$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: D5BfL/tBx5YpQsyppNhAxSVGP6oVgRttINCj8E3dfVE= Subject key identifier: 71:B9:63:28:B7:13:B8:F6:DB:A4:72:05:FD:E0:42:6D:26:FD:6D:43 Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 72D1BD5463846CDE4ECE54FF0330116C5E83F227 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: 29 Signing time: Tue 04 Nov 2025 10:24:11 +0000 Manifest this update: Tue 04 Nov 2025 10:19:11 +0000 Manifest next update: Wed 05 Nov 2025 11:17:11 +0000 Files and hashes: 1: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: JfDh5CXOQsqQzKLgoq+kDmDysyPceW8/YlPRl1aHFUs=) 2: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) 3: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d1:bd:54:63:84:6c:de:4e:ce:54:ff:03:30:11:6c:5e:83:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Nov 4 10:19:11 2025 GMT Not After : Nov 5 11:17:11 2025 GMT Subject: CN=71B96328B713B8F6DBA47205FDE0426D26FD6D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:7b:e9:51:dc:7d:be:33:5b:38:0f:a3:e7: 9b:7e:eb:73:70:6a:d6:34:f7:0f:5d:54:d5:82:7e: e5:f8:35:0f:a5:6d:fe:03:52:2a:ad:c2:7e:c1:99: ae:b3:1d:35:9a:c1:7d:3c:09:53:92:2d:8c:2c:40: fc:9a:34:4c:13:52:3c:85:a1:fd:62:72:1f:d2:22: af:f5:20:46:49:f3:86:17:04:e1:8e:19:ed:f7:ba: 07:83:b8:ca:f8:d0:c1:5d:cf:62:2c:3f:e7:f5:2d: 04:d0:fe:c8:7a:17:ff:e8:9e:27:31:09:e2:8e:9d: 24:79:4e:13:1b:73:5b:69:1e:da:7d:ba:18:db:80: 7e:31:d5:3c:dd:04:df:36:5f:f0:e4:65:42:6e:bf: da:1f:44:db:36:3c:d3:d8:49:ca:59:6f:8e:a3:00: e6:a3:50:b7:51:9c:25:69:ba:12:1c:e5:dc:91:9d: 32:db:86:e7:5f:c0:19:36:59:17:05:b1:6b:e4:1b: ce:af:ac:88:83:27:f4:85:3f:8c:f2:b4:22:f0:ad: e6:0e:d4:43:11:4d:3e:74:02:bb:9b:1b:7e:d6:cd: e3:47:fc:a2:4c:13:f8:6f:61:08:13:16:71:8f:c2: 09:f0:b0:83:fa:2d:40:8e:08:b6:c6:23:e2:94:16: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:63:28:B7:13:B8:F6:DB:A4:72:05:FD:E0:42:6D:26:FD:6D:43 X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e9:96:ab:d1:78:a1:2b:9b:4a:1f:e5:ff:30:20:db:b5:65: e5:dc:bd:c6:28:91:45:f9:93:ff:66:9a:01:e0:70:3c:14:c6: db:ab:84:23:08:c9:5b:40:64:30:6d:98:07:a8:eb:e6:8b:bb: d0:cf:e6:36:1a:f6:0c:e9:b7:fd:36:ea:56:e0:aa:12:b7:31: f6:e8:9c:33:ec:a8:b5:57:4c:3f:b2:91:00:5f:71:b0:6e:56: 43:51:ef:db:fa:10:4f:4d:3d:1f:ca:d7:58:9c:be:ed:ac:56: 7f:86:06:73:22:fd:69:98:8d:5b:02:87:d0:54:fc:cb:54:39: 07:98:1f:b2:7f:70:59:db:8e:83:e2:94:36:3d:03:87:df:31: 61:32:9c:1a:48:f9:ca:cd:d7:86:c9:d1:88:53:4e:e9:d3:8a: e3:3c:8f:2f:5f:c5:c8:07:43:9d:42:e8:d3:42:fc:3a:58:d1: b5:43:54:38:9d:08:09:2f:36:43:24:17:34:b9:ec:46:1b:1f: dc:3f:3a:c3:4e:52:4f:5f:e5:10:b1:53:dc:86:4d:15:d8:b6: 60:72:0e:bb:a4:ea:06:d5:ae:b6:a7:bb:e7:24:a2:9f:90:57: 61:0f:72:93:23:0e:ce:aa:45:25:03:64:d6:a0:82:a9:bb:d3: ef:32:80:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUctG9VGOEbN5OzlT/AzARbF6D8icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNTExMDQxMDE5MTFaFw0yNTExMDUxMTE3MTFaMDMxMTAvBgNV BAMTKDcxQjk2MzI4QjcxM0I4RjZEQkE0NzIwNUZERTA0MjZEMjZGRDZENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwnvpUdx9vjNbOA+j55t+63Nw atY09w9dVNWCfuX4NQ+lbf4DUiqtwn7Bma6zHTWawX08CVOSLYwsQPyaNEwTUjyF of1ich/SIq/1IEZJ84YXBOGOGe33ugeDuMr40MFdz2IsP+f1LQTQ/sh6F//onicx CeKOnSR5ThMbc1tpHtp9uhjbgH4x1TzdBN82X/DkZUJuv9ofRNs2PNPYScpZb46j AOajULdRnCVpuhIc5dyRnTLbhudfwBk2WRcFsWvkG86vrIiDJ/SFP4zytCLwreYO 1EMRTT50ArubG37WzeNH/KJME/hvYQgTFnGPwgnwsIP6LUCOCLbGI+KUFkNJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcbljKLcTuPbbpHIF/eBCbSb9bUMwHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPumWq9F4oSubSh/l/zAg27Vl5dy9xiiRRfmT/2aaAeBwPBTG26uEIwjJW0Bk MG2YB6jr5ou70M/mNhr2DOm3/TbqVuCqErcx9uicM+yotVdMP7KRAF9xsG5WQ1Hv 2/oQT009H8rXWJy+7axWf4YGcyL9aZiNWwKH0FT8y1Q5B5gfsn9wWduOg+KUNj0D h98xYTKcGkj5ys3XhsnRiFNO6dOK4zyPL1/FyAdDnULo00L8OljRtUNUOJ0ICS82 QyQXNLnsRhsf3D86w05ST1/lELFT3IZNFdi2YHIOu6TqBtWutqe75ySin5BXYQ9y kyMOzqpFJQNk1qCCqbvT7zKAjw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:46:55 2025 by rpki-client