$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft File: 25C7F81AB8123826510AD39D4507448271E2A2E2.mft (raw, json) Hash identifier: LslRA2H55WXnPnf4Uh3SiMkbfRSDp5vI0YU2jPIH8vE= Subject key identifier: 13:92:93:EE:42:6D:8E:AE:00:B3:B3:24:48:AE:23:32:40:19:26:19 Authority key identifier: 25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2 Certificate issuer: /CN=25C7F81AB8123826510AD39D4507448271E2A2E2 Certificate serial: 072E7F8AEF4C126C7217B5769BB101B7570F4A6A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 23:12:15 +0000 Manifest this update: Mon 03 Nov 2025 23:07:15 +0000 Manifest next update: Wed 05 Nov 2025 00:55:15 +0000 Files and hashes: 1: 323830343a346163303a3a2f33362d313238203d3e20323637323631.roa (hash: 4epJ9lVEGtoR0vWaiC0Iswc5dbzIPwfIhxIOekcVFQI=) 2: 34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa (hash: OxlKLinU/LaLLFazIyBAx6PCzM8QZZ5p11lTAuRGcGQ=) 3: 323830343a346163303a3a2f33322d3332203d3e20323637323631.roa (hash: IVoanioEzVZ8oYX2V+o88LhZO2KypDSg2obDGLNyHLs=) 4: 25C7F81AB8123826510AD39D4507448271E2A2E2.crl (hash: 0NWD8USV2YzUKL4Xzom9FUHImZGuqUaiGH/HjxkDzv0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2e:7f:8a:ef:4c:12:6c:72:17:b5:76:9b:b1:01:b7:57:0f:4a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C7F81AB8123826510AD39D4507448271E2A2E2 Validity Not Before: Nov 3 23:07:15 2025 GMT Not After : Nov 5 00:55:15 2025 GMT Subject: CN=139293EE426D8EAE00B3B32448AE233240192619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:ca:15:02:a0:c5:55:60:ec:c3:64:c3:8a: 3c:c8:8d:5a:4f:c0:69:88:4d:a2:98:f5:36:ab:ec: 78:a9:13:bd:76:9e:31:1e:f4:6d:75:76:9b:7a:93: d5:e7:8f:90:94:27:ba:ae:d3:e6:21:7f:d4:b4:96: bb:73:c8:b4:44:68:a9:71:52:a5:60:24:bf:2e:a1: 65:4c:32:7d:38:1c:7e:6d:c8:af:cd:0d:ff:d8:f0: a1:22:78:a0:ee:e0:aa:bd:69:4b:ca:1b:e5:51:2b: 24:16:03:3c:4f:39:75:b8:c4:6b:41:8b:c3:26:60: fe:a6:23:d7:17:52:0a:27:79:74:95:bd:19:92:f8: a9:ca:81:48:49:35:38:12:79:fb:46:83:ce:1f:8c: f1:95:16:67:76:90:7a:f6:3b:43:5e:9d:60:35:03: 97:1d:92:93:a6:4a:a3:54:38:b7:43:b2:c8:12:55: 7d:2d:4d:ff:90:52:64:ba:c5:80:0f:cc:98:5c:c5: f4:51:a3:83:4d:e0:a0:ba:ce:6b:5c:0b:98:18:f6: f3:91:b5:85:8d:a4:4c:92:5c:ce:58:ab:cb:1f:7e: 1e:a5:90:26:03:03:68:f7:08:db:d5:d6:d9:20:18: 21:02:47:5c:99:34:96:44:7c:ce:0f:67:24:c2:55: e8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:92:93:EE:42:6D:8E:AE:00:B3:B3:24:48:AE:23:32:40:19:26:19 X509v3 