$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft File: 848EB2427D617D2F83AC459253A873E550C79E2D.mft (raw, json) Hash identifier: kE4jHtUtbCAxFMELrwYHeAuhWgyq8LDdr+mCRztzhCg= Subject key identifier: 7B:AF:B2:C6:88:7F:C0:60:B5:31:B2:DD:A5:29:7C:45:C7:A1:1D:1E Authority key identifier: 84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D Certificate issuer: /CN=848EB2427D617D2F83AC459253A873E550C79E2D Certificate serial: 5DC1B9AC336D629B7286DCB892F07C1683F2AAFB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft Manifest number: D1 Signing time: Tue 04 Nov 2025 18:08:49 +0000 Manifest this update: Tue 04 Nov 2025 18:03:49 +0000 Manifest next update: Wed 05 Nov 2025 19:15:49 +0000 Files and hashes: 1: 34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (hash: kVEUM0+/jn+r6zanlFczfAds1h+k32VTQiq8B3t1sbo=) 2: 848EB2427D617D2F83AC459253A873E550C79E2D.crl (hash: YtrbxyrDOYqNMfvCDTmQ2qICN15EIOEh6iVzE+NG9LI=) 3: 323830343a346331303a3a2f33322d3438203d3e20323637333437.roa (hash: 6ojMn0OC0/Tkj1yL1J7bJQxkUBcfNAQWyiS2pbokNQ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c1:b9:ac:33:6d:62:9b:72:86:dc:b8:92:f0:7c:16:83:f2:aa:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848EB2427D617D2F83AC459253A873E550C79E2D Validity Not Before: Nov 4 18:03:49 2025 GMT Not After : Nov 5 19:15:49 2025 GMT Subject: CN=7BAFB2C6887FC060B531B2DDA5297C45C7A11D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:14:3f:00:3b:69:90:80:2d:ea:9d:ad:38:a0: 4d:06:c1:80:68:a9:0c:97:f6:ff:81:2e:7e:55:b5: 5d:bd:70:da:2f:88:4a:4d:64:00:44:09:36:c9:71: e0:c2:0e:32:17:ff:a8:b5:50:02:23:8b:49:22:89: 2a:97:e9:dc:9a:ee:1d:57:07:08:71:28:2a:10:1d: 45:7b:e2:03:86:64:8a:34:03:7b:5e:09:06:29:4e: 88:79:9e:52:8b:5d:11:86:b5:15:4f:3b:8f:1a:c9: 31:f0:26:ce:d2:9e:cf:ac:44:45:29:a0:1b:06:10: 25:e8:c1:f2:40:a0:92:7f:ab:b2:a1:e0:e5:b3:c6: 37:fc:8c:7b:ba:91:79:9f:ff:9b:1c:16:ff:fe:0f: c9:a8:d6:30:93:fd:42:e4:96:45:63:28:e8:4f:d7: a8:fd:30:95:08:9e:6e:fc:1f:0f:11:16:11:30:f9: 90:e3:1e:c8:0d:7a:81:7b:07:83:3b:76:c4:ba:2a: 43:6d:e4:43:1f:44:a0:8a:81:cd:69:b7:a7:5a:c9: 91:70:97:27:80:f5:95:26:6e:76:66:96:cc:af:a1: 9a:32:63:d1:83:45:5d:80:81:18:7e:59:75:14:e0: 8a:91:79:c8:d4:7c:af:1d:f0:55:73:1a:1f:23:59: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AF:B2:C6:88:7F:C0:60:B5:31:B2:DD:A5:29:7C:45:C7:A1:1D:1E X509v3 Authority Key Identifier: keyid:84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:21:18:a1:19:55:50:76:4c:56:22:cd:e8:c7:46:5b:cb:ac: