$ rpki-client -vvf rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft File: 48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft (raw, json) Hash identifier: FmIfqb3uqrpjQoB0GVnYY+QQ6Db4Fj+iBFHtrYy5Px4= Subject key identifier: 82:65:02:0D:D4:FA:E2:63:FB:9B:25:A1:F5:EB:9F:F6:D1:54:8F:90 Authority key identifier: 48:C2:D7:51:D7:A0:E9:A9:3A:E1:A1:B2:BC:A1:73:62:21:09:42:70 Certificate issuer: /CN=48C2D751D7A0E9A93AE1A1B2BCA1736221094270 Certificate serial: 4FA2CB674A4314FA271223A49988F14C445EDE07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer Subject info access: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft Manifest number: 029C Signing time: Wed 05 Nov 2025 02:01:20 +0000 Manifest this update: Wed 05 Nov 2025 01:56:20 +0000 Manifest next update: Thu 06 Nov 2025 05:37:20 +0000 Files and hashes: 1: 48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl (hash: wIZ6iF+iRn5Rjsz6DNNkqnemfNEdd7zBaw0gBF1V22E=) 2: 323830343a316336343a3a2f33322d313238203d3e203631363533.roa (hash: R1i7wfU/vm+41E4FqVAD1M8B+ZJ9hPK18Y2/XSsWU8E=) 3: 3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa (hash: qC/B8SMYhAsHEKLSMY35UYBptqzb84sbmlkvcvIyOWE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a2:cb:67:4a:43:14:fa:27:12:23:a4:99:88:f1:4c:44:5e:de:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C2D751D7A0E9A93AE1A1B2BCA1736221094270 Validity Not Before: Nov 5 01:56:20 2025 GMT Not After : Nov 6 05:37:20 2025 GMT Subject: CN=8265020DD4FAE263FB9B25A1F5EB9FF6D1548F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:d2:2a:f2:e6:bc:83:1c:5e:7e:66:18:03: 34:c2:1f:bd:b0:5d:3b:ea:3e:4e:28:ba:23:06:33: 94:1a:0a:15:f0:58:57:3d:11:ef:39:a2:bb:f8:67: 28:d5:a3:18:88:ac:35:ed:c3:3b:d9:7a:34:54:a0: d3:c6:0c:b9:73:f9:65:79:01:83:52:b7:56:95:c5: e1:69:35:07:1b:2f:e0:84:2f:3f:c7:8f:56:43:9c: a5:db:f0:60:25:e4:bb:34:5b:27:c8:8a:08:80:30: 9b:05:06:54:07:67:da:70:10:b5:36:5f:90:f7:e6: fe:b8:68:9e:a7:b4:e0:36:2b:4e:e6:b9:3e:cd:5b: da:78:0b:7a:27:c6:74:58:ca:f3:ba:c3:a8:60:ed: 55:e4:62:aa:42:ad:38:2a:b7:72:52:89:d2:fa:0b: 91:7c:94:b2:18:06:52:68:ea:12:08:a2:9c:f7:24: 50:4b:0b:ef:f2:ad:0b:53:e9:14:2e:91:27:35:c4: 9d:cd:b1:6d:ab:f0:e4:46:61:60:3a:7b:9c:b3:99: 27:14:6c:31:26:69:58:f5:c2:83:19:15:6f:6b:52: f7:c4:41:a2:49:5b:be:cc:a5:c9:02:50:ef:77:f3: 1c:ec:f8:28:52:a5:87:36:c6:dc:0d:f6:6a:30:9e: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:65:02:0D:D4:FA:E2:63:FB:9B:25:A1:F5:EB:9F:F6:D1:54:8F:90 X509v3 Authority Key Identifier: