$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft File: 1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft (raw, json) Hash identifier: +/YWbJTlZZXUEDvGID3qYuRFkXHsTRnqt6Gvh8InP8Y= Subject key identifier: D8:2E:A9:7D:0F:E7:98:E2:F9:DE:AF:13:19:E9:1D:68:36:5F:A3:50 Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4 Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4 Certificate serial: 250F80DD08531E07F0F02D9052D0BB8298108B16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft Manifest number: 0168 Signing time: Mon 20 Oct 2025 04:43:11 +0000 Manifest this update: Mon 20 Oct 2025 04:38:11 +0000 Manifest next update: Tue 21 Oct 2025 07:31:11 +0000 Files and hashes: 1: 1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl (hash: /AlVv67YZ/MU3sMn0SiJFj3mCYrwh/f52Fh8JKypP4M=) 2: 34352e3137342e3132302e302f32322d3332203d3e203631373132.roa (hash: vLA0tfCYLyDfp7Llo3opJBD60w3xzAynpT1erSavbGo=) 3: 323830343a316232383a3a2f33322d313238203d3e203631373132.roa (hash: PvyT5krLi9Vdc8zwhXy3roTWYkCbKt4ZT8u2vwo+JBI=) 4: 3133312e37322e34342e302f32322d3332203d3e203631373132.roa (hash: 48QiVwxAPsoEpc3+FHhQMToEIR8fBvyW5uHz5BD2n7w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0f:80:dd:08:53:1e:07:f0:f0:2d:90:52:d0:bb:82:98:10:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4 Validity Not Before: Oct 20 04:38:11 2025 GMT Not After : Oct 21 07:31:11 2025 GMT Subject: CN=D82EA97D0FE798E2F9DEAF1319E91D68365FA350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:52:32:99:64:04:b9:ae:e3:d9:b5:87:a5: e4:a5:e6:ac:69:3b:1d:ed:bc:c9:98:ef:a2:6e:40: 5e:b9:3a:9e:33:fe:bc:84:e7:3e:8d:8c:45:b1:db: 5d:09:85:e7:78:39:53:63:bf:5d:dd:1e:2f:08:1a: 78:a9:c5:c4:be:ce:ff:75:1a:9c:25:e7:3b:63:23: 8f:2d:30:4b:8c:c9:a4:4d:9d:e1:ff:7e:fe:4a:31: b1:8b:97:7e:73:76:b5:e4:fb:b2:81:b0:82:78:e8: 8f:67:51:e1:dc:a5:8d:c1:7b:38:6e:4c:ae:fe:2a: 30:95:22:04:f8:db:51:62:e1:a1:52:f1:7e:8c:2c: 6b:f7:18:11:24:d6:13:47:db:38:08:a0:66:aa:30: 6b:7a:a5:b2:85:aa:43:1c:91:8f:59:e5:e9:bf:2a: 80:4f:cb:af:03:f7:8b:d6:2e:72:53:fb:5d:96:41: c6:03:a8:74:94:be:a3:95:0a:52:7d:a9:bc:a8:75: a5:ad:5a:63:50:88:4e:e8:e6:a2:51:04:e4:f4:a6: 0f:26:44:8f:ef:5e:cf:dc:34:ee:cd:58:93:71:35: 2a:62:7a:37:6a:78:65:06:d8:7a:0e:40:33:19:3a: ca:3f:72:5f:9c:65:d9:32:92:ca:e4:24:a3:52:16: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2E:A9:7D:0F:E7:98:E2:F9:DE:AF:13:19:E9:1D:68:36:5F:A3:50 X509v3 