$ rpki-client -vvf rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.mft File: 948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.mft (raw, json) Hash identifier: RaZxIE0rhmuHmhm/PEIkw1HcW/m0ITD7X4Fdzo5EcG0= Subject key identifier: D9:E9:B8:75:1B:78:6A:01:AD:79:E2:7C:76:A3:C3:21:31:10:29:90 Authority key identifier: 94:8A:6A:D9:0C:1B:32:3E:B2:33:BD:70:3D:84:ED:9F:3E:FE:8F:68 Certificate issuer: /CN=948A6AD90C1B323EB233BD703D84ED9F3EFE8F68 Certificate serial: 315A62ED337A33DE47C81AA865F9B7612DA7BCF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.cer Subject info access: rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.mft Manifest number: 12 Signing time: Sun 02 Nov 2025 22:37:16 +0000 Manifest this update: Sun 02 Nov 2025 22:32:16 +0000 Manifest next update: Tue 04 Nov 2025 00:07:16 +0000 Files and hashes: 1: 948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.crl (hash: Kyjq342WFWkwlukRY3v4vO/9d18/YYJN6/X3p4SMvrc=) 2: 323830343a333164383a3a2f33322d3438203d3e20323635303430.roa (hash: 8/96ukk0JoCx9eO3gEHPlHOznwuuENgHQwVmBow1pGE=) 3: 3137302e3135302e3231322e302f32322d3234203d3e20323635303430.roa (hash: sWvqJWekek3Vy6+FnVcsob9hj6AfcQQhonllVskjrpE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.crl rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5a:62:ed:33:7a:33:de:47:c8:1a:a8:65:f9:b7:61:2d:a7:bc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948A6AD90C1B323EB233BD703D84ED9F3EFE8F68 Validity Not Before: Nov 2 22:32:16 2025 GMT Not After : Nov 4 00:07:16 2025 GMT Subject: CN=D9E9B8751B786A01AD79E27C76A3C32131102990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:41:60:ad:6e:48:13:e7:0a:51:b7:31:24: de:56:6c:1c:fc:6e:b6:51:3d:bd:bb:95:98:d7:65: 24:8b:5e:4d:15:d2:fa:b5:41:46:dd:03:3d:c9:13: 5a:43:48:cc:ca:3f:fc:ff:9f:13:f1:0c:78:64:80: a6:a1:c7:30:5c:fb:96:fd:81:60:fe:c5:e0:8f:65: 79:38:39:c3:49:ce:eb:a1:3a:39:f3:da:71:ee:f4: 87:6e:b1:f8:07:d7:15:96:c3:ca:92:4a:47:97:34: 60:ef:2d:f5:a5:85:4e:ba:65:f3:87:a2:12:5b:50: b8:a8:9a:05:49:09:09:d5:48:3f:2c:85:d0:ff:c5: 90:06:6f:6b:cf:ac:ba:69:68:7f:36:33:16:f2:4c: 06:8d:60:8e:15:14:96:68:fb:41:f9:21:12:26:ff: 13:52:ed:22:d4:2f:1a:d1:56:c8:46:18:e3:c0:8d: b8:17:ec:aa:a6:60:2f:6c:77:6b:ca:64:54:e2:0d: c1:a1:92:22:50:6b:23:9f:fd:4f:30:73:65:04:21: a8:2b:9f:54:5d:69:27:9d:75:78:7e:70:37:54:30: 13:12:53:20:9b:12:e4:ae:8e:dc:0f:87:d5:a4:83: 70:bd:54:de:0a:4d:1f:29:31:25:e6:57:7b:0c:96: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E9:B8:75:1B:78:6A:01:AD:79:E2:7C:76:A3:C3:21:31:10:29:90 X509v3 Authority Key Identifier: