$ rpki-client -vvf rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft File: 2917CE017809B6041B895DCC93EFF28388A27E5E.mft (raw, json) Hash identifier: h5+q7PvQGtd1s7xHtH8OWdU6HKjaA6ctC5brceqO/Es= Subject key identifier: 6F:86:A9:C4:81:A9:92:3D:FA:4B:C3:AE:30:E7:99:42:35:57:C2:6D Authority key identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E Certificate issuer: /CN=2917CE017809B6041B895DCC93EFF28388A27E5E Certificate serial: 282F0A7F4F2B524B5FE5DA498CC4BDFD99D95E7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft Manifest number: 40 Signing time: Mon 20 Oct 2025 11:28:00 +0000 Manifest this update: Mon 20 Oct 2025 11:23:00 +0000 Manifest next update: Tue 21 Oct 2025 12:41:00 +0000 Files and hashes: 1: 32342e3135322e302e302f32322d3332203d3e20323639343831.roa (hash: mrYj5PfHpVIg25olFqGJ7bb6lin+ykVvEDj0EOB/IzM=) 2: 34352e3138372e3138302e302f32322d3332203d3e20323639343831.roa (hash: QlSCqtGUYaZI4ilpEf6rQRrlbybda/U4cpUItDoNsjA=) 3: 2917CE017809B6041B895DCC93EFF28388A27E5E.crl (hash: XfGqO4/jvRc0o4a3qkGMV2kyXw6bFF02EMGvgw5vfpc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2f:0a:7f:4f:2b:52:4b:5f:e5:da:49:8c:c4:bd:fd:99:d9:5e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2917CE017809B6041B895DCC93EFF28388A27E5E Validity Not Before: Oct 20 11:23:00 2025 GMT Not After : Oct 21 12:41:00 2025 GMT Subject: CN=6F86A9C481A9923DFA4BC3AE30E799423557C26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7d:9e:c9:55:4f:fc:a2:00:14:f0:e4:0c:33: af:69:46:9d:29:02:bc:a4:d7:f2:36:ce:bc:58:e8: 19:df:63:b6:dc:47:ef:1f:e5:9f:09:fa:5d:49:81: 58:8c:9a:66:cb:c8:d6:7e:31:06:ad:2c:7b:a2:f8: 55:42:bb:77:66:37:61:c0:aa:62:ae:23:25:f9:92: 0e:37:2e:8a:97:e2:d6:13:d1:2a:3b:19:b6:83:5f: 4a:cc:19:2c:c1:0e:ca:47:05:8a:3d:8a:af:16:8e: 70:4d:3f:9d:90:67:36:9e:f2:91:d5:c2:7b:73:51: 27:e5:80:c2:03:ad:fc:8b:b7:0c:2f:2c:a4:51:f9: 63:20:e2:92:a1:26:48:6a:b9:c9:6f:5d:eb:56:59: 57:38:37:fb:89:f9:41:73:32:e4:cf:54:e2:48:4d: 40:cb:e3:53:4a:b3:5b:d0:52:61:6c:93:38:b1:8b: 88:00:3b:9a:c7:c2:1b:d1:52:0d:ef:2a:d4:a6:16: 2a:be:88:e3:4f:f0:dc:48:df:18:93:aa:66:14:ab: 1d:5d:82:18:6d:f6:cf:e0:a3:48:d4:56:c7:f1:58: 4a:a7:f0:f4:f6:1c:72:19:7c:f0:63:9c:1c:b9:f2: 09:9c:de:28:ec:1e:ef:ed:d6:75:d4:3b:90:ed:76: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:86:A9:C4:81:A9:92:3D:FA:4B:C3:AE:30:E7:99:42:35:57:C2:6D X509v3 Authority Key Identifier: keyid:29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:65:c8:3d:95:55:61:18:b1:b1:c4:dd:3e:27:2b:e4:e4:60: