$ rpki-client -vvvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft File: 25E8B473764AD2BD5079162C0353342232397DC5.mft (raw, json) Hash identifier: JqOxWdYXpeLBZHw+zRIVHfl3mKg/XoBAXBc/AATL9iQ= Subject key identifier: 49:90:CA:31:28:D4:80:05:E6:72:10:34:B1:B1:97:70:BF:21:FC:40 Authority key identifier: 25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5 Certificate issuer: /CN=25E8B473764AD2BD5079162C0353342232397DC5 Certificate serial: 2DBFEF1CFC918DE7A9176FBDCD66550BCB880426 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft Manifest number: 47 Signing time: Thu 15 Oct 2026 07:53:10 +0000 Manifest this update: Thu 15 Oct 2026 07:48:10 +0000 Manifest next update: Fri 16 Oct 2026 08:24:10 +0000 Files and hashes: 1: 34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa (hash: YR29Zxabm8A5qZCvIfksaCr53yb2s6BfjgttsOawScU=) 2: 323830343a386531303a3a2f33322d313238203d3e20323733343030.roa (hash: bIwODDMsWWEz8dFe5jtHZfNZ6KB3C8ySlDWMARiv7Uw=) 3: 25E8B473764AD2BD5079162C0353342232397DC5.crl (hash: +JaWlR81bWhZpwHIMHBqmH7oKEx5MJgVxn5ZqXjljQs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.crl rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Oct 2026 08:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:ef:1c:fc:91:8d:e7:a9:17:6f:bd:cd:66:55:0b:cb:88:04:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25E8B473764AD2BD5079162C0353342232397DC5 Validity Not Before: Oct 15 07:48:10 2026 GMT Not After : Oct 16 08:24:10 2026 GMT Subject: CN=4990CA3128D48005E6721034B1B19770BF21FC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:91:b7:f2:bf:8c:3e:e7:a0:30:29:01:52: 31:73:1c:80:2f:54:31:94:b4:16:d7:44:1c:a4:29: d4:dc:70:8d:25:78:67:3a:2d:29:eb:ed:b1:80:67: 92:c9:92:8e:c3:d0:92:16:1c:84:be:fe:72:42:02: 1f:5b:1f:76:3b:2e:3d:f7:2f:e0:d4:f3:24:0f:1f: 76:1d:ee:8c:f4:cf:64:6c:99:97:d4:c9:ff:2d:2c: a6:89:f1:e1:e8:53:63:17:c5:7c:f7:99:db:e9:f0: 9d:a7:23:f2:89:06:c8:cd:de:93:f5:0a:17:5c:f2: ba:86:86:e0:84:fa:5b:79:a8:bc:a8:e6:f2:54:8a: 78:53:b0:97:61:88:b2:88:71:78:40:04:87:76:2f: da:de:0c:1d:d0:af:6b:43:fe:80:8f:20:e2:a0:f9: 74:f9:d9:c8:41:93:0a:12:7f:f4:42:ea:72:d3:0a: 25:fd:e3:d8:50:82:fc:6f:b0:fe:99:c7:7a:50:01: b2:76:00:40:6b:f8:0f:2f:b8:37:e3:f4:4a:44:e7: 37:47:5e:31:00:cc:70:6f:89:6b:ac:35:f8:6d:fa: de:2a:dd:f3:66:43:30:98:83:01:8d:9d:92:3f:b0: bb:a9:7f:48:91:b4:4d:4d:96:1d:c1:1a:66:8d:d7: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:90:CA:31:28:D4:80:05:E6:72:10:34:B1:B1:97:70:BF:21:FC:40 X509v3 Authority Key Identifier: keyid:25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:71:c6:08:7c:c0:42:44:d4:25:76:02:c0:82:26:8b:54:8c: 38:8c:46:f7:b0:1e:f7:54:29:6e:53:03:60:f7:0b:54:64:50: 91:96:41:20:a1:c4:47:1b:9d:e5:6b:8d:85:26:55:53:e0:06: c1:f6:36:13:15:7f:f2:ef:5c:e8:2e:61:00:96:a1:99:1b:28: 2c:08:8a:df:65:67:ab:6b:9d:43:3c:51:64:f3:da:39:55:15: 46:bc:e6:55:f8:9d:00:20:78:56:0f:08:34:65:dc:c1:bd:10: 96:d5:58:07:a9:8e:3e:4d:d8:ef:2f:90:11:7c:e5:0d:3e:c5: 75:6e:30:78:4d:b7:04:95:cd:ef:a0:36:dc:d2:65:c3:f6:f0: a1:53:4c:3a:41:ff:49:2c:37:0f:81:c4:ff:00:13:f8:b9:53: 20:fb:78:de:32:ce:6e:1f:d9:04:8c:d9:60:0c:c1:55:6b:c4: 18:05:8d:5e:f7:5d:c1:4d:c1:f9:4d:ea:06:05:ff:fb:1d:ab: a5:f1:e5:79:5b:7e:e0:56:96:e2:e0:ee:4c:5d:3c:e3:61:ce: 94:a7:8f:77:77:10:6b:4e:da:14:10:36:ed:b6:4e:8f:20:09: 1c:46:11:0c:7e:09:ea:14:c1:61:18:f6:7d:3b:41:f6:d5:f1: 43:9b:e5:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULb/vHPyRjeepF2+9zWZVC8uIBCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVFOEI0NzM3NjRBRDJCRDUwNzkxNjJDMDM1MzM0MjIz MjM5N0RDNTAeFw0yNjEwMTUwNzQ4MTBaFw0yNjEwMTYwODI0MTBaMDMxMTAvBgNV BAMTKDQ5OTBDQTMxMjhENDgwMDVFNjcyMTAzNEIxQjE5NzcwQkYyMUZDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC275G38r+MPuegMCkBUjFzHIAv VDGUtBbXRBykKdTccI0leGc6LSnr7bGAZ5LJko7D0JIWHIS+/nJCAh9bH3Y7Lj33 L+DU8yQPH3Yd7oz0z2RsmZfUyf8tLKaJ8eHoU2MXxXz3mdvp8J2nI/KJBsjN3pP1 Chdc8rqGhuCE+lt5qLyo5vJUinhTsJdhiLKIcXhABId2L9reDB3Qr2tD/oCPIOKg +XT52chBkwoSf/RC6nLTCiX949hQgvxvsP6Zx3pQAbJ2AEBr+A8vuDfj9EpE5zdH XjEAzHBviWusNfht+t4q3fNmQzCYgwGNnZI/sLupf0iRtE1Nlh3BGmaN19k9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSZDKMSjUgAXmchA0sbGXcL8h/EAwHwYDVR0j BBgwFoAUJei0c3ZK0r1QeRYsA1M0IjI5fcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JkN21tS2oxTnRMVkNhUUFMeFVzRUZDaHl1QkxvZ2RpcmhRcTNqR0tR cTEvMC8yNUU4QjQ3Mzc2NEFEMkJENTA3OTE2MkMwMzUzMzQyMjMyMzk3REM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RThCNDczNzY0QUQyQkQ1 MDc5MTYyQzAzNTMzNDIyMzIzOTdEQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JkN21tS2oxTnRMVkNhUUFMeFVzRUZDaHl1QkxvZ2RpcmhRcTNqR0tRcTEvMC8y NUU4QjQ3Mzc2NEFEMkJENTA3OTE2MkMwMzUzMzQyMjMyMzk3REM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALXHGCHzAQkTUJXYCwIImi1SMOIxG97Ae91QpblMDYPcLVGRQkZZBIKHERxud 5WuNhSZVU+AGwfY2ExV/8u9c6C5hAJahmRsoLAiK32Vnq2udQzxRZPPaOVUVRrzm VfidACB4Vg8INGXcwb0QltVYB6mOPk3Y7y+QEXzlDT7FdW4weE23BJXN76A23NJl w/bwoVNMOkH/SSw3D4HE/wAT+LlTIPt43jLObh/ZBIzZYAzBVWvEGAWNXvddwU3B +U3qBgX/+x2rpfHleVt+4FaW4uDuTF0842HOlKePd3cQa07aFBA27bZOjyAJHEYR DH4J6hTBYRj2fTtB9tXxQ5vlcQ== -----END CERTIFICATE-----Generated at Thu Oct 15 13:38:15 2026 by rpki-client