$ rpki-client -vvf rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.mft File: 6F25AF9CA689C86F1DC896A112F59460C7D84FC2.mft (raw, json) Hash identifier: k/HpmCBuuAipQxGLrBVg6HD6vIYs6mJBi01hSmyo6gI= Subject key identifier: 90:D4:11:81:A8:60:6F:F0:E4:03:23:26:FA:EC:F3:29:EA:7F:03:31 Authority key identifier: 6F:25:AF:9C:A6:89:C8:6F:1D:C8:96:A1:12:F5:94:60:C7:D8:4F:C2 Certificate issuer: /CN=6F25AF9CA689C86F1DC896A112F59460C7D84FC2 Certificate serial: 2889EDC9978E598F63A041F68D688BCEE7B8DA3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.mft Manifest number: 2D Signing time: Tue 04 Nov 2025 15:45:37 +0000 Manifest this update: Tue 04 Nov 2025 15:40:37 +0000 Manifest next update: Wed 05 Nov 2025 19:08:37 +0000 Files and hashes: 1: 323830343a363731633a3a2f33322d3333203d3e20323639363034.roa (hash: U3APey+08IX0MBTenYQ3UFri8HFyKIkcphSu8xwZwsQ=) 2: 34352e3138392e3234302e302f32322d3234203d3e20323639363034.roa (hash: zaCc11s58UCSSF7F5gspoy1cFx0wefMVg66vd7N93sQ=) 3: 6F25AF9CA689C86F1DC896A112F59460C7D84FC2.crl (hash: qAwIA7Vzn6kiCHSPAdZXugBVmXbO6Iq+cvAIUrRfYbg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.crl rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:89:ed:c9:97:8e:59:8f:63:a0:41:f6:8d:68:8b:ce:e7:b8:da:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F25AF9CA689C86F1DC896A112F59460C7D84FC2 Validity Not Before: Nov 4 15:40:37 2025 GMT Not After : Nov 5 19:08:37 2025 GMT Subject: CN=90D41181A8606FF0E4032326FAECF329EA7F0331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:a0:85:be:40:01:4e:49:5f:bf:4f:a4:b4: 7b:3f:32:66:2a:58:db:a9:db:8d:fc:98:91:6a:1c: 7d:95:75:1f:af:d5:87:fb:6b:ab:03:b3:0f:34:d0: 5e:e7:28:0f:2d:4a:98:24:71:31:0c:db:c0:e6:c9: 46:f8:ce:62:12:c6:2e:4e:a4:7a:7b:9b:a6:6c:c8: a6:24:e7:41:ec:71:ee:19:44:db:c5:4d:9f:a9:ad: 09:17:27:55:81:aa:9c:7d:e7:86:b7:2c:a8:1f:ca: 48:de:96:c5:39:ac:a8:f7:27:ca:52:e1:e9:c7:36: 6f:59:c4:94:98:e0:83:66:27:48:3d:52:12:c7:40: fb:20:8b:97:c6:28:ae:c7:98:9b:e7:2f:7d:f9:40: 43:40:1c:0a:33:0b:6f:eb:55:49:96:ee:bd:c3:35: a7:8d:b3:60:07:59:d9:ee:3e:4f:a7:6e:42:3e:cc: 54:96:d7:90:09:a1:dc:56:43:14:e0:3b:55:52:f1: b2:92:f1:eb:75:12:11:22:bc:01:9d:c5:a3:f0:d9: 4d:b0:d2:bf:ca:85:cd:c5:57:43:21:5a:85:bd:28: 8c:91:06:79:9f:dd:55:db:6a:04:38:7e:28:11:62: 8b:1b:72:3f:94:b6:62:4c:70:7b:2d:00:b5:0e:6b: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D4:11:81:A8:60:6F:F0:E4:03:23:26:FA:EC:F3:29:EA:7F:03:31 X509v3 Authority Key Identifier: keyid:6F:25:AF:9C:A6:89:C8:6F:1D:C8:96:A1:12:F5:94:60:C7:D8:4F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f6:9b:00:a6:2e:6f:22:e7:3e:a1:ba:f3:ae:f6:cd:03:88: 