$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft File: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json) Hash identifier: xAu0S65OFl39suyf1A4TLFsTWgPX1c1Uglh3Tvqy+hI= Subject key identifier: DA:2C:AB:5E:A6:34:FD:99:CE:C8:A2:42:A5:C6:8A:B3:CD:A9:31:ED Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 Certificate issuer: /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Certificate serial: 0D1475F83BBCE5E62223467C5C19D1B4D6937B1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft Manifest number: 02FE Signing time: Tue 04 Nov 2025 10:21:37 +0000 Manifest this update: Tue 04 Nov 2025 10:16:37 +0000 Manifest next update: Wed 05 Nov 2025 11:14:37 +0000 Files and hashes: 1: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=) 2: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: TY1FddZo99Bwt/M36gU+B1XJtAo+vce1o6FHK30sM4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:14:75:f8:3b:bc:e5:e6:22:23:46:7c:5c:19:d1:b4:d6:93:7b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62 Validity Not Before: Nov 4 10:16:37 2025 GMT Not After : Nov 5 11:14:37 2025 GMT Subject: CN=DA2CAB5EA634FD99CEC8A242A5C68AB3CDA931ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:47:43:03:77:69:36:14:5e:42:65:c3:32: c4:58:84:93:40:34:c2:3b:d4:36:07:e7:42:06:04: 43:a6:10:34:97:cf:d0:b2:36:44:07:ef:f2:6e:1e: f3:8f:76:84:92:c4:b3:00:09:b1:8f:ea:e3:64:ae: 81:d6:06:bb:5f:a0:28:79:a7:9f:ad:01:4b:57:71: 70:b8:56:52:9d:9c:3d:45:1e:5c:19:24:38:cc:74: 31:12:c9:09:5e:c6:dc:0b:e9:cd:21:35:b0:db:de: 8a:82:74:68:dc:ae:3a:6c:75:8f:96:4d:f3:47:4b: 94:da:38:de:b6:00:9d:79:08:b7:50:3c:86:42:f2: 99:35:1f:b5:33:d9:59:f4:f8:9e:23:28:e6:1e:0f: 3c:8a:64:63:13:bf:ca:4a:19:03:3a:d5:76:aa:d7: bc:b9:37:e0:5e:aa:25:9c:24:9d:dd:ab:38:d9:47: 21:62:39:b6:14:86:02:38:54:96:f5:e2:f0:10:a9: 52:55:a7:ed:0a:4f:29:1c:c9:0d:ce:64:bb:1e:52: e5:91:6e:c0:46:54:b5:23:c9:fb:2a:f3:73:8f:3f: ec:83:f7:ed:1d:f2:53:db:99:e2:af:a6:a2:13:88: e9:6b:c4:61:3f:0f:73:01:60:56:ab:9f:9b:3f:9a: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2C:AB:5E:A6:34:FD:99:CE:C8:A2:42:A5:C6:8A:B3:CD:A9:31:ED X509v3 Authority Key Identifier: keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:46:41:a9:01:34:51:06:c6:0e:db:53:1c:6d:24:d8:13:6c: 1c:67:90:3d:8f:e1:4e:95:e5:5a:72:5d:8d:ac:ce:70:b5:c0: f8:d4:ef:7f:73:78:fd:55:ad:aa:50:9e:e8:d8:19:d2:40:59: 03:2c:42:5d:8a:8b:c8:fa:72:f6:71:06:e5:0b:69:28:b7:fd: 77:d0:b1:52:e4:05:93:9d:7f:01:41:75:7f:f5:9b:8f:5a:6e: 44:91:a6:ce:10:8a:66:9e:91:f1:d5:35:ef:ed:d0:1f:41:c9: 8d:28:94:6a:65:43:54:1b:47:d6:ae:7f:44:d3:fa:e7:23:79: 23:f7:7f:ea:7a:21:f0:5d:11:f5:b0:ac:ad:92:f8:64:aa:11: 57:c9:aa:8e:d1:64:0b:9a:f2:c5:14:df:0b:35:b3:a4:9e:5c: d9:f9:5d:67:15:38:64:67:35:e2:3b:79:c4:28:f7:1e:dd:97: 24:71:31:8d:87:ca:40:f2:d2:02:1c:ce:31:13:19:d4:c9:ba: d8:b0:0e:69:b2:a0:99:94:e6:36:f6:e6:8b:b7:59:67:88:18: 7b:13:21:5b:0e:56:07:e5:b7:53:14:b2:22:c6:88:57:8c:82: 6d:e3:d6:52:52:94:00:45:dd:cc:4c:e3:0d:97:74:91:21:6b: d0:87:6e:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDRR1+Du85eYiI0Z8XBnRtNaTexwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdE MkIwNkQ2MjAeFw0yNTExMDQxMDE2MzdaFw0yNTExMDUxMTE0MzdaMDMxMTAvBgNV BAMTKERBMkNBQjVFQTYzNEZEOTlDRUM4QTI0MkE1QzY4QUIzQ0RBOTMxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeykdDA3dpNhReQmXDMsRYhJNA NMI71DYH50IGBEOmEDSXz9CyNkQH7/JuHvOPdoSSxLMACbGP6uNkroHWBrtfoCh5 p5+tAUtXcXC4VlKdnD1FHlwZJDjMdDESyQlextwL6c0hNbDb3oqCdGjcrjpsdY+W TfNHS5TaON62AJ15CLdQPIZC8pk1H7Uz2Vn0+J4jKOYeDzyKZGMTv8pKGQM61Xaq 17y5N+BeqiWcJJ3dqzjZRyFiObYUhgI4VJb14vAQqVJVp+0KTykcyQ3OZLseUuWR bsBGVLUjyfsq83OPP+yD9+0d8lPbmeKvpqITiOlrxGE/D3MBYFarn5s/mmgLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2iyrXqY0/ZnOyKJCpcaKs82pMe0wHwYDVR0j BBgwFoAUlftPeVSnnD6uuRVctfTyR9KwbWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC S2EvMS85NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkI0Rjc5NTRBNzlDM0VB RUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS85 NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVkZBqQE0UQbGDttTHG0k2BNsHGeQPY/hTpXlWnJdjazOcLXA+NTvf3N4/VWt qlCe6NgZ0kBZAyxCXYqLyPpy9nEG5QtpKLf9d9CxUuQFk51/AUF1f/Wbj1puRJGm zhCKZp6R8dU17+3QH0HJjSiUamVDVBtH1q5/RNP65yN5I/d/6noh8F0R9bCsrZL4 ZKoRV8mqjtFkC5ryxRTfCzWzpJ5c2fldZxU4ZGc14jt5xCj3Ht2XJHExjYfKQPLS AhzOMRMZ1Mm62LAOabKgmZTmNvbmi7dZZ4gYexMhWw5WB+W3UxSyIsaIV4yCbePW UlKUAEXdzEzjDZd0kSFr0Iduxw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:40:38 2025 by rpki-client