$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: dhY3kT6kZ10aLsXxa8G7kqphKG//3FtiBhHZTMtSj4Y= Subject key identifier: F0:54:02:DB:65:22:ED:C3:C5:A7:7F:3C:BF:89:3D:FE:98:CF:A8:9D Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 0A8F837743D7F18E04DA7A53ADC6444A41615455 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 023F Signing time: Tue 10 Jun 2025 09:59:25 +0000 Manifest this update: Tue 10 Jun 2025 09:54:25 +0000 Manifest next update: Wed 11 Jun 2025 11:48:25 +0000 Files and hashes: 1: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: Zopoz6Go5boP0xsQBOx+Uk7CXuTma7A+3MnEhOUoGeg=) 2: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 11:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8f:83:77:43:d7:f1:8e:04:da:7a:53:ad:c6:44:4a:41:61:54:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Jun 10 09:54:25 2025 GMT Not After : Jun 11 11:48:25 2025 GMT Subject: CN=F05402DB6522EDC3C5A77F3CBF893DFE98CFA89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:b0:ac:4f:1c:31:c4:e7:39:cb:db:51:df: a1:cd:51:f1:10:9c:88:13:77:23:62:ac:44:a0:02: 37:70:78:dc:2f:02:93:e8:a7:68:3d:e6:34:4d:b4: 8a:b7:0b:32:e9:18:59:64:70:0d:63:53:99:24:1a: ca:7b:1d:1b:3e:ae:68:e7:ce:06:1a:27:c5:16:f2: 2f:6e:ae:a0:87:fd:bc:31:ac:b8:9b:12:f4:c3:91: cf:35:3b:51:1a:05:c3:4b:e2:ae:3e:f2:d4:30:1e: 10:2a:5c:35:e8:dc:40:18:65:67:53:80:f1:fd:31: c0:b5:6f:f8:f4:22:38:c1:5f:4e:bc:af:39:dd:c2: a2:1b:a0:d9:89:e7:77:9c:2b:60:12:8d:db:a0:bd: c6:e2:a6:a6:1d:b7:f1:8b:32:2d:dd:32:83:71:f9: 50:05:22:a8:7b:c7:15:78:cb:6c:8a:66:42:0c:86: 5b:c3:d8:b1:08:21:d9:bf:c2:bd:f8:65:24:62:9d: e4:4b:99:6d:9a:e2:3e:1a:b7:ca:46:81:44:03:91: 8d:5b:f7:d0:07:4c:54:76:2d:28:c8:56:09:4f:82: d8:0d:ab:86:78:cc:27:a5:25:39:38:9a:40:78:c9: 90:3f:d7:33:28:b4:73:d5:2d:c8:67:d5:80:44:d1: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:02:DB:65:22:ED:C3:C5:A7:7F:3C:BF:89:3D:FE:98:CF:A8:9D X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:6d:dd:bd:93:92:76:21:f2:24:34:02:2c:38:1d:6d:6e: 41:4e:5d:7e:22:7a:7c:2c:c4:7d:a0:7d:4a:da:cc:0c:b0:56: dc:ae:05:de:ff:5c:d1:5f:3f:f8:df:4e:a8:92:8c:27:35:32: a8:31:e4:7b:74:7c:9b:9e:cc:d2:ad:a4:00:5e:cb:bc:e9:3c: a1:2c:cd:1c:1f:44:ab:1d:e7:8b:cb:00:a4:a0:78:f0:55:8d: 55:3b:56:d8:bd:5d:dc:a0:99:f9:44:ca:1c:c2:21:1e:94:ed: 8e:11:0e:f7:bd:cb:5d:f0:31:61:80:10:90:b2:b8:71:35:87: f2:ff:79:07:4b:6d:1b:0a:c8:ff:21:98:97:70:f7:0c:c8:ca: dd:93:94:3e:9a:41:63:ef:e0:42:f4:49:b1:a8:0c:a6:64:73: d8:5b:ff:b7:5a:93:ad:34:ce:e5:27:4b:6e:f3:3f:df:54:de: ef:53:14:76:c3:66:87:c5:26:18:13:d2:d7:76:d4:b5:14:e0: 86:ce:42:52:24:c1:8e:1d:b2:bc:d4:90:a2:3c:a3:25:ac:bd: 14:76:07:77:29:7c:ee:d7:5f:ac:1f:06:48:c6:ad:31:b2:36: d9:cb:3a:b1:49:9a:91:f0:b4:fc:f2:73:a4:17:1c:ce:36:21: ad:d8:37:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCo+Dd0PX8Y4E2npTrcZESkFhVFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA2MTAwOTU0MjVaFw0yNTA2MTExMTQ4MjVaMDMxMTAvBgNV BAMTKEYwNTQwMkRCNjUyMkVEQzNDNUE3N0YzQ0JGODkzREZFOThDRkE4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCak7CsTxwxxOc5y9tR36HNUfEQ nIgTdyNirESgAjdweNwvApPop2g95jRNtIq3CzLpGFlkcA1jU5kkGsp7HRs+rmjn zgYaJ8UW8i9urqCH/bwxrLibEvTDkc81O1EaBcNL4q4+8tQwHhAqXDXo3EAYZWdT gPH9McC1b/j0IjjBX068rzndwqIboNmJ53ecK2ASjdugvcbipqYdt/GLMi3dMoNx +VAFIqh7xxV4y2yKZkIMhlvD2LEIIdm/wr34ZSRineRLmW2a4j4at8pGgUQDkY1b 99AHTFR2LSjIVglPgtgNq4Z4zCelJTk4mkB4yZA/1zMotHPVLchn1YBE0YNNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8FQC22Ui7cPFp388v4k9/pjPqJ0wHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHNt3b2TknYh8iQ0Aiw4HW1uQU5dfiJ6fCzEfaB9StrMDLBW3K4F3v9c0V8/ +N9OqJKMJzUyqDHke3R8m57M0q2kAF7LvOk8oSzNHB9Eqx3ni8sApKB48FWNVTtW 2L1d3KCZ+UTKHMIhHpTtjhEO973LXfAxYYAQkLK4cTWH8v95B0ttGwrI/yGYl3D3 DMjK3ZOUPppBY+/gQvRJsagMpmRz2Fv/t1qTrTTO5SdLbvM/31Te71MUdsNmh8Um GBPS13bUtRTghs5CUiTBjh2yvNSQojyjJay9FHYHdyl87tdfrB8GSMatMbI22cs6 sUmakfC0/PJzpBcczjYhrdg3Gw== -----END CERTIFICATE-----Generated at Wed Jun 11 04:32:45 2025 by rpki-client