$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft File: 425279A675F326D0577BF774BBB20A14508381AD.mft (raw, json) Hash identifier: Ci4r2JKz4RZj36q6VNLkLUkRukOzMXM6HIfcyipo5a4= Subject key identifier: CA:9F:F8:09:3C:2A:BF:C4:37:3C:70:D9:40:32:10:AE:36:15:D7:8B Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD Certificate issuer: /CN=425279A675F326D0577BF774BBB20A14508381AD Certificate serial: 06996D99FCF201F9A06FD303C554AA39384D5EEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft Manifest number: 0300 Signing time: Tue 04 Nov 2025 01:23:27 +0000 Manifest this update: Tue 04 Nov 2025 01:18:27 +0000 Manifest next update: Wed 05 Nov 2025 05:12:27 +0000 Files and hashes: 1: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: kDpmKtJF4mGWfac+atxrTauaGW3uTc73uitca/OTWLI=) 2: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: mNHi88NZLBtau030tdBn9V/OmWy/tYOVyhjXlqlljXs=) 3: 425279A675F326D0577BF774BBB20A14508381AD.crl (hash: 6Ux+3Ha0R/uv7Pv8cJO/vHmro0Y6JTkF/i/zELFCx74=) 4: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: 0+SKyRuS8vJuXq7MWE/epWSyK2AeWtwCEDU99XSAo6E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 05:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:99:6d:99:fc:f2:01:f9:a0:6f:d3:03:c5:54:aa:39:38:4d:5e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD Validity Not Before: Nov 4 01:18:27 2025 GMT Not After : Nov 5 05:12:27 2025 GMT Subject: CN=CA9FF8093C2ABFC4373C70D9403210AE3615D78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:4c:11:0a:78:de:66:83:4f:ce:0e:df:24: 1f:c9:24:58:d8:60:c8:37:a2:4e:d4:96:4e:60:f9: b7:e1:84:f0:5d:73:ca:b9:4d:7b:5d:82:a8:83:1e: 8a:15:2f:b8:d1:b1:73:de:9d:50:e7:df:ba:e2:df: 6e:c2:a2:2c:0f:66:23:a2:5c:a2:74:5c:3d:cc:5a: 33:d6:d2:df:5e:74:65:58:82:03:fe:38:c7:37:f6: 59:35:0d:7c:35:73:19:b4:94:ea:46:1a:d7:55:50: a4:70:7b:9b:1b:0c:ac:6a:ed:66:4d:18:d0:f4:5c: 26:02:4a:a3:30:79:47:1e:23:c0:34:d4:57:c0:5d: 44:bd:5d:4e:1b:ca:da:76:10:fb:79:27:02:ec:6d: 5d:61:b7:49:b5:82:9b:77:87:90:e7:c9:1e:4c:8b: 5a:a5:60:1c:1c:ef:12:f2:74:de:8e:76:79:ff:6e: 5c:06:cb:67:48:ea:30:05:32:03:b0:f1:71:ff:59: 80:ae:52:d7:e7:95:e6:c7:2f:2c:97:e3:f4:da:26: 72:27:6b:3c:14:69:9f:0b:7d:d0:c6:fd:10:9f:e1: 8e:46:67:bb:12:51:6f:da:51:31:9f:8d:04:5b:e5: b3:49:40:ee:28:d6:c1:59:d0:fd:fe:a4:cf:37:a7: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9F:F8:09:3C:2A:BF:C4:37:3C:70:D9:40:32:10:AE:36:15:D7:8B X509v3 