ff:78:ab:a4:7b:95:d5:42:76:ca:61:37:98:c3:68:2c:0c:b1: 47:77:04:c8:60:c9:bc:8d:3f:ea:7e:53:91:e1:cf:9a:4b:a8: 3c:e9:d7:ef:59:19:65:3a:87:59:b7:b3:e7:7a:68:c3:02:10: 82:25:24:7b:f1:94:8d:de:82:0b:28:58:dc:45:f0:f6:9d:09: af:90:2e:e8:48:ff:c8:9f:cd:f2:d7:b3:e7:e4:de:35:1d:89: 38:09:a2:47:b5:cb:92:a0:15:f0:72:12:49:78:49:7b:4d:15: 73:51:ab:04:23:9f:fe:d4:c7:f5:81:d1:5c:77:be:e7:b9:7a: 4e:da:3b:70:52:22:1e:ce:db:f7:34:9d:89:c8:3c:9b:2e:e7: d6:02:6d:56:a7:5e:8d:77:21:88:54:46:a6:1f:09:8c:26:49: 67:90:80:d3:14:e9:1b:18:98:a8:de:3c:21:cd:5f:66:7c:a6: 50:10:9c:03:6e:4d:9d:81:1b:06:1f:39:45:e6:45:2f:6e:9a: c1:1b:1c:97:b6:b3:14:5c:b0:87:84:36:bd:b5:b6:1f:b9:4b: 60:30:38:56:92:e7:c2:a5:72:e3:71:36:fd:57:0a:9c:09:46: 71:47:15:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKC8Kf08rUktf5dpJjMS9/ZnZXn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxN0NFMDE3ODA5QjYwNDFCODk1RENDOTNFRkYyODM4 OEEyN0U1RTAeFw0yNTEwMjAxMTIzMDBaFw0yNTEwMjExMjQxMDBaMDMxMTAvBgNV BAMTKDZGODZBOUM0ODFBOTkyM0RGQTRCQzNBRTMwRTc5OTQyMzU1N0MyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfZ7JVU/8ogAU8OQMM69pRp0p Aryk1/I2zrxY6BnfY7bcR+8f5Z8J+l1JgViMmmbLyNZ+MQatLHui+FVCu3dmN2HA qmKuIyX5kg43LoqX4tYT0So7GbaDX0rMGSzBDspHBYo9iq8WjnBNP52QZzae8pHV wntzUSflgMIDrfyLtwwvLKRR+WMg4pKhJkhquclvXetWWVc4N/uJ+UFzMuTPVOJI TUDL41NKs1vQUmFskzixi4gAO5rHwhvRUg3vKtSmFiq+iONP8NxI3xiTqmYUqx1d ghht9s/go0jUVsfxWEqn8PT2HHIZfPBjnBy58gmc3ijsHu/t1nXUO5DtdjC7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUb4apxIGpkj36S8OuMOeZQjVXwm0wHwYDVR0j BBgwFoAUKRfOAXgJtgQbiV3Mk+/yg4iifl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVMMlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhO QmovMC8yOTE3Q0UwMTc4MDlCNjA0MUI4OTVEQ0M5M0VGRjI4Mzg4QTI3RTVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5MTdDRTAxNzgwOUI2MDQx Qjg5NURDQzkzRUZGMjgzODhBMjdFNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjVMMlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhOQmovMC8y OTE3Q0UwMTc4MDlCNjA0MUI4OTVEQ0M5M0VGRjI4Mzg4QTI3RTVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv2XIPZVVYRixscTdPicr5ORg/3irpHuV1UJ2ymE3mMNoLAyxR3cEyGDJvI0/ 6n5TkeHPmkuoPOnX71kZZTqHWbez53powwIQgiUke/GUjd6CCyhY3EXw9p0Jr5Au 6Ej/yJ/N8tez5+TeNR2JOAmiR7XLkqAV8HISSXhJe00Vc1GrBCOf/tTH9YHRXHe+ 57l6Tto7cFIiHs7b9zSdicg8my7n1gJtVqdejXchiFRGph8JjCZJZ5CA0xTpGxiY qN48Ic1fZnymUBCcA25NnYEbBh85ReZFL26awRscl7azFFywh4Q2vbW2H7lLYDA4 VpLnwqVy43E2/VcKnAlGcUcVvA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:30:15 2025 by rpki-client