$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft File: C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft (raw, json) Hash identifier: e0INVF/Mz3Fg+ytABZrSZ080drB4HDgu0bEIvaHJmIU= Subject key identifier: 18:07:1E:55:57:15:3D:06:CC:00:B9:71:B2:C2:8F:38:37:82:51:52 Authority key identifier: C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40 Certificate issuer: /CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240 Certificate serial: 4AB9C5D2A59CCF80FE6A6CA84490A62AEC71C731 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer Subject info access: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft Manifest number: 0168 Signing time: Mon 03 Nov 2025 07:58:50 +0000 Manifest this update: Mon 03 Nov 2025 07:53:50 +0000 Manifest next update: Tue 04 Nov 2025 08:44:50 +0000 Files and hashes: 1: 323830343a323338633a3a2f33322d3438203d3e20323634313639.roa (hash: 17XOhXdLQkQH0VSw7c6kpY63mC0kD2MIJD2+5TE6fNY=) 2: C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl (hash: Y3ajugIyufA4B8gXwBu9p2XCjLd7HZD1mAmzSlvBqeM=) 3: 3133382e39342e3230302e302f32322d3234203d3e20323634313639.roa (hash: EeZsDK8o3Khf/3UG+J6/RmyzMPPfoxZ3M7CTcIFEgIE=) 4: 34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa (hash: JHkzGI+hBVkGXnp+tsEcBTmpmzLiFOgiea7JDSjDv4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b9:c5:d2:a5:9c:cf:80:fe:6a:6c:a8:44:90:a6:2a:ec:71:c7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240 Validity Not Before: Nov 3 07:53:50 2025 GMT Not After : Nov 4 08:44:50 2025 GMT Subject: CN=18071E5557153D06CC00B971B2C28F3837825152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9a:47:b8:16:c8:fe:28:21:5c:10:c9:32:0f: ff:f4:bf:97:f1:82:9e:0a:7a:6d:ca:03:bc:99:14: ef:9c:a7:5b:82:d7:5e:dd:02:71:08:fe:a3:ef:9b: 0e:50:63:27:53:ed:a6:a0:33:0e:ab:83:e1:3d:05: 68:a7:2f:18:86:e2:d8:47:ce:64:60:48:fb:c9:4a: 2f:01:dd:ea:79:e8:bc:dd:7d:f5:34:7a:73:ff:4b: cc:5a:a0:a4:4a:bf:5a:9c:4d:4c:5a:23:10:f2:40: 6c:a7:1d:fb:81:ea:2c:41:04:ea:96:d9:b6:93:39: b9:f8:4b:f1:b5:8c:d4:da:bb:f4:a4:65:62:30:7d: 5c:e4:f1:ab:22:78:6c:d4:66:3b:33:11:42:88:50: 3c:6d:b4:c6:2a:6c:09:d5:37:5b:fb:d1:46:23:65: 6f:b5:fa:bb:8d:06:23:54:32:77:06:36:df:55:2d: 2b:ba:66:a4:67:ed:12:a8:cd:b7:8b:2e:e5:7c:4a: b8:9d:e0:ef:88:87:15:d1:3d:66:77:26:71:8d:fa: 54:f0:9d:41:85:6e:14:95:62:99:09:56:26:97:ad: 09:9d:c5:77:3e:5a:f6:4d:7f:b0:b6:12:fd:bb:00: 9e:1e:81:c5:49:59:64:83:08:c4:f2:96:33:71:92: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:1E:55:57:15:3D:06:CC:00:B9:71:B2:C2:8F:38:37:82:51:52 X509v3 Authority Key Identifier: keyid:C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:0d:ea:aa:f3:68:93:3c:ac:1a:2c:7f:e0:0c:a0:fc:92: a2:c2:8f:93:b8:1d:c7:9a:68:96:b1:73:6d:ac:98:93:b9:47: 2e:88:6c:1a:73:a3:af:f2:13:29:81:86:ab:fd:33:ff:1e:6d: 52:32:3c:f7:53:cd:d7:2c:32:c2:61:8a:dd:df:53:ef:de:45: 68:8e:93:9c:63:76:0f:93:67:62:ea:13:cb:1b:1a:34:e1:fe: eb:4d:e7:18:4d:23:95:d1:57:ee:c1:79:37:57:80:b3:ba:98: 1c:88:45:1f:a5:70:90:45:31:13:75:15:d8:68:b8:43:80:9a: d7:9a:73:29:43:8c:e6:4c:bf:f5:1a:fd:a9:c7:67:a6:ed:2e: 27:cb:d5:c5:a1:d5:97:82:f9:8b:69:70:af:e0:18:cf:e8:5c: 0a:1b:0b:ec:59:7a:13:5e:d5:d0:f2:76:e5:82:7b:97:ad:ab: 81:56:99:e7:03:c2:70:82:89:12:d6:6e:35:8b:ed:59:3b:7a: 94:99:9d:62:3a:86:d4:3f:0a:a2:4a:74:86:55:c6:5e:7d:2d: c5:f5:06:13:87:9c:b3:6f:63:be:9a:01:44:ce:bc:6b:81:05: 2c:54:92:96:32:72:8d:f4:06:b2:ad:bc:cc:09:97:97:36:9c: d9:94:d6:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSrnF0qWcz4D+amyoRJCmKuxxxzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ4QTdDNEU2NEI0RDYyQzNFRUU3QjYyMUFGMEEzMUIz ODc1NTI0MDAeFw0yNTExMDMwNzUzNTBaFw0yNTExMDQwODQ0NTBaMDMxMTAvBgNV BAMTKDE4MDcxRTU1NTcxNTNEMDZDQzAwQjk3MUIyQzI4RjM4Mzc4MjUxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1mke4Fsj+KCFcEMkyD//0v5fx gp4Kem3KA7yZFO+cp1uC117dAnEI/qPvmw5QYydT7aagMw6rg+E9BWinLxiG4thH zmRgSPvJSi8B3ep56LzdffU0enP/S8xaoKRKv1qcTUxaIxDyQGynHfuB6ixBBOqW 2baTObn4S/G1jNTau/SkZWIwfVzk8asieGzUZjszEUKIUDxttMYqbAnVN1v70UYj ZW+1+ruNBiNUMncGNt9VLSu6ZqRn7RKozbeLLuV8Srid4O+IhxXRPWZ3JnGN+lTw nUGFbhSVYpkJViaXrQmdxXc+WvZNf7C2Ev27AJ4egcVJWWSDCMTyljNxktabAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGAceVVcVPQbMALlxssKPODeCUVIwHwYDVR0j BBgwFoAUxIp8TmS01iw+7ntiGvCjGzh1UkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEpzblBtVnFnZHpjODJYb1ZjWHY0ZlRLZjlSUWl6ZER6U1BlcmNITVhu WWgvMC9DNDhBN0M0RTY0QjRENjJDM0VFRTdCNjIxQUYwQTMxQjM4NzU1MjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEE3QzRFNjRCNEQ2MkMz RUVFN0I2MjFBRjBBMzFCMzg3NTUyNDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEpzblBtVnFnZHpjODJYb1ZjWHY0ZlRLZjlSUWl6ZER6U1BlcmNITVhuWWgvMC9D NDhBN0M0RTY0QjRENjJDM0VFRTdCNjIxQUYwQTMxQjM4NzU1MjQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2QN6qrzaJM8rBosf+AMoPySosKPk7gdx5polrFzbayYk7lHLohsGnOjr/IT KYGGq/0z/x5tUjI891PN1ywywmGK3d9T795FaI6TnGN2D5NnYuoTyxsaNOH+603n GE0jldFX7sF5N1eAs7qYHIhFH6VwkEUxE3UV2Gi4Q4Ca15pzKUOM5ky/9Rr9qcdn pu0uJ8vVxaHVl4L5i2lwr+AYz+hcChsL7Fl6E17V0PJ25YJ7l62rgVaZ5wPCcIKJ EtZuNYvtWTt6lJmdYjqG1D8Kokp0hlXGXn0txfUGE4ecs29jvpoBRM68a4EFLFSS ljJyjfQGsq28zAmXlzac2ZTWIA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:04 2025 by rpki-client