Authority Key Identifier: keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8c:0d:69:2e:4f:0f:e6:da:59:8f:da:41:7e:96:60:95:e3: d0:25:6e:1f:af:65:7b:e8:1f:cc:88:b7:cd:d4:ee:55:26:17: a0:29:c1:e2:f7:fd:3e:4e:09:36:9d:9e:dc:2b:ff:4d:75:4e: 0c:e2:d8:cd:a6:6f:e0:4c:9e:c8:19:c9:32:c8:a7:a8:e2:01: 4c:e7:d5:a5:4f:91:3d:e9:0c:1d:68:80:d4:24:52:ca:fe:0c: 61:93:e1:df:05:76:d9:62:1f:f7:88:56:84:4b:ca:43:d1:e6: 57:1c:ca:50:05:12:ac:f0:bf:d9:1b:ed:d2:4e:eb:d9:76:fc: ae:6e:5e:40:bb:1a:ba:b3:47:74:4d:2a:c3:89:5e:50:97:c9: 1a:4a:a9:ee:d2:e9:fd:9a:78:82:12:02:28:85:c0:d1:00:10: 7d:62:e1:98:8b:2b:56:69:d9:1c:8f:75:87:0c:6f:af:d4:3b: 3c:87:e8:a6:5f:ec:9a:e0:68:1f:b8:9e:87:56:ad:d8:19:41: 1c:1f:98:6e:b2:0d:e1:0c:b9:55:85:7b:f1:2a:b1:31:f2:b7: cd:40:40:03:21:54:86:fe:eb:bd:b0:81:49:75:8b:9e:92:39: e4:11:59:20:69:3d:68:ed:5e:13:2c:c0:eb:c6:5c:24:34:a2: 58:74:33:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBpltmfzyAfmgb9MDxVSqOThNXuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1Mjc5QTY3NUYzMjZEMDU3N0JGNzc0QkJCMjBBMTQ1 MDgzODFBRDAeFw0yNTExMDQwMTE4MjdaFw0yNTExMDUwNTEyMjdaMDMxMTAvBgNV BAMTKENBOUZGODA5M0MyQUJGQzQzNzNDNzBEOTQwMzIxMEFFMzYxNUQ3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgUwRCnjeZoNPzg7fJB/JJFjY YMg3ok7Ulk5g+bfhhPBdc8q5TXtdgqiDHooVL7jRsXPenVDn37ri327CoiwPZiOi XKJ0XD3MWjPW0t9edGVYggP+OMc39lk1DXw1cxm0lOpGGtdVUKRwe5sbDKxq7WZN GND0XCYCSqMweUceI8A01FfAXUS9XU4bytp2EPt5JwLsbV1ht0m1gpt3h5DnyR5M i1qlYBwc7xLydN6Odnn/blwGy2dI6jAFMgOw8XH/WYCuUtfnlebHLyyX4/TaJnIn azwUaZ8LfdDG/RCf4Y5GZ7sSUW/aUTGfjQRb5bNJQO4o1sFZ0P3+pM83p/QzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyp/4CTwqv8Q3PHDZQDIQrjYV14swHwYDVR0j BBgwFoAUQlJ5pnXzJtBXe/d0u7IKFFCDga0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli bWEvMS80MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNTI3OUE2NzVGMzI2RDA1 NzdCRjc3NEJCQjIwQTE0NTA4MzgxQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanlibWEvMS80 MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIwNaS5PD+baWY/aQX6WYJXj0CVuH69le+gfzIi3zdTuVSYXoCnB4vf9Pk4J Np2e3Cv/TXVODOLYzaZv4EyeyBnJMsinqOIBTOfVpU+RPekMHWiA1CRSyv4MYZPh 3wV22WIf94hWhEvKQ9HmVxzKUAUSrPC/2Rvt0k7r2Xb8rm5eQLsaurNHdE0qw4le UJfJGkqp7tLp/Zp4ghICKIXA0QAQfWLhmIsrVmnZHI91hwxvr9Q7PIfopl/smuBo H7ieh1at2BlBHB+YbrIN4Qy5VYV78SqxMfK3zUBAAyFUhv7rvbCBSXWLnpI55BFZ IGk9aO1eEyzA68ZcJDSiWHQzdg== -----END CERTIFICATE-----Generated at Tue Nov 4 05:05:49 2025 by rpki-client