$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft File: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft (raw, json) Hash identifier: UAj37/RsiJv1drtRGga+W6bfY9XiAxkBwuw6QEl8vbU= Subject key identifier: 36:8F:FC:4D:B8:56:56:D8:1A:C3:D3:14:CC:02:F3:C1:20:12:EB:CF Authority key identifier: 57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B Certificate issuer: /CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Certificate serial: 436F65B41264F8A1D8232ED82FC2ABEDCD3B8679 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft Manifest number: 0257 Signing time: Mon 20 Oct 2025 04:17:42 +0000 Manifest this update: Mon 20 Oct 2025 04:12:42 +0000 Manifest next update: Tue 21 Oct 2025 07:15:42 +0000 Files and hashes: 1: 3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa (hash: xB1yM8uvGqhBpUylreV+SOfIooIymRzer1Ue3ghc1C0=) 2: 323830343a383165303a3a2f33322d3438203d3e20323732343833.roa (hash: gGpb7QOWhrxLz+03Ox3Po1Me5Z0eXwZv1Sn7CGLLb4c=) 3: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl (hash: KKwp41w4G1mqtHO5p9Pt7HOJg6fJ9iCs6GN6o6wX7jY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6f:65:b4:12:64:f8:a1:d8:23:2e:d8:2f:c2:ab:ed:cd:3b:86:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Validity Not Before: Oct 20 04:12:42 2025 GMT Not After : Oct 21 07:15:42 2025 GMT Subject: CN=368FFC4DB85656D81AC3D314CC02F3C12012EBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:94:55:00:7a:95:80:1e:be:29:57:01:b4:75: 68:19:db:df:66:e7:cb:16:e8:80:22:f4:26:ff:63: bf:cc:27:91:76:25:3f:36:a4:23:9b:ef:6a:48:56: 47:d1:de:c0:61:14:0d:70:ed:14:dc:06:a7:53:ab: d8:e6:e7:a7:78:b7:4b:aa:fc:6f:84:df:ab:cd:64: ab:43:42:61:c5:75:51:cc:53:0d:9e:87:f8:22:ec: c4:2f:8a:67:c5:63:e3:b7:87:4e:21:27:43:36:13: 40:42:30:0c:8c:35:79:13:ad:67:bd:04:5e:79:1a: 15:1a:79:35:a8:fa:84:80:bb:f9:e9:39:dd:b1:c5: 33:99:59:5f:8a:68:76:db:e6:17:e7:7d:e3:11:bb: 24:a4:bc:3f:1d:53:48:50:0e:31:2d:ad:42:ee:9a: 08:60:ec:3e:c4:8a:cb:85:3c:8f:ad:7e:fb:94:53: 06:32:c8:a3:02:00:06:a3:f0:42:22:46:d9:36:ed: 72:d7:79:60:1a:2b:07:7c:11:4b:c1:73:61:ae:65: ac:7b:eb:3b:47:d6:40:00:b7:53:53:f1:fd:f6:81: 52:2a:34:4c:f0:8e:2d:06:0e:65:3f:6a:f6:4c:cf: 17:c1:00:c1:e4:a8:a7:6d:6d:aa:2b:28:45:65:5a: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:FC:4D:B8:56:56:D8:1A:C3:D3:14:CC:02:F3:C1:20:12:EB:CF X509v3 Authority Key Identifier: keyid:57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f9:de:a5:ab:c1:eb:01:ad:52:66:96:64:26:90:cb:cc:de: f0:75:aa:50:88:b3:7f:5f:c3:2a:e3:90:8e:5c:f0:93:b2:d9: 1e:b1:fa:a8:c8:50:82:58:b8:52:97:31:af:62:d1:d8:c1:93: 2c:f7:7b:cc:ec:74:fa:53:64:c3:89:18:ec:0d:7f:99:56:d3: 4d:24:ad:1d:45:c5:cd:3a:d6:c2:18:19:80:a9:b3:f5:93:5b: 01:dc:b7:34:11:6c:42:e4:de:10:b7:75:9a:25:04:f7:50:0e: 39:53:f9:ca:c2:c2:77:dc:33:f5:29:ce:a4:b7:01:d9:d0:57: 8b:ae:95:d8:2d:5e:9d:d3:b8:92:91:58:9f:d9:b9:ea:a5:3a: 9c:84:97:5f:2b:7b:2e:b8:c4:30:23:d4:74:5c:67:e2:75:17: 72:50:e2:33:15:96:ea:80:bd:45:05:bd:1c:37:5a:cb:62:ce: 63:67:12:ad:d2:21:c1:a4:9b:c9:e0:d0:9e:15:0a:d8:f2:4b: b4:65:77:87:30:aa:64:44:ea:45:f6:11:d7:3b:17:73:00:a5: a9:69:a8:9d:36:d7:ea:89:fc:3d:36:9f:7e:b2:f8:47:01:09: 2a:7c:1a:69:5e:7d:14:44:16:e1:61:0f:12:8a:c4:66:8d:13: 3f:50:aa:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ29ltBJk+KHYIy7YL8Kr7c07hnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcyNURGQjJEQzI3ODZFNEZDNTZCQTBDMTE1NjcwMzJF QTM4OUUyQjAeFw0yNTEwMjAwNDEyNDJaFw0yNTEwMjEwNzE1NDJaMDMxMTAvBgNV BAMTKDM2OEZGQzREQjg1NjU2RDgxQUMzRDMxNENDMDJGM0MxMjAxMkVCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDylFUAepWAHr4pVwG0dWgZ299m 58sW6IAi9Cb/Y7/MJ5F2JT82pCOb72pIVkfR3sBhFA1w7RTcBqdTq9jm56d4t0uq /G+E36vNZKtDQmHFdVHMUw2eh/gi7MQvimfFY+O3h04hJ0M2E0BCMAyMNXkTrWe9 BF55GhUaeTWo+oSAu/npOd2xxTOZWV+KaHbb5hfnfeMRuySkvD8dU0hQDjEtrULu mghg7D7EisuFPI+tfvuUUwYyyKMCAAaj8EIiRtk27XLXeWAaKwd8EUvBc2GuZax7 6ztH1kAAt1NT8f32gVIqNEzwji0GDmU/avZMzxfBAMHkqKdtbaorKEVlWmpNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNo/8TbhWVtgaw9MUzALzwSAS688wHwYDVR0j BBgwFoAUVyXfstwnhuT8VroMEVZwMuo4niswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6 VFIvMC81NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MjVERkIyREMyNzg2RTRG QzU2QkEwQzExNTY3MDMyRUEzODlFMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6VFIvMC81 NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP/nepavB6wGtUmaWZCaQy8ze8HWqUIizf1/DKuOQjlzwk7LZHrH6qMhQgli4 Upcxr2LR2MGTLPd7zOx0+lNkw4kY7A1/mVbTTSStHUXFzTrWwhgZgKmz9ZNbAdy3 NBFsQuTeELd1miUE91AOOVP5ysLCd9wz9SnOpLcB2dBXi66V2C1endO4kpFYn9m5 6qU6nISXXyt7LrjEMCPUdFxn4nUXclDiMxWW6oC9RQW9HDday2LOY2cSrdIhwaSb yeDQnhUK2PJLtGV3hzCqZETqRfYR1zsXcwClqWmonTbX6on8PTaffrL4RwEJKnwa aV59FEQW4WEPEorEZo0TP1CqvA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:04 2025 by rpki-client