$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: w9SpXDisDqsiag4s4rTzAem9SnUAYPHGfR/nr9StaZQ= Subject key identifier: 01:F0:2B:96:7C:41:C7:04:29:1D:A0:82:2C:7D:C1:FD:10:0B:A6:A9 Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 04BBE03FDD698C11E0D7DA3635493565220B7DA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 0306 Signing time: Wed 05 Nov 2025 02:21:23 +0000 Manifest this update: Wed 05 Nov 2025 02:16:23 +0000 Manifest next update: Thu 06 Nov 2025 03:32:23 +0000 Files and hashes: 1: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: mL3CTqMNymZ7w50RIYnmjGwaT66gE4A2x4QG854BSbM=) 2: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=) 3: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bb:e0:3f:dd:69:8c:11:e0:d7:da:36:35:49:35:65:22:0b:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Nov 5 02:16:23 2025 GMT Not After : Nov 6 03:32:23 2025 GMT Subject: CN=01F02B967C41C704291DA0822C7DC1FD100BA6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:4b:30:15:4a:32:a5:fe:03:be:7e:2f:f2: 3f:97:22:0a:a4:24:f3:9b:ad:5f:6f:66:b5:d8:a0: 79:c8:8b:4b:e1:e0:0a:8f:4a:c4:db:2d:37:a4:94: d7:52:de:a3:5f:e0:5c:5b:de:23:e5:bb:78:e4:7c: f2:a1:a9:41:75:60:e3:c0:84:23:93:88:f1:74:3f: 27:6d:c5:9d:c9:b9:22:14:93:38:13:08:c3:d1:69: 04:3f:18:21:6e:fa:13:a6:61:36:d8:20:a2:26:e6: 62:16:f0:e4:a4:24:3d:fb:4f:6b:c4:2f:32:a8:59: e6:15:e3:ff:a9:4e:42:99:ef:7c:cf:a9:4a:46:a5: 1d:6b:9b:38:7b:8b:6d:25:a4:d0:43:1a:40:be:0e: 51:24:82:16:f4:21:d0:38:4f:26:4d:a4:85:fb:fe: 3b:f2:71:d8:51:81:87:ec:31:07:43:2e:15:62:ef: 6c:fb:e6:78:3f:66:39:93:b9:4d:45:a4:f4:8d:0f: 9b:e4:c0:79:9f:fd:30:c3:43:52:1b:26:28:62:98: e4:27:4b:6b:b1:36:fa:fe:cf:4c:d7:63:be:0c:c2: 55:c7:42:e8:47:f6:8d:a2:a3:5f:81:f4:53:43:0c: 5c:01:21:ad:63:e3:36:2b:8c:ee:26:6f:af:b1:d7: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F0:2B:96:7C:41:C7:04:29:1D:A0:82:2C:7D:C1:FD:10:0B:A6:A9 X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:37:5a:0f:54:1f:a8:b0:f8:82:5f:b4:9b:01:a6:57:3e:76: 2a:34:ed:ed:97:e6:ab:46:9c:77:5a:94:c5:bb:6d:34:8c:d3: 80:ee:72:79:56:47:3d:f7:c6:c3:1f:68:98:ed:63:71:cd:38: a8:b2:80:53:4e:dd:94:44:87:3f:f0:5a:eb:72:3b:ea:7a:f3: c4:26:de:3c:e5:28:83:6b:19:93:9e:27:07:8b:52:e2:7d:a3: f5:84:a4:9e:b0:83:15:80:47:7a:d3:34:5d:63:db:96:dc:cb: 6f:30:c6:d9:79:ee:e7:51:fa:8e:3e:0a:17:c2:f8:90:9a:2f: 47:90:52:95:5a:6a:2b:7d:60:89:31:21:2d:34:bd:93:00:1b: 4f:dc:28:e3:f3:fd:c1:d3:14:d2:ea:cd:2a:ab:7d:02:2f:0d: fe:8a:fa:7d:25:bf:7d:29:9a:bb:7a:3b:d8:e1:69:c2:1d:5c: be:19:29:e7:ae:38:88:db:ee:60:b8:5e:6c:a3:82:82:e9:8f: a1:80:a3:cb:79:6b:f4:3d:7e:92:f2:f7:86:3c:e5:2d:ab:54: ff:4d:9e:dc:3c:ae:1d:4b:a6:8a:53:01:6a:de:39:91:54:0e: c5:44:bb:af:d1:a2:70:33:40:b3:bc:6c:07:13:32:b1:cd:6d: 3e:81:dc:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBLvgP91pjBHg19o2NUk1ZSILfaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTExMDUwMjE2MjNaFw0yNTExMDYwMzMyMjNaMDMxMTAvBgNV BAMTKDAxRjAyQjk2N0M0MUM3MDQyOTFEQTA4MjJDN0RDMUZEMTAwQkE2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vEswFUoypf4Dvn4v8j+XIgqk JPObrV9vZrXYoHnIi0vh4AqPSsTbLTeklNdS3qNf4Fxb3iPlu3jkfPKhqUF1YOPA hCOTiPF0PydtxZ3JuSIUkzgTCMPRaQQ/GCFu+hOmYTbYIKIm5mIW8OSkJD37T2vE LzKoWeYV4/+pTkKZ73zPqUpGpR1rmzh7i20lpNBDGkC+DlEkghb0IdA4TyZNpIX7 /jvycdhRgYfsMQdDLhVi72z75ng/ZjmTuU1FpPSND5vkwHmf/TDDQ1IbJihimOQn S2uxNvr+z0zXY74MwlXHQuhH9o2io1+B9FNDDFwBIa1j4zYrjO4mb6+x19rhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAfArlnxBxwQpHaCCLH3B/RALpqkwHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTdaD1QfqLD4gl+0mwGmVz52KjTt7Zfmq0acd1qUxbttNIzTgO5yeVZHPffG wx9omO1jcc04qLKAU07dlESHP/Ba63I76nrzxCbePOUog2sZk54nB4tS4n2j9YSk nrCDFYBHetM0XWPbltzLbzDG2Xnu51H6jj4KF8L4kJovR5BSlVpqK31giTEhLTS9 kwAbT9wo4/P9wdMU0urNKqt9Ai8N/or6fSW/fSmau3o72OFpwh1cvhkp5644iNvu YLhebKOCgumPoYCjy3lr9D1+kvL3hjzlLatU/02e3DyuHUumilMBat45kVQOxUS7 r9GicDNAs7xsBxMysc1tPoHcEA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:02 2025 by rpki-client