aa:3b:d9:78:d6:79:89:41:27:95:68:fe:56:02:0a:be:95:df: 14:07:b6:c5:b0:f0:3a:f7:4c:3b:90:24:7f:df:18:88:04:7e: 33:15:e0:fa:58:c3:2d:58:6e:40:c6:fc:65:df:b8:87:fa:d5: 49:22:40:37:4b:ed:d6:99:ab:96:e4:0a:ad:d5:76:3c:0f:ac: 9b:f6:ed:74:60:ee:f4:ef:0f:43:37:3d:c0:4f:b6:03:fa:16: ef:0d:65:95:51:16:af:8b:0b:64:b3:fb:f1:0c:52:73:c8:0e: a8:02:9a:40:33:80:46:1e:1e:62:c2:1d:df:48:44:e3:bf:e7: 24:89:31:53:ce:57:ee:d2:90:19:46:5e:8d:40:c4:e2:ad:6a: 9d:bf:10:39:fb:22:0c:ef:8d:5a:95:c4:cd:be:83:3b:7b:0f: 2f:3c:90:d3:1d:30:2f:c1:ce:89:4f:2d:67:b0:89:b2:c1:9b: 36:84:b3:b6:9e:c8:10:3d:c0:85:01:ca:f5:0c:e4:80:9a:bf: c5:ea:79:31:55:bd:d9:a8:b8:c7:e4:53:36:48:9c:65:3e:64: 6d:76:13:ca:77:6c:41:17:14:b3:6b:1e:1b:54:2f:c0:29:59: 08:e1:10:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXcG5rDNtYptyhty4kvB8FoPyqvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4RUIyNDI3RDYxN0QyRjgzQUM0NTkyNTNBODczRTU1 MEM3OUUyRDAeFw0yNTExMDQxODAzNDlaFw0yNTExMDUxOTE1NDlaMDMxMTAvBgNV BAMTKDdCQUZCMkM2ODg3RkMwNjBCNTMxQjJEREE1Mjk3QzQ1QzdBMTFEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0FD8AO2mQgC3qna04oE0GwYBo qQyX9v+BLn5VtV29cNoviEpNZABECTbJceDCDjIX/6i1UAIji0kiiSqX6dya7h1X BwhxKCoQHUV74gOGZIo0A3teCQYpToh5nlKLXRGGtRVPO48ayTHwJs7Sns+sREUp oBsGECXowfJAoJJ/q7Kh4OWzxjf8jHu6kXmf/5scFv/+D8mo1jCT/ULklkVjKOhP 16j9MJUInm78Hw8RFhEw+ZDjHsgNeoF7B4M7dsS6KkNt5EMfRKCKgc1pt6dayZFw lyeA9ZUmbnZmlsyvoZoyY9GDRV2AgRh+WXUU4IqRecjUfK8d8FVzGh8jWdKhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe6+yxoh/wGC1MbLdpSl8RcehHR4wHwYDVR0j BBgwFoAUhI6yQn1hfS+DrEWSU6hz5VDHni0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFC aTYvMC84NDhFQjI0MjdENjE3RDJGODNBQzQ1OTI1M0E4NzNFNTUwQzc5RTJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OEVCMjQyN0Q2MTdEMkY4 M0FDNDU5MjUzQTg3M0U1NTBDNzlFMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFCaTYvMC84 NDhFQjI0MjdENjE3RDJGODNBQzQ1OTI1M0E4NzNFNTUwQzc5RTJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyEYoRlVUHZMViLN6MdGW8usqjvZeNZ5iUEnlWj+VgIKvpXfFAe2xbDwOvdM O5Akf98YiAR+MxXg+ljDLVhuQMb8Zd+4h/rVSSJAN0vt1pmrluQKrdV2PA+sm/bt dGDu9O8PQzc9wE+2A/oW7w1llVEWr4sLZLP78QxSc8gOqAKaQDOARh4eYsId30hE 47/nJIkxU85X7tKQGUZejUDE4q1qnb8QOfsiDO+NWpXEzb6DO3sPLzyQ0x0wL8HO iU8tZ7CJssGbNoSztp7IED3AhQHK9QzkgJq/xep5MVW92ai4x+RTNkicZT5kbXYT yndsQRcUs2seG1QvwClZCOEQZg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:33 2025 by rpki-client