$ rpki-client -vvf rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft File: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft (raw, json) Hash identifier: WBaGFw7xxjDjLiJrFrE0fKnkBEgbiuxAX3JLc8MKm5A= Subject key identifier: DC:B0:40:38:9B:1A:64:9F:E5:C6:3D:B6:F8:EA:71:94:3A:8B:E5:08 Authority key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB Certificate issuer: /CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB Certificate serial: 43FA7674797CF9C4C48CED2CB31976057E8B7726 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft Manifest number: 4B Signing time: Mon 20 Oct 2025 00:54:59 +0000 Manifest this update: Mon 20 Oct 2025 00:49:59 +0000 Manifest next update: Tue 21 Oct 2025 01:39:59 +0000 Files and hashes: 1: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl (hash: CCEN36TMNpcCNMw9Lf5my4WIfG1N4mscQ5Ih224nhJk=) 2: 3137302e3234372e3130302e302f32322d3332203d3e20323632343533.roa (hash: 7BphB1JD9jH3YeTz7XYC6e12+BivDF1/qm1W0CYiPpI=) 3: 323830343a3762303a3a2f33322d313238203d3e20323632343533.roa (hash: gr2u/oI9boQwwcAjZcUOU8d5yrSlwex50xc/uUnWyPQ=) 4: 3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa (hash: kT4yj8yFSiH6EDqd+WdC583lgIULpCZHsmLGa7cAUtY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fa:76:74:79:7c:f9:c4:c4:8c:ed:2c:b3:19:76:05:7e:8b:77:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB Validity Not Before: Oct 20 00:49:59 2025 GMT Not After : Oct 21 01:39:59 2025 GMT Subject: CN=DCB040389B1A649FE5C63DB6F8EA71943A8BE508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:6e:fe:04:ca:9c:b8:ab:b8:7f:ca:d2:29: 77:db:6f:2f:56:58:40:88:78:5f:8d:f0:ef:3e:88: ff:f9:39:5a:0f:bb:8f:40:65:71:0c:d2:ed:91:11: f6:f2:03:b3:5e:e7:e0:31:60:df:97:78:ce:23:c8: 09:39:4e:9f:c6:6a:38:73:0c:b7:e5:15:40:48:c2: 2f:8b:25:0e:a6:ba:07:80:53:ba:f2:3d:e3:8c:c9: 43:6b:fa:f3:ec:8e:7b:fd:ed:a7:58:46:04:68:87: 31:23:15:c8:2d:e2:4d:a8:6b:57:4f:b1:06:80:1b: d5:85:40:14:51:f3:4b:69:b5:f0:2f:e1:f4:6f:70: 5c:f2:d5:f0:57:41:cb:5b:d8:0d:7d:82:bb:26:4c: c5:30:4f:a9:fd:1c:68:47:2f:9e:b6:0d:7f:39:46: 2c:1b:92:73:69:80:b6:34:9c:ff:17:4b:d9:da:73: 55:5f:84:a5:23:d8:2d:ee:ef:ed:cc:37:14:fd:40: 37:2d:b7:77:45:c1:9f:93:c8:cd:8e:60:9e:8d:5d: 50:2c:53:39:05:0e:55:0d:c4:d7:87:7b:b8:36:83: ef:1c:4c:45:c9:fc:27:15:9c:db:92:3e:1e:35:21: b5:1d:bf:46:af:6a:7a:d8:c4:8a:ff:05:13:df:84: 1f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B0:40:38:9B:1A:64:9F:E5:C6:3D:B6:F8:EA:71:94:3A:8B:E5:08 X509v3 Authority Key Identifier: keyid:25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5b:5f:31:54:ac:b7:e0:f3:9c:7d:ca:fb:96:15:38:33:15: 67:42:9e:ae:fd:26:2f:10:b2:cb:6b:86:90:4f:e9:09:7c:89: d0:8f:95:52:54:a6:14:0a:41:d1:21:a2:73:ef:e3:d2:e7:15: 96:ce:1b:3a:fb:93:44:8c:cc:60:ba:73:95:40:fa:ed:92:bf: ba:b1:81:96:01:ad:f3:3d:ee:61:12:13:97:1f:25:f2:0c:60: 85:b6:6e:fb:cd:7b:c5:d7:71:da:2c:43:5c:26:db:53:d4:9c: d0:71:0e:fd:b2:0b:5a:32:bb:62:14:9b:cb:f7:c4:f5:3a:b4: 09:3b:16:c1:b5:9f:11:9b:58:eb:d5:43:a5:22:06:54:49:c3: 5f:c9:ee:e6:65:49:1e:26:b7:9d:27:c6:15:36:d4:a8:01:96: e6:e1:37:42:c0:f0:81:1e:0e:99:ad:cf:27:c4:da:c3:fd:15: 49:41:3d:26:46:1e:bb:03:aa:ad:96:1e:a0:a9:87:ab:d0:79: c1:1d:97:3d:59:61:46:65:72:01:a6:33:db:84:6b:31:a4:00: f9:f9:d3:8d:ed:6c:f6:3a:43:b5:12:9a:58:87:71:cc:e3:1c: 91:f2:6a:a2:2d:dd:bc:32:97:0c:a1:d3:d6:29:7d:a1:3c:fa: 95:a2:9d:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ/p2dHl8+cTEjO0ssxl2BX6LdyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNTRBNzlGQjgxMTdDM0JDNzRCNjQ0NEMwNEE3REVB QTVENDlCQjAeFw0yNTEwMjAwMDQ5NTlaFw0yNTEwMjEwMTM5NTlaMDMxMTAvBgNV BAMTKERDQjA0MDM4OUIxQTY0OUZFNUM2M0RCNkY4RUE3MTk0M0E4QkU1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9m27+BMqcuKu4f8rSKXfbby9W WECIeF+N8O8+iP/5OVoPu49AZXEM0u2REfbyA7Ne5+AxYN+XeM4jyAk5Tp/Gajhz DLflFUBIwi+LJQ6mugeAU7ryPeOMyUNr+vPsjnv97adYRgRohzEjFcgt4k2oa1dP sQaAG9WFQBRR80tptfAv4fRvcFzy1fBXQctb2A19grsmTMUwT6n9HGhHL562DX85 RiwbknNpgLY0nP8XS9nac1VfhKUj2C3u7+3MNxT9QDctt3dFwZ+TyM2OYJ6NXVAs UzkFDlUNxNeHe7g2g+8cTEXJ/CcVnNuSPh41IbUdv0avanrYxIr/BRPfhB9ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3LBAOJsaZJ/lxj22+OpxlDqL5QgwHwYDVR0j BBgwFoAUJcVKefuBF8O8dLZETASn3qpdSbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjZXbU1iVmJ1OUdxMko3TUZjVzNKQ1hzNk1GSzRNWUxBWjdCRGhCNWZr UTkvMC8yNUM1NEE3OUZCODExN0MzQkM3NEI2NDQ0QzA0QTdERUFBNUQ0OUJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzU0QTc5RkI4MTE3QzNC Qzc0QjY0NDRDMDRBN0RFQUE1RDQ5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjZXbU1iVmJ1OUdxMko3TUZjVzNKQ1hzNk1GSzRNWUxBWjdCRGhCNWZrUTkvMC8y NUM1NEE3OUZCODExN0MzQkM3NEI2NDQ0QzA0QTdERUFBNUQ0OUJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiltfMVSst+DznH3K+5YVODMVZ0Kerv0mLxCyy2uGkE/pCXyJ0I+VUlSmFApB 0SGic+/j0ucVls4bOvuTRIzMYLpzlUD67ZK/urGBlgGt8z3uYRITlx8l8gxghbZu +817xddx2ixDXCbbU9Sc0HEO/bILWjK7YhSby/fE9Tq0CTsWwbWfEZtY69VDpSIG VEnDX8nu5mVJHia3nSfGFTbUqAGW5uE3QsDwgR4Oma3PJ8Taw/0VSUE9JkYeuwOq rZYeoKmHq9B5wR2XPVlhRmVyAaYz24RrMaQA+fnTje1s9jpDtRKaWIdxzOMckfJq oi3dvDKXDKHT1il9oTz6laKd4g== -----END CERTIFICATE-----Generated at Mon Oct 20 12:22:30 2025 by rpki-client