Authority Key Identifier: keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fd:35:01:49:5d:bb:c2:59:3f:db:05:8a:86:81:2b:53:73: 67:5f:12:77:33:44:8f:5f:7c:f1:4b:44:11:91:43:6c:e9:ce: 3d:e7:31:69:2d:fb:84:63:61:bf:ab:4b:8f:35:c9:25:31:55: 4b:dc:4a:10:69:fe:59:bc:ac:63:9c:ae:68:90:c7:26:18:c1: 6d:52:32:50:69:99:ee:f7:7a:2e:85:13:94:a9:23:9e:d8:75: 37:24:68:bd:c7:20:53:bc:54:c2:83:2d:7f:5b:c3:17:8a:87: da:62:7d:f9:39:19:5f:b5:88:73:23:5e:10:a6:a0:34:82:05: 8f:09:84:80:c0:b1:b5:c3:4a:e6:db:cf:a3:79:b5:ef:6c:2f: dc:e6:96:48:ad:21:42:f7:74:79:de:5a:9e:38:93:71:05:8e: 50:41:d9:07:a5:87:96:82:6a:9a:91:2e:15:c3:c7:08:ea:2a: 9d:31:d8:cc:dc:91:1c:c7:4e:65:2f:63:52:ef:68:93:fd:47: 80:fd:34:b7:55:52:ea:1c:65:a1:4a:7f:39:d0:02:6d:2f:54: 26:f0:66:0e:d4:17:17:25:83:93:f3:97:dd:c5:c8:8c:dc:c0: c3:d1:48:49:d5:06:5c:a6:dd:b1:63:5c:6a:5f:b6:73:10:58: 74:03:66:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJQ+A3QhTHgfw8C2QUtC7gpgQixYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0RjdEMkRCRjk2QUVEQzAyQ0UxQjAxOTNGOTY0RTYy NkMxOERDNDAeFw0yNTEwMjAwNDM4MTFaFw0yNTEwMjEwNzMxMTFaMDMxMTAvBgNV BAMTKEQ4MkVBOTdEMEZFNzk4RTJGOURFQUYxMzE5RTkxRDY4MzY1RkEzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJVIymWQEua7j2bWHpeSl5qxp Ox3tvMmY76JuQF65Op4z/ryE5z6NjEWx210Jhed4OVNjv13dHi8IGnipxcS+zv91 Gpwl5ztjI48tMEuMyaRNneH/fv5KMbGLl35zdrXk+7KBsIJ46I9nUeHcpY3Bezhu TK7+KjCVIgT421Fi4aFS8X6MLGv3GBEk1hNH2zgIoGaqMGt6pbKFqkMckY9Z5em/ KoBPy68D94vWLnJT+12WQcYDqHSUvqOVClJ9qbyodaWtWmNQiE7o5qJRBOT0pg8m RI/vXs/cNO7NWJNxNSpiejdqeGUG2HoOQDMZOso/cl+cZdkyksrkJKNSFmJvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2C6pfQ/nmOL53q8TGekdaDZfo1AwHwYDVR0j BBgwFoAUG099Lb+WrtwCzhsBk/lk5ibBjcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM eGIvMC8xQjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEY3RDJEQkY5NkFFREMw MkNFMUIwMTkzRjk2NEU2MjZDMThEQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZMeGIvMC8x QjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdv01AUldu8JZP9sFioaBK1NzZ18SdzNEj1988UtEEZFDbOnOPecxaS37hGNh v6tLjzXJJTFVS9xKEGn+WbysY5yuaJDHJhjBbVIyUGmZ7vd6LoUTlKkjnth1NyRo vccgU7xUwoMtf1vDF4qH2mJ9+TkZX7WIcyNeEKagNIIFjwmEgMCxtcNK5tvPo3m1 72wv3OaWSK0hQvd0ed5anjiTcQWOUEHZB6WHloJqmpEuFcPHCOoqnTHYzNyRHMdO ZS9jUu9ok/1HgP00t1VS6hxloUp/OdACbS9UJvBmDtQXFyWDk/OX3cXIjNzAw9FI SdUGXKbdsWNcal+2cxBYdANmvQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:46 2025 by rpki-client