$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json) Hash identifier: giUJn+ikAjAwTxKC89je7L7N050RSvIl95DE6TLz+bs= Subject key identifier: 3C:71:ED:23:EB:72:F7:FC:7E:3B:16:B6:52:5C:BC:DE:55:72:37:B5 Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Certificate serial: 379C57B5C5C1018352B7ED06A42D0D7A2F97B3CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft Manifest number: 02FF Signing time: Tue 04 Nov 2025 16:34:20 +0000 Manifest this update: Tue 04 Nov 2025 16:29:20 +0000 Manifest next update: Wed 05 Nov 2025 20:20:20 +0000 Files and hashes: 1: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=) 2: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: WILowgk8XPvl153t6ykhsLjH+LpRbAG1fkUtpxEFZQQ=) 3: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:57:b5:c5:c1:01:83:52:b7:ed:06:a4:2d:0d:7a:2f:97:b3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Validity Not Before: Nov 4 16:29:20 2025 GMT Not After : Nov 5 20:20:20 2025 GMT Subject: CN=3C71ED23EB72F7FC7E3B16B6525CBCDE557237B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d6:b5:d0:4a:3d:31:7c:62:a5:85:70:3a:25: 08:51:f1:7c:19:f1:b8:7f:37:df:91:1d:9e:63:ca: 8d:3c:a8:fb:11:82:a5:ff:50:c4:19:ff:2e:60:96: 07:cb:96:90:ba:9a:3a:72:94:13:53:92:58:83:6a: cb:ab:5b:e4:84:b2:13:38:6b:ca:21:c8:ed:ad:89: e0:29:c3:c8:05:3b:17:0a:7b:79:13:9a:b3:a6:70: df:d2:57:c8:e1:76:86:0c:5d:66:9f:29:c9:14:92: 70:72:c9:ac:13:09:2d:41:26:be:92:39:40:b3:b1: 59:3d:98:c3:3d:42:eb:eb:42:82:6c:9a:9f:38:ce: 35:c6:a4:5a:5a:da:13:10:91:69:9b:72:9a:17:c2: 15:62:62:5e:54:3d:65:95:42:f9:11:84:1c:77:53: c6:cc:99:11:fc:02:95:16:f5:ed:e5:93:a3:48:78: 0e:11:a2:3a:66:de:ba:5d:6e:5b:fc:ca:13:bb:48: a3:03:9c:5d:17:f4:21:09:6f:1e:85:3f:3a:62:39: fb:d6:1c:b9:f5:83:cb:a9:14:78:f5:ee:5b:86:f4: e6:3d:5c:ba:6c:2b:af:9c:c6:86:cf:0d:36:15:d7: 9e:cb:3a:4d:3f:77:70:13:73:73:52:dc:73:38:89: 19:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:71:ED:23:EB:72:F7:FC:7E:3B:16:B6:52:5C:BC:DE:55:72:37:B5 X509v3 Authority Key Identifier: keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e5:ce:df:dc:1d:96:b1:e2:88:32:d3:0a:c5:a5:ce:de:89: 82:76:63:bf:ed:3f:87:f8:47:62:d5:21:c4:34:00:5d:08:e1: a3:d9:36:e2:64:01:47:d9:84:bc:4c:53:99:b2:a8:77:d8:2c: dd:1d:79:3e:de:71:8f:ef:76:fb:9a:31:c7:4c:92:ab:77:e9: 26:52:d8:60:29:61:8d:0b:3d:3f:02:05:68:db:c2:0c:e9:7f: 4e:5e:97:23:45:ac:bb:fd:08:f1:90:d4:bb:8b:de:e2:3d:2b: 6c:f4:40:cb:95:56:74:41:38:c4:c7:cc:a5:4b:d9:0a:f5:2d: ee:18:28:cf:96:63:52:54:31:27:2f:c7:34:52:e2:30:11:65: 40:32:89:bd:f0:83:b5:3f:96:9a:59:98:77:6c:c8:a0:2f:6a: 2a:51:c7:0a:82:03:28:5e:35:ad:fb:73:a5:ae:b1:c4:26:ec: ca:35:50:78:34:46:df:bd:7e:cc:7a:35:47:ab:02:65:31:b0: 5c:f5:79:94:70:3a:08:a4:1a:a5:36:35:e7:5e:98:50:09:9c: bd:fd:60:6c:8d:d4:aa:e1:4a:fb:47:2b:e0:0d:d9:c6:d9:9d: 03:90:fc:bf:5b:64:44:47:09:65:38:62:dd:5f:2c:b7:67:e4: b6:f6:cd:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN5xXtcXBAYNSt+0GpC0Nei+Xs84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD RDhBMjIzRjAeFw0yNTExMDQxNjI5MjBaFw0yNTExMDUyMDIwMjBaMDMxMTAvBgNV BAMTKDNDNzFFRDIzRUI3MkY3RkM3RTNCMTZCNjUyNUNCQ0RFNTU3MjM3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD61rXQSj0xfGKlhXA6JQhR8XwZ 8bh/N9+RHZ5jyo08qPsRgqX/UMQZ/y5glgfLlpC6mjpylBNTkliDasurW+SEshM4 a8ohyO2tieApw8gFOxcKe3kTmrOmcN/SV8jhdoYMXWafKckUknByyawTCS1BJr6S OUCzsVk9mMM9QuvrQoJsmp84zjXGpFpa2hMQkWmbcpoXwhViYl5UPWWVQvkRhBx3 U8bMmRH8ApUW9e3lk6NIeA4Rojpm3rpdblv8yhO7SKMDnF0X9CEJbx6FPzpiOfvW HLn1g8upFHj17luG9OY9XLpsK6+cxobPDTYV157LOk0/d3ATc3NS3HM4iRnlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPHHtI+ty9/x+Oxa2Uly83lVyN7UwHwYDVR0j BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1 Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACeXO39wdlrHiiDLTCsWlzt6JgnZjv+0/h/hHYtUhxDQAXQjho9k24mQBR9mE vExTmbKod9gs3R15Pt5xj+92+5oxx0ySq3fpJlLYYClhjQs9PwIFaNvCDOl/Tl6X I0Wsu/0I8ZDUu4ve4j0rbPRAy5VWdEE4xMfMpUvZCvUt7hgoz5ZjUlQxJy/HNFLi MBFlQDKJvfCDtT+WmlmYd2zIoC9qKlHHCoIDKF41rftzpa6xxCbsyjVQeDRG371+ zHo1R6sCZTGwXPV5lHA6CKQapTY1516YUAmcvf1gbI3UquFK+0cr4A3ZxtmdA5D8 v1tkREcJZThi3V8st2fktvbN3g== -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:13 2025 by rpki-client