keyid:48:C2:D7:51:D7:A0:E9:A9:3A:E1:A1:B2:BC:A1:73:62:21:09:42:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:81:f1:74:08:d5:a9:04:8e:5e:91:29:6a:82:29:c5:8c:99: 0a:b1:57:fb:c5:8b:14:c6:5a:9b:10:de:f6:df:7e:9d:1e:65: 05:74:12:4f:13:04:05:ba:d9:f2:b6:30:f0:04:0c:c6:03:b0: d4:3d:59:e5:0a:6a:a2:db:58:39:44:b0:cb:98:10:c1:04:eb: 10:ff:58:84:c5:f9:25:d4:55:a5:de:9a:a2:25:aa:60:1a:8b: 03:63:61:ff:80:0f:7f:af:d5:b0:71:40:3b:f0:dd:01:6b:98: 0c:3d:20:6f:9b:8d:10:fd:29:51:a6:c1:3e:6c:65:83:a4:23: e1:2f:20:de:7c:15:ee:f9:6a:d4:1b:a0:eb:e0:7f:ea:b1:d0: 36:fd:85:47:9a:32:62:d1:cc:1a:5a:73:81:89:cf:05:e7:9d: 48:8b:41:7c:b7:8a:9e:4b:d7:09:d9:14:f1:14:58:64:6a:37: 0c:ba:99:7a:ab:df:6a:0e:be:63:59:29:3d:4a:0a:7a:4f:0a: 3e:c8:54:f0:40:44:24:1e:78:cf:45:e9:b0:72:d5:1a:f9:c2: 3d:a8:c4:08:a3:79:21:62:33:22:d0:e9:79:90:c4:bc:aa:f8: 5a:be:0d:6b:d2:68:57:e8:f4:bf:aa:cd:3c:d2:ef:43:3a:d8: aa:a8:0f:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT6LLZ0pDFPonEiOkmYjxTERe3gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMkQ3NTFEN0EwRTlBOTNBRTFBMUIyQkNBMTczNjIy MTA5NDI3MDAeFw0yNTExMDUwMTU2MjBaFw0yNTExMDYwNTM3MjBaMDMxMTAvBgNV BAMTKDgyNjUwMjBERDRGQUUyNjNGQjlCMjVBMUY1RUI5RkY2RDE1NDhGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDca9Iq8ua8gxxefmYYAzTCH72w XTvqPk4ouiMGM5QaChXwWFc9Ee85orv4ZyjVoxiIrDXtwzvZejRUoNPGDLlz+WV5 AYNSt1aVxeFpNQcbL+CELz/Hj1ZDnKXb8GAl5Ls0WyfIigiAMJsFBlQHZ9pwELU2 X5D35v64aJ6ntOA2K07muT7NW9p4C3onxnRYyvO6w6hg7VXkYqpCrTgqt3JSidL6 C5F8lLIYBlJo6hIIopz3JFBLC+/yrQtT6RQukSc1xJ3NsW2r8ORGYWA6e5yzmScU bDEmaVj1woMZFW9rUvfEQaJJW77MpckCUO938xzs+ChSpYc2xtwN9mownlDFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgmUCDdT64mP7myWh9euf9tFUj5AwHwYDVR0j BBgwFoAUSMLXUdeg6ak64aGyvKFzYiEJQnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJI WUovMC80OEMyRDc1MUQ3QTBFOUE5M0FFMUExQjJCQ0ExNzM2MjIxMDk0MjcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4QzJENzUxRDdBMEU5QTkz QUUxQTFCMkJDQTE3MzYyMjEwOTQyNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJIWUovMC80 OEMyRDc1MUQ3QTBFOUE5M0FFMUExQjJCQ0ExNzM2MjIxMDk0MjcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI4HxdAjVqQSOXpEpaoIpxYyZCrFX+8WLFMZamxDe9t9+nR5lBXQSTxMEBbrZ 8rYw8AQMxgOw1D1Z5QpqottYOUSwy5gQwQTrEP9YhMX5JdRVpd6aoiWqYBqLA2Nh /4APf6/VsHFAO/DdAWuYDD0gb5uNEP0pUabBPmxlg6Qj4S8g3nwV7vlq1Bug6+B/ 6rHQNv2FR5oyYtHMGlpzgYnPBeedSItBfLeKnkvXCdkU8RRYZGo3DLqZeqvfag6+ Y1kpPUoKek8KPshU8EBEJB54z0XpsHLVGvnCPajECKN5IWIzItDpeZDEvKr4Wr4N a9JoV+j0v6rNPNLvQzrYqqgPYw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:21 2025 by rpki-client