$ rpki-client -vvf rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft File: 2917CE017809B6041B895DCC93EFF28388A27E5E.mft (raw, json) Hash identifier: O/0HyXAB1KlivxmJMkoTQXZvGwLpZ+y18YWoGyiwrOQ= Subject key identifier: CA:F0:35:0C:BA:E1:6F:D5:74:37:FB:3B:32:59:E1:30:C4:71:52:6C Authority key identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E Certificate issuer: /CN=2917CE017809B6041B895DCC93EFF28388A27E5E Certificate serial: 103EADC0F373DD0FE3E1A454B0F14EC62472635B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft Manifest number: 52 Signing time: Sun 02 Nov 2025 20:58:01 +0000 Manifest this update: Sun 02 Nov 2025 20:53:01 +0000 Manifest next update: Mon 03 Nov 2025 21:35:01 +0000 Files and hashes: 1: 34352e3138372e3138302e302f32322d3332203d3e20323639343831.roa (hash: QlSCqtGUYaZI4ilpEf6rQRrlbybda/U4cpUItDoNsjA=) 2: 2917CE017809B6041B895DCC93EFF28388A27E5E.crl (hash: 5U+bWUbazLV67Q0mt8W7vgsWtA18BEVVEK6cocrhwWk=) 3: 32342e3135322e302e302f32322d3332203d3e20323639343831.roa (hash: mrYj5PfHpVIg25olFqGJ7bb6lin+ykVvEDj0EOB/IzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3e:ad:c0:f3:73:dd:0f:e3:e1:a4:54:b0:f1:4e:c6:24:72:63:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2917CE017809B6041B895DCC93EFF28388A27E5E Validity Not Before: Nov 2 20:53:01 2025 GMT Not After : Nov 3 21:35:01 2025 GMT Subject: CN=CAF0350CBAE16FD57437FB3B3259E130C471526C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:43:ca:5e:f5:64:4d:1d:7c:20:b1:39:1b: 10:e8:79:fb:37:d7:07:48:f2:53:95:57:38:08:4c: 30:18:b0:2f:82:62:4b:6b:dd:db:85:d3:17:c1:9d: 9d:ca:a8:9b:44:17:32:96:63:61:ad:97:da:00:12: 34:88:2a:81:00:fb:e4:fb:f7:05:00:37:f5:8d:a3: b3:a9:22:62:17:72:4a:4a:54:23:d5:4e:62:c6:34: a0:6a:85:5a:82:35:12:06:e8:c3:41:57:82:b8:82: 58:98:45:97:ee:9b:ab:9e:8f:af:ea:1e:02:41:b7: 81:88:ce:68:d9:6a:32:e5:de:fb:0d:aa:2b:44:f9: 8f:fb:76:1b:d2:91:ff:c3:77:2e:79:f0:82:ae:92: 7f:77:9d:93:de:34:c3:cf:e9:5c:e4:1f:32:c6:1d: 50:82:34:49:95:c9:90:1f:1f:ee:b8:e9:87:64:24: 0a:ca:09:94:f2:9e:e4:00:8e:4a:44:9d:08:52:19: 6e:c6:7e:4d:47:e0:3f:6d:53:91:c2:b1:1f:ad:b5: 91:ab:47:50:76:91:15:d7:9b:bd:2d:d2:3f:aa:d8: 2d:c3:a1:25:a6:fc:f5:a4:ae:18:e4:05:a6:2b:b8: 78:ff:12:3d:a0:87:a8:39:91:52:9f:73:be:80:88: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:35:0C:BA:E1:6F:D5:74:37:FB:3B:32:59:E1:30:C4:71:52:6C X509v3 Authority Key Identifier: keyid:29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:18:4f:4b:7d:41:20:fe:5a:fd:94:d1:e1:98:7d:0d:29:f3: 