$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.mft File: 25AB6D9AFCDCCEA2144006A444F04F4229AAF448.mft (raw, json) Hash identifier: jufdOndOW2y1FFL9mil6V94EM/AlpXa6KU3SzcBNYzY= Subject key identifier: 3C:5A:DE:7F:11:5E:A0:2B:FE:1A:78:A8:E2:45:75:DB:30:9A:6C:30 Authority key identifier: 25:AB:6D:9A:FC:DC:CE:A2:14:40:06:A4:44:F0:4F:42:29:AA:F4:48 Certificate issuer: /CN=25AB6D9AFCDCCEA2144006A444F04F4229AAF448 Certificate serial: 4BF1349D4C6A4A5470DCEE7F4CA36A5C5CA33734 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.cer Subject info access: rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.mft Manifest number: 3C Signing time: Sat 23 Aug 2025 08:56:59 +0000 Manifest this update: Sat 23 Aug 2025 08:51:59 +0000 Manifest next update: Sun 24 Aug 2025 09:23:59 +0000 Files and hashes: 1: 34352e3138382e31332e302f32342d3234203d3e20323639353637.roa (hash: 92t/QLgNNAOZT7jiol7Laavz7rbOycUMi+u13md2M7w=) 2: 34352e3138382e31342e302f32342d3234203d3e20323639353637.roa (hash: /IFthmGlny+dZrNtLAtzMhE/9viKdsCyfVCs8b/4h+o=) 3: 323830343a363638633a3a2f33322d3332203d3e20323639353637.roa (hash: 768iS3fPybUr0B9u12rB+BA2OHMm9dBRqMsJRdzWym8=) 4: 25AB6D9AFCDCCEA2144006A444F04F4229AAF448.crl (hash: IF0/vE3DOWbSqWLMsxyhK/MGXy2TMj1DtI6kfKieD4I=) 5: 34352e3138382e31322e302f32342d3234203d3e20323639353637.roa (hash: HJbuwdfQ9o2QRB/3g6tkrAdrTqwT8ASGoaY/QXpB4Sw=) 6: 34352e3138382e31352e302f32342d3234203d3e20323639353637.roa (hash: 7/upDvYVTRKJZm6yUvWQpYlWFhvUw/55e2AxEyk3BLo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.crl rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f1:34:9d:4c:6a:4a:54:70:dc:ee:7f:4c:a3:6a:5c:5c:a3:37:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25AB6D9AFCDCCEA2144006A444F04F4229AAF448 Validity Not Before: Aug 23 08:51:59 2025 GMT Not After : Aug 24 09:23:59 2025 GMT Subject: CN=3C5ADE7F115EA02BFE1A78A8E24575DB309A6C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:bc:e3:63:3a:a0:f6:ab:dc:d8:00:70:b2: b2:c9:70:04:ba:87:b7:0f:0a:e9:66:7b:6b:07:4b: eb:e1:84:da:7a:fb:51:3d:45:98:c5:05:b1:3c:f0: e9:b7:c0:81:80:eb:11:b9:4c:de:c3:67:17:a5:7b: b2:56:b2:ed:8a:89:38:53:f8:a3:72:e2:a2:0e:cf: 3a:19:1d:4b:28:c5:b7:db:1c:e5:a0:d8:4b:2b:4e: 92:6f:df:31:60:66:b8:a6:07:46:6f:6e:6b:01:e5: d5:d5:23:92:dd:df:f3:2a:e9:68:2a:b3:c7:1b:d9: 94:51:4d:a4:65:1d:fd:4b:fa:ec:fe:3a:b2:e0:b9: d7:cb:17:ba:54:7e:0d:12:4c:2c:f7:16:4a:e9:cf: f4:38:46:be:5a:21:eb:93:f0:08:00:1e:49:2d:55: b7:2a:7e:ff:cd:77:3f:f5:49:bb:a0:09:6e:25:3e: fe:6f:dc:ba:e3:05:ce:19:fe:80:b0:31:ec:db:96: 7d:7c:d1:6f:90:3c:36:6c:7f:ea:31:e9:0a:a0:db: 00:27:75:6e:01:48:24:2a:35:65:0c:d7:6b:0e:6b: d7:5b:fd:af:e4:65:f8:c2:92:89:14:bc:24:d5:1d: 95:cb:b2:9b:95:e0:04:32:17:19:f6:10:2d:06:79: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5A:DE:7F:11:5E:A0:2B:FE:1A:78:A8:E2:45:75:DB:30:9A:6C:30 