$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft File: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft (raw, json) Hash identifier: +N4l1p9+F2pJFynVADaeXPBjqF75TX+L771ywLkTmX4= Subject key identifier: 4A:E4:2C:36:FA:7F:44:0E:08:6D:94:9C:B2:19:70:D0:0B:02:8C:91 Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36 Certificate issuer: /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036 Certificate serial: 750E6A65430FD310F1C38CBCAE31773079226C3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer Subject info access: rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft Manifest number: 0247 Signing time: Sun 02 Nov 2025 18:58:52 +0000 Manifest this update: Sun 02 Nov 2025 18:53:52 +0000 Manifest next update: Mon 03 Nov 2025 20:45:52 +0000 Files and hashes: 1: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl (hash: Pp7Pp/FpANPrn2wpymlMCtb311kfxJlhwj/1boo0l/E=) 2: 323830343a366136343a3a2f33322d313238203d3e20323730333333.roa (hash: Ub5qyJ9P33x7eNSOBkNuMLbBSORDIs34xTWtXd2VkpA=) 3: 3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa (hash: Za+tWBFZ8FpkNpw2xqU9jI81uYd92pCV0XblgjkOHpc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:6a:65:43:0f:d3:10:f1:c3:8c:bc:ae:31:77:30:79:22:6c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036 Validity Not Before: Nov 2 18:53:52 2025 GMT Not After : Nov 3 20:45:52 2025 GMT Subject: CN=4AE42C36FA7F440E086D949CB21970D00B028C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:43:b5:05:eb:2e:44:3a:71:f0:7f:14:49: 59:96:3d:bc:39:d4:14:35:e3:c1:07:2d:9d:09:1f: 3c:2d:30:e1:42:c3:6b:bf:fb:31:d0:d6:d2:b4:9a: a0:29:5a:f9:b6:d9:ec:47:65:0a:72:3d:55:fb:b0: 0b:76:df:19:4e:d7:75:4c:91:4e:b4:08:86:cf:ce: 03:fd:24:da:fd:62:89:62:db:a2:0c:70:34:d6:9c: c2:c3:be:10:58:bb:1c:b3:18:7b:23:ea:35:b0:1b: 59:a8:10:3d:e8:4e:bb:75:ef:76:ed:0e:81:2e:80: e1:96:1f:53:70:08:43:da:95:97:c4:8a:d7:02:b4: f7:a4:78:49:9c:84:12:9c:2d:da:f7:06:aa:29:f0: f0:e5:ca:6a:07:97:95:28:a6:56:a7:b2:33:20:38: 53:e6:1e:43:a1:50:ec:e2:49:66:8f:5c:ca:51:fa: 01:3e:8b:b2:78:35:4d:1c:f8:cd:c8:fa:82:64:15: f4:19:03:7a:72:e5:54:ec:73:ea:5b:21:bd:1c:b9: 98:4a:31:21:23:68:f4:40:98:7a:17:a5:7d:d0:e8: a4:e0:2a:8f:0e:91:9b:20:5a:86:93:25:7b:8c:9e: 3a:01:32:f3:bb:c5:fc:2a:d7:c1:ab:27:25:56:d9: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E4:2C:36:FA:7F:44:0E:08:6D:94:9C:B2:19:70:D0:0B:02:8C:91 X509v3 Authority Key Identifier: keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d0:4b:e6:13:8a:71:75:62:00:cd:c8:5d:c8:42:d7:69:2d: 