$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft File: 425279A675F326D0577BF774BBB20A14508381AD.mft (raw, json) Hash identifier: dxIOkTAiIqJWwwa/BXRX88WacrTrfGA10m+wODWDRtU= Subject key identifier: 23:BD:D4:15:F2:6B:33:E1:C9:A2:1B:E8:3E:6B:18:E3:61:75:4E:F1 Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD Certificate issuer: /CN=425279A675F326D0577BF774BBB20A14508381AD Certificate serial: 7B95D2315B87C13BB803AF406D13DB27AAE896F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft Manifest number: 0301 Signing time: Tue 04 Nov 2025 21:13:28 +0000 Manifest this update: Tue 04 Nov 2025 21:08:28 +0000 Manifest next update: Wed 05 Nov 2025 21:48:28 +0000 Files and hashes: 1: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: kDpmKtJF4mGWfac+atxrTauaGW3uTc73uitca/OTWLI=) 2: 425279A675F326D0577BF774BBB20A14508381AD.crl (hash: DyQcz00o1rpIP5D7ckPuMth2WURYIugU0zuBj/X1EUA=) 3: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: mNHi88NZLBtau030tdBn9V/OmWy/tYOVyhjXlqlljXs=) 4: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: 0+SKyRuS8vJuXq7MWE/epWSyK2AeWtwCEDU99XSAo6E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:95:d2:31:5b:87:c1:3b:b8:03:af:40:6d:13:db:27:aa:e8:96:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD Validity Not Before: Nov 4 21:08:28 2025 GMT Not After : Nov 5 21:48:28 2025 GMT Subject: CN=23BDD415F26B33E1C9A21BE83E6B18E361754EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:4d:8c:64:1b:ec:4c:a4:ed:47:49:ed:2e: 14:16:35:ba:fb:35:9e:f8:77:de:6f:72:11:5a:b2: 3a:f3:9b:5a:14:a3:7c:dd:6d:3a:55:e6:30:b1:8c: aa:a6:e1:0b:55:47:30:69:6b:8f:4f:d2:d5:cb:49: 42:8f:d2:79:5f:2b:26:44:dd:74:9e:b6:ee:e0:e2: 40:e3:80:15:47:d0:8c:ba:d0:8f:38:e0:1a:a8:8a: 5c:cb:be:39:7e:d9:df:d0:5b:42:76:c4:f5:31:a0: 24:d1:f1:41:33:eb:30:b0:89:20:ef:b7:85:0c:d8: 24:fb:f7:5d:5c:3f:bd:27:6b:73:a1:26:33:9f:a1: 53:c7:a1:51:7d:70:dc:6a:0d:29:8e:29:de:7a:d5: 81:20:af:17:7c:3d:61:63:6c:c1:4b:02:fe:87:44: d7:70:f8:ae:e9:ca:04:b7:0f:da:ad:6e:35:3a:33: bd:46:9e:d2:ae:3e:30:eb:c4:82:b7:bd:2d:f4:73: 29:41:16:69:ab:73:1c:cc:04:c3:0b:96:a6:86:dc: 1e:fc:93:98:1b:4c:3a:8a:6f:99:32:17:cc:5e:77: 97:18:41:f4:a1:7c:29:ca:87:35:f4:6a:54:c9:99: 44:1c:5a:f6:3c:3d:db:7c:18:fa:65:5f:03:26:30: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:D4:15:F2:6B:33:E1:C9:A2:1B:E8:3E:6B:18:E3:61:75:4E:F1 X509v3 Authority Key Identifier: keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:05:1b:f0:09:73:8b:ec:7e:4a:9b:74:ea:eb:84:a3:0a:70: 02:09:66:ec:08:55:20:67:9d:3e:84:25:ca:c4:82:dd:72:98: e7:e4:f0:35:86:20:a6:1b:fe:da:2d:5e:50:e5:c9:7f:2d:ce: 2c:06:bb:03:34:51:39:9f:8b:42:20:52:fe:99:68:f7:7b:e0: 75:83:67:73:55:c2:64:c8:85:bd:36:66:3b:38:80:6f:00:2f: f7:d8:27:23:4d:e3:4c:60:0b:ff:cc:14:9a:75:a8:63:3e:ce: 3c:f2:82:ff:1e:28:b4:b8:43:52:f8:fe:08:ee:06:63:5f:96: 6a:dd:d3:75:cb:97:ec:a2:40:d1:3f:68:48:96:2e:a0:31:41: 91:48:e2:6f:bd:30:90:32:ef:42:ce:d2:b9:5b:9c:2b:19:b2: f0:ab:6a:1b:3a:80:d5:ff:10:60:9f:1e:d9:4e:be:5e:e2:0b: ee:fd:c5:8a:eb:32:c9:30:33:16:d3:ce:e4:a9:bc:37:3f:01: d5:f1:ce:d8:db:49:da:3b:4c:54:d1:57:7f:65:0c:15:71:c9: ff:0e:17:3c:a6:f1:88:59:8f:ce:0e:5c:38:78:4e:69:9c:2b: a6:ca:47:93:0d:55:48:15:91:6a:ca:ab:63:56:9c:0e:35:f2: 74:9a:98:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe5XSMVuHwTu4A69AbRPbJ6rolvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1Mjc5QTY3NUYzMjZEMDU3N0JGNzc0QkJCMjBBMTQ1 MDgzODFBRDAeFw0yNTExMDQyMTA4MjhaFw0yNTExMDUyMTQ4MjhaMDMxMTAvBgNV BAMTKDIzQkRENDE1RjI2QjMzRTFDOUEyMUJFODNFNkIxOEUzNjE3NTRFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mU2MZBvsTKTtR0ntLhQWNbr7 NZ74d95vchFasjrzm1oUo3zdbTpV5jCxjKqm4QtVRzBpa49P0tXLSUKP0nlfKyZE 3XSetu7g4kDjgBVH0Iy60I844BqoilzLvjl+2d/QW0J2xPUxoCTR8UEz6zCwiSDv t4UM2CT7911cP70na3OhJjOfoVPHoVF9cNxqDSmOKd561YEgrxd8PWFjbMFLAv6H RNdw+K7pygS3D9qtbjU6M71GntKuPjDrxIK3vS30cylBFmmrcxzMBMMLlqaG3B78 k5gbTDqKb5kyF8xed5cYQfShfCnKhzX0alTJmUQcWvY8Pdt8GPplXwMmMH17AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI73UFfJrM+HJohvoPmsY42F1TvEwHwYDVR0j BBgwFoAUQlJ5pnXzJtBXe/d0u7IKFFCDga0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli bWEvMS80MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNTI3OUE2NzVGMzI2RDA1 NzdCRjc3NEJCQjIwQTE0NTA4MzgxQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanlibWEvMS80 MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUQUb8Alzi+x+Spt06uuEowpwAglm7AhVIGedPoQlysSC3XKY5+TwNYYgphv+ 2i1eUOXJfy3OLAa7AzRROZ+LQiBS/plo93vgdYNnc1XCZMiFvTZmOziAbwAv99gn I03jTGAL/8wUmnWoYz7OPPKC/x4otLhDUvj+CO4GY1+Wat3TdcuX7KJA0T9oSJYu oDFBkUjib70wkDLvQs7SuVucKxmy8KtqGzqA1f8QYJ8e2U6+XuIL7v3FiusyyTAz FtPO5Km8Nz8B1fHO2NtJ2jtMVNFXf2UMFXHJ/w4XPKbxiFmPzg5cOHhOaZwrpspH kw1VSBWRasqrY1acDjXydJqYqA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:17 2025 by rpki-client