$ rpki-client -vvf rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft File: 48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft (raw, json) Hash identifier: xc8lc0x3DmdmsVAysLGE6cn1QY0GQgCDOE+baBX0A9M= Subject key identifier: 90:FA:0D:EF:02:7A:C6:09:C0:71:22:38:CA:6F:83:BB:3B:39:77:F7 Authority key identifier: 48:C2:D7:51:D7:A0:E9:A9:3A:E1:A1:B2:BC:A1:73:62:21:09:42:70 Certificate issuer: /CN=48C2D751D7A0E9A93AE1A1B2BCA1736221094270 Certificate serial: 2C3CB582699F0CAF7708F58D02CB46C47730243C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer Subject info access: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft Manifest number: 0299 Signing time: Sun 02 Nov 2025 19:06:17 +0000 Manifest this update: Sun 02 Nov 2025 19:01:17 +0000 Manifest next update: Mon 03 Nov 2025 20:07:17 +0000 Files and hashes: 1: 323830343a316336343a3a2f33322d313238203d3e203631363533.roa (hash: R1i7wfU/vm+41E4FqVAD1M8B+ZJ9hPK18Y2/XSsWU8E=) 2: 3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa (hash: qC/B8SMYhAsHEKLSMY35UYBptqzb84sbmlkvcvIyOWE=) 3: 48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl (hash: yaQf2H1uw3gcODbWI+cQkBDLuNxAk6MAT3Tlky4iIn0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3c:b5:82:69:9f:0c:af:77:08:f5:8d:02:cb:46:c4:77:30:24:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C2D751D7A0E9A93AE1A1B2BCA1736221094270 Validity Not Before: Nov 2 19:01:17 2025 GMT Not After : Nov 3 20:07:17 2025 GMT Subject: CN=90FA0DEF027AC609C0712238CA6F83BB3B3977F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:5c:8a:2e:9e:1b:1d:cd:11:e4:5f:6d:5d: 60:8b:df:67:eb:a3:7b:8f:95:97:85:58:42:4f:0f: 26:cd:be:53:2a:17:ec:42:07:9b:d0:6b:5e:a3:32: 79:ea:1c:b9:19:43:44:a0:10:ef:8a:25:95:65:cf: 98:29:8a:c1:98:91:d8:27:6b:24:e6:ea:5f:52:19: 1d:d5:8d:2f:69:3e:88:36:d8:7e:11:50:70:50:c3: fe:2c:82:46:20:02:5f:a8:bf:a1:f3:d8:da:49:35: a1:1c:43:7f:56:43:d6:02:ac:f1:51:d4:11:27:3e: 81:eb:bb:f3:d4:b5:cd:a0:0b:e2:18:a2:67:a9:64: 0b:d7:8b:29:5a:4e:97:cd:41:12:49:2c:b8:ef:d1: 3d:39:e8:fc:80:95:50:67:cd:a2:9a:ab:c5:c5:38: 82:46:0d:76:e5:bc:08:68:85:2d:b0:58:23:b8:31: fb:e3:a8:48:66:37:95:4e:e9:96:1f:8f:9b:71:3b: ba:72:ea:68:5d:3a:97:f2:6a:b1:d7:0d:92:30:e9: fe:a7:7f:25:f6:bd:f3:6a:b0:46:45:45:3f:07:fa: ef:45:72:d6:7a:3c:11:a0:63:ae:cf:0d:2b:ad:22: e8:b8:ea:1a:d0:6f:1d:c8:be:34:25:c4:d7:25:54: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:0D:EF:02:7A:C6:09:C0:71:22:38:CA:6F:83:BB:3B:39:77:F7 X509v3 Authority Key Identifier: