$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json) Hash identifier: 7+tdf7smFlqMo50Twmm+aqVCuRvr+5ZFWgULzRXSADU= Subject key identifier: 92:70:F4:B9:FD:AD:32:E0:E9:48:59:F1:09:0F:2E:19:A0:47:8F:45 Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Certificate serial: 1EEAE531331068882AB89C62824EE4554C11DAAF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft Manifest number: 02FD Signing time: Mon 03 Nov 2025 05:01:37 +0000 Manifest this update: Mon 03 Nov 2025 04:56:37 +0000 Manifest next update: Tue 04 Nov 2025 07:02:37 +0000 Files and hashes: 1: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: K+hsb0UMOYZiPzH0PzjRFM3PwOudqKKrAtEr0aRpXYo=) 2: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=) 3: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ea:e5:31:33:10:68:88:2a:b8:9c:62:82:4e:e4:55:4c:11:da:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Validity Not Before: Nov 3 04:56:37 2025 GMT Not After : Nov 4 07:02:37 2025 GMT Subject: CN=9270F4B9FDAD32E0E94859F1090F2E19A0478F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:66:0b:0b:42:c7:f2:6b:9f:21:09:72:af: 26:ed:bf:dd:bd:c3:68:5d:e0:e0:ae:da:65:f3:c3: 62:80:63:35:e1:24:3b:e6:3c:b9:19:a5:db:7a:fd: 8d:01:ff:06:da:89:db:f7:8b:11:57:81:9a:ef:b3: 60:10:ec:a3:90:69:12:9c:f6:29:82:ab:94:7e:0d: 34:7e:4f:9d:4c:38:a8:f5:0e:0e:15:00:dc:39:82: 85:9d:ab:f8:10:81:44:7b:72:88:5f:b0:33:5e:01: 9b:d0:87:d4:56:35:9d:82:cb:0d:10:7c:b5:3f:8b: a0:b6:f3:2b:c9:45:71:36:75:90:45:4d:35:dc:2f: 02:e3:41:a3:46:6d:27:15:3a:04:21:13:b9:38:b7: b6:9c:51:40:40:d5:ed:7d:f4:84:8a:c6:53:76:ee: 4b:f0:4f:8f:4e:30:88:1f:c4:3f:af:75:2d:61:bd: 52:29:1a:65:7d:78:eb:d7:16:bb:17:4e:ed:b1:30: a3:0b:89:ba:37:47:ad:7a:6f:83:3c:c1:be:cc:cf: 4c:aa:14:97:ef:06:44:e7:e1:6e:74:f3:24:01:c1: e8:b4:05:b6:3e:64:5c:b4:bf:26:42:3a:b9:d5:84: 4c:71:0b:2a:5b:09:0a:58:3f:46:1b:c5:52:1c:cd: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:F4:B9:FD:AD:32:E0:E9:48:59:F1:09:0F:2E:19:A0:47:8F:45 X509v3 Authority Key Identifier: keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9f:1c:7f:53:b2:b5:aa:33:02:02:02:41:97:32:60:56:a6: fc:b9:a4:49:f8:e3:00:10:4d:80:dd:94:50:c7:69:f1:d9:d8: 96:62:c4:19:16:57:b4:07:24:c8:82:e4:8d:47:c3:f8:53:9e: 63:e2:ad:50:73:a7:de:ac:ad:89:6d:87:a9:3a:be:ee:f3:77: a6:7c:26:63:3c:d2:6d:95:f3:1b:46:58:20:7c:93:f5:ed:6f: 0f:15:6d:74:2c:ee:0e:af:74:cb:7a:50:3b:3e:7e:fc:76:d5: ec:6c:e9:a8:e0:0a:ad:c6:35:fe:3d:c8:ce:87:58:e9:61:a4: 1c:7d:22:49:77:08:47:9a:50:5e:b5:dd:37:a9:b0:c9:31:a7: e5:32:7d:8c:89:fa:95:d2:72:11:4f:5f:ee:c3:eb:1d:fa:c0: cf:fa:0a:4b:70:73:cc:2c:b8:4f:fa:b2:67:f7:f9:9e:57:87: 10:83:82:e8:eb:ff:a3:84:b4:35:c6:9c:16:53:c8:ea:89:80: 55:c8:17:6a:a0:e1:e3:1d:b8:fc:96:4f:9f:90:64:e5:f6:77: 15:d2:37:84:ab:d8:b8:00:59:59:c1:c3:a1:54:18:a3:5d:3f: 48:76:48:d5:f3:1e:31:5d:09:5f:d9:f4:2b:a2:88:d4:41:45: 0f:a4:8f:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHurlMTMQaIgquJxigk7kVUwR2q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD RDhBMjIzRjAeFw0yNTExMDMwNDU2MzdaFw0yNTExMDQwNzAyMzdaMDMxMTAvBgNV BAMTKDkyNzBGNEI5RkRBRDMyRTBFOTQ4NTlGMTA5MEYyRTE5QTA0NzhGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfy2YLC0LH8mufIQlyrybtv929 w2hd4OCu2mXzw2KAYzXhJDvmPLkZpdt6/Y0B/wbaidv3ixFXgZrvs2AQ7KOQaRKc 9imCq5R+DTR+T51MOKj1Dg4VANw5goWdq/gQgUR7cohfsDNeAZvQh9RWNZ2Cyw0Q fLU/i6C28yvJRXE2dZBFTTXcLwLjQaNGbScVOgQhE7k4t7acUUBA1e199ISKxlN2 7kvwT49OMIgfxD+vdS1hvVIpGmV9eOvXFrsXTu2xMKMLibo3R616b4M8wb7Mz0yq FJfvBkTn4W508yQBwei0BbY+ZFy0vyZCOrnVhExxCypbCQpYP0YbxVIczYf/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUknD0uf2tMuDpSFnxCQ8uGaBHj0UwHwYDVR0j BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1 Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEp8cf1OytaozAgICQZcyYFam/LmkSfjjABBNgN2UUMdp8dnYlmLEGRZXtAck yILkjUfD+FOeY+KtUHOn3qytiW2HqTq+7vN3pnwmYzzSbZXzG0ZYIHyT9e1vDxVt dCzuDq90y3pQOz5+/HbV7GzpqOAKrcY1/j3IzodY6WGkHH0iSXcIR5pQXrXdN6mw yTGn5TJ9jIn6ldJyEU9f7sPrHfrAz/oKS3BzzCy4T/qyZ/f5nleHEIOC6Ov/o4S0 NcacFlPI6omAVcgXaqDh4x24/JZPn5Bk5fZ3FdI3hKvYuABZWcHDoVQYo10/SHZI 1fMeMV0JX9n0K6KI1EFFD6SPjQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:54 2025 by rpki-client