+Aoaug/AE3aXNq0H/ElIs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 12:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:34:6f:36:7c:06:b1:14:80:ab:d3:13:e7:ca:f4:2c:94:78:28:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Validity Not Before: Jun 10 10:08:19 2025 GMT Not After : Jun 11 13:19:19 2025 GMT Subject: CN=8CCA07B1631FE0581E5844B0CC7E198671BB41B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:7a:e8:c2:1c:57:76:67:f2:fb:03:84:e1: 2c:3b:6c:01:d2:c3:fd:dd:31:9d:f5:fe:cc:06:91: cd:5a:ef:5d:eb:d5:7e:58:15:91:b2:5e:0b:4a:bf: 23:f1:50:af:02:61:bc:cb:eb:e4:36:bf:b5:e7:c0: 37:1d:9f:10:dd:98:db:06:0d:6f:a7:11:11:53:be: b5:16:49:55:24:e7:e0:2a:9c:4a:0f:32:bd:b8:ff: 79:9e:84:f9:3d:c6:b7:eb:d7:7e:58:45:9d:56:d4: 4d:8b:9d:65:55:65:b6:5b:c6:ad:ff:70:49:50:42: e1:85:1f:2d:11:82:a3:d2:b0:f1:31:4b:ca:e9:9d: 08:1c:42:e2:88:48:10:d7:5b:a7:bb:7c:08:38:65: c7:65:dc:f5:53:1d:78:a7:59:88:eb:f1:dc:e7:28: 08:6e:09:07:d4:d8:e3:d6:13:0f:f9:02:69:51:77: 36:49:46:27:fc:31:46:5f:cb:f7:9f:7b:3e:e6:e3: 84:38:a2:20:9c:84:5e:72:e6:0b:6b:1d:06:2b:af: 5d:d8:e6:18:36:a3:b4:d6:87:cd:08:bb:4a:2a:83: 43:65:cb:6c:bc:9a:4e:e6:d8:5b:f4:c3:53:04:6f: 45:29:c2:37:d1:35:54:61:af:fb:f6:2d:6c:6c:15: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:07:B1:63:1F:E0:58:1E:58:44:B0:CC:7E:19:86:71:BB:41:B4 X509v3 Authority Key Identifier: keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2a:10:d8:5e:21:2c:d0:68:fe:16:f4:bf:be:7b:a2:0e:fc: 68:5f:f3:f9:59:f5:b2:1e:8c:86:e5:68:71:b5:83:e8:99:13: 14:3f:3f:56:ac:df:f1:cd:79:94:52:f7:32:ff:36:34:7b:1d: 49:9f:07:b2:a3:c6:9c:fe:90:9b:c5:e6:f0:91:0d:7e:2f:1e: 4c:c7:4e:b5:3c:63:4c:7a:66:b0:7b:5a:77:6e:98:e9:fd:f2: 3b:99:cf:8c:46:1d:f8:6d:c7:3d:68:04:47:cd:ef:ad:4e:55: ad:3e:47:ae:98:c7:32:48:e5:57:24:99:d1:b1:99:51:a0:e3: d6:9f:73:01:7f:b7:d7:40:a4:77:83:8b:c2:34:d8:63:75:1a: e5:95:c3:8b:90:cd:b0:49:79:31:eb:11:1d:6c:dc:42:37:6f: 78:c3:8d:1c:9a:11:84:c0:8b:80:43:3e:ab:38:65:b5:40:2a: d7:37:7e:67:3f:87:b3:45:28:58:d8:c3:07:74:f1:4a:09:ce: 9b:40:57:25:75:80:2f:ab:58:d1:8b:a2:3e:46:8a:e1:30:db: d0:8a:94:70:65:74:e5:c1:40:68:1c:4f:72:7b:f6:ee:6e:64: 42:65:c6:cf:1c:b3:63:88:94:3d:4e:43:f9:cf:b2:3c:c6:4b: a6:f6:a6:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPjRvNnwGsRSAq9MT58r0LJR4KJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE MEVGQjc4MTAeFw0yNTA2MTAxMDA4MTlaFw0yNTA2MTExMzE5MTlaMDMxMTAvBgNV BAMTKDhDQ0EwN0IxNjMxRkUwNTgxRTU4NDRCMENDN0UxOTg2NzFCQjQxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUinrowhxXdmfy+wOE4Sw7bAHS w/3dMZ31/swGkc1a713r1X5YFZGyXgtKvyPxUK8CYbzL6+Q2v7XnwDcdnxDdmNsG DW+nERFTvrUWSVUk5+AqnEoPMr24/3mehPk9xrfr135YRZ1W1E2LnWVVZbZbxq3/ cElQQuGFHy0RgqPSsPExS8rpnQgcQuKISBDXW6e7fAg4Zcdl3PVTHXinWYjr8dzn KAhuCQfU2OPWEw/5AmlRdzZJRif8MUZfy/efez7m44Q4oiCchF5y5gtrHQYrr13Y 5hg2o7TWh80Iu0oqg0Nly2y8mk7m2Fv0w1MEb0UpwjfRNVRhr/v2LWxsFRT9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjMoHsWMf4FgeWESwzH4ZhnG7QbQwHwYDVR0j BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85 NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyoQ2F4hLNBo/hb0v757og78aF/z+Vn1sh6MhuVocbWD6JkTFD8/Vqzf8c15 lFL3Mv82NHsdSZ8HsqPGnP6Qm8Xm8JENfi8eTMdOtTxjTHpmsHtad26Y6f3yO5nP jEYd+G3HPWgER83vrU5VrT5HrpjHMkjlVySZ0bGZUaDj1p9zAX+310Ckd4OLwjTY Y3Ua5ZXDi5DNsEl5MesRHWzcQjdveMONHJoRhMCLgEM+qzhltUAq1zd+Zz+Hs0Uo WNjDB3TxSgnOm0BXJXWAL6tY0YuiPkaK4TDb0IqUcGV05cFAaBxPcnv27m5kQmXG zxyzY4iUPU5D+c+yPMZLpvamQw== -----END CERTIFICATE-----Generated at Tue Jun 10 12:55:17 2025 by rpki-client