$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: okiMMrHa9UK+oS1i6+agcN3EIj2hMs4gsfrUIIrW9yY= Subject key identifier: 17:3E:11:06:FA:FD:ED:3F:B7:DD:B6:1A:D6:B7:A2:F2:65:26:79:AA Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 15CC5EEB64BA39F5120592EFD7D585012F4BBEC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 04:53:00 +0000 Manifest this update: Mon 20 Oct 2025 04:48:00 +0000 Manifest next update: Tue 21 Oct 2025 07:32:00 +0000 Files and hashes: 1: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: bhjDFtigiVohiUYQrVpFuzIt7R8p6yfm1jQ1enMrFxc=) 2: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) 3: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) 4: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cc:5e:eb:64:ba:39:f5:12:05:92:ef:d7:d5:85:01:2f:4b:be:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Oct 20 04:48:00 2025 GMT Not After : Oct 21 07:32:00 2025 GMT Subject: CN=173E1106FAFDED3FB7DDB61AD6B7A2F2652679AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:51:5a:86:14:f6:e4:08:ac:8e:05:e1:97: ec:e9:54:a7:51:54:b8:d4:94:66:ab:70:d6:3f:77: 5e:08:8d:47:eb:3f:81:9c:9f:fa:9b:89:25:15:eb: 44:04:70:a9:32:35:cd:a8:2e:96:e0:c8:de:cf:2a: db:08:3b:e2:a6:0a:dc:eb:c5:17:b8:8c:15:8a:86: a3:ac:73:b8:07:23:e9:7c:8d:53:c7:01:fd:6b:c7: 3c:42:f2:6e:d9:df:77:c7:9d:90:bd:aa:f1:45:8e: 9f:1a:b8:9a:9d:42:c5:76:1d:55:d9:7b:04:e7:7c: f8:52:ee:50:ae:b2:7c:30:01:55:35:d3:40:da:ba: af:98:7d:95:87:df:16:86:eb:22:3d:1a:16:40:e9: 84:58:bd:c0:d8:77:70:8e:1f:f5:90:8a:80:49:f3: 4f:35:1c:67:c4:bf:39:86:ca:1b:bd:81:7f:1e:04: 9f:22:e7:f7:5c:e3:ea:1f:7d:7f:37:ca:d2:77:8a: 78:38:e7:e5:a4:2d:f6:86:9b:b0:d5:e9:64:89:13: 8c:85:ba:63:09:d6:9b:6f:af:a4:ae:f3:4b:c6:38: e2:0e:38:86:7f:8c:d3:1e:7e:3a:1b:f5:37:f7:cc: b2:b9:52:c2:e6:9f:cc:9d:5c:27:d2:66:07:f1:12: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3E:11:06:FA:FD:ED:3F:B7:DD:B6:1A:D6:B7:A2:F2:65:26:79:AA X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0f:ee:9d:f2:a4:ae:2e:11:22:b4:74:56:6f:69:3a:77:4f: 72:8f:df:98:7f:26:c4:8a:ab:04:09:47:e7:ae:4e:66:85:2e: f9:10:34:bc:71:40:54:ed:7d:3c:eb:ae:00:c4:fc:ab:7b:c9: d2:0d:6d:9a:1b:bb:09:2d:2a:3e:f5:8d:94:05:13:b3:67:6c: b4:66:21:11:4b:cd:a8:e1:e6:61:cd:26:60:9f:fd:46:cf:c6: ba:98:2b:d7:56:97:ec:bf:36:63:02:21:2e:d0:e8:61:80:3a: 90:c4:27:a3:c8:66:e5:a1:f3:8c:02:3c:88:d0:11:fa:16:7e: 73:28:60:55:71:98:ee:48:f5:6a:ba:bb:d5:80:34:cf:c8:31: 3f:a3:f8:8d:8f:8b:45:53:17:9e:8f:37:f9:88:2e:78:29:22: 57:df:25:a9:67:e0:19:51:4e:0a:18:88:aa:ce:c3:fe:c5:03: 99:7d:3b:83:c0:8d:8f:8f:10:4d:d9:4a:57:fc:19:0d:ca:81: 88:1a:64:7a:27:3f:e2:45:41:f6:1d:93:40:5c:c9:08:3f:e9: 93:9c:57:24:40:57:08:c1:0f:b2:cf:b9:e8:cf:65:6d:44:4e: c1:a2:d7:a4:3d:67:80:af:e3:99:3d:40:3d:51:d0:06:8d:e3: c7:e0:c0:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFcxe62S6OfUSBZLv19WFAS9LvsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTEwMjAwNDQ4MDBaFw0yNTEwMjEwNzMyMDBaMDMxMTAvBgNV BAMTKDE3M0UxMTA2RkFGREVEM0ZCN0REQjYxQUQ2QjdBMkYyNjUyNjc5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj1FahhT25AisjgXhl+zpVKdR VLjUlGarcNY/d14IjUfrP4Gcn/qbiSUV60QEcKkyNc2oLpbgyN7PKtsIO+KmCtzr xRe4jBWKhqOsc7gHI+l8jVPHAf1rxzxC8m7Z33fHnZC9qvFFjp8auJqdQsV2HVXZ ewTnfPhS7lCusnwwAVU100Dauq+YfZWH3xaG6yI9GhZA6YRYvcDYd3COH/WQioBJ 8081HGfEvzmGyhu9gX8eBJ8i5/dc4+offX83ytJ3ing45+WkLfaGm7DV6WSJE4yF umMJ1ptvr6Su80vGOOIOOIZ/jNMefjob9Tf3zLK5UsLmn8ydXCfSZgfxEgnjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFz4RBvr97T+33bYa1rei8mUmeaowHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJA/unfKkri4RIrR0Vm9pOndPco/fmH8mxIqrBAlH565OZoUu+RA0vHFAVO19 POuuAMT8q3vJ0g1tmhu7CS0qPvWNlAUTs2dstGYhEUvNqOHmYc0mYJ/9Rs/Gupgr 11aX7L82YwIhLtDoYYA6kMQno8hm5aHzjAI8iNAR+hZ+cyhgVXGY7kj1arq71YA0 z8gxP6P4jY+LRVMXno83+YgueCkiV98lqWfgGVFOChiIqs7D/sUDmX07g8CNj48Q TdlKV/wZDcqBiBpkeic/4kVB9h2TQFzJCD/pk5xXJEBXCMEPss+56M9lbUROwaLX pD1ngK/jmT1APVHQBo3jx+DAyw== -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:27 2025 by rpki-client