$ rpki-client -vvf rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft File: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft (raw, json) Hash identifier: WtweIlnn6DfZEU+ETmmTQ7CHzAP6Rgpnkd0pz/FCXsE= Subject key identifier: AE:86:1B:0D:13:F3:46:66:89:DC:C2:8A:26:3B:8A:BD:72:07:0A:72 Authority key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB Certificate issuer: /CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB Certificate serial: 227669BE94150D39092761EE45F7E4E61618A4A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft Manifest number: 61 Signing time: Wed 05 Nov 2025 15:49:59 +0000 Manifest this update: Wed 05 Nov 2025 15:44:59 +0000 Manifest next update: Thu 06 Nov 2025 18:37:59 +0000 Files and hashes: 1: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl (hash: cl8E2pgAvmonKiRNuwhpyDphQYXOBYWFbLWYmldvUC8=) 2: 3137372e35322e3234302e302f32322d3332203d3e20323632343533.roa (hash: kT4yj8yFSiH6EDqd+WdC583lgIULpCZHsmLGa7cAUtY=) 3: 3137302e3234372e3130302e302f32322d3332203d3e20323632343533.roa (hash: 7BphB1JD9jH3YeTz7XYC6e12+BivDF1/qm1W0CYiPpI=) 4: 323830343a3762303a3a2f33322d313238203d3e20323632343533.roa (hash: gr2u/oI9boQwwcAjZcUOU8d5yrSlwex50xc/uUnWyPQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:76:69:be:94:15:0d:39:09:27:61:ee:45:f7:e4:e6:16:18:a4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB Validity Not Before: Nov 5 15:44:59 2025 GMT Not After : Nov 6 18:37:59 2025 GMT Subject: CN=AE861B0D13F3466689DCC28A263B8ABD72070A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:59:f6:12:ab:eb:31:fb:2a:3a:5b:2d:ea: c9:d9:66:69:40:fc:7f:43:ea:3e:8d:e6:98:31:26: 9b:ce:48:d8:a7:04:63:ea:e3:e3:57:f5:2e:aa:49: 45:92:53:20:56:b2:18:e6:33:ef:56:7a:4e:48:40: 36:52:51:0c:cc:4d:b3:8f:52:1f:81:78:f0:ca:33: 35:3f:91:04:91:13:b3:1f:1c:0a:65:fe:0f:e0:e5: 47:77:e4:17:ec:71:5d:dc:b8:8e:b1:81:74:51:75: e4:c1:38:6a:13:9e:37:83:d9:1b:5b:89:8f:ee:1a: 99:29:fd:a6:c4:02:d0:eb:40:c3:7c:7f:be:30:08: fa:cf:7f:ae:9c:e0:18:8a:bc:74:8a:34:f8:4d:05: be:b0:d2:81:3a:b1:76:92:ea:a5:54:29:90:5f:31: 2c:fc:6e:56:18:89:06:c8:c8:1e:1e:74:e0:8e:c8: ad:52:0b:bd:b7:f9:27:fd:f0:34:8b:97:9f:b6:56: 9a:e3:1e:16:a7:93:33:cb:9a:18:d9:c8:28:4a:4a: 38:d2:42:3e:12:16:d7:a9:22:e1:32:54:98:39:a3: d1:1b:c9:c0:6d:ba:65:d5:b3:02:24:33:77:6c:a6: 65:cd:06:d6:ad:5f:c5:a7:02:5e:3d:ff:5a:de:23: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:86:1B:0D:13:F3:46:66:89:DC:C2:8A:26:3B:8A:BD:72:07:0A:72 X509v3 Authority Key Identifier: keyid:25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:27:54:75:37:f3:40:f3:58:cd:4e:80:cf:14:25:4e:93:a5: 3a:e5:6f:3c:ef:40:16:e5:e6:42:bc:06:cf:8c:79:51:a7:b7: bc:50:24:c6:94:02:ba:4c:7a:14:06:ce:9b:66:28:a1:95:6e: 55:e5:75:0d:f1:87:46:08:21:ee:33:bc:c9:dd:79:21:d4:bb: eb:d8:09:04:f4:f0:c2:94:20:63:d9:3b:1b:54:d9:61:c8:99: e4:54:c7:c2:7c:06:05:36:01:03:c3:0a:d1:ec:09:10:24:cd: 50:ab:c4:9d:dd:50:ae:bc:7a:92:10:87:09:4a:e9:91:39:97: b7:54:50:89:9c:3c:65:64:87:99:8b:2f:80:fd:49:b0:8d:f8: 42:b4:33:a4:2b:88:38:e1:76:1f:4f:2e:97:df:3b:65:24:3e: 97:0f:ed:2e:02:dc:6f:8f:59:f5:f4:4e:d8:96:71:75:0c:6a: 1c:8f:a8:c3:1c:6e:8e:0b:fd:2a:35:c6:4b:14:5d:92:f1:f5: e5:80:4e:84:dd:93:ea:5d:04:91:7d:38:96:9a:85:18:92:3f: 7b:cc:1e:5e:9c:ee:ec:9d:90:9c:c8:3a:68:f1:6b:07:8a:e1: 8f:6c:b1:5b:0e:72:ec:23:3a:9d:e9:76:c5:95:36:b1:7e:58: 40:37:35:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUInZpvpQVDTkJJ2HuRffk5hYYpKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNTRBNzlGQjgxMTdDM0JDNzRCNjQ0NEMwNEE3REVB QTVENDlCQjAeFw0yNTExMDUxNTQ0NTlaFw0yNTExMDYxODM3NTlaMDMxMTAvBgNV BAMTKEFFODYxQjBEMTNGMzQ2NjY4OURDQzI4QTI2M0I4QUJENzIwNzBBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCVn2EqvrMfsqOlst6snZZmlA /H9D6j6N5pgxJpvOSNinBGPq4+NX9S6qSUWSUyBWshjmM+9Wek5IQDZSUQzMTbOP Uh+BePDKMzU/kQSRE7MfHApl/g/g5Ud35BfscV3cuI6xgXRRdeTBOGoTnjeD2Rtb iY/uGpkp/abEAtDrQMN8f74wCPrPf66c4BiKvHSKNPhNBb6w0oE6sXaS6qVUKZBf MSz8blYYiQbIyB4edOCOyK1SC723+Sf98DSLl5+2VprjHhankzPLmhjZyChKSjjS Qj4SFtepIuEyVJg5o9EbycBtumXVswIkM3dspmXNBtatX8WnAl49/1reI2ytAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUroYbDRPzRmaJ3MKKJjuKvXIHCnIwHwYDVR0j BBgwFoAUJcVKefuBF8O8dLZETASn3qpdSbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjZXbU1iVmJ1OUdxMko3TUZjVzNKQ1hzNk1GSzRNWUxBWjdCRGhCNWZr UTkvMC8yNUM1NEE3OUZCODExN0MzQkM3NEI2NDQ0QzA0QTdERUFBNUQ0OUJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzU0QTc5RkI4MTE3QzNC Qzc0QjY0NDRDMDRBN0RFQUE1RDQ5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjZXbU1iVmJ1OUdxMko3TUZjVzNKQ1hzNk1GSzRNWUxBWjdCRGhCNWZrUTkvMC8y NUM1NEE3OUZCODExN0MzQkM3NEI2NDQ0QzA0QTdERUFBNUQ0OUJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSdUdTfzQPNYzU6AzxQlTpOlOuVvPO9AFuXmQrwGz4x5Uae3vFAkxpQCukx6 FAbOm2YooZVuVeV1DfGHRggh7jO8yd15IdS769gJBPTwwpQgY9k7G1TZYciZ5FTH wnwGBTYBA8MK0ewJECTNUKvEnd1Qrrx6khCHCUrpkTmXt1RQiZw8ZWSHmYsvgP1J sI34QrQzpCuIOOF2H08ul987ZSQ+lw/tLgLcb49Z9fRO2JZxdQxqHI+owxxujgv9 KjXGSxRdkvH15YBOhN2T6l0EkX04lpqFGJI/e8weXpzu7J2QnMg6aPFrB4rhj2yx Ww5y7CM6nel2xZU2sX5YQDc1LA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:14:24 2025 by rpki-client