$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft File: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json) Hash identifier: P5UClwDDqtUN1tak1/nbKUNOqFN4uwt6Mn83fRVEMkc= Subject key identifier: 23:09:54:4A:0A:D2:2A:72:C2:C6:19:0B:27:87:B3:B2:C7:02:C8:6B Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78 Certificate issuer: /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78 Certificate serial: 617671E55234953A7F1B4982DAD423F27FE43A87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft Manifest number: 02EE Signing time: Sun 19 Oct 2025 16:23:47 +0000 Manifest this update: Sun 19 Oct 2025 16:18:47 +0000 Manifest next update: Mon 20 Oct 2025 18:32:47 +0000 Files and hashes: 1: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: wLS2kjLtIy4Ap3x1teQ2W+Mp8cksxG48m74IXaH7fN4=) 2: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: hVK/GH5J5gESoNpOj4BeuJw0gt9hYssVFQjGwQ3BqNw=) 3: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: stP92oJ4IE5MiAZ9P5AQoFIryaIIHVovcUqJt+GD6Mc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 18:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:76:71:e5:52:34:95:3a:7f:1b:49:82:da:d4:23:f2:7f:e4:3a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78 Validity Not Before: Oct 19 16:18:47 2025 GMT Not After : Oct 20 18:32:47 2025 GMT Subject: CN=2309544A0AD22A72C2C6190B2787B3B2C702C86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:93:c9:1a:2c:d3:51:ed:e7:40:b9:5b:24: cd:3b:d8:da:fa:88:f2:8f:2b:e3:a0:15:76:9b:04: c7:e0:02:95:61:0a:c9:2f:db:b3:65:69:f9:7e:b3: 21:8b:66:c8:73:8f:9b:6a:e8:12:0e:81:57:ea:26: d5:50:5e:2d:d0:53:2b:ae:ed:52:03:c2:ef:11:e5: 36:43:34:40:d2:3e:c7:68:97:47:cc:40:c6:32:93: 0c:23:60:49:48:2d:95:89:04:48:5e:5f:31:83:20: 5b:06:fd:b6:f7:34:e3:0f:0c:1d:46:a4:03:70:9a: cd:c1:6a:39:27:3b:e2:fd:ff:10:67:1a:cd:fc:a5: 6c:8a:16:99:ad:82:bd:3f:77:08:1e:a9:f9:27:cc: eb:bd:6a:55:6c:ba:1a:c8:2a:65:4e:cc:69:79:04: e4:46:56:2e:df:f0:b2:cc:2b:de:36:5d:65:fc:b5: 49:1a:34:9f:c7:39:7e:d7:6e:80:2f:02:0b:f2:44: 34:f3:ba:62:0c:02:a2:e5:3c:7e:d7:f1:b9:ba:85: 90:b6:00:43:bf:bc:5d:20:49:a9:24:5a:0f:4f:35: 20:b3:e0:12:bb:41:f2:19:99:1b:94:dc:22:51:51: 92:ce:e7:b8:9a:65:fc:58:50:77:50:31:54:49:04: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:54:4A:0A:D2:2A:72:C2:C6:19:0B:27:87:B3:B2:C7:02:C8:6B X509v3 Authority Key Identifier: keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bd:82:dc:b2:97:d1:16:ae:98:d3:42:19:35:34:e2:36:78: 6b:0b:1e:5b:b4:1d:73:89:3b:ba:06:66:65:87:93:c0:05:73: bf:19:0d:18:6d:ee:6d:57:35:7f:96:88:62:56:d6:73:7b:33: 1b:bf:12:60:43:93:d2:e9:db:98:bb:b1:83:31:cc:9d:7e:4f: e8:18:fc:f5:ee:14:39:da:3a:34:5f:cb:49:12:75:64:b7:49: fc:44:37:18:1c:7d:33:cb:b7:ca:9d:60:06:e4:27:5d:ae:ce: 29:bc:6c:6f:5c:e2:8a:02:86:78:ee:24:4a:d4:42:cc:50:24: ae:e5:19:d2:20:45:2b:3c:c7:f6:b8:57:28:b5:f8:11:be:d7: 6d:c9:c4:50:e4:17:43:29:58:de:27:43:d8:e0:81:e9:b7:56: b9:b5:94:f4:81:6b:c4:2e:a9:c1:97:ab:34:eb:bf:a2:10:db: 42:a3:5a:ee:88:2c:5f:44:84:b7:e4:d2:db:cc:64:7d:e7:f3: 89:5f:f8:86:22:0d:93:a8:0f:d7:0b:b8:37:60:5c:ab:29:1f: 7b:98:90:85:ce:af:29:13:8b:72:0e:73:20:82:3f:65:33:9e: 37:0a:93:e9:24:16:6a:d4:12:08:df:88:20:07:01:3e:a4:1e: 25:b9:fb:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYXZx5VI0lTp/G0mC2tQj8n/kOocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2Nzg5OTdENjY2QkY5MjgxRkZFQUI3OEI2RDI4QTFG QTUxRkY3ODAeFw0yNTEwMTkxNjE4NDdaFw0yNTEwMjAxODMyNDdaMDMxMTAvBgNV BAMTKDIzMDk1NDRBMEFEMjJBNzJDMkM2MTkwQjI3ODdCM0IyQzcwMkM4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRZPJGizTUe3nQLlbJM072Nr6 iPKPK+OgFXabBMfgApVhCskv27Nlafl+syGLZshzj5tq6BIOgVfqJtVQXi3QUyuu 7VIDwu8R5TZDNEDSPsdol0fMQMYykwwjYElILZWJBEheXzGDIFsG/bb3NOMPDB1G pANwms3BajknO+L9/xBnGs38pWyKFpmtgr0/dwgeqfknzOu9alVsuhrIKmVOzGl5 BORGVi7f8LLMK942XWX8tUkaNJ/HOX7XboAvAgvyRDTzumIMAqLlPH7X8bm6hZC2 AEO/vF0gSakkWg9PNSCz4BK7QfIZmRuU3CJRUZLO57iaZfxYUHdQMVRJBHazAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIwlUSgrSKnLCxhkLJ4ezsscCyGswHwYDVR0j BBgwFoAUJWeJl9Zmv5KB/+q3i20oofpR/3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJE SzcvMS8yNTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Njc4OTk3RDY2NkJGOTI4 MUZGRUFCNzhCNkQyOEExRkE1MUZGNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJESzcvMS8y NTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlr2C3LKX0RaumNNCGTU04jZ4awseW7Qdc4k7ugZmZYeTwAVzvxkNGG3ubVc1 f5aIYlbWc3szG78SYEOT0unbmLuxgzHMnX5P6Bj89e4UOdo6NF/LSRJ1ZLdJ/EQ3 GBx9M8u3yp1gBuQnXa7OKbxsb1ziigKGeO4kStRCzFAkruUZ0iBFKzzH9rhXKLX4 Eb7XbcnEUOQXQylY3idD2OCB6bdWubWU9IFrxC6pwZerNOu/ohDbQqNa7ogsX0SE t+TS28xkfefziV/4hiINk6gP1wu4N2Bcqykfe5iQhc6vKROLcg5zIII/ZTOeNwqT 6SQWatQSCN+IIAcBPqQeJbn7/w== -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:37 2025 by rpki-client