$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json) Hash identifier: 5ojFUlBxSJsSXlut8VLVPtSMJm+VNN5SnbGExgJSWdQ= Subject key identifier: 83:DD:13:6A:34:81:71:5D:DA:05:4A:0E:FE:1A:BC:06:DD:58:8F:F9 Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Certificate serial: 1B9FDEB91AF627BFC5E9CD0F4CA066CCB76CDBB1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft Manifest number: 02EB Signing time: Mon 20 Oct 2025 15:18:54 +0000 Manifest this update: Mon 20 Oct 2025 15:13:54 +0000 Manifest next update: Tue 21 Oct 2025 16:53:54 +0000 Files and hashes: 1: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: amJSv0pg3ZCfAbfj9AA/LuP5w8j88Dyk7ZscwFetfVk=) 2: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=) 3: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9f:de:b9:1a:f6:27:bf:c5:e9:cd:0f:4c:a0:66:cc:b7:6c:db:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Validity Not Before: Oct 20 15:13:54 2025 GMT Not After : Oct 21 16:53:54 2025 GMT Subject: CN=83DD136A3481715DDA054A0EFE1ABC06DD588FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:9f:91:75:50:a2:7c:a8:ea:b0:f8:aa:b7: c8:2c:60:10:51:54:54:da:b5:44:c2:e2:3a:30:d2: 23:0e:bf:96:a4:cc:d6:60:3b:0f:b6:8f:9e:9f:4a: c4:0f:03:b9:57:cd:de:de:23:30:e7:31:e8:92:ac: b6:72:8b:f4:73:a6:70:99:59:ed:b3:54:98:b2:ac: ec:0e:ca:72:4c:f2:12:0e:27:14:57:82:29:61:0f: d5:85:7b:1a:3b:e8:36:04:fe:30:28:64:92:56:80: 03:6a:ec:4c:e2:d9:92:98:78:79:ca:e8:ac:e7:5c: dd:52:45:6d:8a:39:e7:a3:cc:e1:4f:47:a1:4d:cd: 94:ab:aa:b9:12:23:59:3c:bc:02:b5:87:84:71:11: f4:16:05:53:66:06:8f:78:59:ce:cc:01:fd:e2:21: cb:35:39:62:ec:ac:db:11:34:2a:9e:06:3d:77:ab: 15:70:96:2e:b3:7a:29:60:63:02:bc:bc:cc:c6:f4: 42:70:c9:9a:3b:0b:f0:c6:5a:f6:c5:88:02:b4:fd: ca:6b:ee:e5:1a:6c:cf:10:2c:2e:ec:11:07:fd:39: 07:5c:06:3e:2d:aa:fa:ca:1d:1f:63:ca:5c:bd:f2: 5f:dc:9c:2e:15:23:97:19:75:17:77:38:fb:8e:42: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:13:6A:34:81:71:5D:DA:05:4A:0E:FE:1A:BC:06:DD:58:8F:F9 X509v3 Authority Key Identifier: keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ee:8c:2c:ba:b1:97:bd:13:92:8d:d1:c0:e5:4b:cd:20:f6: 99:e6:e3:f1:a7:6f:b3:5c:0a:83:2f:80:4d:f6:46:08:66:45: d8:35:16:1d:de:a6:a3:fe:e5:71:c2:23:24:7e:b2:3e:f1:73: cb:c0:7f:19:22:7f:9a:20:77:27:68:f2:55:90:96:0b:12:ba: 6d:82:72:00:a3:84:00:3a:16:c4:2f:a6:4c:5e:37:32:a7:6b: 97:66:47:d1:6e:ff:af:e2:31:b3:20:d6:5a:90:fb:de:1f:51: 72:98:d2:53:e7:e4:46:46:1b:68:e4:91:ec:4b:52:b5:10:b0: b1:53:5c:f0:d6:2c:fd:a9:1f:2b:58:81:f9:3f:b2:33:b7:aa: be:ab:a1:43:ef:0e:4d:08:ac:ee:47:5b:70:d7:7b:df:e9:be: 8e:71:29:82:d7:d7:f1:f0:69:27:23:2c:e1:ab:15:a0:2b:6d: b2:ef:b2:46:6b:d3:8e:f4:c4:53:b1:fe:9c:9c:b8:20:5d:0e: 40:b0:b0:6b:12:31:7b:d2:3b:a7:17:f4:e3:18:f4:8e:47:1a: b5:02:11:87:f0:a0:cf:9c:ce:b3:b3:d2:49:00:4a:2f:df:dd: 70:d2:69:68:3c:ce:d3:52:35:16:ec:99:94:c9:38:28:3f:a1: eb:9d:d0:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG5/euRr2J7/F6c0PTKBmzLds27EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD RDhBMjIzRjAeFw0yNTEwMjAxNTEzNTRaFw0yNTEwMjExNjUzNTRaMDMxMTAvBgNV BAMTKDgzREQxMzZBMzQ4MTcxNUREQTA1NEEwRUZFMUFCQzA2REQ1ODhGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxf5+RdVCifKjqsPiqt8gsYBBR VFTatUTC4jow0iMOv5akzNZgOw+2j56fSsQPA7lXzd7eIzDnMeiSrLZyi/RzpnCZ We2zVJiyrOwOynJM8hIOJxRXgilhD9WFexo76DYE/jAoZJJWgANq7Ezi2ZKYeHnK 6KznXN1SRW2KOeejzOFPR6FNzZSrqrkSI1k8vAK1h4RxEfQWBVNmBo94Wc7MAf3i Ics1OWLsrNsRNCqeBj13qxVwli6zeilgYwK8vMzG9EJwyZo7C/DGWvbFiAK0/cpr 7uUabM8QLC7sEQf9OQdcBj4tqvrKHR9jyly98l/cnC4VI5cZdRd3OPuOQpkJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg90TajSBcV3aBUoO/hq8Bt1Yj/kwHwYDVR0j BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1 Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOe6MLLqxl70Tko3RwOVLzSD2mebj8advs1wKgy+ATfZGCGZF2DUWHd6mo/7l ccIjJH6yPvFzy8B/GSJ/miB3J2jyVZCWCxK6bYJyAKOEADoWxC+mTF43Mqdrl2ZH 0W7/r+IxsyDWWpD73h9RcpjSU+fkRkYbaOSR7EtStRCwsVNc8NYs/akfK1iB+T+y M7eqvquhQ+8OTQis7kdbcNd73+m+jnEpgtfX8fBpJyMs4asVoCttsu+yRmvTjvTE U7H+nJy4IF0OQLCwaxIxe9I7pxf04xj0jkcatQIRh/Cgz5zOs7PSSQBKL9/dcNJp aDzO01I1FuyZlMk4KD+h653Q1g== -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:11 2025 by rpki-client