$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: b8D8szXLXl7PQNEe83hK10yBb2qH4o/4ImrF2sXLa+k= Subject key identifier: 8F:13:8E:B6:BD:55:5F:BE:9F:C5:1B:E3:6E:C3:C3:F8:B7:14:83:53 Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 20C91B2D5457AA1AE1A5BE5CE9F72081AF25D1CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 0240 Signing time: Wed 11 Jun 2025 03:49:51 +0000 Manifest this update: Wed 11 Jun 2025 03:44:51 +0000 Manifest next update: Thu 12 Jun 2025 06:47:51 +0000 Files and hashes: 1: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) 2: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: 8xlbn0l0F5m+4j9QY23+sVZM6PDjHvI/KChXpa0sNGA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 06:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c9:1b:2d:54:57:aa:1a:e1:a5:be:5c:e9:f7:20:81:af:25:d1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Jun 11 03:44:51 2025 GMT Not After : Jun 12 06:47:51 2025 GMT Subject: CN=8F138EB6BD555FBE9FC51BE36EC3C3F8B7148353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:e3:b0:f9:28:bf:53:f4:9f:e8:9d:3f:56: 43:23:07:70:9c:03:23:0d:24:6e:a8:ad:4a:f0:61: 84:53:41:34:f3:8e:01:2c:f0:a4:e6:03:83:5c:22: 40:d2:69:08:3c:2b:25:90:a0:fd:ac:56:aa:34:bd: 32:dc:19:3b:b7:fb:b9:cf:af:3d:c5:32:bb:51:46: d9:d1:0f:90:fd:be:9c:f3:78:c7:be:fd:73:8f:15: 1d:16:15:0f:d7:f8:77:94:da:b4:53:26:2d:8e:5a: aa:19:82:0a:17:43:4c:26:31:79:05:5d:63:94:73: 62:9b:09:c3:bf:3a:6a:b4:4c:9a:41:fd:2e:64:34: 81:2f:45:c4:8b:a2:f8:27:d2:c6:74:80:d7:93:34: db:dd:0b:2d:ef:e8:93:8b:a7:2e:0c:39:04:2c:74: 42:e5:9c:c0:00:b6:28:1f:5d:a3:98:37:ab:03:0e: 4a:4d:bd:19:7c:62:bd:59:1a:29:0d:d6:56:1e:02: c6:c8:a3:b8:4b:13:dd:9d:55:c5:04:8b:0d:a8:90: 1c:aa:22:6c:d3:84:e4:11:04:16:ec:eb:fd:75:e1: 08:f0:3d:69:7a:40:57:a2:21:42:36:79:a2:bd:fa: 44:2d:55:5c:fc:3b:8f:a3:04:dc:bd:c2:c4:89:be: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:8E:B6:BD:55:5F:BE:9F:C5:1B:E3:6E:C3:C3:F8:B7:14:83:53 X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:af:d0:96:d9:66:4f:b6:fa:4b:42:51:13:20:a4:38:d5:37: 51:f5:04:52:3a:a4:cc:96:95:68:c4:81:a6:ef:70:85:b6:6e: da:b4:83:20:14:64:c4:53:47:1b:65:48:6b:e5:29:07:cc:50: ca:35:44:20:66:af:46:f6:fd:09:3d:71:a8:f0:07:64:01:95: 51:30:3e:35:ab:9f:9f:e0:a1:e2:b2:2f:3c:6f:7c:f4:48:c6: 08:94:d7:91:0d:fe:dd:02:ee:21:7f:7e:8f:f5:9b:30:f6:6b: 2c:cf:0a:fe:bf:c2:d5:7e:89:4a:1e:6e:c9:33:a1:65:4b:b4: 21:70:75:25:62:01:fc:cb:52:7b:cf:62:f0:21:2d:ba:b9:fc: 0b:71:cb:44:e3:8e:e4:1d:4c:1d:5a:bc:c1:d3:93:3c:99:1a: a4:7c:91:aa:af:83:c9:52:7a:69:96:4b:18:85:25:7d:c8:77: d5:db:49:e7:e3:a0:91:e1:42:25:8b:e5:1f:5b:11:d8:29:ec: 93:f2:c7:de:59:2e:6c:96:f7:00:3c:e8:c2:46:93:32:3b:15: 97:2c:3f:b6:02:59:7f:ff:6b:1f:e6:3f:22:34:3c:8f:eb:04: 34:75:e4:ed:9b:d5:98:78:e7:eb:a0:d6:d3:8a:c7:ed:31:2e: b2:bd:5c:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIMkbLVRXqhrhpb5c6fcgga8l0cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA2MTEwMzQ0NTFaFw0yNTA2MTIwNjQ3NTFaMDMxMTAvBgNV BAMTKDhGMTM4RUI2QkQ1NTVGQkU5RkM1MUJFMzZFQzNDM0Y4QjcxNDgzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3OOw+Si/U/Sf6J0/VkMjB3Cc AyMNJG6orUrwYYRTQTTzjgEs8KTmA4NcIkDSaQg8KyWQoP2sVqo0vTLcGTu3+7nP rz3FMrtRRtnRD5D9vpzzeMe+/XOPFR0WFQ/X+HeU2rRTJi2OWqoZggoXQ0wmMXkF XWOUc2KbCcO/Omq0TJpB/S5kNIEvRcSLovgn0sZ0gNeTNNvdCy3v6JOLpy4MOQQs dELlnMAAtigfXaOYN6sDDkpNvRl8Yr1ZGikN1lYeAsbIo7hLE92dVcUEiw2okByq ImzThOQRBBbs6/114QjwPWl6QFeiIUI2eaK9+kQtVVz8O4+jBNy9wsSJvvCNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjxOOtr1VX76fxRvjbsPD+LcUg1MwHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJa/QltlmT7b6S0JREyCkONU3UfUEUjqkzJaVaMSBpu9whbZu2rSDIBRkxFNH G2VIa+UpB8xQyjVEIGavRvb9CT1xqPAHZAGVUTA+Naufn+Ch4rIvPG989EjGCJTX kQ3+3QLuIX9+j/WbMPZrLM8K/r/C1X6JSh5uyTOhZUu0IXB1JWIB/MtSe89i8CEt urn8C3HLROOO5B1MHVq8wdOTPJkapHyRqq+DyVJ6aZZLGIUlfch31dtJ5+OgkeFC JYvlH1sR2Cnsk/LH3lkubJb3ADzowkaTMjsVlyw/tgJZf/9rH+Y/IjQ8j+sENHXk 7ZvVmHjn66DW04rH7TEusr1cjw== -----END CERTIFICATE-----Generated at Wed Jun 11 10:58:20 2025 by rpki-client