$ rpki-client -vvf rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft File: 2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft (raw, json) Hash identifier: 6WdVJ2o7xIjjS7Lea+vX5fuwN8sqdVE3vQm4HdonyS0= Subject key identifier: 61:A7:4D:9F:85:81:7C:CD:12:E2:9D:8E:3F:12:39:E9:F9:F2:9A:17 Authority key identifier: 25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F Certificate issuer: /CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F Certificate serial: 4493228636A1162B50001E9AF76BCE9C5BD74E00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 05:09:10 +0000 Manifest this update: Wed 05 Nov 2025 05:04:10 +0000 Manifest next update: Thu 06 Nov 2025 06:54:10 +0000 Files and hashes: 1: 323830343a363863383a3a2f33322d3438203d3e20323639373135.roa (hash: fM2ywQfNsjE8yUdpvoeZEgqst4cAizI2q2IMrusbTmk=) 2: 2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl (hash: gzr0xZhJ5g3+sz5WMcAJFOO2KlCKGw14R4VeF9Oxpuo=) 3: 3137302e38342e3234342e302f32322d3234203d3e20323639373135.roa (hash: N2kzmpKz/XsLxZdKGVEVlRYm6la1trrEg1XZMBrlgmE=) 4: 3138372e36322e38342e302f32322d3234203d3e20323639373135.roa (hash: cIOoWBFoPaallVyOqjKMdlA4wZSGeZqEoaQVfLpXrMg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:93:22:86:36:a1:16:2b:50:00:1e:9a:f7:6b:ce:9c:5b:d7:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F Validity Not Before: Nov 5 05:04:10 2025 GMT Not After : Nov 6 06:54:10 2025 GMT Subject: CN=61A74D9F85817CCD12E29D8E3F1239E9F9F29A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:a8:cc:ff:75:89:95:d6:c1:8c:bf:94:09: 41:38:90:bb:f3:e6:4e:46:c8:6d:9d:9c:00:14:08: 48:ab:25:d5:33:73:4c:94:fd:a5:f7:b6:58:83:9e: c3:84:9f:df:60:b0:60:07:61:68:25:0b:31:37:d1: 71:52:5b:9f:d3:ff:6d:a9:21:b7:e3:f4:5f:a7:ea: c0:d7:09:4b:c8:f6:c3:c4:3c:d4:e9:4e:40:da:99: 8a:bb:19:9b:58:fb:20:d0:6a:11:a1:8d:9a:0c:c1: 9c:d0:6b:9c:bf:c1:25:5a:b2:00:c7:fd:59:3b:3c: 32:34:2b:31:17:0d:12:f1:ab:a2:22:d5:78:66:b0: 2f:03:22:7f:8d:9b:2a:b9:e0:cd:b2:66:66:48:0b: 2b:10:68:33:e5:ae:27:fa:23:6d:80:af:12:cd:7f: 64:96:34:e2:cd:45:31:11:83:73:70:ad:8b:c5:6c: 66:14:96:d1:f7:ae:ba:4b:63:06:37:75:14:8d:22: cf:a8:36:29:ad:30:f6:58:46:99:b5:59:5d:11:43: 0a:35:92:90:08:a5:90:67:ab:b9:9f:44:eb:34:5c: c1:67:c2:26:ed:70:13:b1:77:e7:79:2b:0b:8d:6d: 7d:8f:09:9c:29:97:c4:0a:0c:88:46:d3:1a:04:b3: 66:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A7:4D:9F:85:81:7C:CD:12:E2:9D:8E:3F:12:39:E9:F9:F2:9A:17 X509v3 Authority Key Identifier: keyid:25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:37:0c:9c:e1:b4:57:fc:df:b6:0c:3a:73:fb:e7:0e:a1:bb: 