$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft File: 48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft (raw, json) Hash identifier: akE8+oYYxzPiDoG0REr77WOuJJWfvYb2z5m6ObpHCRc= Subject key identifier: 22:20:AA:23:3E:23:26:03:7D:82:4E:31:80:F7:04:66:66:99:ED:69 Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A Certificate issuer: /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A Certificate serial: 19D62AC5E50C92130AB86594737DE50D9041164C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft Manifest number: 02FF Signing time: Mon 20 Oct 2025 01:59:51 +0000 Manifest this update: Mon 20 Oct 2025 01:54:51 +0000 Manifest next update: Tue 21 Oct 2025 02:36:51 +0000 Files and hashes: 1: 48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl (hash: lL+HuZ/Gj1GtZEJ59/xFltx/Mk+88EuZQZgvu+eH4Kc=) 2: 3137392e34392e3234382e302f32322d3234203d3e20323731323231.roa (hash: Dv6hxsDroS4vlXUuIA9sQTKVJgCR9NtSdnPeeNt1eEk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d6:2a:c5:e5:0c:92:13:0a:b8:65:94:73:7d:e5:0d:90:41:16:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A Validity Not Before: Oct 20 01:54:51 2025 GMT Not After : Oct 21 02:36:51 2025 GMT Subject: CN=2220AA233E2326037D824E3180F704666699ED69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:50:88:8b:37:a0:54:5d:4f:b9:cd:55:83: fb:d9:d7:55:d2:76:48:34:5e:96:16:32:73:7f:cd: 77:75:b6:8d:8e:02:03:af:9d:0b:81:79:76:f2:39: 9a:d2:b1:1e:3b:40:df:e0:33:98:1b:2e:79:66:34: 6c:1c:f8:98:9d:ed:0f:82:4b:30:92:13:f7:31:b9: 0e:98:cd:65:e7:23:a4:27:7a:c2:c5:be:b9:62:76: 04:d3:da:94:72:c6:79:2d:c8:00:83:cc:c1:58:41: d8:86:c7:6b:f8:eb:2b:dc:a7:6e:36:3f:cc:3f:15: 93:98:ba:a7:c9:e4:d4:5b:33:cc:a6:c3:f2:2a:be: fb:12:31:cc:d6:2c:d2:b5:d7:63:d9:10:af:94:63: b6:5d:35:3d:6c:37:11:81:91:5e:f7:43:7d:e0:d7: 97:11:70:16:1b:f2:1a:28:2a:df:c4:44:1d:64:44: 15:05:4e:d4:74:68:27:e8:1b:a4:83:75:44:ff:9e: 95:84:e1:f3:5f:23:69:9d:41:13:61:23:da:87:ef: 6f:5c:e8:36:f7:67:d1:ed:0b:38:5a:15:36:c3:23: 76:ad:2c:40:1e:b4:3d:f3:44:77:77:2d:77:00:50: 6e:c0:04:67:1e:90:fe:39:c4:d8:9f:6e:7e:a8:db: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:20:AA:23:3E:23:26:03:7D:82:4E:31:80:F7:04:66:66:99:ED:69 X509v3 Authority Key Identifier: keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:f1:14:24:9f:a8:8b:7e:ab:07:9e:65:0c:66:5e:e2:6e: 91:3a:b8:6a:65:59:da:6a:46:0a:be:8b:77:d2:53:57:b4:2d: c0:d8:f4:c7:36:8e:6a:e0:44:4f:0f:33:42:74:63:ed:34:84: ea:19:cb:e1:c0:ac:8a:7c:56:94:a8:d2:2f:57:0f:82:6c:61: 47:08:15:cd:48:ea:50:44:78:a5:ab:04:73:e1:a1:24:db:63: 78:28:e1:aa:1f:56:f3:c8:8a:b8:51:a3:19:9f:b7:4b:6d:db: c7:78:51:26:82:a5:51:28:9e:35:f1:68:55:2c:72:21:dc:42: ef:52:81:54:44:97:24:61:4c:8c:19:75:b2:84:97:31:2a:aa: d6:b4:bf:21:27:ca:fe:13:af:b4:7b:08:e0:48:89:e7:71:04: 1b:83:e9:2c:fe:89:5e:5b:84:60:1e:66:de:0a:e9:5d:13:53: 88:76:93:17:aa:25:48:ea:20:84:c8:98:b8:cc:33:b8:eb:bb: bf:b2:ad:dd:23:9b:22:3e:58:63:76:a5:6e:49:6a:ca:49:3b: 62:c5:71:50:0c:cc:a0:03:5f:59:0b:42:24:19:47:24:d5:53: 1d:f4:32:55:51:7d:7a:c6:cd:e6:20:dc:11:fa:e3:3a:83:fe: 5a:ee:85:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGdYqxeUMkhMKuGWUc33lDZBBFkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhEMTdDQTI5NkI4QUY3MThDRjRGODJBQkNEMDgyNkJC NzZCQ0QwQTAeFw0yNTEwMjAwMTU0NTFaFw0yNTEwMjEwMjM2NTFaMDMxMTAvBgNV BAMTKDIyMjBBQTIzM0UyMzI2MDM3RDgyNEUzMTgwRjcwNDY2NjY5OUVENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAn1CIizegVF1Puc1Vg/vZ11XS dkg0XpYWMnN/zXd1to2OAgOvnQuBeXbyOZrSsR47QN/gM5gbLnlmNGwc+Jid7Q+C SzCSE/cxuQ6YzWXnI6QnesLFvrlidgTT2pRyxnktyACDzMFYQdiGx2v46yvcp242 P8w/FZOYuqfJ5NRbM8ymw/IqvvsSMczWLNK112PZEK+UY7ZdNT1sNxGBkV73Q33g 15cRcBYb8hooKt/ERB1kRBUFTtR0aCfoG6SDdUT/npWE4fNfI2mdQRNhI9qH729c 6Db3Z9HtCzhaFTbDI3atLEAetD3zRHd3LXcAUG7ABGcekP45xNifbn6o2+qJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIiCqIz4jJgN9gk4xgPcEZmaZ7WkwHwYDVR0j BBgwFoAUSNF8opa4r3GM9PgqvNCCa7drzQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTl4aEZob1p5WmlGdVNkR0xDU0JGVFNEMVh6c3lEUnA0OUFUSkpqRTJi aWcvMS80OEQxN0NBMjk2QjhBRjcxOENGNEY4MkFCQ0QwODI2QkI3NkJDRDBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4RDE3Q0EyOTZCOEFGNzE4 Q0Y0RjgyQUJDRDA4MjZCQjc2QkNEMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTl4aEZob1p5WmlGdVNkR0xDU0JGVFNEMVh6c3lEUnA0OUFUSkpqRTJiaWcvMS80 OEQxN0NBMjk2QjhBRjcxOENGNEY4MkFCQ0QwODI2QkI3NkJDRDBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdk3xFCSfqIt+qweeZQxmXuJukTq4amVZ2mpGCr6Ld9JTV7QtwNj0xzaOauBE Tw8zQnRj7TSE6hnL4cCsinxWlKjSL1cPgmxhRwgVzUjqUER4pasEc+GhJNtjeCjh qh9W88iKuFGjGZ+3S23bx3hRJoKlUSieNfFoVSxyIdxC71KBVESXJGFMjBl1soSX MSqq1rS/ISfK/hOvtHsI4EiJ53EEG4PpLP6JXluEYB5m3grpXRNTiHaTF6olSOog hMiYuMwzuOu7v7Kt3SObIj5YY3albklqykk7YsVxUAzMoANfWQtCJBlHJNVTHfQy VVF9esbN5iDcEfrjOoP+Wu6FKw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:36 2025 by rpki-client