$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft File: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json) Hash identifier: 8R04vm/RFI1BSexTuiqv/70pN+NXYNKjDGAWTrFidT4= Subject key identifier: 80:F9:20:0E:3B:73:9A:59:7E:D6:AA:5A:CF:1E:73:DC:2A:DC:4A:E2 Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78 Certificate issuer: /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78 Certificate serial: 248BFEF554224F0311EAFBE8AFEBB12CBD0523FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 15:40:57 +0000 Manifest this update: Tue 04 Nov 2025 15:35:57 +0000 Manifest next update: Wed 05 Nov 2025 17:18:57 +0000 Files and hashes: 1: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: stP92oJ4IE5MiAZ9P5AQoFIryaIIHVovcUqJt+GD6Mc=) 2: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: 9luiwe2AYe/DQqXs1Ja9b8oSFOKoCuhkpKbHbtqcl9Y=) 3: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: hVK/GH5J5gESoNpOj4BeuJw0gt9hYssVFQjGwQ3BqNw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8b:fe:f5:54:22:4f:03:11:ea:fb:e8:af:eb:b1:2c:bd:05:23:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78 Validity Not Before: Nov 4 15:35:57 2025 GMT Not After : Nov 5 17:18:57 2025 GMT Subject: CN=80F9200E3B739A597ED6AA5ACF1E73DC2ADC4AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:83:f7:74:f9:c7:0f:a0:fa:1a:e4:d4:bf: cc:c5:53:d9:6d:ec:95:cb:b7:37:aa:83:46:9d:ff: 9f:91:9c:c0:73:15:1a:a2:75:7b:3a:3e:63:a5:bd: 46:28:4b:f3:c1:f3:4d:7b:d2:bc:8d:1a:90:bf:e0: fe:80:fb:20:d7:71:ca:c5:31:8b:0f:3d:1d:9c:9b: 8c:a8:59:1f:8f:3a:f4:29:c2:ef:5a:b4:aa:8c:45: 35:1c:40:16:13:66:13:71:4c:d8:aa:4a:53:33:86: dc:d7:51:ea:22:5f:ca:49:c1:ab:39:bf:1b:f5:74: e4:b1:7a:55:ad:91:5c:cf:a4:37:5e:36:93:13:42: 4a:05:b6:fc:84:aa:90:6d:8b:49:34:10:66:f1:84: 60:75:77:bb:d9:17:45:7d:e5:c0:56:28:8a:f5:e5: 16:e9:5c:12:60:85:24:16:88:1a:c8:ed:49:f0:c5: 2f:f4:61:97:95:d0:b3:99:ff:95:56:3d:a8:c6:3d: 41:47:31:cc:ff:e9:3f:f5:da:76:4a:93:02:b3:94: dc:1f:35:70:21:a9:bf:8e:66:db:f0:b2:e8:aa:45: 60:52:d2:9e:aa:df:83:a3:30:ed:41:22:56:f3:f3: 04:72:7d:d1:60:ba:bd:4b:a6:10:a2:45:32:60:1b: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:20:0E:3B:73:9A:59:7E:D6:AA:5A:CF:1E:73:DC:2A:DC:4A:E2 X509v3 Authority Key Identifier: keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0c:e9:b4:59:0b:6c:a5:f4:5b:dc:44:ba:b9:53:35:0f:fc: 36:40:65:9b:2a:d3:86:95:0c:9d:be:b3:9a:37:65:4b:ae:86: d2:89:a2:67:5c:2b:64:5c:63:dc:3b:cb:96:a4:87:8f:af:36: 08:0c:73:4f:a9:7e:70:9e:29:8d:91:3c:b0:7f:37:6b:96:ec: ae:b8:f5:67:d9:d8:d4:4b:61:41:10:0f:17:1e:fb:a0:df:58: 96:57:95:1f:db:d9:42:52:ea:1b:96:06:03:09:cc:bb:2e:5a: 7f:de:a3:f1:87:8d:75:b1:b4:ce:13:e6:fb:b6:b7:a1:37:d2: fa:17:16:d6:45:d5:18:9a:8a:1b:c1:a3:88:fb:bb:c7:46:dd: 04:5b:52:e9:97:d4:7d:ed:3a:ba:b3:1c:25:91:e9:a9:97:0f: a3:22:21:8a:3b:4b:fd:3c:52:94:bd:a0:25:2d:31:6c:e9:48: df:a8:60:01:4b:69:6c:68:64:77:c7:b2:e3:ec:93:fd:b6:16: 6a:94:e0:ae:f1:a8:5d:61:59:9c:2f:12:be:88:32:f6:0f:27: 17:16:61:6c:f8:00:31:80:94:9e:cd:f7:26:43:8e:da:cd:86: 69:f9:4c:ca:38:95:4c:49:c3:a0:ab:ad:d9:6b:76:4f:8e:e1: d3:c8:49:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJIv+9VQiTwMR6vvor+uxLL0FI/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2Nzg5OTdENjY2QkY5MjgxRkZFQUI3OEI2RDI4QTFG QTUxRkY3ODAeFw0yNTExMDQxNTM1NTdaFw0yNTExMDUxNzE4NTdaMDMxMTAvBgNV BAMTKDgwRjkyMDBFM0I3MzlBNTk3RUQ2QUE1QUNGMUU3M0RDMkFEQzRBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZYP3dPnHD6D6GuTUv8zFU9lt 7JXLtzeqg0ad/5+RnMBzFRqidXs6PmOlvUYoS/PB80170ryNGpC/4P6A+yDXccrF MYsPPR2cm4yoWR+POvQpwu9atKqMRTUcQBYTZhNxTNiqSlMzhtzXUeoiX8pJwas5 vxv1dOSxelWtkVzPpDdeNpMTQkoFtvyEqpBti0k0EGbxhGB1d7vZF0V95cBWKIr1 5RbpXBJghSQWiBrI7UnwxS/0YZeV0LOZ/5VWPajGPUFHMcz/6T/12nZKkwKzlNwf NXAhqb+OZtvwsuiqRWBS0p6q34OjMO1BIlbz8wRyfdFgur1LphCiRTJgG8FTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgPkgDjtzmll+1qpazx5z3CrcSuIwHwYDVR0j BBgwFoAUJWeJl9Zmv5KB/+q3i20oofpR/3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJE SzcvMS8yNTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Njc4OTk3RDY2NkJGOTI4 MUZGRUFCNzhCNkQyOEExRkE1MUZGNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJESzcvMS8y NTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADAzptFkLbKX0W9xEurlTNQ/8NkBlmyrThpUMnb6zmjdlS66G0omiZ1wrZFxj 3DvLlqSHj682CAxzT6l+cJ4pjZE8sH83a5bsrrj1Z9nY1EthQRAPFx77oN9YlleV H9vZQlLqG5YGAwnMuy5af96j8YeNdbG0zhPm+7a3oTfS+hcW1kXVGJqKG8GjiPu7 x0bdBFtS6ZfUfe06urMcJZHpqZcPoyIhijtL/TxSlL2gJS0xbOlI36hgAUtpbGhk d8ey4+yT/bYWapTgrvGoXWFZnC8Svogy9g8nFxZhbPgAMYCUns33JkOO2s2GaflM yjiVTEnDoKut2Wt2T47h08hJTA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:01:40 2025 by rpki-client