
$ rpki-client -vvvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft
File: 25E8B473764AD2BD5079162C0353342232397DC5.mft (raw, json)
Hash identifier: rNzK0dohm1yBZW5WaE78hR41d0Jq7ds3ZekCmeRaBao=
Subject key identifier: 2B:DD:05:77:C4:CE:89:EC:48:59:5F:92:3B:92:34:3B:15:0C:94:72
Authority key identifier: 25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5
Certificate issuer: /CN=25E8B473764AD2BD5079162C0353342232397DC5
Certificate serial: 488A4CC49CBC181FD2A077B3C7D9DDAAAD9AD2D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft
Manifest number: 40
Signing time: Sat 10 Oct 2026 00:23:28 +0000
Manifest this update: Sat 10 Oct 2026 00:18:28 +0000
Manifest next update: Sun 11 Oct 2026 04:06:28 +0000
Files and hashes: 1: 323830343a386531303a3a2f33322d313238203d3e20323733343030.roa (hash: bIwODDMsWWEz8dFe5jtHZfNZ6KB3C8ySlDWMARiv7Uw=)
2: 25E8B473764AD2BD5079162C0353342232397DC5.crl (hash: QVXd5CCqi5Pj6Q3cPYp0wPkwsMYh6nHUdd19PdT/mOI=)
3: 34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa (hash: YR29Zxabm8A5qZCvIfksaCr53yb2s6BfjgttsOawScU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.crl
rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 04:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8a:4c:c4:9c:bc:18:1f:d2:a0:77:b3:c7:d9:dd:aa:ad:9a:d2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25E8B473764AD2BD5079162C0353342232397DC5
Validity
Not Before: Oct 10 00:18:28 2026 GMT
Not After : Oct 11 04:06:28 2026 GMT
Subject: CN=2BDD0577C4CE89EC48595F923B92343B150C9472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:65:b0:60:1c:5c:0d:e4:cc:6b:9d:44:2f:
9a:d7:ac:b9:10:9c:d2:14:ef:e3:d8:d8:f8:97:c9:
f9:42:9e:fa:52:ef:9c:ea:e4:b1:d5:9e:86:5d:e1:
35:e2:9a:2a:70:80:19:80:ce:b2:f4:87:f4:21:bf:
0f:dd:6d:f5:be:38:79:56:7c:db:bc:8c:d3:7e:a0:
bd:1a:34:5b:07:36:f4:54:37:2c:28:92:c5:7b:b0:
84:8a:fa:88:c2:11:83:2c:f0:0f:03:93:23:d7:89:
0a:0d:48:85:33:e1:cb:f0:77:84:e7:e1:d3:45:6b:
00:5a:4d:2a:4a:16:90:b8:cc:d8:c8:9c:ce:10:6c:
57:b0:b2:75:30:40:e3:3a:76:f7:02:59:06:ff:18:
3f:4e:26:bd:24:33:01:e6:c3:cf:5c:24:10:c4:38:
6b:96:91:82:07:a2:d5:6a:a0:71:4a:d1:9b:62:0c:
36:68:71:d8:c6:dd:66:c2:12:c7:62:a0:da:47:d8:
cb:55:6e:6e:cd:ae:81:30:ed:af:3d:f9:43:ed:57:
60:86:60:15:8a:14:36:54:0d:6b:44:50:73:b9:7a:
b9:7e:a5:b2:e8:e7:e7:52:27:8d:3a:a5:53:3c:33:
9a:f6:79:57:e5:54:be:bc:87:e4:ff:9e:78:7b:a8:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:05:77:C4:CE:89:EC:48:59:5F:92:3B:92:34:3B:15:0C:94:72
X509v3 Authority Key Identifier:
