$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: N8crrV686Cwe99TJdjuJfY5JApiONO495ZncDHgBgA8= Subject key identifier: A0:AF:6C:1B:35:2B:7A:E8:45:7A:B4:AC:EA:06:9F:D2:BB:30:5C:84 Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 1E15CB8EC28FEF0D9243F825A357A0677943887E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: 15 Signing time: Mon 20 Oct 2025 04:23:58 +0000 Manifest this update: Mon 20 Oct 2025 04:18:58 +0000 Manifest next update: Tue 21 Oct 2025 08:11:58 +0000 Files and hashes: 1: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) 2: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) 3: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: HKSIi/+FZl/U3l/RESdlZ4JRHeYE+58egRlBZVyAvg4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:15:cb:8e:c2:8f:ef:0d:92:43:f8:25:a3:57:a0:67:79:43:88:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Oct 20 04:18:58 2025 GMT Not After : Oct 21 08:11:58 2025 GMT Subject: CN=A0AF6C1B352B7AE8457AB4ACEA069FD2BB305C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:8e:dc:41:76:6b:e2:c7:70:49:32:1b:6d: d3:3b:64:e2:d4:8b:cc:a3:67:d0:b4:6d:da:a6:06: 85:b7:67:08:24:9c:b9:6c:f3:98:7e:cd:32:89:fe: b9:00:6f:d4:4c:16:f5:72:ef:91:60:b5:0d:86:b3: 6d:e0:12:4a:b5:32:82:86:23:19:83:e4:03:8c:c6: 75:56:5b:4a:93:a8:cd:57:0f:b8:03:88:37:34:d8: fc:27:d8:e8:72:73:e8:99:49:22:da:98:a0:4d:3b: 0e:9a:19:a5:c1:07:93:27:80:02:a4:9f:ca:a3:90: 14:f6:9e:e0:22:28:81:b6:50:c5:62:e9:05:a8:5e: 7a:d7:53:fb:e8:f6:81:e9:f4:fb:eb:ab:cb:5e:4a: 02:57:b0:60:7c:fd:69:d9:a2:1b:36:b6:8d:c9:73: 06:38:15:3a:1c:87:ea:99:aa:a4:ec:51:70:1c:1e: 4a:78:0e:f9:90:e0:5a:74:ee:9c:ba:58:b9:4e:6f: 42:2d:0c:07:e4:ae:1d:ac:01:d1:e3:3c:25:eb:a9: 6a:70:1a:e6:32:b9:e7:c4:c7:68:c3:cb:a4:43:06: 97:19:00:92:c6:db:60:da:3d:08:20:20:f9:56:9b: a6:c8:f3:9d:8f:8d:49:d9:4f:a2:75:66:c8:0c:b0: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:6C:1B:35:2B:7A:E8:45:7A:B4:AC:EA:06:9F:D2:BB:30:5C:84 X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:92:c8:ac:00:17:2f:98:84:2b:76:32:05:14:33:c9:34:76: 3c:ff:4b:b5:0a:67:d6:b0:a5:6a:fb:0e:65:5c:ff:31:0c:b8: 37:04:82:6f:24:4a:ff:a8:71:da:7e:a6:9c:b6:6b:22:40:99: a3:9a:eb:3a:f7:98:7c:ed:6f:3d:dc:92:4b:72:03:c6:74:f9: 5c:c3:bc:87:a1:e2:5a:a1:cc:37:8e:73:b3:02:8a:fa:a8:77: e2:f1:e9:cd:31:e8:53:0a:77:2f:63:f3:34:3c:6e:b1:21:c6: dc:55:ad:45:c2:1a:7c:9a:98:c2:da:f7:f9:4d:97:14:d6:50: 12:8b:72:0e:93:f1:d0:e0:17:18:d1:e7:dd:1a:96:da:21:0c: 0c:ba:f7:ef:63:e5:7d:a2:43:7a:dd:cb:cb:c9:03:c4:10:3c: ca:b0:c5:aa:d1:c6:68:d5:a0:82:ff:01:ca:f7:45:7b:f6:1f: f3:fb:83:29:69:75:d7:19:c0:ff:1a:03:05:d0:40:78:eb:46: 96:b9:77:cf:d9:3a:56:e3:4c:34:dd:57:53:31:b1:bc:3f:16: 54:60:67:3f:b4:3d:cd:7a:1a:ae:9c:36:49:90:0f:af:70:e9: c3:65:4a:81:bd:04:83:e1:13:c8:21:b3:6c:b7:28:6f:0c:9a: df:de:9a:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHhXLjsKP7w2SQ/glo1egZ3lDiH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNTEwMjAwNDE4NThaFw0yNTEwMjEwODExNThaMDMxMTAvBgNV BAMTKEEwQUY2QzFCMzUyQjdBRTg0NTdBQjRBQ0VBMDY5RkQyQkIzMDVDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzo7cQXZr4sdwSTIbbdM7ZOLU i8yjZ9C0bdqmBoW3ZwgknLls85h+zTKJ/rkAb9RMFvVy75FgtQ2Gs23gEkq1MoKG IxmD5AOMxnVWW0qTqM1XD7gDiDc02Pwn2Ohyc+iZSSLamKBNOw6aGaXBB5MngAKk n8qjkBT2nuAiKIG2UMVi6QWoXnrXU/vo9oHp9Pvrq8teSgJXsGB8/WnZohs2to3J cwY4FToch+qZqqTsUXAcHkp4DvmQ4Fp07py6WLlOb0ItDAfkrh2sAdHjPCXrqWpw GuYyuefEx2jDy6RDBpcZAJLG22DaPQggIPlWm6bI852PjUnZT6J1ZsgMsCsPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoK9sGzUreuhFerSs6gaf0rswXIQwHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjZLIrAAXL5iEK3YyBRQzyTR2PP9LtQpn1rClavsOZVz/MQy4NwSCbyRK/6hx 2n6mnLZrIkCZo5rrOveYfO1vPdySS3IDxnT5XMO8h6HiWqHMN45zswKK+qh34vHp zTHoUwp3L2PzNDxusSHG3FWtRcIafJqYwtr3+U2XFNZQEotyDpPx0OAXGNHn3RqW 2iEMDLr372PlfaJDet3Ly8kDxBA8yrDFqtHGaNWggv8ByvdFe/Yf8/uDKWl11xnA /xoDBdBAeOtGlrl3z9k6VuNMNN1XUzGxvD8WVGBnP7Q9zXoarpw2SZAPr3Dpw2VK gb0Eg+ETyCGzbLcobwya396axw== -----END CERTIFICATE-----Generated at Mon Oct 20 15:27:44 2025 by rpki-client