2e:de:70:7e:40:d4:5a:6c:8b:cc:cd:d0:65:4e:0e:b6:10:c0: bf:77:a3:0e:c9:4f:74:bd:9f:f3:05:e8:8c:b0:e7:71:15:dd: 79:09:6d:77:fe:75:74:68:66:fe:3a:4e:40:0e:4d:d8:21:9b: e5:a3:96:4f:ba:a5:f6:07:2d:1c:cd:15:01:c1:0b:13:28:f3: e0:90:bf:91:c8:a0:c4:35:fe:07:88:61:0f:1d:b2:c2:c0:96: d2:2d:6c:91:f1:f0:48:aa:a9:e1:f0:77:8e:ef:da:48:42:1b: 67:8b:98:30:d1:39:1c:ec:13:d1:bd:bc:5a:83:5c:25:59:d4: a9:c2:44:17:98:69:5c:f2:f2:04:d2:bb:f2:88:b9:50:c3:dc: c8:80:ea:cd:29:8b:37:7c:c3:e6:f8:ac:8c:df:38:72:2b:60: a7:45:7a:b7:95:9b:cf:64:d2:1e:77:20:6a:ec:dc:81:10:58: 9f:77:87:7f:76:cc:12:df:ce:52:0b:f8:63:f2:86:c6:48:2a: f4:e4:e8:3d:96:d2:7e:be:5e:5a:d5:f7:69:2b:ee:19:06:a2: f5:57:54:b5:21:1d:64:0e:e4:dd:dd:53:48:34:9c:0e:9c:5a: e1:7a:8f:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUED6twPNz3Q/j4aRUsPFOxiRyY1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxN0NFMDE3ODA5QjYwNDFCODk1RENDOTNFRkYyODM4 OEEyN0U1RTAeFw0yNTExMDIyMDUzMDFaFw0yNTExMDMyMTM1MDFaMDMxMTAvBgNV BAMTKENBRjAzNTBDQkFFMTZGRDU3NDM3RkIzQjMyNTlFMTMwQzQ3MTUyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVUPKXvVkTR18ILE5GxDoefs3 1wdI8lOVVzgITDAYsC+CYktr3duF0xfBnZ3KqJtEFzKWY2Gtl9oAEjSIKoEA++T7 9wUAN/WNo7OpImIXckpKVCPVTmLGNKBqhVqCNRIG6MNBV4K4gliYRZfum6uej6/q HgJBt4GIzmjZajLl3vsNqitE+Y/7dhvSkf/Ddy558IKukn93nZPeNMPP6VzkHzLG HVCCNEmVyZAfH+646YdkJArKCZTynuQAjkpEnQhSGW7Gfk1H4D9tU5HCsR+ttZGr R1B2kRXXm70t0j+q2C3DoSWm/PWkrhjkBaYruHj/Ej2gh6g5kVKfc76AiEePAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyvA1DLrhb9V0N/s7MlnhMMRxUmwwHwYDVR0j BBgwFoAUKRfOAXgJtgQbiV3Mk+/yg4iifl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVMMlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhO QmovMC8yOTE3Q0UwMTc4MDlCNjA0MUI4OTVEQ0M5M0VGRjI4Mzg4QTI3RTVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5MTdDRTAxNzgwOUI2MDQx Qjg5NURDQzkzRUZGMjgzODhBMjdFNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjVMMlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhOQmovMC8y OTE3Q0UwMTc4MDlCNjA0MUI4OTVEQ0M5M0VGRjI4Mzg4QTI3RTVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxhPS31BIP5a/ZTR4Zh9DSnzLt5wfkDUWmyLzM3QZU4OthDAv3ejDslPdL2f 8wXojLDncRXdeQltd/51dGhm/jpOQA5N2CGb5aOWT7ql9gctHM0VAcELEyjz4JC/ kcigxDX+B4hhDx2ywsCW0i1skfHwSKqp4fB3ju/aSEIbZ4uYMNE5HOwT0b28WoNc JVnUqcJEF5hpXPLyBNK78oi5UMPcyIDqzSmLN3zD5visjN84citgp0V6t5Wbz2TS HncgauzcgRBYn3eHf3bMEt/OUgv4Y/KGxkgq9OToPZbSfr5eWtX3aSvuGQai9VdU tSEdZA7k3d1TSDScDpxa4XqPeA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:28 2025 by rpki-client