$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft File: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft (raw, json) Hash identifier: YKXnkBpc4t0hI3rKmXnLcunR3TPLb1WkJAN9Cc3GyMM= Subject key identifier: EF:FE:17:76:67:EF:AE:94:80:E7:6A:84:D9:70:A8:E0:D0:BB:FC:28 Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01 Certificate issuer: /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01 Certificate serial: 1258B95F60472EC385A14D4BAF79B0322B837F1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft Manifest number: 0302 Signing time: Tue 04 Nov 2025 20:10:00 +0000 Manifest this update: Tue 04 Nov 2025 20:05:00 +0000 Manifest next update: Thu 06 Nov 2025 00:06:00 +0000 Files and hashes: 1: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl (hash: +P3mo1dlqQGswfr+7TzUhr1qDIrRiCeDLk6TdHctPy4=) 2: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: /I5vajGjFQQ7M9n3lu24TssVjqdIlopWk+bSOlpSkFE=) 3: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: ODfMmaHbZE0gEskMRFLRp3jCARbHA/qcQoXVqBzR2ik=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:58:b9:5f:60:47:2e:c3:85:a1:4d:4b:af:79:b0:32:2b:83:7f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01 Validity Not Before: Nov 4 20:05:00 2025 GMT Not After : Nov 6 00:06:00 2025 GMT Subject: CN=EFFE177667EFAE9480E76A84D970A8E0D0BBFC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:79:f6:5b:e3:87:54:3d:34:47:93:7e:8b: f2:ab:2b:a8:5f:7a:ca:9f:74:5e:84:11:74:cc:36: f7:9f:55:1d:ca:e1:47:ad:92:d9:c7:77:95:1a:32: b5:ce:75:9d:f1:3a:24:99:ca:f2:f8:57:e5:5f:e9: 44:8e:68:ff:e5:84:55:24:94:22:a3:6f:a8:64:b0: f6:f1:9b:15:e2:57:b1:be:cc:22:97:85:e6:00:ea: bc:a5:24:81:05:d9:c2:bd:ce:f6:55:c2:c9:fd:30: ae:5c:f1:0f:4f:48:ce:92:20:a5:89:82:4e:9e:a6: e4:5c:a1:ee:64:7f:db:31:0a:f7:87:67:79:1f:27: 1c:a8:21:35:f8:db:8b:6b:aa:13:32:98:d8:47:b7: fa:8e:83:2c:05:f5:e1:ba:3e:2b:45:a5:e2:1e:6e: f1:25:b1:03:41:3b:ec:5e:03:db:aa:56:8e:a3:75: bc:6d:2e:d8:e1:bb:0d:1f:7c:91:00:4d:51:fb:8a: 48:93:12:da:b2:38:c3:28:d8:7d:31:bf:0d:ff:7f: 10:8f:d3:c7:ae:5f:4d:24:6d:9e:5c:77:ea:22:92: 95:c9:db:81:f8:84:79:4d:51:88:a1:d5:48:4c:3c: 42:c3:98:0d:10:2c:2b:39:e9:d3:16:d9:9f:c8:8f: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FE:17:76:67:EF:AE:94:80:E7:6A:84:D9:70:A8:E0:D0:BB:FC:28 X509v3 Authority Key Identifier: keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2f:23:9c:ca:1f:26:4d:93:62:a6:81:a7:46:a4:f3:07:f8: d7:69:ab:64:44:af:26:0b:70:3d:7c:0d:49:08:ab:2e:8c:3e: 62:94:ae:9c:a8:01:4b:1c:13:bd:82:e5:74:2e:27:6a:b4:b6: ce:25:b8:ac:d0:d2:a9:cd:cc:93:98:0b:1f:52:65:59:56:4d: 9f:94:4c:6d:56:a8:0a:59:30:c8:7e:7f:8a:29:e4:73:3b:e9: 30:52:d2:e5:08:6e:b7:5d:34:5d:8b:3c:55:a9:cc:db:a7:1a: 2c:3a:a9:c2:c8:ee:48:94:c3:f2:87:b6:e7:80:37:87:a6:bd: 2e:f6:ac:5b:a1:f6:3f:49:92:60:33:a4:29:5a:30:d8:52:e4: 8a:9c:0c:f0:8f:f3:2b:00:da:b9:a8:c1:c6:65:ed:e9:48:a2: 35:7f:ee:d4:3a:83:30:77:4e:9c:85:84:cc:3d:e5:ed:f5:07: a4:8f:f5:8f:28:be:1b:dc:94:7b:f6:6f:ba:65:27:e7:b0:1a: 06:77:34:3e:01:cb:30:9d:5d:5a:5f:10:d8:30:88:73:e8:1b: a9:08:3d:35:01:ce:1d:87:b9:2a:6f:e9:e8:95:79:3a:00:b8: 11:52:a0:c7:32:94:f5:e4:bf:44:4d:f7:9c:94:70:dd:7f:55: 99:51:b7:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEli5X2BHLsOFoU1Lr3mwMiuDfxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ3RTY1RkRDM0QwNTIzOEVGRTJCNEQ4REMyMkM1QjdE RUZFN0QwMTAeFw0yNTExMDQyMDA1MDBaFw0yNTExMDYwMDA2MDBaMDMxMTAvBgNV BAMTKEVGRkUxNzc2NjdFRkFFOTQ4MEU3NkE4NEQ5NzBBOEUwRDBCQkZDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxH3n2W+OHVD00R5N+i/KrK6hf esqfdF6EEXTMNvefVR3K4UetktnHd5UaMrXOdZ3xOiSZyvL4V+Vf6USOaP/lhFUk lCKjb6hksPbxmxXiV7G+zCKXheYA6rylJIEF2cK9zvZVwsn9MK5c8Q9PSM6SIKWJ gk6epuRcoe5kf9sxCveHZ3kfJxyoITX424trqhMymNhHt/qOgywF9eG6PitFpeIe bvElsQNBO+xeA9uqVo6jdbxtLtjhuw0ffJEATVH7ikiTEtqyOMMo2H0xvw3/fxCP 08euX00kbZ5cd+oikpXJ24H4hHlNUYih1UhMPELDmA0QLCs56dMW2Z/Ij8H7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7/4XdmfvrpSA52qE2XCo4NC7/CgwHwYDVR0j BBgwFoAUpH5l/cPQUjjv4rTY3CLFt97+fQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2 RXMvMi9BNDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0N0U2NUZEQzNEMDUyMzhF RkUyQjREOERDMjJDNUI3REVGRTdEMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2RXMvMi9B NDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApS8jnMofJk2TYqaBp0ak8wf412mrZESvJgtwPXwNSQirLow+YpSunKgBSxwT vYLldC4narS2ziW4rNDSqc3Mk5gLH1JlWVZNn5RMbVaoClkwyH5/iinkczvpMFLS 5Qhut100XYs8VanM26caLDqpwsjuSJTD8oe254A3h6a9LvasW6H2P0mSYDOkKVow 2FLkipwM8I/zKwDauajBxmXt6UiiNX/u1DqDMHdOnIWEzD3l7fUHpI/1jyi+G9yU e/ZvumUn57AaBnc0PgHLMJ1dWl8Q2DCIc+gbqQg9NQHOHYe5Km/p6JV5OgC4EVKg xzKU9eS/RE33nJRw3X9VmVG3Sg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:43 2025 by rpki-client