$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: b80RAqqfJoZiI8iB9mJL9FKKJd0dzoWtApbYMVq2/UU= Subject key identifier: B4:2F:9A:12:2B:F6:75:53:15:FD:74:4B:34:0B:FB:75:F4:CB:A6:50 Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 03F2AEAB7243EBCB9D0411DC6852B14410F7D8F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: 27 Signing time: Sun 02 Nov 2025 23:29:10 +0000 Manifest this update: Sun 02 Nov 2025 23:24:10 +0000 Manifest next update: Tue 04 Nov 2025 01:54:10 +0000 Files and hashes: 1: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) 2: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: fMQ7IsVTsHSOf8Ovcn9C++LtTxAEwBq93lDj0zUx4c4=) 3: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f2:ae:ab:72:43:eb:cb:9d:04:11:dc:68:52:b1:44:10:f7:d8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Nov 2 23:24:10 2025 GMT Not After : Nov 4 01:54:10 2025 GMT Subject: CN=B42F9A122BF6755315FD744B340BFB75F4CBA650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:f8:62:db:89:66:b2:6f:05:ae:07:9f:08: 3b:c9:fb:b6:a5:33:6b:97:6d:4d:86:b8:f0:99:ed: ae:8c:5e:28:a3:7a:19:8e:a9:9b:19:ec:38:33:2e: 33:25:41:13:11:49:ba:0e:01:c2:f7:81:7a:2a:f3: a8:9a:4a:a8:28:f8:03:37:d3:fd:85:bf:5b:21:71: ca:81:25:f1:64:45:43:b8:4a:57:36:a3:88:e4:8b: f1:55:82:8a:27:07:d1:a4:02:12:dd:92:bf:2b:4f: 87:24:eb:0c:08:7e:a6:51:2c:e2:06:0e:99:91:06: f4:49:fe:cb:e7:60:90:ff:ed:a4:3e:15:08:2c:20: 5f:0e:cd:d9:a8:54:97:19:90:6a:d2:1f:66:04:23: 3d:e7:54:f6:d7:d6:78:f6:bb:b4:ae:fd:c2:2c:13: 1b:e5:23:1f:c9:c2:6d:ef:79:4a:79:85:64:1e:3a: bf:6b:e3:14:e9:02:a3:fc:ba:a2:94:4a:8a:3c:83: b9:af:f4:38:1d:b0:11:4a:f9:4d:4a:b5:55:a5:9c: 8a:63:87:b9:b7:58:ab:d4:aa:69:c7:5d:dd:b4:dc: 52:37:6c:39:41:89:8c:3c:a5:e0:08:42:34:a8:3a: 6c:bb:49:87:a1:6a:af:d3:81:ad:e9:eb:8c:0a:ed: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2F:9A:12:2B:F6:75:53:15:FD:74:4B:34:0B:FB:75:F4:CB:A6:50 X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:83:34:2e:a4:d2:57:7b:28:9d:47:61:65:d4:35:01:9f:ba: 19:1a:cc:2d:31:64:a1:36:0c:26:b3:1b:c1:cf:a3:59:94:b4: 61:fc:6b:71:0a:97:c6:08:c9:20:4a:5e:8f:9e:bc:a3:5a:9b: e7:a6:61:ac:73:d3:16:8f:e0:83:7b:75:4b:d1:91:99:f4:95: aa:f9:e1:11:46:e0:17:e3:ca:e2:f8:ce:dd:4b:a8:35:ba:01: 89:08:86:40:c7:a6:8d:95:e8:81:c1:8b:e1:3d:1d:58:c0:fa: d7:83:28:c1:dd:97:93:cf:c3:b5:08:e4:c0:91:07:da:56:5b: f6:84:21:cc:c5:0b:96:64:b4:b1:93:57:40:64:f1:c1:32:25: 2b:5a:5f:51:b5:57:22:c7:44:02:56:f1:53:6c:7a:8f:c6:45: 9a:30:18:23:1d:3a:8f:f3:49:33:78:9a:40:46:8f:c6:ff:84: d6:72:73:c6:2b:e5:ca:86:75:de:1a:8f:e6:30:78:8a:1e:45: 83:51:3c:b7:36:c7:32:f4:96:fa:a7:61:ac:85:e3:7b:2d:9b: de:0b:26:a8:d8:99:07:87:5c:0c:8c:45:01:6c:f6:28:91:0d: b7:42:0f:ac:58:32:cb:5f:3a:c5:ba:78:0e:4f:c3:23:bd:b4: e9:e6:83:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA/Kuq3JD68udBBHcaFKxRBD32PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNTExMDIyMzI0MTBaFw0yNTExMDQwMTU0MTBaMDMxMTAvBgNV BAMTKEI0MkY5QTEyMkJGNjc1NTMxNUZENzQ0QjM0MEJGQjc1RjRDQkE2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlvhi24lmsm8FrgefCDvJ+7al M2uXbU2GuPCZ7a6MXiijehmOqZsZ7DgzLjMlQRMRSboOAcL3gXoq86iaSqgo+AM3 0/2Fv1shccqBJfFkRUO4Slc2o4jki/FVgoonB9GkAhLdkr8rT4ck6wwIfqZRLOIG DpmRBvRJ/svnYJD/7aQ+FQgsIF8OzdmoVJcZkGrSH2YEIz3nVPbX1nj2u7Su/cIs ExvlIx/Jwm3veUp5hWQeOr9r4xTpAqP8uqKUSoo8g7mv9DgdsBFK+U1KtVWlnIpj h7m3WKvUqmnHXd203FI3bDlBiYw8peAIQjSoOmy7SYehaq/Tga3p64wK7b/HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtC+aEiv2dVMV/XRLNAv7dfTLplAwHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxYM0LqTSV3sonUdhZdQ1AZ+6GRrMLTFkoTYMJrMbwc+jWZS0YfxrcQqXxgjJ IEpej568o1qb56ZhrHPTFo/gg3t1S9GRmfSVqvnhEUbgF+PK4vjO3UuoNboBiQiG QMemjZXogcGL4T0dWMD614Mowd2Xk8/DtQjkwJEH2lZb9oQhzMULlmS0sZNXQGTx wTIlK1pfUbVXIsdEAlbxU2x6j8ZFmjAYIx06j/NJM3iaQEaPxv+E1nJzxivlyoZ1 3hqP5jB4ih5Fg1E8tzbHMvSW+qdhrIXjey2b3gsmqNiZB4dcDIxFAWz2KJENt0IP rFgyy186xbp4Dk/DI7206eaDTw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:49 2025 by rpki-client