20:2a:c4:9d:0a:af:d1:e8:b0:f3:a8:6f:86:a8:f4:fa:17:f6: 06:87:1b:fe:ca:92:5e:ef:b6:ac:92:34:ce:9c:35:48:a9:c6: 17:d0:40:f3:00:03:b4:6a:b6:f3:4d:36:aa:25:78:eb:de:c0: 8c:45:a4:f0:89:9c:23:61:6f:87:80:49:a6:a4:d3:b9:26:cd: ba:82:a8:3c:6a:48:54:7b:fe:cf:c7:91:b5:68:81:a7:a9:b9: f7:83:59:23:bc:6a:f3:59:0b:3d:a9:1a:9f:7b:2b:41:a1:61: de:af:5d:3c:bc:55:bc:75:62:15:4c:1f:3e:fc:d1:86:9b:d2: 1e:e8:6a:f3:28:0c:d7:43:42:39:14:57:71:3e:5f:2d:38:c7: 14:29:df:7b:f1:9a:26:f0:39:77:cf:94:09:fe:69:1d:4d:78: 70:96:97:d9:a1:33:76:be:78:a3:e3:bc:11:43:1c:9a:0a:ed: 3d:59:df:77:40:8f:f6:63:34:8f:63:ff:2b:7a:e6:46:4e:b3: 8b:57:ec:e7:42:16:e5:f3:98:e1:ab:cf:4f:c6:c6:c8:1f:d1: 49:47:b1:d6:cf:88:8c:ca:4b:5b:0c:e2:ef:04:90:63:bc:12: fb:64:6d:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdQ5qZUMP0xDxw4y8rjF3MHkibDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU0MkJCMTFBQzZBNzMwRUExMkZCRDFBQjA1QkI2N0Iw QzRGMjAzNjAeFw0yNTExMDIxODUzNTJaFw0yNTExMDMyMDQ1NTJaMDMxMTAvBgNV BAMTKDRBRTQyQzM2RkE3RjQ0MEUwODZEOTQ5Q0IyMTk3MEQwMEIwMjhDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oEO1BesuRDpx8H8USVmWPbw5 1BQ148EHLZ0JHzwtMOFCw2u/+zHQ1tK0mqApWvm22exHZQpyPVX7sAt23xlO13VM kU60CIbPzgP9JNr9Yoli26IMcDTWnMLDvhBYuxyzGHsj6jWwG1moED3oTrt173bt DoEugOGWH1NwCEPalZfEitcCtPekeEmchBKcLdr3Bqop8PDlymoHl5UoplansjMg OFPmHkOhUOziSWaPXMpR+gE+i7J4NU0c+M3I+oJkFfQZA3py5VTsc+pbIb0cuZhK MSEjaPRAmHoXpX3Q6KTgKo8OkZsgWoaTJXuMnjoBMvO7xfwq18GrJyVW2ZI3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSuQsNvp/RA4IbZScshlw0AsCjJEwHwYDVR0j BBgwFoAUjkK7Eaxqcw6hL70asFu2ewxPIDYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzdUU1JpekRTem4zVWlOUDZ2VEI1RkxVNFBWN1pBclp0Ujl3V3BvNEdN algvMC84RTQyQkIxMUFDNkE3MzBFQTEyRkJEMUFCMDVCQjY3QjBDNEYyMDM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNDJCQjExQUM2QTczMEVB MTJGQkQxQUIwNUJCNjdCMEM0RjIwMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzdUU1JpekRTem4zVWlOUDZ2VEI1RkxVNFBWN1pBclp0Ujl3V3BvNEdNalgvMC84 RTQyQkIxMUFDNkE3MzBFQTEyRkJEMUFCMDVCQjY3QjBDNEYyMDM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKNBL5hOKcXViAM3IXchC12ktICrEnQqv0eiw86hvhqj0+hf2Bocb/sqSXu+2 rJI0zpw1SKnGF9BA8wADtGq28002qiV4697AjEWk8ImcI2Fvh4BJpqTTuSbNuoKo PGpIVHv+z8eRtWiBp6m594NZI7xq81kLPakan3srQaFh3q9dPLxVvHViFUwfPvzR hpvSHuhq8ygM10NCORRXcT5fLTjHFCnfe/GaJvA5d8+UCf5pHU14cJaX2aEzdr54 o+O8EUMcmgrtPVnfd0CP9mM0j2P/K3rmRk6zi1fs50IW5fOY4avPT8bGyB/RSUex 1s+IjMpLWwzi7wSQY7wS+2RtFA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:03 2025 by rpki-client