$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft File: 25C7F81AB8123826510AD39D4507448271E2A2E2.mft (raw, json) Hash identifier: mIHNOX8hj5s5TtF4iGITO3JI2G4UB9FogPmOy6Ep4YA= Subject key identifier: 01:04:F5:48:58:D6:D6:02:5C:85:B5:E5:DC:9A:11:73:0D:26:0B:7F Authority key identifier: 25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2 Certificate issuer: /CN=25C7F81AB8123826510AD39D4507448271E2A2E2 Certificate serial: 6025234229B0691307E071B2F78F7856224EDDC0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft Manifest number: 0C Signing time: Thu 18 Sep 2025 13:55:39 +0000 Manifest this update: Thu 18 Sep 2025 13:50:39 +0000 Manifest next update: Fri 19 Sep 2025 17:54:39 +0000 Files and hashes: 1: 34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa (hash: OxlKLinU/LaLLFazIyBAx6PCzM8QZZ5p11lTAuRGcGQ=) 2: 323830343a346163303a3a2f33362d313238203d3e20323637323631.roa (hash: 4epJ9lVEGtoR0vWaiC0Iswc5dbzIPwfIhxIOekcVFQI=) 3: 25C7F81AB8123826510AD39D4507448271E2A2E2.crl (hash: MifHCGpV6z4rna6nd+wnPgZDtcdaUf4CBUYZ5dXTbBg=) 4: 323830343a346163303a3a2f33322d3332203d3e20323637323631.roa (hash: IVoanioEzVZ8oYX2V+o88LhZO2KypDSg2obDGLNyHLs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 17:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:25:23:42:29:b0:69:13:07:e0:71:b2:f7:8f:78:56:22:4e:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C7F81AB8123826510AD39D4507448271E2A2E2 Validity Not Before: Sep 18 13:50:39 2025 GMT Not After : Sep 19 17:54:39 2025 GMT Subject: CN=0104F54858D6D6025C85B5E5DC9A11730D260B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:fd:da:11:ab:d0:f8:47:29:b5:dc:fd:9f: d5:ca:58:3b:a9:2e:b9:45:d5:7c:ca:9c:78:5d:8f: 98:e4:d9:41:60:d1:79:fd:f7:c5:9e:77:ba:fb:0a: 79:88:a4:ec:b9:39:24:d1:3a:20:be:5b:26:97:73: 79:9d:56:30:46:0b:e3:82:9d:a2:11:d6:a3:5c:4f: af:ad:94:50:c2:e3:7f:4c:0c:11:3d:26:67:5a:29: 06:62:63:67:c9:ba:91:53:2c:20:d5:1c:79:99:68: ec:62:7c:ca:71:9a:0a:e9:2e:42:80:16:36:8f:5d: ac:a0:dc:c6:f5:0c:a1:92:f8:72:aa:80:e7:d3:f3: e9:9f:45:64:fa:7f:72:ba:a2:ed:86:c2:a3:78:ca: 9f:94:b2:4b:2d:86:4c:8c:56:e2:4a:df:d3:3b:c1: 3f:d0:a5:c8:14:b4:45:87:94:34:4d:b6:0d:0a:64: c3:fe:41:ff:c1:03:d6:3d:95:31:f8:54:0a:a3:6d: 89:36:66:ed:54:16:2e:d6:ea:4d:93:01:e8:d2:9c: ef:a8:48:9f:77:8d:03:20:60:2c:0d:2a:37:41:0e: 04:ec:44:1c:eb:0f:c4:cb:ef:e0:9c:56:6e:e0:9c: d8:79:9c:24:bb:86:9c:00:35:b6:c7:fd:2d:36:a4: 82:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:04:F5:48:58:D6:D6:02:5C:85:B5:E5:DC:9A:11:73:0D:26:0B:7F