$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: DIHolumPEJjOaS98T1crELTKEKumH8CyPhqP336Stsk= Subject key identifier: A6:03:11:B1:9A:C4:B9:FE:7F:FA:A1:A6:D7:DB:95:E4:C6:C8:FC:74 Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 4DA9B0FF45B1E0ABEB7DA034CE31C3CFB2E80832 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: F8 Signing time: Thu 09 Apr 2026 00:08:50 +0000 Manifest this update: Thu 09 Apr 2026 00:03:50 +0000 Manifest next update: Fri 10 Apr 2026 00:16:50 +0000 Files and hashes: 1: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) 2: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: LRKMEVTN6IZFk7Tw81b4ffI0OZA+SfJWRtkXnlsVps8=) 3: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 00:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a9:b0:ff:45:b1:e0:ab:eb:7d:a0:34:ce:31:c3:cf:b2:e8:08:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Apr 9 00:03:50 2026 GMT Not After : Apr 10 00:16:50 2026 GMT Subject: CN=A60311B19AC4B9FE7FFAA1A6D7DB95E4C6C8FC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:1a:64:05:35:5e:6f:35:f2:9b:58:02:ab: 94:22:32:1d:31:df:57:25:b2:a9:83:2d:ae:17:02: 8c:9b:b5:8a:82:eb:9e:a2:ad:d3:0a:fe:f4:58:63: ee:7e:14:5d:b2:b6:ea:99:ac:b2:b0:90:fa:9c:3f: 32:21:c2:d2:ad:d0:15:74:5f:65:d1:ef:2a:df:89: 7a:db:5a:2d:a3:46:db:27:ca:29:0f:30:59:02:d4: 4e:37:3d:a5:bd:2d:dc:79:c5:93:d6:12:4c:24:af: 87:72:ed:3a:ba:1d:51:4c:62:0e:61:d1:c9:f3:7b: 79:91:33:10:cd:b1:06:6e:1c:fc:22:fb:c9:9c:71: 09:d7:38:8b:09:3c:7a:a0:6b:64:52:9c:b7:f2:ec: 99:24:47:3a:ee:19:67:f1:01:fc:fb:8b:45:b2:3a: b9:d8:56:a6:a3:1a:1f:a6:e0:d0:0b:de:7b:82:65: 96:63:31:09:91:eb:77:5d:59:b0:74:0a:d2:a6:4f: 18:03:18:25:91:05:e0:00:50:69:e2:4d:f8:16:1f: 6a:7f:cc:d5:b3:b7:29:0c:c4:33:69:6f:c5:61:2b: e9:ed:51:5d:14:94:0d:10:34:25:9e:4b:6a:fd:d9: e7:5b:02:b9:07:51:80:32:cc:4d:81:be:55:dc:3d: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:03:11:B1:9A:C4:B9:FE:7F:FA:A1:A6:D7:DB:95:E4:C6:C8:FC:74 X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5f:2f:7d:5a:27:f3:8a:1e:05:bb:db:38:da:6a:02:40:68: 93:3d:39:00:73:14:3d:d5:c9:4f:bf:0a:a8:19:f9:ac:42:bf: 33:d9:cc:ee:c0:cc:bf:35:67:17:d8:89:b4:32:58:82:aa:87: ed:d1:4d:63:4d:e5:b2:fd:08:57:3c:c3:93:59:be:1c:9d:a3: 35:b9:4f:35:da:8c:d1:08:bc:ba:3f:e1:f9:e2:5b:f7:f8:50: 94:79:6f:05:55:92:f1:0c:47:1a:b6:84:cd:b7:69:f0:5f:9a: 54:2b:c4:ca:19:b1:a7:85:46:2f:bd:92:c3:46:fa:9c:23:b4: a5:91:9a:c1:cb:00:7f:30:60:a0:5d:0d:6b:48:72:3d:68:32: dc:cc:83:8a:ec:e1:79:46:87:fa:01:b5:5b:df:e9:03:41:9f: e1:7c:ae:14:33:f6:21:83:44:4f:aa:22:b4:f8:99:50:ab:80: f3:db:3b:37:db:9f:86:ef:a9:27:6f:40:8f:6d:4a:a8:22:84: 87:ca:9e:65:87:e6:eb:f4:10:89:81:4c:cc:5d:12:e8:1e:0b: 2a:7f:a4:22:df:c7:ae:ef:36:ee:b1:28:ba:57:a0:12:0c:eb: d0:b2:e2:7b:73:40:8f:c5:07:7e:43:b9:95:bf:15:79:09:20: c1:3b:dd:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTamw/0Wx4KvrfaA0zjHDz7LoCDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNjA0MDkwMDAzNTBaFw0yNjA0MTAwMDE2NTBaMDMxMTAvBgNV BAMTKEE2MDMxMUIxOUFDNEI5RkU3RkZBQTFBNkQ3REI5NUU0QzZDOEZDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiBpkBTVebzXym1gCq5QiMh0x 31clsqmDLa4XAoybtYqC656irdMK/vRYY+5+FF2ytuqZrLKwkPqcPzIhwtKt0BV0 X2XR7yrfiXrbWi2jRtsnyikPMFkC1E43PaW9Ldx5xZPWEkwkr4dy7Tq6HVFMYg5h 0cnze3mRMxDNsQZuHPwi+8mccQnXOIsJPHqga2RSnLfy7JkkRzruGWfxAfz7i0Wy OrnYVqajGh+m4NAL3nuCZZZjMQmR63ddWbB0CtKmTxgDGCWRBeAAUGniTfgWH2p/ zNWztykMxDNpb8VhK+ntUV0UlA0QNCWeS2r92edbArkHUYAyzE2BvlXcPZEPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpgMRsZrEuf5/+qGm19uV5MbI/HQwHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR18vfVon84oeBbvbONpqAkBokz05AHMUPdXJT78KqBn5rEK/M9nM7sDMvzVn F9iJtDJYgqqH7dFNY03lsv0IVzzDk1m+HJ2jNblPNdqM0Qi8uj/h+eJb9/hQlHlv BVWS8QxHGraEzbdp8F+aVCvEyhmxp4VGL72Sw0b6nCO0pZGawcsAfzBgoF0Na0hy PWgy3MyDiuzheUaH+gG1W9/pA0Gf4XyuFDP2IYNET6oitPiZUKuA89s7N9ufhu+p J29Aj21KqCKEh8qeZYfm6/QQiYFMzF0S6B4LKn+kIt/Hru827rEoulegEgzr0LLi e3NAj8UHfkO5lb8VeQkgwTvdXQ== -----END CERTIFICATE-----Generated at Thu Apr 9 15:41:22 2026 by rpki-client