$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft File: 25C7F81AB8123826510AD39D4507448271E2A2E2.mft (raw, json) Hash identifier: LqGy30sewNTLiBIORkxjjFTSJBQ/xDexJAlkeyenqVU= Subject key identifier: D5:67:A2:0A:C9:DA:5A:6D:D0:4E:93:5D:05:5F:A7:0C:5B:F8:E6:FA Authority key identifier: 25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2 Certificate issuer: /CN=25C7F81AB8123826510AD39D4507448271E2A2E2 Certificate serial: 1DFCBB175BCBD8F2D3B358141E7101FB61F1BDFA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft Manifest number: 36 Signing time: Mon 20 Oct 2025 00:46:13 +0000 Manifest this update: Mon 20 Oct 2025 00:41:13 +0000 Manifest next update: Tue 21 Oct 2025 04:33:13 +0000 Files and hashes: 1: 323830343a346163303a3a2f33362d313238203d3e20323637323631.roa (hash: 4epJ9lVEGtoR0vWaiC0Iswc5dbzIPwfIhxIOekcVFQI=) 2: 34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa (hash: OxlKLinU/LaLLFazIyBAx6PCzM8QZZ5p11lTAuRGcGQ=) 3: 323830343a346163303a3a2f33322d3332203d3e20323637323631.roa (hash: IVoanioEzVZ8oYX2V+o88LhZO2KypDSg2obDGLNyHLs=) 4: 25C7F81AB8123826510AD39D4507448271E2A2E2.crl (hash: Qwi6LYhrGNRUO3JIAQUROsEJ5XXIjM3QrBbIuyF7wR8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fc:bb:17:5b:cb:d8:f2:d3:b3:58:14:1e:71:01:fb:61:f1:bd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C7F81AB8123826510AD39D4507448271E2A2E2 Validity Not Before: Oct 20 00:41:13 2025 GMT Not After : Oct 21 04:33:13 2025 GMT Subject: CN=D567A20AC9DA5A6DD04E935D055FA70C5BF8E6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:c3:b4:53:b7:9c:67:da:6e:a6:44:03:3f: 86:38:24:e4:cb:20:93:45:9a:ab:ee:87:ec:7b:c6: ec:20:f0:c5:40:af:39:db:28:e8:df:a6:8d:fc:d1: 6d:2e:16:69:8b:07:84:fb:88:1d:23:ab:f6:39:8f: f5:80:02:69:c0:27:07:48:4d:2c:0c:93:a7:0b:8f: 86:af:c2:34:19:fd:bf:a3:2c:56:2a:2a:37:3a:a0: dc:22:75:27:fc:9b:69:2c:41:9c:15:3f:77:8e:9e: b7:af:e9:07:ce:b0:12:43:a5:f8:15:f9:34:b7:6a: 23:24:a8:51:b6:65:3d:1f:42:5d:08:2d:f1:af:01: 57:ae:78:d3:96:c4:87:3f:f0:6e:bf:6a:c4:23:d4: a5:1d:31:ca:17:93:e6:37:aa:1b:47:f2:88:73:c7: 63:d3:e8:22:8a:29:1a:3c:dc:a4:88:f5:83:01:b2: 32:7f:28:32:0d:bc:90:a3:93:b1:02:ca:74:b3:db: b7:bf:15:d7:f1:e2:7d:0e:64:95:f4:b6:ff:13:56: a2:74:75:51:a5:87:e0:0b:a2:2d:c6:0e:3b:74:bf: b0:14:41:87:7b:22:3d:57:5c:2e:b1:02:84:e4:12: 9f:ca:27:8d:5c:d4:4d:f9:4d:4b:8e:3a:8e:33:4e: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:A2:0A:C9:DA:5A:6D:D0:4E:93:5D:05:5F:A7:0C:5B:F8:E6:FA