keyid:94:8A:6A:D9:0C:1B:32:3E:B2:33:BD:70:3D:84:ED:9F:3E:FE:8F:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/948A6AD90C1B323EB233BD703D84ED9F3EFE8F68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:54:8e:b7:4f:16:b8:e2:59:ab:0c:ea:9a:fe:53:ec:7c: 8a:0f:35:87:78:2e:e7:0e:73:68:e3:7d:b0:cd:9e:f7:c8:f8: 16:54:b0:6b:5f:0f:3e:24:5e:4e:91:6e:78:56:7c:dd:0f:de: 3c:d6:e1:ea:e7:59:48:e7:65:80:7b:cc:fe:ac:e8:ec:4e:4a: b3:87:39:68:00:de:38:26:4b:33:81:0b:48:39:ac:2b:09:7c: 70:36:5a:7b:c3:d8:07:b7:26:f5:df:63:2c:9b:32:b6:52:69: 6a:92:21:59:88:ff:35:72:ce:cd:c1:7c:b1:65:59:ba:a0:ad: a1:a1:c2:eb:f4:a1:25:ba:7b:13:c2:7c:05:f5:58:e4:1a:27: 5e:9e:97:fc:47:d9:f3:07:0e:c2:e3:88:8a:ee:37:dc:c3:ad: 68:c0:e1:97:e5:5e:65:ab:a4:aa:c9:29:7e:43:9f:c6:97:40: c1:54:db:59:8e:d6:c0:28:1f:d5:d0:1f:80:b0:27:14:20:8e: b0:c7:ba:ce:32:5e:99:45:9b:3b:04:1d:e6:02:6b:a7:05:21: fd:d6:6d:7e:9c:9d:7c:48:77:14:3c:f3:31:eb:44:f0:02:1c: f8:68:82:6f:15:0e:5b:1d:ca:62:1d:20:66:33:78:d0:40:a0: 08:84:5a:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMVpi7TN6M95HyBqoZfm3YS2nvPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ4QTZBRDkwQzFCMzIzRUIyMzNCRDcwM0Q4NEVEOUYz RUZFOEY2ODAeFw0yNTExMDIyMjMyMTZaFw0yNTExMDQwMDA3MTZaMDMxMTAvBgNV BAMTKEQ5RTlCODc1MUI3ODZBMDFBRDc5RTI3Qzc2QTNDMzIxMzExMDI5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/UFgrW5IE+cKUbcxJN5WbBz8 brZRPb27lZjXZSSLXk0V0vq1QUbdAz3JE1pDSMzKP/z/nxPxDHhkgKahxzBc+5b9 gWD+xeCPZXk4OcNJzuuhOjnz2nHu9IdusfgH1xWWw8qSSkeXNGDvLfWlhU66ZfOH ohJbULiomgVJCQnVSD8shdD/xZAGb2vPrLppaH82MxbyTAaNYI4VFJZo+0H5IRIm /xNS7SLULxrRVshGGOPAjbgX7KqmYC9sd2vKZFTiDcGhkiJQayOf/U8wc2UEIagr n1RdaSeddXh+cDdUMBMSUyCbEuSujtwPh9Wkg3C9VN4KTR8pMSXmV3sMlvsHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2em4dRt4agGteeJ8dqPDITEQKZAwHwYDVR0j BBgwFoAUlIpq2QwbMj6yM71wPYTtnz7+j2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzRtUWlrVHB1Wks5akFuU21Td3N6QzVvRVNIYmZIVUxTSGNjWlgxeGZz TDQvMC85NDhBNkFEOTBDMUIzMjNFQjIzM0JENzAzRDg0RUQ5RjNFRkU4RjY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0OEE2QUQ5MEMxQjMyM0VC MjMzQkQ3MDNEODRFRDlGM0VGRThGNjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzRtUWlrVHB1Wks5akFuU21Td3N6QzVvRVNIYmZIVUxTSGNjWlgxeGZzTDQvMC85 NDhBNkFEOTBDMUIzMjNFQjIzM0JENzAzRDg0RUQ5RjNFRkU4RjY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARv1UjrdPFrjiWasM6pr+U+x8ig81h3gu5w5zaON9sM2e98j4FlSwa18PPiRe TpFueFZ83Q/ePNbh6udZSOdlgHvM/qzo7E5Ks4c5aADeOCZLM4ELSDmsKwl8cDZa e8PYB7cm9d9jLJsytlJpapIhWYj/NXLOzcF8sWVZuqCtoaHC6/ShJbp7E8J8BfVY 5BonXp6X/EfZ8wcOwuOIiu433MOtaMDhl+VeZaukqskpfkOfxpdAwVTbWY7WwCgf 1dAfgLAnFCCOsMe6zjJemUWbOwQd5gJrpwUh/dZtfpydfEh3FDzzMetE8AIc+GiC bxUOWx3KYh0gZjN40ECgCIRaxw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:14:05 2025 by rpki-client