$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: 4D7gqypvPN10Nno8v7NsICs4zW1b9nnmMnOFGoBiljk= Subject key identifier: 35:F3:3C:8F:F9:EE:12:65:9C:2F:E9:CE:BB:0B:9F:CC:9E:29:14:25 Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 6B81CC13AFD00A4E109F1D21AE859AA571ECEC96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 02C7 Signing time: Fri 19 Sep 2025 01:30:42 +0000 Manifest this update: Fri 19 Sep 2025 01:25:42 +0000 Manifest next update: Sat 20 Sep 2025 04:54:42 +0000 Files and hashes: 1: 323830343a363961343a633030303a3a2f33342d3334203d3e20323730323832.roa (hash: 58YtV/EyutYvuD7ax99x1jtrrKvHc6DLEIj1RSU1WxY=) 2: 3230312e37312e352e302f32342d3234203d3e20323730323832.roa (hash: GLg2A2guXRKI5hgYOXafpggFO7WhdO5GN/yUMIsCxKw=) 3: 3230312e37312e362e302f32342d3234203d3e20323730323832.roa (hash: cgty3y+WXB77fKXgspObQAAIy86k6JD4z/lljwnVAH0=) 4: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: DDg51RFiwdTtHJxJxqtJoR6Lk/yv+dqgJge+1S5Xj3g=) 5: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) 6: 3230312e37312e342e302f32342d3234203d3e20323730323832.roa (hash: 7ef6MTIGvzZEmcBuUoSKVpmybb4snnDytulBwSG3gUU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 04:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:81:cc:13:af:d0:0a:4e:10:9f:1d:21:ae:85:9a:a5:71:ec:ec:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Sep 19 01:25:42 2025 GMT Not After : Sep 20 04:54:42 2025 GMT Subject: CN=35F33C8FF9EE12659C2FE9CEBB0B9FCC9E291425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:71:ea:5e:ee:b5:bd:dd:f8:28:5d:40:4a: 49:3c:a0:00:2e:e8:83:15:ad:7b:9c:78:7a:6f:63: 49:2a:b2:24:6a:e5:64:7a:2f:67:af:bb:45:d2:13: b4:dd:ae:7b:90:89:dd:ab:5c:d3:c2:fc:73:dd:f0: 9a:30:62:7a:c1:32:a9:e2:c2:bd:76:4f:a5:a4:1b: 7f:01:50:4e:e2:c3:4b:97:cd:fc:a1:46:c7:22:83: 5f:bd:20:98:9c:dd:60:a0:e4:5d:a1:0f:e5:d0:20: 5c:04:14:71:73:61:b1:8c:6b:d3:45:86:c7:b2:f2: 54:83:f3:03:c1:c4:16:fc:49:81:86:da:dd:f8:c7: 6a:6e:c9:11:2b:30:6a:ee:b1:9e:43:8d:fe:ff:21: 00:97:ce:2b:8c:8c:08:5a:2f:14:27:92:3f:a3:4a: 53:73:e0:1d:f0:e5:5a:76:d6:83:cc:8b:6b:d0:6d: bf:cc:e0:99:2e:43:98:95:c6:1e:f4:33:90:59:c0: e0:ed:a4:89:46:40:da:47:b6:7f:05:eb:2c:f4:81: 05:04:e6:d5:c6:e1:dc:1d:a1:fd:83:30:b1:d2:c2: 90:41:a9:f5:c5:47:c4:10:1b:e4:c5:1d:7e:95:71: 0b:a5:76:fe:37:20:06:58:b5:f2:bd:31:09:01:c4: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F3:3C:8F:F9:EE:12:65:9C:2F:E9:CE:BB:0B:9F:CC:9E:29:14:25 X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:b0:22:01:5a:70:52:31:b1:2f:6a:d2:ce:b7:ca:7f:0b: 68:8d:ba:55:a6:82:fa:31:bf:ac:1c:c1:d3:08:88:72:ce:64: fb:31:e6:f4:30:39:8e:de:44:c7:c2:52:57:76:2b:d7:53:82: 87:f8:ec:79:ee:94:5d:fa:34:ff:ce:cf:bc:18:fc:d7:37:83: eb:96:59:9b:a4:cc:82:1c:05:c1:b9:88:0c:0a:a8:c9:4a:5f: 2b:8f:2c:4a:1c:48:51:71:07:d2:70:b3:62:c1:77:01:b4:83: 15:62:62:19:24:ab:48:54:c9:2c:73:84:06:22:ef:62:88:3d: e9:ad:e8:d3:b4:e1:e3:ee:1c:7c:9a:af:58:c7:4e:da:e0:d6: 59:72:14:f9:74:da:9f:b6:be:87:87:a7:76:54:3d:40:c5:74: 7f:d8:e6:b2:68:42:88:c9:e9:46:8d:48:a1:07:8a:54:39:bd: 73:3c:2d:36:33:fc:1a:3e:e3:20:64:0e:16:20:29:f6:e4:e2: f3:59:89:1e:ca:7f:25:6e:c9:06:81:ff:58:40:54:55:25:6d: 27:d7:c4:6b:07:19:43:f3:3a:23:18:4a:16:0d:5d:2d:3e:e6: 13:a4:25:ee:73:cd:e6:fe:4d:ac:f1:6f:1a:86:2f:b9:58:ee: a6:71:66:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa4HME6/QCk4Qnx0hroWapXHs7JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA5MTkwMTI1NDJaFw0yNTA5MjAwNDU0NDJaMDMxMTAvBgNV BAMTKDM1RjMzQzhGRjlFRTEyNjU5QzJGRTlDRUJCMEI5RkNDOUUyOTE0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqXHqXu61vd34KF1ASkk8oAAu 6IMVrXuceHpvY0kqsiRq5WR6L2evu0XSE7TdrnuQid2rXNPC/HPd8JowYnrBMqni wr12T6WkG38BUE7iw0uXzfyhRscig1+9IJic3WCg5F2hD+XQIFwEFHFzYbGMa9NF hsey8lSD8wPBxBb8SYGG2t34x2puyRErMGrusZ5Djf7/IQCXziuMjAhaLxQnkj+j SlNz4B3w5Vp21oPMi2vQbb/M4JkuQ5iVxh70M5BZwODtpIlGQNpHtn8F6yz0gQUE 5tXG4dwdof2DMLHSwpBBqfXFR8QQG+TFHX6VcQuldv43IAZYtfK9MQkBxGzfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNfM8j/nuEmWcL+nOuwufzJ4pFCUwHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQM6wIgFacFIxsS9q0s63yn8LaI26VaaC+jG/rBzB0wiIcs5k+zHm9DA5jt5E x8JSV3Yr11OCh/jsee6UXfo0/87PvBj81zeD65ZZm6TMghwFwbmIDAqoyUpfK48s ShxIUXEH0nCzYsF3AbSDFWJiGSSrSFTJLHOEBiLvYog96a3o07Th4+4cfJqvWMdO 2uDWWXIU+XTan7a+h4endlQ9QMV0f9jmsmhCiMnpRo1IoQeKVDm9czwtNjP8Gj7j IGQOFiAp9uTi81mJHsp/JW7JBoH/WEBUVSVtJ9fEawcZQ/M6IxhKFg1dLT7mE6Ql 7nPN5v5NrPFvGoYvuVjupnFmrw== -----END CERTIFICATE-----Generated at Fri Sep 19 14:05:37 2025 by rpki-client