$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft File: 425279A675F326D0577BF774BBB20A14508381AD.mft (raw, json) Hash identifier: CSL9+l5ktZWu67+uei1znFnrA4W2P894hUY1+yUnq7w= Subject key identifier: 90:7B:07:B2:25:BB:0C:41:9F:BD:74:F0:79:C8:6D:06:E6:99:A7:74 Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD Certificate issuer: /CN=425279A675F326D0577BF774BBB20A14508381AD Certificate serial: 1FFE5FC7C94E75F1FA8F3D13A43BDA16E920E311 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft Manifest number: 02ED Signing time: Mon 20 Oct 2025 15:52:38 +0000 Manifest this update: Mon 20 Oct 2025 15:47:38 +0000 Manifest next update: Tue 21 Oct 2025 19:16:38 +0000 Files and hashes: 1: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: mNHi88NZLBtau030tdBn9V/OmWy/tYOVyhjXlqlljXs=) 2: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: 0+SKyRuS8vJuXq7MWE/epWSyK2AeWtwCEDU99XSAo6E=) 3: 425279A675F326D0577BF774BBB20A14508381AD.crl (hash: Ca1RNfKd365ipiE3tTiTBoC/fK17guZJxaCAaIyexs8=) 4: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: kDpmKtJF4mGWfac+atxrTauaGW3uTc73uitca/OTWLI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fe:5f:c7:c9:4e:75:f1:fa:8f:3d:13:a4:3b:da:16:e9:20:e3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD Validity Not Before: Oct 20 15:47:38 2025 GMT Not After : Oct 21 19:16:38 2025 GMT Subject: CN=907B07B225BB0C419FBD74F079C86D06E699A774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:b0:b0:1c:d2:a9:6a:94:c8:43:e2:ff:30: 64:7d:56:a9:2d:fc:a9:6c:53:76:e9:c6:82:46:c1: 0d:b8:47:45:4d:ea:d8:ce:0c:eb:8f:37:53:bf:cc: 26:b9:de:00:b7:41:07:36:13:06:64:ae:26:93:ba: b4:36:a6:64:c5:bf:81:d5:c2:65:29:94:7b:03:ea: 9c:89:ee:22:46:b0:3d:95:63:1a:26:d0:a0:fe:c2: 58:46:7d:2f:44:58:17:8c:46:17:25:3d:81:92:78: 76:ca:61:41:b4:fd:82:00:22:ca:0b:65:9e:ff:99: 51:ce:f7:3e:83:f0:41:2b:34:ea:d5:d3:2d:ec:9f: 9a:1b:0d:9b:d2:cb:cc:dc:ed:64:3e:48:27:6c:af: fa:5a:00:65:06:c8:5a:b4:6b:22:3f:3c:37:40:0d: 50:b4:26:eb:66:13:e7:7c:57:02:d7:c5:af:ea:71: 41:02:5b:c6:36:a2:da:9b:72:b5:04:a8:9e:d9:47: b8:bb:9e:bd:25:2d:84:6b:60:2b:00:fc:27:fe:49: 94:38:75:b0:d2:a1:1e:f6:ff:88:56:00:61:06:f4: 3f:09:da:3f:4d:36:a4:03:85:31:cf:73:7b:72:7c: df:c1:e3:52:0d:1d:7a:01:ba:ab:b5:0d:21:21:cf: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7B:07:B2:25:BB:0C:41:9F:BD:74:F0:79:C8:6D:06:E6:99:A7:74 X509v3 Authority Key Identifier: keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e6:00:e0:ea:95:bf:2c:af:0a:c1:34:66:18:bb:71:d7:d1: fb:d0:18:7b:12:fe:dc:89:b3:99:e3:fd:50:9d:a9:0e:d5:5e: fd:12:61:fb:cd:0b:ac:85:d8:a0:b6:38:bd:14:3c:fb:55:b1: c4:7e:69:32:41:a6:f8:9d:09:1e:65:54:7b:b1:41:e3:e3:5d: 5f:17:16:93:34:ac:ce:d5:80:b9:dc:05:04:a3:bb:8b:6a:27: 0a:a5:e1:df:1f:9a:fd:18:4f:e3:bc:50:3d:2f:c3:14:1b:8e: 5e:17:6b:b5:10:4b:e1:41:1d:39:02:df:ac:30:39:fb:34:73: cd:e8:5d:35:cc:c1:3d:39:5e:73:c1:be:61:23:c0:8f:a5:90: d7:b3:22:67:b6:1e:a0:1c:8d:dc:1c:d3:9d:45:6f:6b:8f:e7: a5:8e:41:e2:94:16:d3:2a:e7:be:c6:ed:b3:36:60:da:94:21: b2:7a:b1:2b:6f:b1:50:7b:f9:e2:9d:f9:43:9b:51:41:4e:b9: f5:f9:20:47:09:93:35:23:cd:70:42:75:4d:5c:18:3b:52:5e: d8:77:be:9f:35:39:1d:ec:f7:33:0e:4a:80:43:7e:eb:45:9c: a9:3d:3a:b4:0d:03:4e:5e:d2:ce:8e:6d:49:d4:d1:dd:3b:b3: 03:71:4e:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH/5fx8lOdfH6jz0TpDvaFukg4xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1Mjc5QTY3NUYzMjZEMDU3N0JGNzc0QkJCMjBBMTQ1 MDgzODFBRDAeFw0yNTEwMjAxNTQ3MzhaFw0yNTEwMjExOTE2MzhaMDMxMTAvBgNV BAMTKDkwN0IwN0IyMjVCQjBDNDE5RkJENzRGMDc5Qzg2RDA2RTY5OUE3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59bCwHNKpapTIQ+L/MGR9Vqkt /KlsU3bpxoJGwQ24R0VN6tjODOuPN1O/zCa53gC3QQc2EwZkriaTurQ2pmTFv4HV wmUplHsD6pyJ7iJGsD2VYxom0KD+wlhGfS9EWBeMRhclPYGSeHbKYUG0/YIAIsoL ZZ7/mVHO9z6D8EErNOrV0y3sn5obDZvSy8zc7WQ+SCdsr/paAGUGyFq0ayI/PDdA DVC0JutmE+d8VwLXxa/qcUECW8Y2otqbcrUEqJ7ZR7i7nr0lLYRrYCsA/Cf+SZQ4 dbDSoR72/4hWAGEG9D8J2j9NNqQDhTHPc3tyfN/B41INHXoBuqu1DSEhzw/9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkHsHsiW7DEGfvXTwechtBuaZp3QwHwYDVR0j BBgwFoAUQlJ5pnXzJtBXe/d0u7IKFFCDga0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli bWEvMS80MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNTI3OUE2NzVGMzI2RDA1 NzdCRjc3NEJCQjIwQTE0NTA4MzgxQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanlibWEvMS80 MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoeYA4OqVvyyvCsE0Zhi7cdfR+9AYexL+3ImzmeP9UJ2pDtVe/RJh+80LrIXY oLY4vRQ8+1WxxH5pMkGm+J0JHmVUe7FB4+NdXxcWkzSsztWAudwFBKO7i2onCqXh 3x+a/RhP47xQPS/DFBuOXhdrtRBL4UEdOQLfrDA5+zRzzehdNczBPTlec8G+YSPA j6WQ17MiZ7YeoByN3BzTnUVva4/npY5B4pQW0yrnvsbtszZg2pQhsnqxK2+xUHv5 4p35Q5tRQU659fkgRwmTNSPNcEJ1TVwYO1Je2He+nzU5Hez3Mw5KgEN+60WcqT06 tA0DTl7Szo5tSdTR3TuzA3FONw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:44:00 2025 by rpki-client