$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: a5qzmaiFy6BYcuvgczdLjBYZcXeGhwrlt75iXX/Poy4= Subject key identifier: 69:7B:D1:2E:D8:C8:94:CB:B9:A5:DE:2F:08:2E:DA:2C:05:B5:62:1D Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 530E9FE8AE4F1D26A94D4F58D177DB2114558B58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: D8 Signing time: Fri 19 Sep 2025 00:12:47 +0000 Manifest this update: Fri 19 Sep 2025 00:07:47 +0000 Manifest next update: Sat 20 Sep 2025 01:08:47 +0000 Files and hashes: 1: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: b+t/i3gFZHZ9FZFBr7bzM02o8hnxGbW9VWibPBhEAQU=) 2: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) 3: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 4: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 01:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0e:9f:e8:ae:4f:1d:26:a9:4d:4f:58:d1:77:db:21:14:55:8b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Sep 19 00:07:47 2025 GMT Not After : Sep 20 01:08:47 2025 GMT Subject: CN=697BD12ED8C894CBB9A5DE2F082EDA2C05B5621D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a6:b6:09:07:ca:67:b3:6a:16:50:18:e9:b7: 4f:b0:d7:96:f7:22:da:57:9d:3a:35:f6:17:48:1c: 27:d6:47:97:b7:7a:82:11:a3:fb:59:18:88:5d:88: 83:d2:0b:1f:99:31:77:eb:ef:78:78:b1:7b:db:b3: f1:03:3e:ff:19:97:fc:3d:b3:93:ae:9e:62:0a:66: 44:e8:62:1f:21:0e:b2:a4:8a:8f:c4:9c:55:c3:84: 0e:ce:3b:3f:21:43:5b:a8:e7:e5:b9:2b:2a:a4:98: 1c:e9:8f:1f:fd:17:a6:dc:16:8d:24:d9:8b:3c:d7: bf:c1:9c:9b:c8:8b:c0:cf:47:ee:52:14:d4:2e:79: 42:32:68:df:16:19:06:06:f5:a4:23:9a:a0:a9:65: af:ea:12:01:91:5a:76:4c:99:49:15:53:13:7f:2d: 57:ed:9a:a5:8c:98:8f:34:0e:63:42:e7:67:64:7c: 22:0d:91:2d:81:97:5b:9f:ae:04:31:40:05:de:38: 0a:52:b0:a7:d6:5d:fd:47:db:89:74:76:5e:71:87: a5:4e:b0:60:fa:4c:97:00:86:b4:3e:ba:06:b5:c2: 53:48:71:c2:ae:6d:ec:19:6a:9a:1e:f0:36:fe:03: 4e:cd:a8:82:fb:14:cf:97:3f:26:30:b3:d6:2f:26: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7B:D1:2E:D8:C8:94:CB:B9:A5:DE:2F:08:2E:DA:2C:05:B5:62:1D X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:08:bd:99:01:aa:97:1a:ea:9e:2a:2b:26:f7:f2:f9:84:7b: 4f:0c:fb:0b:48:62:37:d5:78:8b:66:65:66:89:89:b0:98:d2: 9e:cf:27:74:60:df:8a:32:8d:af:7a:e6:77:72:af:2d:17:e3: 92:c1:95:d9:f6:63:cc:16:d6:7c:c6:8e:39:ff:72:68:31:42: 84:64:1c:d5:46:0c:a5:5e:1f:f0:03:72:2d:eb:38:07:e4:28: 46:a6:c6:aa:54:fb:08:a3:b3:34:8a:a2:3f:f6:19:78:e7:e7: c8:ed:eb:e6:a8:5b:9f:1b:5c:9a:63:ab:bb:45:e8:ab:3c:fe: 9b:8c:e2:42:24:e5:c4:1a:ce:07:fb:00:aa:51:6b:05:3c:d4: 59:0a:b5:b9:d9:0f:8e:df:a2:9c:58:5f:83:8a:1f:b7:17:3d: 8b:76:af:dc:5c:d9:19:bc:c6:fb:18:00:bc:56:d2:92:39:c5: ba:d4:46:f7:d6:8a:d6:97:37:f7:a2:b6:c9:50:4d:4d:ea:38: 04:5d:15:5b:dc:8a:c1:ca:73:ad:3e:ae:53:82:0d:ad:64:ef: 15:4c:08:74:06:32:5e:c7:91:14:1c:c3:fa:f5:1b:22:fd:f2: bd:5f:5f:17:68:95:ca:46:b1:2c:1b:ea:64:6d:cb:53:50:79: 66:21:5a:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUw6f6K5PHSapTU9Y0XfbIRRVi1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTA5MTkwMDA3NDdaFw0yNTA5MjAwMTA4NDdaMDMxMTAvBgNV BAMTKDY5N0JEMTJFRDhDODk0Q0JCOUE1REUyRjA4MkVEQTJDMDVCNTYyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7prYJB8pns2oWUBjpt0+w15b3 ItpXnTo19hdIHCfWR5e3eoIRo/tZGIhdiIPSCx+ZMXfr73h4sXvbs/EDPv8Zl/w9 s5OunmIKZkToYh8hDrKkio/EnFXDhA7OOz8hQ1uo5+W5KyqkmBzpjx/9F6bcFo0k 2Ys817/BnJvIi8DPR+5SFNQueUIyaN8WGQYG9aQjmqCpZa/qEgGRWnZMmUkVUxN/ LVftmqWMmI80DmNC52dkfCINkS2Bl1ufrgQxQAXeOApSsKfWXf1H24l0dl5xh6VO sGD6TJcAhrQ+uga1wlNIccKubewZapoe8Db+A07NqIL7FM+XPyYws9YvJrdTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaXvRLtjIlMu5pd4vCC7aLAW1Yh0wHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQi9mQGqlxrqniorJvfy+YR7Twz7C0hiN9V4i2ZlZomJsJjSns8ndGDfijKN r3rmd3KvLRfjksGV2fZjzBbWfMaOOf9yaDFChGQc1UYMpV4f8ANyLes4B+QoRqbG qlT7CKOzNIqiP/YZeOfnyO3r5qhbnxtcmmOru0Xoqzz+m4ziQiTlxBrOB/sAqlFr BTzUWQq1udkPjt+inFhfg4oftxc9i3av3FzZGbzG+xgAvFbSkjnFutRG99aK1pc3 96K2yVBNTeo4BF0VW9yKwcpzrT6uU4INrWTvFUwIdAYyXseRFBzD+vUbIv3yvV9f F2iVykaxLBvqZG3LU1B5ZiFa4w== -----END CERTIFICATE-----Generated at Fri Sep 19 04:10:18 2025 by rpki-client