$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft File: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft (raw, json) Hash identifier: 521XVi08Wg9s5Q74dTHevLWQrnLvSRnthcydcQHsNBk= Subject key identifier: DF:05:B0:47:88:20:28:D8:B3:7C:83:79:23:37:F0:0D:2B:D9:52:88 Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36 Certificate issuer: /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036 Certificate serial: 15E3D5D544FBE7A37179B2980E28B9C9E04C19BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer Subject info access: rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft Manifest number: 024A Signing time: Wed 05 Nov 2025 01:28:54 +0000 Manifest this update: Wed 05 Nov 2025 01:23:54 +0000 Manifest next update: Thu 06 Nov 2025 02:17:54 +0000 Files and hashes: 1: 323830343a366136343a3a2f33322d313238203d3e20323730333333.roa (hash: Ub5qyJ9P33x7eNSOBkNuMLbBSORDIs34xTWtXd2VkpA=) 2: 3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa (hash: Za+tWBFZ8FpkNpw2xqU9jI81uYd92pCV0XblgjkOHpc=) 3: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl (hash: zij9SMgZcmuSyXIV/dxDV7cxMAm+uT1lBCKUoLIZWmA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e3:d5:d5:44:fb:e7:a3:71:79:b2:98:0e:28:b9:c9:e0:4c:19:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036 Validity Not Before: Nov 5 01:23:54 2025 GMT Not After : Nov 6 02:17:54 2025 GMT Subject: CN=DF05B047882028D8B37C83792337F00D2BD95288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:04:5a:70:54:83:48:e4:30:8b:0d:b3:45: f0:2f:9b:d7:dd:5c:f2:cd:db:2d:57:2f:a4:94:82: a1:79:70:4b:9a:d8:94:5e:4a:9f:8b:fc:f4:d2:a4: 92:5c:47:a7:79:21:ea:ab:49:78:bb:c8:de:2e:a8: fb:6b:26:e1:ee:8c:ee:83:ec:50:c6:6f:d8:1a:9e: 23:47:a1:f3:5b:db:30:09:8b:56:ed:52:44:66:d6: 8d:69:9b:1f:f8:20:2e:8a:ff:bf:31:b2:de:8e:ad: ee:0f:de:1a:8a:d4:5d:e3:81:3a:46:2e:93:5d:cd: e2:0c:c9:ef:65:0c:a1:5b:f8:2f:a7:c4:95:25:90: 44:6f:81:f2:43:2a:f3:02:00:b5:d8:f9:d9:41:f7: dc:ae:9a:93:12:05:fc:f4:f5:f3:65:53:34:1d:87: 6f:c7:73:f6:c1:90:a6:bb:cd:db:02:2a:c2:a7:5b: 56:a4:5a:0e:20:01:be:56:7b:8f:58:a3:09:a3:13: 0b:c9:47:55:55:97:e7:2d:34:a4:f4:36:a5:51:bc: 6d:4c:da:df:71:74:e5:91:6b:e4:d4:3a:d7:0c:12: 95:45:bc:41:d7:51:f0:49:59:7a:a6:49:6d:6d:67: 3d:d4:bf:d4:45:59:64:8c:f6:33:af:76:0d:f5:7c: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:05:B0:47:88:20:28:D8:B3:7C:83:79:23:37:F0:0D:2B:D9:52:88 X509v3 Authority Key Identifier: keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7e:e9:0e:50:57:ed:15:3a:33:9f:63:49:97:fd:b5:61:9d: 