$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: XUV1UlSqJZJCHqD5hFfouNsAhXsUMnyZRx+zhvbxXko= Subject key identifier: 00:E1:CF:A7:D6:2F:B8:B7:EC:2E:80:65:F4:EE:AE:5B:76:FC:D4:A7 Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 564C54F72341CBEF0AD884A35B72D1850D7D0548 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 02FF Signing time: Mon 03 Nov 2025 15:18:22 +0000 Manifest this update: Mon 03 Nov 2025 15:13:22 +0000 Manifest next update: Tue 04 Nov 2025 16:58:22 +0000 Files and hashes: 1: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: IYnFtTGgVwE/H8reU2uBqcTvvKryAkbAMX8ysJs4qco=) 2: 3230312e37312e362e302f32342d3234203d3e20323730323832.roa (hash: cgty3y+WXB77fKXgspObQAAIy86k6JD4z/lljwnVAH0=) 3: 323830343a363961343a633030303a3a2f33342d3334203d3e20323730323832.roa (hash: 58YtV/EyutYvuD7ax99x1jtrrKvHc6DLEIj1RSU1WxY=) 4: 3230312e37312e352e302f32342d3234203d3e20323730323832.roa (hash: GLg2A2guXRKI5hgYOXafpggFO7WhdO5GN/yUMIsCxKw=) 5: 3230312e37312e342e302f32342d3234203d3e20323730323832.roa (hash: 7ef6MTIGvzZEmcBuUoSKVpmybb4snnDytulBwSG3gUU=) 6: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4c:54:f7:23:41:cb:ef:0a:d8:84:a3:5b:72:d1:85:0d:7d:05:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Nov 3 15:13:22 2025 GMT Not After : Nov 4 16:58:22 2025 GMT Subject: CN=00E1CFA7D62FB8B7EC2E8065F4EEAE5B76FCD4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:7c:6f:46:4d:9e:70:c3:0b:0a:b9:a0:b1: 4b:f3:67:a6:87:ab:2a:85:d0:da:6d:18:97:a8:95: d6:53:73:96:71:67:20:ce:57:44:40:ae:03:4a:e1: 20:eb:19:18:04:27:b1:aa:63:4a:9e:a3:90:49:5a: 1f:ff:2a:dd:36:8a:32:6d:bc:b3:ec:3b:8d:58:f6: 6e:33:12:60:5a:32:ae:ec:89:c1:c4:2d:a4:4e:fc: 7d:a6:67:03:d3:6d:df:64:be:c5:c0:06:0a:f1:e6: ca:4d:16:56:5d:21:78:5c:51:4a:0f:be:a6:50:97: e6:17:0f:2a:d6:dd:25:f4:db:c8:13:2f:f0:19:24: f7:db:ad:8d:93:c9:64:71:50:cd:49:27:4d:14:0a: 1d:07:3d:c2:e0:00:54:cf:0e:ce:98:04:a9:4d:ca: 63:b5:20:9e:7c:28:cd:0f:01:d8:da:4a:cf:59:81: bf:e5:8d:2d:f2:20:22:55:3a:ae:56:4b:19:7a:f6: 4a:6b:fc:74:de:d9:d4:c7:8a:77:4e:49:8e:f1:97: e8:62:e0:63:aa:b1:15:25:4c:36:a3:03:76:42:73: 1d:14:28:41:54:6a:2f:9e:a6:81:51:1a:2c:6b:60: cf:5c:84:c6:97:f4:20:86:a1:17:b5:fe:36:c6:cc: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:CF:A7:D6:2F:B8:B7:EC:2E:80:65:F4:EE:AE:5B:76:FC:D4:A7 X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ba:f8:da:b3:58:ee:13:7d:1a:a4:0d:8b:d6:e5:ee:4c:3f: 08:58:14:09:2b:d1:49:41:cf:61:4f:83:c2:73:c7:9d:39:05: 9c:e9:9c:3a:8c:67:96:ab:ea:9b:ac:22:e4:d8:63:62:0f:f1: da:ce:30:b5:9e:b0:c3:64:ef:08:08:2d:8d:22:fc:b1:6a:26: ab:77:6e:46:5b:d1:62:a8:02:7a:78:7c:52:e1:18:88:d1:78: 44:f0:82:66:8a:f2:2f:9d:67:13:ae:a2:d6:6c:e4:19:3c:7a: ce:b1:09:5b:fb:cf:31:8c:9e:49:ac:70:ee:60:74:9b:16:3b: 79:12:77:dd:26:72:36:cf:e5:f0:2a:a6:ab:8d:c3:ff:28:a7: 70:59:d8:ec:a8:09:4f:be:57:d1:0e:47:40:b4:9a:4a:f6:65: 02:ac:63:2e:7d:e9:85:46:da:45:22:36:e7:46:eb:e6:6d:56: 56:b6:2b:e5:c4:12:33:40:64:01:f7:67:99:d9:94:cb:b6:d2: ef:6e:ba:0d:d9:5f:67:50:80:1e:7a:78:40:92:a2:16:f4:c9: 79:1b:e4:9f:1a:cf:49:0c:ae:b6:25:73:2a:3d:b1:91:08:e1: 17:ea:da:a9:d0:6a:8c:cd:5e:d9:3c:3f:b7:30:95:a2:70:4d: b3:35:2e:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVkxU9yNBy+8K2ISjW3LRhQ19BUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTExMDMxNTEzMjJaFw0yNTExMDQxNjU4MjJaMDMxMTAvBgNV BAMTKDAwRTFDRkE3RDYyRkI4QjdFQzJFODA2NUY0RUVBRTVCNzZGQ0Q0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pXxvRk2ecMMLCrmgsUvzZ6aH qyqF0NptGJeoldZTc5ZxZyDOV0RArgNK4SDrGRgEJ7GqY0qeo5BJWh//Kt02ijJt vLPsO41Y9m4zEmBaMq7sicHELaRO/H2mZwPTbd9kvsXABgrx5spNFlZdIXhcUUoP vqZQl+YXDyrW3SX028gTL/AZJPfbrY2TyWRxUM1JJ00UCh0HPcLgAFTPDs6YBKlN ymO1IJ58KM0PAdjaSs9Zgb/ljS3yICJVOq5WSxl69kpr/HTe2dTHindOSY7xl+hi 4GOqsRUlTDajA3ZCcx0UKEFUai+epoFRGixrYM9chMaX9CCGoRe1/jbGzF0LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAOHPp9YvuLfsLoBl9O6uW3b81KcwHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAabr42rNY7hN9GqQNi9bl7kw/CFgUCSvRSUHPYU+DwnPHnTkFnOmcOoxnlqvq m6wi5NhjYg/x2s4wtZ6ww2TvCAgtjSL8sWomq3duRlvRYqgCenh8UuEYiNF4RPCC ZoryL51nE66i1mzkGTx6zrEJW/vPMYyeSaxw7mB0mxY7eRJ33SZyNs/l8Cqmq43D /yincFnY7KgJT75X0Q5HQLSaSvZlAqxjLn3phUbaRSI250br5m1WVrYr5cQSM0Bk AfdnmdmUy7bS7266DdlfZ1CAHnp4QJKiFvTJeRvknxrPSQyutiVzKj2xkQjhF+ra qdBqjM1e2Tw/tzCVonBNszUuPg== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:48 2025 by rpki-client