$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft File: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json) Hash identifier: iQEoFX8MsJc/o+mAIQlBo/2x3XFQE2S+756XTijtMpk= Subject key identifier: 38:1D:7B:4A:F4:28:E7:C2:F2:C2:8C:F7:88:51:F0:11:28:D2:2F:F3 Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 Certificate issuer: /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Certificate serial: 12F9C013703E7F8103F4173872EEDE57477B2047 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft Manifest number: DB Signing time: Sat 09 Aug 2025 07:35:57 +0000 Manifest this update: Sat 09 Aug 2025 07:30:57 +0000 Manifest next update: Sun 10 Aug 2025 07:50:57 +0000 Files and hashes: 1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=) 2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: GWX5tjsuwPZBc28wzXfFnvMrGoYASKRGXzRneevS0c0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 07:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f9:c0:13:70:3e:7f:81:03:f4:17:38:72:ee:de:57:47:7b:20:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Validity Not Before: Aug 9 07:30:57 2025 GMT Not After : Aug 10 07:50:57 2025 GMT Subject: CN=381D7B4AF428E7C2F2C28CF78851F01128D22FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:ef:01:0a:34:c8:7e:33:46:32:95:ad:1f: b9:8d:0a:e6:5e:6e:b3:1f:cf:91:c2:3c:4c:3c:2f: ef:a7:d1:5b:c7:30:1b:2a:be:f4:cb:1e:c6:cf:6d: 41:1d:8d:d5:59:5c:15:a2:5c:f4:cf:d4:2b:8d:ad: 36:89:34:f8:75:14:f8:dc:5d:0b:7f:9f:b1:5d:06: fc:d8:c5:0e:e9:e6:5c:23:a2:52:79:37:9d:bf:ac: 33:23:ca:57:eb:21:13:0f:35:85:11:93:86:e9:95: b5:2a:54:e3:51:a5:a6:9e:fb:4a:93:73:0d:1b:94: 41:e2:e3:4f:4e:2a:b2:38:ef:b5:3a:60:29:8a:b6: 0f:36:40:0e:5d:5c:29:b8:7f:a7:23:84:5e:27:2b: d2:fe:bd:8d:b0:c4:34:ef:82:c9:cf:44:86:0d:d5: a6:d4:1c:fc:b8:af:09:27:24:a3:33:01:a6:52:00: 85:c8:0a:2a:dd:27:ef:af:7a:03:88:11:6f:31:49: e4:3a:12:a4:e9:f6:cf:68:f3:35:d3:3b:b3:2e:cf: c7:1d:09:44:75:6c:c2:ee:6d:7a:64:28:97:bf:2c: 29:5d:36:30:0c:8a:3b:7c:8d:d9:f7:37:ab:32:63: be:ba:c6:fe:04:53:99:a3:c1:25:d4:c1:27:fd:95: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1D:7B:4A:F4:28:E7:C2:F2:C2:8C:F7:88:51:F0:11:28:D2:2F:F3 X509v3 Authority Key Identifier: keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:ef:8f:fd:2e:77:e8:22:e5:c4:63:3d:5c:6e:c9:71:a5: 9d:e0:8a:78:62:66:d8:65:5f:81:14:83:e2:b6:df:0e:57:bf: bb:43:3a:c1:17:04:4c:f0:32:06:72:dc:d0:59:20:7f:99:6c: 81:9f:67:b7:fb:1c:cf:54:05:6c:46:66:d5:ad:b7:1c:8c:1a: 01:30:52:fb:43:2a:71:b5:21:de:96:35:ad:73:e0:cc:ef:5c: 63:a9:2e:c6:56:7a:af:bc:c7:d7:51:6f:56:d6:16:e1:bf:81: 45:6d:41:a6:cc:16:d8:69:62:3a:70:40:47:03:94:dd:cf:4d: 48:83:9c:f7:ba:bf:25:5f:f7:a0:d1:8e:49:2e:cb:ff:7f:1a: 66:28:29:75:62:c8:68:de:03:0e:23:c4:ed:6a:b0:32:99:29: 88:a7:53:d3:9a:f1:28:44:78:45:1e:d8:f9:72:d2:be:3a:d7: 13:4e:05:b4:d0:e2:ac:d0:c8:44:bc:01:84:e3:42:50:81:57: de:6f:90:d7:b4:ad:1a:b6:8c:39:7f:a6:1f:f0:98:6b:2e:9b: d5:f5:71:25:c2:ef:19:c6:24:f3:14:ea:f4:7e:2d:d0:27:ab: f1:79:c9:8a:33:92:19:c9:f2:f2:af:cd:d3:9f:92:41:7a:d7: 47:8e:63:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEvnAE3A+f4ED9Bc4cu7eV0d7IEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE MEVGQjc4MTAeFw0yNTA4MDkwNzMwNTdaFw0yNTA4MTAwNzUwNTdaMDMxMTAvBgNV BAMTKDM4MUQ3QjRBRjQyOEU3QzJGMkMyOENGNzg4NTFGMDExMjhEMjJGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZ+8BCjTIfjNGMpWtH7mNCuZe brMfz5HCPEw8L++n0VvHMBsqvvTLHsbPbUEdjdVZXBWiXPTP1CuNrTaJNPh1FPjc XQt/n7FdBvzYxQ7p5lwjolJ5N52/rDMjylfrIRMPNYURk4bplbUqVONRpaae+0qT cw0blEHi409OKrI477U6YCmKtg82QA5dXCm4f6cjhF4nK9L+vY2wxDTvgsnPRIYN 1abUHPy4rwknJKMzAaZSAIXICirdJ++vegOIEW8xSeQ6EqTp9s9o8zXTO7Muz8cd CUR1bMLubXpkKJe/LCldNjAMijt8jdn3N6syY766xv4EU5mjwSXUwSf9lZUfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOB17SvQo58Lywoz3iFHwESjSL/MwHwYDVR0j BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85 NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGWbvj/0ud+gi5cRjPVxuyXGlneCKeGJm2GVfgRSD4rbfDle/u0M6wRcETPAy BnLc0Fkgf5lsgZ9nt/scz1QFbEZm1a23HIwaATBS+0MqcbUh3pY1rXPgzO9cY6ku xlZ6r7zH11FvVtYW4b+BRW1BpswW2GliOnBARwOU3c9NSIOc97q/JV/3oNGOSS7L /38aZigpdWLIaN4DDiPE7WqwMpkpiKdT05rxKER4RR7Y+XLSvjrXE04FtNDirNDI RLwBhONCUIFX3m+Q17StGraMOX+mH/CYay6b1fVxJcLvGcYk8xTq9H4t0Cer8XnJ ijOSGcny8q/N05+SQXrXR45jvQ== -----END CERTIFICATE-----Generated at Sat Aug 9 14:28:59 2025 by rpki-client