$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: pdoMzmU3pSBC2M1TCnRIZxwRKzoKu9QJQ7h5MmY/wLQ= Subject key identifier: AB:53:28:DE:CF:48:96:D0:C1:AC:BD:7A:E4:2B:F6:E5:45:06:16:7D Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 0FDEB54D2D4AD45E5E9A53AB7C9D2A790136A4E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: E4 Signing time: Wed 25 Mar 2026 08:38:39 +0000 Manifest this update: Wed 25 Mar 2026 08:33:39 +0000 Manifest next update: Thu 26 Mar 2026 09:37:39 +0000 Files and hashes: 1: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: VIACT1/Jp1rewqxsrdkO2Yb63dc2lDF+vdt7BPw7N0Q=) 2: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) 3: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 09:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:de:b5:4d:2d:4a:d4:5e:5e:9a:53:ab:7c:9d:2a:79:01:36:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Mar 25 08:33:39 2026 GMT Not After : Mar 26 09:37:39 2026 GMT Subject: CN=AB5328DECF4896D0C1ACBD7AE42BF6E54506167D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:18:36:cd:31:14:0c:5e:04:2a:fb:f8:48: 17:bb:ce:3c:cf:9e:ff:53:ca:99:19:12:5e:d0:b9: f7:52:47:6e:93:fb:62:68:79:ef:75:f9:47:12:73: c8:9b:db:13:45:19:ce:d4:09:08:f3:69:ae:dc:4a: 52:b2:48:b5:04:db:cc:88:d9:6d:1c:82:36:23:b3: ff:17:3c:a3:35:b3:bf:b6:51:ef:6c:11:02:81:a5: b2:6c:a0:9d:21:f7:66:58:d3:da:6b:45:03:df:f1: 7d:ad:c7:0a:17:d2:be:28:47:ff:c2:f3:eb:c9:09: 66:c2:b1:66:3a:06:9a:ad:3d:56:03:02:3c:94:d2: 7d:70:a9:7c:73:92:68:aa:ec:d6:be:21:b6:aa:db: 30:5b:82:35:f1:0e:55:22:3e:3c:5e:db:82:3f:58: b2:84:64:1d:76:46:ad:5b:3a:66:20:be:52:e9:2a: df:75:8f:53:a9:bf:6e:c3:eb:59:48:bd:d2:f9:53: 3e:fd:34:e8:dd:92:98:f0:74:26:2c:f5:8e:6c:17: 8d:77:29:89:4c:36:e4:55:b9:8d:03:2f:5b:1b:20: 98:1d:40:cc:cc:08:67:01:8c:3b:98:74:18:95:e0: f8:8c:e1:f5:f2:82:42:a1:43:27:1e:30:b2:12:d9: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:53:28:DE:CF:48:96:D0:C1:AC:BD:7A:E4:2B:F6:E5:45:06:16:7D X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:9c:ea:8c:9c:2f:88:46:62:79:8a:94:1f:0b:ba:5e:68:4b: 26:02:89:a7:1e:cd:03:03:24:22:47:0b:b9:55:4c:d3:5f:44: 8c:70:9f:10:13:e9:b9:98:b5:38:76:2f:d8:7b:bc:31:f0:68: e1:05:56:f9:cf:8d:41:0b:ee:b6:3c:fa:c7:0b:fa:ed:21:1c: 70:53:5c:82:6e:cb:c1:04:88:b4:b3:78:0e:4a:6e:f7:d7:7c: be:3d:4f:3d:40:8e:f8:fb:ec:36:f9:4d:2b:0c:c3:64:03:78: d6:36:64:40:a7:39:ee:1a:c6:06:d2:26:79:8f:af:44:70:bc: d6:cd:b8:e8:12:d6:02:c8:25:de:90:46:bc:22:3b:60:50:74: 62:af:be:4e:c8:6b:ff:3e:25:14:8b:87:a2:ad:c9:15:66:df: 57:f6:ab:da:8b:36:55:4d:25:6d:f2:d1:34:d5:87:3c:3e:28: e9:87:d5:35:e5:d7:0b:e4:06:19:0f:ea:fb:06:d0:5f:54:88: 52:a6:f7:ac:4a:18:a0:4b:e7:5f:8c:2e:2c:3c:9f:da:5d:d6: f2:3d:a8:ad:43:f7:2e:ee:a8:33:66:15:e2:81:a2:c3:a8:c2: 2f:d2:4e:17:6a:4b:84:4f:77:5d:b4:56:aa:f7:24:2b:06:28: 26:f8:a6:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD961TS1K1F5emlOrfJ0qeQE2pOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNjAzMjUwODMzMzlaFw0yNjAzMjYwOTM3MzlaMDMxMTAvBgNV BAMTKEFCNTMyOERFQ0Y0ODk2RDBDMUFDQkQ3QUU0MkJGNkU1NDUwNjE2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs5Rg2zTEUDF4EKvv4SBe7zjzP nv9TypkZEl7QufdSR26T+2Joee91+UcSc8ib2xNFGc7UCQjzaa7cSlKySLUE28yI 2W0cgjYjs/8XPKM1s7+2Ue9sEQKBpbJsoJ0h92ZY09prRQPf8X2txwoX0r4oR//C 8+vJCWbCsWY6BpqtPVYDAjyU0n1wqXxzkmiq7Na+Ibaq2zBbgjXxDlUiPjxe24I/ WLKEZB12Rq1bOmYgvlLpKt91j1Opv27D61lIvdL5Uz79NOjdkpjwdCYs9Y5sF413 KYlMNuRVuY0DL1sbIJgdQMzMCGcBjDuYdBiV4PiM4fXygkKhQyceMLIS2bzFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq1Mo3s9IltDBrL165Cv25UUGFn0wHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvpzqjJwviEZieYqUHwu6XmhLJgKJpx7NAwMkIkcLuVVM019EjHCfEBPpuZi1 OHYv2Hu8MfBo4QVW+c+NQQvutjz6xwv67SEccFNcgm7LwQSItLN4Dkpu99d8vj1P PUCO+PvsNvlNKwzDZAN41jZkQKc57hrGBtImeY+vRHC81s246BLWAsgl3pBGvCI7 YFB0Yq++Tshr/z4lFIuHoq3JFWbfV/ar2os2VU0lbfLRNNWHPD4o6YfVNeXXC+QG GQ/q+wbQX1SIUqb3rEoYoEvnX4wuLDyf2l3W8j2orUP3Lu6oM2YV4oGiw6jCL9JO F2pLhE93XbRWqvckKwYoJvimJA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:24:57 2026 by rpki-client