X509v3 Authority Key Identifier: keyid:25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:0a:4b:32:32:2e:ce:5c:05:c8:a4:70:0a:26:29:fa:ed:2d: 80:c9:4a:77:ce:d8:2b:b7:48:e2:0e:23:03:42:a0:3e:39:b2: e2:63:5f:07:a7:ad:03:17:57:2f:13:a9:af:d1:4b:8e:a2:e6: e9:b6:3d:4d:f7:98:aa:d1:cb:bf:4c:71:86:5a:b6:ad:df:39: 26:aa:4a:1f:0d:3c:47:51:f5:a1:97:95:32:c4:a0:6c:ec:a2: 78:97:ae:78:29:2c:0b:ad:03:b2:8a:f4:99:cd:11:f4:f4:3f: e6:11:54:5b:49:f2:00:c8:32:64:b4:bc:7c:11:9a:0c:1b:5e: 17:37:35:a2:f7:8f:32:20:a0:6d:51:ee:2c:0e:d6:8e:81:d1: 24:f7:53:ef:5b:a3:0a:51:fa:88:a4:c0:92:dc:d0:47:78:c9: 8d:47:a2:c9:1a:ae:2b:65:53:35:4c:95:96:ef:1c:5e:06:e1: 28:2b:ad:37:39:ef:48:e5:fb:96:bc:9b:c3:52:8f:a0:af:d2: 1d:14:bb:71:d5:8e:9f:ff:08:bb:78:0e:61:f2:93:7d:0b:28: a7:e0:29:ba:f6:ca:5c:12:6b:87:e4:40:b6:43:ac:bf:0f:5c: de:fe:cd:17:82:d2:24:34:d9:fa:99:b8:32:fa:00:ad:4d:45: 60:8c:e0:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYCUjQimwaRMH4HGy9494ViJO3cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDN0Y4MUFCODEyMzgyNjUxMEFEMzlENDUwNzQ0ODI3 MUUyQTJFMjAeFw0yNTA5MTgxMzUwMzlaFw0yNTA5MTkxNzU0MzlaMDMxMTAvBgNV BAMTKDAxMDRGNTQ4NThENkQ2MDI1Qzg1QjVFNURDOUExMTczMEQyNjBCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMP3aEavQ+Ecptdz9n9XKWDup LrlF1XzKnHhdj5jk2UFg0Xn998Wed7r7CnmIpOy5OSTROiC+WyaXc3mdVjBGC+OC naIR1qNcT6+tlFDC439MDBE9JmdaKQZiY2fJupFTLCDVHHmZaOxifMpxmgrpLkKA FjaPXayg3Mb1DKGS+HKqgOfT8+mfRWT6f3K6ou2GwqN4yp+UsksthkyMVuJK39M7 wT/QpcgUtEWHlDRNtg0KZMP+Qf/BA9Y9lTH4VAqjbYk2Zu1UFi7W6k2TAejSnO+o SJ93jQMgYCwNKjdBDgTsRBzrD8TL7+CcVm7gnNh5nCS7hpwANbbH/S02pILHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAQT1SFjW1gJchbXl3JoRcw0mC38wHwYDVR0j BBgwFoAUJcf4GrgSOCZRCtOdRQdEgnHiouIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5 ZUgvMC8yNUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzdGODFBQjgxMjM4MjY1 MTBBRDM5RDQ1MDc0NDgyNzFFMkEyRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5ZUgvMC8y NUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2ApLMjIuzlwFyKRwCiYp+u0tgMlKd87YK7dI4g4jA0KgPjmy4mNfB6etAxdX LxOpr9FLjqLm6bY9TfeYqtHLv0xxhlq2rd85JqpKHw08R1H1oZeVMsSgbOyieJeu eCksC60Dsor0mc0R9PQ/5hFUW0nyAMgyZLS8fBGaDBteFzc1ovePMiCgbVHuLA7W joHRJPdT71ujClH6iKTAktzQR3jJjUeiyRquK2VTNUyVlu8cXgbhKCutNznvSOX7 lrybw1KPoK/SHRS7cdWOn/8Iu3gOYfKTfQsop+ApuvbKXBJrh+RAtkOsvw9c3v7N F4LSJDTZ+pm4MvoArU1FYIzg8g== -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:37 2025 by rpki-client