X509v3 Authority Key Identifier: keyid:25:AB:6D:9A:FC:DC:CE:A2:14:40:06:A4:44:F0:4F:42:29:AA:F4:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/25AB6D9AFCDCCEA2144006A444F04F4229AAF448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:73:f6:8d:a4:4b:73:ad:8a:a7:1d:f9:5e:1c:6a:ab:61:fe: 06:8c:c3:c7:b1:14:a1:1e:22:89:9f:09:1e:a8:d0:ea:8a:80: 2f:00:8e:9b:7a:f4:ab:7a:5d:46:99:4f:dc:1f:85:1d:28:38: af:b0:46:1f:5f:14:bb:52:ee:71:8c:90:47:36:e3:e0:fd:75: ca:ea:a5:a5:32:27:24:59:5d:3d:b8:9c:b7:b7:30:20:f0:2d: b0:59:2c:ce:92:7d:93:14:9c:cc:82:da:39:b7:fa:4f:bc:4b: 1d:3e:32:60:aa:c2:83:db:e6:74:d9:c5:60:7f:69:87:d9:5a: 91:b0:32:1a:54:16:f6:79:ba:83:57:65:8a:76:0f:18:35:75: b2:69:0a:b2:11:fa:82:d7:cd:69:16:9f:4b:2d:84:7f:5a:80: 57:55:c6:a1:5f:ef:b7:8a:4f:0d:9d:1b:f8:83:3b:61:f7:c3: 5d:2e:d3:a8:c9:74:5f:f2:bb:a0:60:80:84:6c:d6:65:02:52: ac:9a:25:b8:f5:53:ea:ad:81:94:88:43:a1:d1:6c:6a:2a:cd: 36:39:af:af:a1:1a:e1:5e:e6:1a:70:00:3a:ed:9c:69:96:94: 53:a1:bf:b7:61:e8:d5:06:44:55:ca:7a:a8:b1:29:b1:44:f1: 44:93:32:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS/E0nUxqSlRw3O5/TKNqXFyjNzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVBQjZEOUFGQ0RDQ0VBMjE0NDAwNkE0NDRGMDRGNDIy OUFBRjQ0ODAeFw0yNTA4MjMwODUxNTlaFw0yNTA4MjQwOTIzNTlaMDMxMTAvBgNV BAMTKDNDNUFERTdGMTE1RUEwMkJGRTFBNzhBOEUyNDU3NURCMzA5QTZDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZbzjYzqg9qvc2ABwsrLJcAS6 h7cPCulme2sHS+vhhNp6+1E9RZjFBbE88Om3wIGA6xG5TN7DZxele7JWsu2KiThT +KNy4qIOzzoZHUsoxbfbHOWg2EsrTpJv3zFgZrimB0ZvbmsB5dXVI5Ld3/Mq6Wgq s8cb2ZRRTaRlHf1L+uz+OrLgudfLF7pUfg0STCz3Fkrpz/Q4Rr5aIeuT8AgAHkkt Vbcqfv/Ndz/1SbugCW4lPv5v3LrjBc4Z/oCwMezbln180W+QPDZsf+ox6Qqg2wAn dW4BSCQqNWUM12sOa9db/a/kZfjCkokUvCTVHZXLspuV4AQyFxn2EC0Gee9BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPFrefxFeoCv+Gnio4kV12zCabDAwHwYDVR0j BBgwFoAUJattmvzczqIUQAakRPBPQimq9EgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVVDMXNIdDNycXpiWWdDRURZaXdWWW5SVmhpaUtadFJZbjlXN2RQTnBp bkovMC8yNUFCNkQ5QUZDRENDRUEyMTQ0MDA2QTQ0NEYwNEY0MjI5QUFGNDQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QUI2RDlBRkNEQ0NFQTIx NDQwMDZBNDQ0RjA0RjQyMjlBQUY0NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVVDMXNIdDNycXpiWWdDRURZaXdWWW5SVmhpaUtadFJZbjlXN2RQTnBpbkovMC8y NUFCNkQ5QUZDRENDRUEyMTQ0MDA2QTQ0NEYwNEY0MjI5QUFGNDQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADXP2jaRLc62Kpx35Xhxqq2H+BozDx7EUoR4iiZ8JHqjQ6oqALwCOm3r0q3pd RplP3B+FHSg4r7BGH18Uu1LucYyQRzbj4P11yuqlpTInJFldPbict7cwIPAtsFks zpJ9kxSczILaObf6T7xLHT4yYKrCg9vmdNnFYH9ph9lakbAyGlQW9nm6g1dlinYP GDV1smkKshH6gtfNaRafSy2Ef1qAV1XGoV/vt4pPDZ0b+IM7YffDXS7TqMl0X/K7 oGCAhGzWZQJSrJoluPVT6q2BlIhDodFsairNNjmvr6Ea4V7mGnAAOu2caZaUU6G/ t2Ho1QZEVcp6qLEpsUTxRJMymA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:31 2025 by rpki-client