keyid:25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:92:cb:76:f9:4b:77:37:e5:e8:9b:0e:f3:87:05:76:76:07:
a5:04:c8:38:b1:75:58:8b:38:a0:d7:69:39:38:4c:50:72:00:
ce:2e:12:c8:ab:7a:e5:a0:da:16:af:db:9a:2e:21:fc:54:37:
fd:0c:d4:d4:cc:81:e1:65:13:cd:01:e2:ee:17:8d:83:87:35:
1f:b6:fb:a0:f2:51:69:89:11:1b:63:59:3d:c3:0a:c2:0b:ff:
2b:5f:15:68:d6:ea:57:cb:cd:69:45:db:e6:b4:f7:f9:31:0f:
b2:23:61:be:7a:57:43:d9:f1:4c:a8:de:90:9d:9f:eb:57:3e:
64:d0:45:80:35:75:c2:dc:08:0c:13:d7:95:40:6a:35:e5:da:
30:bd:7e:a7:66:aa:82:e1:04:b6:12:65:0d:7b:c2:60:f5:5d:
32:e6:be:1a:ce:c2:4c:aa:09:1a:dd:fc:47:09:8d:3d:36:34:
df:be:d0:29:71:eb:82:62:85:df:53:ff:46:57:8b:b6:81:bf:
b9:6a:8b:dd:43:47:60:95:ba:74:d7:2d:36:44:ff:63:63:75:
d9:86:d7:45:15:df:d8:00:ea:7b:c3:b9:e2:df:76:c9:67:e9:
b9:a8:b3:e1:62:2e:55:28:51:5e:cf:06:60:2e:81:0d:b6:bb:
ea:1c:f7:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSIpMxJy8GB/SoHezx9ndqq2a0tIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFOEI0NzM3NjRBRDJCRDUwNzkxNjJDMDM1MzM0MjIz
MjM5N0RDNTAeFw0yNjEwMTAwMDE4MjhaFw0yNjEwMTEwNDA2MjhaMDMxMTAvBgNV
BAMTKDJCREQwNTc3QzRDRTg5RUM0ODU5NUY5MjNCOTIzNDNCMTUwQzk0NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DmWwYBxcDeTMa51EL5rXrLkQ
nNIU7+PY2PiXyflCnvpS75zq5LHVnoZd4TXimipwgBmAzrL0h/Qhvw/dbfW+OHlW
fNu8jNN+oL0aNFsHNvRUNywoksV7sISK+ojCEYMs8A8DkyPXiQoNSIUz4cvwd4Tn
4dNFawBaTSpKFpC4zNjInM4QbFewsnUwQOM6dvcCWQb/GD9OJr0kMwHmw89cJBDE
OGuWkYIHotVqoHFK0ZtiDDZocdjG3WbCEsdioNpH2MtVbm7NroEw7a89+UPtV2CG
YBWKFDZUDWtEUHO5erl+pbLo5+dSJ406pVM8M5r2eVflVL68h+T/nnh7qNcHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK90Fd8TOiexIWV+SO5I0OxUMlHIwHwYDVR0j
BBgwFoAUJei0c3ZK0r1QeRYsA1M0IjI5fcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JkN21tS2oxTnRMVkNhUUFMeFVzRUZDaHl1QkxvZ2RpcmhRcTNqR0tR
cTEvMC8yNUU4QjQ3Mzc2NEFEMkJENTA3OTE2MkMwMzUzMzQyMjMyMzk3REM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RThCNDczNzY0QUQyQkQ1
MDc5MTYyQzAzNTMzNDIyMzIzOTdEQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2JkN21tS2oxTnRMVkNhUUFMeFVzRUZDaHl1QkxvZ2RpcmhRcTNqR0tRcTEvMC8y
NUU4QjQ3Mzc2NEFEMkJENTA3OTE2MkMwMzUzMzQyMjMyMzk3REM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlJLLdvlLdzfl6JsO84cFdnYHpQTIOLF1WIs4oNdpOThMUHIAzi4SyKt65aDa
Fq/bmi4h/FQ3/QzU1MyB4WUTzQHi7heNg4c1H7b7oPJRaYkRG2NZPcMKwgv/K18V
aNbqV8vNaUXb5rT3+TEPsiNhvnpXQ9nxTKjekJ2f61c+ZNBFgDV1wtwIDBPXlUBq
NeXaML1+p2aqguEEthJlDXvCYPVdMua+Gs7CTKoJGt38RwmNPTY0377QKXHrgmKF
31P/RleLtoG/uWqL3UNHYJW6dNctNkT/Y2N12YbXRRXf2ADqe8O54t92yWfpuaiz
4WIuVShRXs8GYC6BDba76hz3qg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:48:40 2026 by rpki-client