67:82:05:e7:bf:41:3b:d2:e8:87:11:dd:41:50:f4:85:fd:64: 0a:bf:7f:0c:5c:b5:10:2b:0e:43:f8:f7:a1:54:81:dc:d4:da: 64:13:b1:1a:58:0d:11:55:94:76:f3:dd:d0:e8:3d:0a:5b:ab: 11:1c:67:e3:42:e5:28:b4:05:fc:b3:ff:25:80:40:9b:e0:ac: 1f:02:44:48:29:5d:b4:fe:54:f5:56:18:fa:92:ee:52:c0:36: 53:29:31:36:73:d3:6a:d7:da:dc:6a:f3:6d:08:90:65:b4:e5: c5:72:5a:52:3d:83:0c:ad:48:b7:1d:94:59:61:12:4f:6e:04: 46:c9:c8:ad:3e:54:e2:c9:28:09:93:f2:3d:30:9b:81:19:ed: ea:0a:b0:38:d9:f0:36:6c:d3:15:56:85:4d:2a:32:2f:e1:34: f3:08:3e:16:02:54:7b:65:f3:92:3a:97:74:6e:00:13:b3:89: 10:e1:12:bd:22:dc:93:10:0f:b9:e4:f1:6b:88:85:c8:bf:35: f2:d6:02:c3:a3:7d:1e:77:20:65:bc:fe:07:17:b6:a8:ee:5f: 34:23:66:ac:67:0b:bc:35:9d:52:0f:f9:04:4f:67:9b:c8:a2: ba:d7:67:85 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIURJMihjahFitQAB6a92vOnFvXTgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2N0JBMUYzN0MxOUQ2MDgxQkEyMTdEOENBRjVERjA2 RkREOUY2RjAeFw0yNTExMDUwNTA0MTBaFw0yNTExMDYwNjU0MTBaMDMxMTAvBgNV BAMTKDYxQTc0RDlGODU4MTdDQ0QxMkUyOUQ4RTNGMTIzOUU5RjlGMjlBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+KjM/3WJldbBjL+UCUE4kLvz 5k5GyG2dnAAUCEirJdUzc0yU/aX3tliDnsOEn99gsGAHYWglCzE30XFSW5/T/22p Ibfj9F+n6sDXCUvI9sPEPNTpTkDamYq7GZtY+yDQahGhjZoMwZzQa5y/wSVasgDH /Vk7PDI0KzEXDRLxq6Ii1XhmsC8DIn+Nmyq54M2yZmZICysQaDPlrif6I22ArxLN f2SWNOLNRTERg3NwrYvFbGYUltH3rrpLYwY3dRSNIs+oNimtMPZYRpm1WV0RQwo1 kpAIpZBnq7mfROs0XMFnwibtcBOxd+d5KwuNbX2PCZwpl8QKDIhG0xoEs2YzAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUYadNn4WBfM0S4p2OPxI56fnymhcwHwYDVR0j BBgwFoAUJWe6HzfBnWCBuiF9jK9d8G/dn28wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9SM0JDdVFrQ210bTlYUHRzWWdWalR3a21kajFvM3B6Vm5pZHVIWGZNdnR3 LzAvMjU2N0JBMUYzN0MxOUQ2MDgxQkEyMTdEOENBRjVERjA2RkREOUY2Ri5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNTY3QkExRjM3QzE5RDYwODFC QTIxN0Q4Q0FGNURGMDZGREQ5RjZGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Iz QkN1UWtDbXRtOVhQdHNZZ1ZqVHdrbWRqMW8zcHpWbmlkdUhYZk12dHcvMC8yNTY3 QkExRjM3QzE5RDYwODFCQTIxN0Q4Q0FGNURGMDZGREQ5RjZGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA WjcMnOG0V/zftgw6c/vnDqG7Z4IF579BO9LohxHdQVD0hf1kCr9/DFy1ECsOQ/j3 oVSB3NTaZBOxGlgNEVWUdvPd0Og9ClurERxn40LlKLQF/LP/JYBAm+CsHwJESCld tP5U9VYY+pLuUsA2UykxNnPTatfa3GrzbQiQZbTlxXJaUj2DDK1Itx2UWWEST24E RsnIrT5U4skoCZPyPTCbgRnt6gqwONnwNmzTFVaFTSoyL+E08wg+FgJUe2XzkjqX dG4AE7OJEOESvSLckxAPueTxa4iFyL818tYCw6N9HncgZbz+Bxe2qO5fNCNmrGcL vDWdUg/5BE9nm8iiutdnhQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:04 2025 by rpki-client