$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft File: 8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft (raw, json) Hash identifier: gyRCje5vQEuhG/co5xCAOIhpLuNqIgR72mXRMUkxWZk= Subject key identifier: B6:17:E5:69:C8:67:D7:CD:D5:1A:AA:20:28:BB:2D:37:DD:3D:AF:91 Authority key identifier: 85:47:CD:EB:A3:25:B0:3E:5B:5D:CA:9F:B7:B6:B1:D6:1F:D7:84:27 Certificate issuer: /CN=8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427 Certificate serial: 02D334023A3440C651CBB52CFB7A2017A3D5F5D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft Manifest number: 04 Signing time: Tue 04 Nov 2025 23:06:20 +0000 Manifest this update: Tue 04 Nov 2025 23:01:20 +0000 Manifest next update: Wed 05 Nov 2025 23:59:20 +0000 Files and hashes: 1: 8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl (hash: okiOcylifaIN9BF8ekRu1ipxewLSQIwZXWVx7wlyMmA=) 2: 323830343a333532383a3a2f33322d313238203d3e20323636323732.roa (hash: 4aVsFRn1l4nvFUvFHQ/e137PplNuAvprtjd/BW8Ocx0=) 3: 3137302e37382e3134382e302f32322d3332203d3e20323636323732.roa (hash: 5xn8t0pL6bp82eRcesCb60oDCab/EPZZngeBW734do0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d3:34:02:3a:34:40:c6:51:cb:b5:2c:fb:7a:20:17:a3:d5:f5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427 Validity Not Before: Nov 4 23:01:20 2025 GMT Not After : Nov 5 23:59:20 2025 GMT Subject: CN=B617E569C867D7CDD51AAA2028BB2D37DD3DAF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:15:64:cf:c4:21:a4:1f:d8:59:e5:03:72: 9c:44:cf:ae:15:56:9d:1f:ed:07:45:a9:f8:a4:dd: d7:f2:f9:68:0d:ae:8e:ec:8e:15:8b:f4:11:33:6f: 35:58:d4:de:9e:75:94:15:62:8a:25:be:1b:2d:17: 7a:de:58:8e:27:24:0e:2c:db:5c:16:19:4e:27:d1: 54:2e:bf:db:07:7f:8d:ea:44:40:3c:e4:60:2f:fa: 4c:c9:08:37:0d:b6:05:46:b7:2e:da:ae:81:3e:2e: 9d:e1:14:7c:07:57:4d:78:66:05:d9:ee:71:ba:79: fd:77:ba:8c:e0:e7:ee:ab:80:63:c0:12:18:d1:c5: ae:fe:7a:76:82:51:7b:5b:6e:29:46:31:cc:38:3f: 0f:28:25:b4:0e:f2:27:b4:da:29:47:9b:bd:1c:56: 85:1a:0b:4d:6f:02:d0:20:90:83:0b:40:8d:1c:d2: 5a:2f:b7:aa:e2:24:44:c8:b9:cb:ab:b4:75:34:1c: e7:b3:14:f5:9c:06:36:c9:ff:1b:00:1b:3a:34:82: fd:c0:6f:05:a4:18:15:27:07:0e:ad:95:6e:3f:c8: 74:da:a8:e6:44:b8:ff:d3:1f:b0:02:b3:55:3b:7c: 5c:d2:19:28:23:95:af:0e:74:bd:b1:2f:83:ba:20: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:17:E5:69:C8:67:D7:CD:D5:1A:AA:20:28:BB:2D:37:DD:3D:AF:91 X509v3 Authority Key Identifier: keyid:85:47:CD:EB:A3:25:B0:3E:5B:5D:CA:9F:B7:B6:B1:D6:1F:D7:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b4:ba:a1:0f:a9:dd:3a:43:de:f4:c5:30:c8:d2:97:12:c5: fe:a0:27:0c:2f:66:cf:ce:4b:b9:e3:21:17:4d:78:04:04:8c: 22:e5:38:52:29:71:ab:3b:e9:d3:bc:e4:11:34:ce:7c:b2:6d: e2:7a:73:4f:2d:8f:ca:2d:a5:a0:d2:a3:67:ba:f8:d1:3f:c6: e2:00:8a:0c:bd:e7:f3:43:45:cc:16:36:5c:f1:11:e9:01:ab: 3b:9e:ed:40:90:88:6a:da:b4:d5:77:c0:6d:97:d2:94:54:a1: 3e:47:9f:93:a7:b1:f9:af:09:94:6b:56:b6:5c:9f:00:31:f5: c6:3b:fe:15:d9:27:03:9f:23:2f:46:d9:2c:f4:42:f0:4f:ce: 81:81:3d:2a:f7:4b:62:38:7e:3c:eb:67:55:8a:88:b3:98:f5: f4:ee:a3:25:d8:4a:a8:97:14:da:01:f0:01:ed:04:7e:15:15: be:65:13:da:2e:5d:23:b7:72:d7:8d:69:d4:c0:83:8b:cd:5c: c5:40:10:d3:49:68:90:0f:25:e5:f4:0d:09:ca:3f:40:66:39: 2f:9c:c1:61:47:e9:04:1d:74:d5:29:b4:44:44:65:c2:fa:2a: 76:ed:c9:dd:65:07:b9:48:f6:20:c6:9d:8c:61:5b:93:49:1e: 71:89:b2:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAtM0Ajo0QMZRy7Us+3ogF6PV9dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU0N0NERUJBMzI1QjAzRTVCNURDQTlGQjdCNkIxRDYx RkQ3ODQyNzAeFw0yNTExMDQyMzAxMjBaFw0yNTExMDUyMzU5MjBaMDMxMTAvBgNV BAMTKEI2MTdFNTY5Qzg2N0Q3Q0RENTFBQUEyMDI4QkIyRDM3REQzREFGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KhVkz8QhpB/YWeUDcpxEz64V Vp0f7QdFqfik3dfy+WgNro7sjhWL9BEzbzVY1N6edZQVYoolvhstF3reWI4nJA4s 21wWGU4n0VQuv9sHf43qREA85GAv+kzJCDcNtgVGty7aroE+Lp3hFHwHV014ZgXZ 7nG6ef13uozg5+6rgGPAEhjRxa7+enaCUXtbbilGMcw4Pw8oJbQO8ie02ilHm70c VoUaC01vAtAgkIMLQI0c0lovt6riJETIucurtHU0HOezFPWcBjbJ/xsAGzo0gv3A bwWkGBUnBw6tlW4/yHTaqOZEuP/TH7ACs1U7fFzSGSgjla8OdL2xL4O6IOxPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUthflachn183VGqogKLstN909r5EwHwYDVR0j BBgwFoAUhUfN66MlsD5bXcqft7ax1h/XhCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQms4TXZmaUhmY0dHNzM3RFBVZkpYRFJuOXJ5cW1zM3lBeWNEd2U0QlBy cFYvMC84NTQ3Q0RFQkEzMjVCMDNFNUI1RENBOUZCN0I2QjFENjFGRDc4NDI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDdDREVCQTMyNUIwM0U1 QjVEQ0E5RkI3QjZCMUQ2MUZENzg0MjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qms4TXZmaUhmY0dHNzM3RFBVZkpYRFJuOXJ5cW1zM3lBeWNEd2U0QlBycFYvMC84 NTQ3Q0RFQkEzMjVCMDNFNUI1RENBOUZCN0I2QjFENjFGRDc4NDI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbS6oQ+p3TpD3vTFMMjSlxLF/qAnDC9mz85LueMhF014BASMIuU4Uilxqzvp 07zkETTOfLJt4npzTy2Pyi2loNKjZ7r40T/G4gCKDL3n80NFzBY2XPER6QGrO57t QJCIatq01XfAbZfSlFShPkefk6ex+a8JlGtWtlyfADH1xjv+FdknA58jL0bZLPRC 8E/OgYE9KvdLYjh+POtnVYqIs5j19O6jJdhKqJcU2gHwAe0EfhUVvmUT2i5dI7dy 141p1MCDi81cxUAQ00lokA8l5fQNCco/QGY5L5zBYUfpBB101Sm0RERlwvoqdu3J 3WUHuUj2IMadjGFbk0kecYmy3A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:56 2025 by rpki-client