$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: xmJH1yHLdLXhCklwTOW3tckI864qEuBWDR43xf1NJdE= Subject key identifier: B9:80:74:62:86:53:B4:0F:92:A1:6E:21:B3:51:F2:F8:BA:04:EC:7C Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 41A3DE0560A00071950FB4E24099F5A045289C54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 023E Signing time: Mon 09 Jun 2025 16:04:25 +0000 Manifest this update: Mon 09 Jun 2025 15:59:25 +0000 Manifest next update: Tue 10 Jun 2025 17:57:25 +0000 Files and hashes: 1: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: xmvalUTLPNoK1ogwMln5MQmCg4ZYA9ZV+LxsoQbMC4A=) 2: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 17:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a3:de:05:60:a0:00:71:95:0f:b4:e2:40:99:f5:a0:45:28:9c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Jun 9 15:59:25 2025 GMT Not After : Jun 10 17:57:25 2025 GMT Subject: CN=B98074628653B40F92A16E21B351F2F8BA04EC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:17:ae:50:cf:26:1a:34:41:7d:72:c3:07: ad:b5:eb:5a:16:e3:76:cc:47:3b:8c:45:bd:4d:d1: 70:72:ea:3e:5f:43:de:49:f5:d1:bc:bb:2a:e8:92: 0e:b8:f6:6d:5a:c5:b2:be:8a:7d:d9:b5:27:0d:f3: f3:91:d3:05:c2:9c:f7:47:ed:f8:5b:74:22:96:39: f2:d2:c4:21:6c:7a:e2:78:43:92:aa:98:f6:37:3e: 51:1b:da:19:46:29:d5:38:b4:21:4c:1a:7d:b5:c2: 7b:cb:68:63:1a:d6:00:67:9f:0c:de:5f:73:1d:85: 7a:46:af:6d:34:a1:ff:37:73:e3:df:00:09:26:81: 51:2d:1d:02:d6:3d:e4:6f:a1:53:87:91:42:5f:e2: 01:cc:fc:f0:1e:76:df:86:bc:a5:a1:bc:f6:48:6b: 66:91:b6:68:64:d7:50:25:c9:1d:24:59:b4:17:63: ab:57:43:be:0d:87:55:02:5b:48:ac:76:5d:c1:84: fc:ea:ef:62:71:15:54:35:91:97:3f:18:9e:d6:43: f3:c1:f0:ee:b9:7c:e6:14:bc:ce:b9:e2:9e:51:c0: 69:5a:cf:2a:4a:d1:89:bb:9c:7c:35:2b:8b:ee:9f: 69:4c:74:37:92:a0:64:42:8a:3b:fe:a0:40:1f:6f: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:74:62:86:53:B4:0F:92:A1:6E:21:B3:51:F2:F8:BA:04:EC:7C X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b8:35:5e:07:b4:42:16:dd:2d:28:57:57:c5:42:c8:8c:bc: 6c:53:7b:ba:36:be:42:26:01:e1:9f:a1:41:7c:01:9b:a7:d9: 66:f2:2a:c6:a3:ab:df:a5:c0:75:0b:a0:71:cb:2b:6e:d3:64: 39:09:e0:d1:7b:2d:db:c1:be:27:31:56:bb:85:ff:45:28:ee: df:bb:f9:89:3a:10:77:49:47:07:60:c6:3c:8c:b1:57:99:b8: 3c:3a:1b:29:12:f1:da:1a:1a:fc:e2:80:f6:cf:25:91:ea:4e: 95:25:f6:2a:82:55:eb:f4:ae:fb:c6:b9:58:cd:d0:15:f3:5d: e3:a3:64:db:6a:47:22:e9:1d:c3:50:6a:65:a8:c2:b7:b4:21: e6:b1:37:64:77:ed:14:d0:82:6b:43:57:99:5e:09:f4:db:74: f4:d8:d3:6c:9b:25:d3:05:7f:08:60:f2:8f:75:4d:51:ce:25: 5a:79:14:32:fe:c7:43:66:31:fd:a0:d6:03:8b:b5:6f:80:10: 47:d4:03:49:24:7d:80:4e:e4:88:08:b5:ac:59:fb:37:f7:c6: 11:2d:03:30:25:5d:7f:13:66:1c:37:ef:c6:33:69:62:82:f8: 53:c0:11:21:ad:87:ad:51:86:35:98:ae:96:25:0f:d5:76:cb: cc:f6:c0:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQaPeBWCgAHGVD7TiQJn1oEUonFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA2MDkxNTU5MjVaFw0yNTA2MTAxNzU3MjVaMDMxMTAvBgNV BAMTKEI5ODA3NDYyODY1M0I0MEY5MkExNkUyMUIzNTFGMkY4QkEwNEVDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgxeuUM8mGjRBfXLDB62161oW 43bMRzuMRb1N0XBy6j5fQ95J9dG8uyrokg649m1axbK+in3ZtScN8/OR0wXCnPdH 7fhbdCKWOfLSxCFseuJ4Q5KqmPY3PlEb2hlGKdU4tCFMGn21wnvLaGMa1gBnnwze X3MdhXpGr200of83c+PfAAkmgVEtHQLWPeRvoVOHkUJf4gHM/PAedt+GvKWhvPZI a2aRtmhk11AlyR0kWbQXY6tXQ74Nh1UCW0isdl3BhPzq72JxFVQ1kZc/GJ7WQ/PB 8O65fOYUvM654p5RwGlazypK0Ym7nHw1K4vun2lMdDeSoGRCijv+oEAfb+oxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuYB0YoZTtA+SoW4hs1Hy+LoE7HwwHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArLg1Xge0QhbdLShXV8VCyIy8bFN7uja+QiYB4Z+hQXwBm6fZZvIqxqOr36XA dQugccsrbtNkOQng0Xst28G+JzFWu4X/RSju37v5iToQd0lHB2DGPIyxV5m4PDob KRLx2hoa/OKA9s8lkepOlSX2KoJV6/Su+8a5WM3QFfNd46Nk22pHIukdw1BqZajC t7Qh5rE3ZHftFNCCa0NXmV4J9Nt09NjTbJsl0wV/CGDyj3VNUc4lWnkUMv7HQ2Yx /aDWA4u1b4AQR9QDSSR9gE7kiAi1rFn7N/fGES0DMCVdfxNmHDfvxjNpYoL4U8AR Ia2HrVGGNZiuliUP1XbLzPbACQ== -----END CERTIFICATE-----Generated at Tue Jun 10 11:37:06 2025 by rpki-client