keyid:48:C2:D7:51:D7:A0:E9:A9:3A:E1:A1:B2:BC:A1:73:62:21:09:42:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:06:93:2f:db:a2:29:7c:dc:46:a9:37:46:a8:d3:ef:1e:ce: 93:62:59:7c:40:b4:ca:46:b3:b5:34:71:14:cb:57:3a:e3:e4: c3:68:e3:79:b6:76:31:43:23:6a:85:18:8a:56:ba:ce:f0:1a: 31:39:3c:81:45:05:52:3f:c3:88:85:42:0d:06:97:46:70:e3: 7e:b5:cf:14:f1:82:fa:fd:a5:e7:e1:17:4b:c3:96:e7:40:87: 5b:7e:01:cc:d6:fd:63:f8:1e:ca:a4:38:d3:8c:cb:0d:eb:75: 51:68:c9:14:9f:79:64:3e:89:75:84:f0:02:e4:28:a6:e5:0f: 80:b5:71:f6:d3:ef:c4:09:54:10:e6:8f:58:06:0d:56:66:a3: 8c:3c:c4:44:48:48:58:d3:1f:24:0a:68:b8:89:08:27:3b:1a: 04:5c:5e:50:26:53:4d:92:67:ff:ea:7b:f1:4e:f9:c2:3c:1b: bf:b6:19:b1:29:c2:fd:fb:2e:89:98:eb:10:3b:fa:3e:53:8f: a4:ac:61:e8:c6:90:93:d2:3e:57:77:a4:84:59:c9:30:e3:17: 3c:e1:e4:33:92:c0:c0:bb:38:f7:ac:56:61:cc:8e:4a:44:1e: f4:e4:b7:54:36:f3:a5:43:e3:10:83:17:29:a3:0b:11:ce:e6: 48:35:1b:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULDy1gmmfDK93CPWNAstGxHcwJDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMkQ3NTFEN0EwRTlBOTNBRTFBMUIyQkNBMTczNjIy MTA5NDI3MDAeFw0yNTExMDIxOTAxMTdaFw0yNTExMDMyMDA3MTdaMDMxMTAvBgNV BAMTKDkwRkEwREVGMDI3QUM2MDlDMDcxMjIzOENBNkY4M0JCM0IzOTc3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYlyKLp4bHc0R5F9tXWCL32fr o3uPlZeFWEJPDybNvlMqF+xCB5vQa16jMnnqHLkZQ0SgEO+KJZVlz5gpisGYkdgn ayTm6l9SGR3VjS9pPog22H4RUHBQw/4sgkYgAl+ov6Hz2NpJNaEcQ39WQ9YCrPFR 1BEnPoHru/PUtc2gC+IYomepZAvXiylaTpfNQRJJLLjv0T056PyAlVBnzaKaq8XF OIJGDXblvAhohS2wWCO4MfvjqEhmN5VO6ZYfj5txO7py6mhdOpfyarHXDZIw6f6n fyX2vfNqsEZFRT8H+u9FctZ6PBGgY67PDSutIui46hrQbx3IvjQlxNclVB1HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkPoN7wJ6xgnAcSI4ym+Duzs5d/cwHwYDVR0j BBgwFoAUSMLXUdeg6ak64aGyvKFzYiEJQnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJI WUovMC80OEMyRDc1MUQ3QTBFOUE5M0FFMUExQjJCQ0ExNzM2MjIxMDk0MjcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4QzJENzUxRDdBMEU5QTkz QUUxQTFCMkJDQTE3MzYyMjEwOTQyNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJIWUovMC80 OEMyRDc1MUQ3QTBFOUE5M0FFMUExQjJCQ0ExNzM2MjIxMDk0MjcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQaTL9uiKXzcRqk3RqjT7x7Ok2JZfEC0ykaztTRxFMtXOuPkw2jjebZ2MUMj aoUYila6zvAaMTk8gUUFUj/DiIVCDQaXRnDjfrXPFPGC+v2l5+EXS8OW50CHW34B zNb9Y/geyqQ404zLDet1UWjJFJ95ZD6JdYTwAuQopuUPgLVx9tPvxAlUEOaPWAYN VmajjDzEREhIWNMfJApouIkIJzsaBFxeUCZTTZJn/+p78U75wjwbv7YZsSnC/fsu iZjrEDv6PlOPpKxh6MaQk9I+V3ekhFnJMOMXPOHkM5LAwLs496xWYcyOSkQe9OS3 VDbzpUPjEIMXKaMLEc7mSDUbbA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:06 2025 by rpki-client