19:f0:79:d0:39:4d:3b:99:0f:96:52:a1:f7:7d:79:64:60:c2: e5:f8:a1:68:f3:57:3d:4a:ef:47:b6:55:d4:01:40:21:75:52: 9d:5a:4e:93:5e:84:c4:4b:eb:31:09:a9:11:11:31:ef:7f:7a: 3c:05:fc:11:54:ca:4c:a5:f4:68:48:5d:2c:ec:8b:90:21:a7: 55:20:35:b7:04:a7:3c:70:d4:61:f5:6e:96:fa:bc:45:5c:1f: 62:26:d5:fe:39:6d:3d:53:fc:6b:eb:c9:0c:e0:95:38:c3:a0: 00:a2:41:b9:26:66:ac:7d:4d:88:8f:57:ec:6b:42:f0:9e:d5: f1:37:84:a2:a1:7f:f2:47:bc:0c:d5:cf:93:f6:81:8d:2c:33: 4d:c0:94:9d:4b:75:4c:f6:f8:8e:17:5e:19:8f:c4:f2:60:7b: 85:44:00:c3:44:4f:5c:53:d6:07:3f:eb:cb:72:d4:9a:91:22: 6f:cb:ee:e7:a2:85:a4:42:91:8d:41:92:ee:bb:e0:6b:d2:78: 6b:35:96:03:ac:8f:a9:6f:8f:d0:23:9c:3c:e7:ec:77:1a:76: 14:03:a1:04:6f:ae:e0:3b:dc:8a:18:e2:ef:6b:35:26:6d:75: bc:73:d1:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKIntyZeOWY9joEH2jWiLzue42j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyNUFGOUNBNjg5Qzg2RjFEQzg5NkExMTJGNTk0NjBD N0Q4NEZDMjAeFw0yNTExMDQxNTQwMzdaFw0yNTExMDUxOTA4MzdaMDMxMTAvBgNV BAMTKDkwRDQxMTgxQTg2MDZGRjBFNDAzMjMyNkZBRUNGMzI5RUE3RjAzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsqCFvkABTklfv0+ktHs/MmYq WNup2438mJFqHH2VdR+v1Yf7a6sDsw800F7nKA8tSpgkcTEM28DmyUb4zmISxi5O pHp7m6ZsyKYk50Hsce4ZRNvFTZ+prQkXJ1WBqpx954a3LKgfykjelsU5rKj3J8pS 4enHNm9ZxJSY4INmJ0g9UhLHQPsgi5fGKK7HmJvnL335QENAHAozC2/rVUmW7r3D NaeNs2AHWdnuPk+nbkI+zFSW15AJodxWQxTgO1VS8bKS8et1EhEivAGdxaPw2U2w 0r/Khc3FV0MhWoW9KIyRBnmf3VXbagQ4figRYosbcj+UtmJMcHstALUOa48HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkNQRgahgb/DkAyMm+uzzKep/AzEwHwYDVR0j BBgwFoAUbyWvnKaJyG8dyJahEvWUYMfYT8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5Zb2IyenJ5UGJ5U3pkQTFzOXByclZKZks4RjNNVU1ndGNLYnU3ZDVv R0cvMC82RjI1QUY5Q0E2ODlDODZGMURDODk2QTExMkY1OTQ2MEM3RDg0RkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMjVBRjlDQTY4OUM4NkYx REM4OTZBMTEyRjU5NDYwQzdEODRGQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG5Zb2IyenJ5UGJ5U3pkQTFzOXByclZKZks4RjNNVU1ndGNLYnU3ZDVvR0cvMC82 RjI1QUY5Q0E2ODlDODZGMURDODk2QTExMkY1OTQ2MEM3RDg0RkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsvabAKYubyLnPqG68672zQOIGfB50DlNO5kPllKh9315ZGDC5fihaPNXPUrv R7ZV1AFAIXVSnVpOk16ExEvrMQmpEREx7396PAX8EVTKTKX0aEhdLOyLkCGnVSA1 twSnPHDUYfVulvq8RVwfYibV/jltPVP8a+vJDOCVOMOgAKJBuSZmrH1NiI9X7GtC 8J7V8TeEoqF/8ke8DNXPk/aBjSwzTcCUnUt1TPb4jhdeGY/E8mB7hUQAw0RPXFPW Bz/ry3LUmpEib8vu56KFpEKRjUGS7rvga9J4azWWA6yPqW+P0COcPOfsdxp2FAOh BG+u4Dvcihji72s1Jm11vHPRkQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:33:30 2025 by rpki-client