X509v3 Authority Key Identifier: keyid:25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a4:73:e3:b1:3c:2d:73:67:f5:76:25:6f:e5:6f:96:86:30: 80:f5:30:5b:4f:13:68:86:0f:4a:10:a4:09:2e:7e:29:67:0c: 3a:76:f8:6d:05:25:28:09:81:08:a9:0f:75:b7:26:78:3a:d1: ca:95:00:80:bb:b5:20:38:38:41:31:b8:a0:d7:90:11:ab:a9: b4:3f:37:df:c2:93:68:04:5f:c4:24:78:ed:a6:dc:d9:3d:d8: 03:d1:27:3b:8b:03:cf:9c:ca:c3:b3:f6:e4:a5:8d:87:83:66: d8:aa:a5:8f:b3:84:cf:1d:11:5d:d3:27:8b:0f:ae:1b:94:ce: 5a:f9:bd:34:f8:48:2c:49:8a:c8:78:8a:d7:e3:5c:e4:51:b1: 29:1f:06:99:b9:0b:be:02:fa:07:ee:77:ee:4a:39:c5:0e:05: 80:ba:8d:3f:e3:99:1f:d9:70:69:da:98:8f:b0:d7:0a:c8:54: 04:0c:01:ca:9e:68:3b:c3:0f:60:cf:38:ec:12:28:c0:d0:d0: 14:74:37:76:1d:2c:48:76:52:32:32:c5:f0:69:ef:29:4c:93: bd:7f:aa:9e:20:27:8a:11:f0:c2:3a:be:72:3a:1f:7c:cb:34: cd:7d:39:3e:83:d7:72:0f:0d:86:ee:23:00:b4:39:10:b2:05: ca:7a:71:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHfy7F1vL2PLTs1gUHnEB+2HxvfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDN0Y4MUFCODEyMzgyNjUxMEFEMzlENDUwNzQ0ODI3 MUUyQTJFMjAeFw0yNTEwMjAwMDQxMTNaFw0yNTEwMjEwNDMzMTNaMDMxMTAvBgNV BAMTKEQ1NjdBMjBBQzlEQTVBNkREMDRFOTM1RDA1NUZBNzBDNUJGOEU2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xcO0U7ecZ9pupkQDP4Y4JOTL IJNFmqvuh+x7xuwg8MVArznbKOjfpo380W0uFmmLB4T7iB0jq/Y5j/WAAmnAJwdI TSwMk6cLj4avwjQZ/b+jLFYqKjc6oNwidSf8m2ksQZwVP3eOnrev6QfOsBJDpfgV +TS3aiMkqFG2ZT0fQl0ILfGvAVeueNOWxIc/8G6/asQj1KUdMcoXk+Y3qhtH8ohz x2PT6CKKKRo83KSI9YMBsjJ/KDINvJCjk7ECynSz27e/Fdfx4n0OZJX0tv8TVqJ0 dVGlh+ALoi3GDjt0v7AUQYd7Ij1XXC6xAoTkEp/KJ41c1E35TUuOOo4zTiG3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1WeiCsnaWm3QTpNdBV+nDFv45vowHwYDVR0j BBgwFoAUJcf4GrgSOCZRCtOdRQdEgnHiouIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5 ZUgvMC8yNUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzdGODFBQjgxMjM4MjY1 MTBBRDM5RDQ1MDc0NDgyNzFFMkEyRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5ZUgvMC8y NUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYaRz47E8LXNn9XYlb+VvloYwgPUwW08TaIYPShCkCS5+KWcMOnb4bQUlKAmB CKkPdbcmeDrRypUAgLu1IDg4QTG4oNeQEauptD8338KTaARfxCR47abc2T3YA9En O4sDz5zKw7P25KWNh4Nm2Kqlj7OEzx0RXdMniw+uG5TOWvm9NPhILEmKyHiK1+Nc 5FGxKR8GmbkLvgL6B+537ko5xQ4FgLqNP+OZH9lwadqYj7DXCshUBAwByp5oO8MP YM847BIowNDQFHQ3dh0sSHZSMjLF8GnvKUyTvX+qniAnihHwwjq+cjoffMs0zX05 PoPXcg8Nhu4jALQ5ELIFynpxFA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:17:34 2025 by rpki-client