6c:c2:09:b4:5f:34:35:b0:27:86:b1:9d:1c:db:f7:36:3e:78: 43:48:a9:e7:ca:45:ac:fd:2f:4c:8b:da:e6:8d:db:ca:b5:10: 7c:d9:85:12:4d:8b:13:58:64:22:ed:91:a6:3e:2b:68:1b:e1: b2:1c:3e:8c:66:bb:25:f9:05:81:dc:a1:18:8d:27:9a:11:80: 43:a0:34:f7:6e:0a:41:b4:da:41:f2:ee:14:a1:3e:e2:08:91: 28:df:87:4f:be:0f:a4:29:9a:1c:cc:22:41:a7:3e:86:09:da: a6:26:5b:1b:af:31:d7:c4:9b:e6:83:33:e2:6a:e5:91:58:1e: 44:5a:21:48:04:50:2a:49:42:12:29:7d:ae:a7:eb:a3:5a:af: 14:e4:29:02:c0:b7:81:d2:0e:1c:64:0a:59:58:79:3c:94:2c: bd:67:a8:00:22:22:cf:2d:c2:6a:f0:10:9e:5a:8a:b1:8e:6d: 11:bb:a9:f0:a5:e5:04:ef:1d:d9:82:6c:91:56:42:63:29:ba: 7e:1d:3e:30:d7:b8:30:f1:3c:1a:99:c1:75:3c:7f:76:17:55: c4:15:f3:34:a7:e0:78:cb:31:2c:16:92:2f:51:a7:18:21:8b: 9e:d8:45:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFePV1UT756NxebKYDii5yeBMGb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU0MkJCMTFBQzZBNzMwRUExMkZCRDFBQjA1QkI2N0Iw QzRGMjAzNjAeFw0yNTExMDUwMTIzNTRaFw0yNTExMDYwMjE3NTRaMDMxMTAvBgNV BAMTKERGMDVCMDQ3ODgyMDI4RDhCMzdDODM3OTIzMzdGMDBEMkJEOTUyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtQRacFSDSOQwiw2zRfAvm9fd XPLN2y1XL6SUgqF5cEua2JReSp+L/PTSpJJcR6d5IeqrSXi7yN4uqPtrJuHujO6D 7FDGb9ganiNHofNb2zAJi1btUkRm1o1pmx/4IC6K/78xst6Ore4P3hqK1F3jgTpG LpNdzeIMye9lDKFb+C+nxJUlkERvgfJDKvMCALXY+dlB99yumpMSBfz09fNlUzQd h2/Hc/bBkKa7zdsCKsKnW1akWg4gAb5We49YowmjEwvJR1VVl+ctNKT0NqVRvG1M 2t9xdOWRa+TUOtcMEpVFvEHXUfBJWXqmSW1tZz3Uv9RFWWSM9jOvdg31fGsNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3wWwR4ggKNizfIN5IzfwDSvZUogwHwYDVR0j BBgwFoAUjkK7Eaxqcw6hL70asFu2ewxPIDYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzdUU1JpekRTem4zVWlOUDZ2VEI1RkxVNFBWN1pBclp0Ujl3V3BvNEdN algvMC84RTQyQkIxMUFDNkE3MzBFQTEyRkJEMUFCMDVCQjY3QjBDNEYyMDM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNDJCQjExQUM2QTczMEVB MTJGQkQxQUIwNUJCNjdCMEM0RjIwMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzdUU1JpekRTem4zVWlOUDZ2VEI1RkxVNFBWN1pBclp0Ujl3V3BvNEdNalgvMC84 RTQyQkIxMUFDNkE3MzBFQTEyRkJEMUFCMDVCQjY3QjBDNEYyMDM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIH7pDlBX7RU6M59jSZf9tWGdbMIJtF80NbAnhrGdHNv3Nj54Q0ip58pFrP0v TIva5o3byrUQfNmFEk2LE1hkIu2Rpj4raBvhshw+jGa7JfkFgdyhGI0nmhGAQ6A0 924KQbTaQfLuFKE+4giRKN+HT74PpCmaHMwiQac+hgnapiZbG68x18Sb5oMz4mrl kVgeRFohSARQKklCEil9rqfro1qvFOQpAsC3gdIOHGQKWVh5PJQsvWeoACIizy3C avAQnlqKsY5tEbup8KXlBO8d2YJskVZCYym6fh0+MNe4MPE8GpnBdTx/dhdVxBXz NKfgeMsxLBaSL1GnGCGLnthFLA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:41 2025 by rpki-client