Authority Key Identifier: keyid:25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b9:7d:f5:ab:a2:c5:38:f6:a2:88:d8:49:00:38:e3:d2:20: fd:84:3e:64:b8:d6:d1:b1:15:b4:93:d6:34:cb:4e:93:f7:63: 70:95:31:12:93:63:3b:65:ac:95:9b:09:5f:57:e5:6e:67:53: 8a:68:f2:8c:df:e0:df:f5:94:db:1f:75:69:86:38:e4:a1:b7: 33:24:db:28:83:df:0f:54:af:93:17:5e:ad:5e:f2:3a:09:b6: 7a:d1:bd:9e:78:d7:fc:28:c2:0b:fd:91:50:12:45:9d:ee:19: 36:65:87:fd:2c:79:bd:3a:4f:74:7e:24:f8:53:67:d0:2b:9f: dc:26:08:f7:7f:c6:6c:7b:c9:89:bd:41:7c:f9:eb:2b:76:3b: 09:b2:a3:78:10:e3:9b:9a:0b:aa:6e:4e:97:2e:95:ea:3f:1c: 72:9b:3d:fb:bb:ff:1b:0f:95:85:9a:b3:38:90:1e:58:ab:f1: 86:fa:12:e4:19:01:c6:d0:24:79:e7:e6:21:be:63:43:0e:ef: 45:3c:8a:fb:ea:ee:89:32:ad:92:cc:cd:13:57:31:ba:ca:2f: e2:be:a5:3a:b3:53:cc:22:d0:31:5d:ea:6f:52:a8:50:5c:e6: 5e:34:0d:76:bd:8b:76:ab:5b:c2:7a:d1:22:39:c4:83:f3:b6: 14:bf:94:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBy5/iu9MEmxyF7V2m7EBt1cPSmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDN0Y4MUFCODEyMzgyNjUxMEFEMzlENDUwNzQ0ODI3 MUUyQTJFMjAeFw0yNTExMDMyMzA3MTVaFw0yNTExMDUwMDU1MTVaMDMxMTAvBgNV BAMTKDEzOTI5M0VFNDI2RDhFQUUwMEIzQjMyNDQ4QUUyMzMyNDAxOTI2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDk8oVAqDFVWDsw2TDijzIjVpP wGmITaKY9Tar7HipE712njEe9G11dpt6k9Xnj5CUJ7qu0+Yhf9S0lrtzyLREaKlx UqVgJL8uoWVMMn04HH5tyK/NDf/Y8KEieKDu4Kq9aUvKG+VRKyQWAzxPOXW4xGtB i8MmYP6mI9cXUgoneXSVvRmS+KnKgUhJNTgSeftGg84fjPGVFmd2kHr2O0NenWA1 A5cdkpOmSqNUOLdDssgSVX0tTf+QUmS6xYAPzJhcxfRRo4NN4KC6zmtcC5gY9vOR tYWNpEySXM5Yq8sffh6lkCYDA2j3CNvV1tkgGCECR1yZNJZEfM4PZyTCVeijAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUE5KT7kJtjq4As7MkSK4jMkAZJhkwHwYDVR0j BBgwFoAUJcf4GrgSOCZRCtOdRQdEgnHiouIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5 ZUgvMC8yNUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzdGODFBQjgxMjM4MjY1 MTBBRDM5RDQ1MDc0NDgyNzFFMkEyRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5ZUgvMC8y NUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdbl99auixTj2oojYSQA449Ig/YQ+ZLjW0bEVtJPWNMtOk/djcJUxEpNjO2Ws lZsJX1flbmdTimjyjN/g3/WU2x91aYY45KG3MyTbKIPfD1SvkxderV7yOgm2etG9 nnjX/CjCC/2RUBJFne4ZNmWH/Sx5vTpPdH4k+FNn0Cuf3CYI93/GbHvJib1BfPnr K3Y7CbKjeBDjm5oLqm5Oly6V6j8ccps9+7v/Gw+VhZqzOJAeWKvxhvoS5BkBxtAk eefmIb5jQw7vRTyK++ruiTKtkszNE1cxusov4r6lOrNTzCLQMV3qb1KoUFzmXjQN dr2LdqtbwnrRIjnEg/O2FL+UeA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:29:20 2025 by rpki-client