$ rpki-client -vvf rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft File: 25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft (raw, json) Hash identifier: KsPRFjmz2SYdOZh0VuEQx0rQRvpoqaVJlbXJEJYxZ+c= Subject key identifier: D0:A7:03:C8:5B:60:E4:7E:AD:C9:9B:C9:31:21:81:8F:1E:E2:2E:63 Authority key identifier: 25:B4:E3:86:B0:9A:86:2C:E4:42:24:CE:29:00:E9:3C:0B:99:AE:BC Certificate issuer: /CN=25B4E386B09A862CE44224CE2900E93C0B99AEBC Certificate serial: 337B17717038C0F56107D7E739B1C58D8AB9F831 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B4E386B09A862CE44224CE2900E93C0B99AEBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft Manifest number: 36 Signing time: Sun 24 May 2026 02:39:09 +0000 Manifest this update: Sun 24 May 2026 02:34:09 +0000 Manifest next update: Mon 25 May 2026 03:43:09 +0000 Files and hashes: 1: 25B4E386B09A862CE44224CE2900E93C0B99AEBC.crl (hash: q2xIg+2aPXXtH9nWdj1XEVNIZwd6/WQbdqi+4gVksLo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.crl rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B4E386B09A862CE44224CE2900E93C0B99AEBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 03:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7b:17:71:70:38:c0:f5:61:07:d7:e7:39:b1:c5:8d:8a:b9:f8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25B4E386B09A862CE44224CE2900E93C0B99AEBC Validity Not Before: May 24 02:34:09 2026 GMT Not After : May 25 03:43:09 2026 GMT Subject: CN=D0A703C85B60E47EADC99BC93121818F1EE22E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:f5:20:5a:b7:c4:33:99:91:18:36:12:d1: 02:8c:e2:fc:3a:c4:86:8f:2c:a3:47:25:a7:01:3b: 30:f6:82:7d:55:e9:56:ad:9e:9e:d1:52:e4:5b:66: ea:a2:57:6d:6f:b1:c1:62:21:ed:76:26:8c:f6:13: 5e:ac:f3:c1:5d:5d:6d:fe:16:a9:c9:cb:de:6c:70: 61:97:cd:f6:2e:92:69:15:45:43:61:0a:c0:98:3d: 1d:e1:9b:77:d8:95:6f:b0:85:ca:63:ed:55:4c:8d: 03:f7:3b:1a:b2:1d:57:e5:49:be:ae:3a:4e:10:05: b6:26:20:46:47:63:56:4f:9e:eb:a6:12:d5:c2:63: 07:f2:cf:ce:ff:fc:65:c8:35:8b:97:af:0f:53:32: 46:d3:42:67:63:33:5f:d0:e4:19:0b:39:67:0b:db: 9c:2d:35:72:99:34:98:ca:dc:98:2f:e8:ff:ec:c1: 2b:bc:bb:93:88:74:e3:0a:c3:a5:05:3b:d4:e8:3f: 18:f5:51:1b:ff:f3:70:7c:d0:80:07:d4:b5:7b:0c: 96:f0:fe:69:bd:03:88:77:8b:3f:14:12:41:3e:88: 5d:33:42:9d:dd:7d:92:65:de:dc:79:25:38:68:42: 46:7c:84:da:4a:04:77:2b:a9:df:c2:f8:bb:44:92: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:03:C8:5B:60:E4:7E:AD:C9:9B:C9:31:21:81:8F:1E:E2:2E:63 X509v3 Authority Key Identifier: keyid:25:B4:E3:86:B0:9A:86:2C:E4:42:24:CE:29:00:E9:3C:0B:99:AE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B4E386B09A862CE44224CE2900E93C0B99AEBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SHvMXySZFVi3rpgt3c4z1LccNJVTDGSexSa7BGCMZtR/0/25B4E386B09A862CE44224CE2900E93C0B99AEBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:cf:b1:73:7c:d8:a8:26:29:17:38:f7:7e:07:ee:56:e4:fb: ca:9c:57:1f:8c:99:9b:43:ef:14:7c:90:5c:f3:b7:6f:b9:8f: 73:1c:3e:f8:89:bd:10:e8:b6:22:44:82:b1:5a:7c:43:a8:72: 02:fd:4a:b5:e7:da:1b:b9:11:f5:a4:2b:b5:09:80:01:c6:3c: 1d:39:a8:3d:00:2a:69:6d:4a:58:d0:96:ad:19:d8:bf:e6:06: c2:8e:4b:b6:16:3f:c8:78:08:57:26:dc:71:de:c7:f5:b4:cc: a4:69:d6:ae:c2:0f:aa:b7:41:3f:d2:d8:17:ee:00:a3:0e:d6: 4b:95:3d:98:d3:43:5f:0b:90:cd:2b:d6:1d:93:5c:d4:8a:34: 06:be:09:06:2e:d2:b2:ee:db:78:a1:33:1e:b8:2f:b6:94:9b: ae:be:86:b7:b5:47:5f:8b:ee:fc:31:da:1b:ef:9e:40:69:04: 78:9a:c2:01:e5:e9:ad:0c:45:75:8b:f7:d9:4e:fd:9e:d7:8e: fa:bb:05:89:6a:0b:a1:c6:b9:20:38:db:8a:5d:17:10:80:c6: eb:d3:7c:25:fc:5b:59:c6:16:a3:63:30:3f:c2:c4:75:fb:df: b5:92:e4:66:56:ee:41:97:3c:b3:16:05:d7:d1:fc:65:bc:83: 9d:38:e6:0c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUM3sXcXA4wPVhB9fnObHFjYq5+DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVCNEUzODZCMDlBODYyQ0U0NDIyNENFMjkwMEU5M0Mw Qjk5QUVCQzAeFw0yNjA1MjQwMjM0MDlaFw0yNjA1MjUwMzQzMDlaMDMxMTAvBgNV BAMTKEQwQTcwM0M4NUI2MEU0N0VBREM5OUJDOTMxMjE4MThGMUVFMjJFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcvUgWrfEM5mRGDYS0QKM4vw6 xIaPLKNHJacBOzD2gn1V6Vatnp7RUuRbZuqiV21vscFiIe12Joz2E16s88FdXW3+ FqnJy95scGGXzfYukmkVRUNhCsCYPR3hm3fYlW+whcpj7VVMjQP3OxqyHVflSb6u Ok4QBbYmIEZHY1ZPnuumEtXCYwfyz87//GXINYuXrw9TMkbTQmdjM1/Q5BkLOWcL 25wtNXKZNJjK3Jgv6P/swSu8u5OIdOMKw6UFO9ToPxj1URv/83B80IAH1LV7DJbw /mm9A4h3iz8UEkE+iF0zQp3dfZJl3tx5JThoQkZ8hNpKBHcrqd/C+LtEkq2rAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU0KcDyFtg5H6tyZvJMSGBjx7iLmMwHwYDVR0j BBgwFoAUJbTjhrCahizkQiTOKQDpPAuZrrwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TSHZNWHlTWkZWaTNycGd0M2M0ejFMY2NOSlZUREdTZXhTYTdCR0NNWnRS LzAvMjVCNEUzODZCMDlBODYyQ0U0NDIyNENFMjkwMEU5M0MwQjk5QUVCQy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNUI0RTM4NkIwOUE4NjJDRTQ0 MjI0Q0UyOTAwRTkzQzBCOTlBRUJDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1NI dk1YeVNaRlZpM3JwZ3QzYzR6MUxjY05KVlRER1NleFNhN0JHQ01adFIvMC8yNUI0 RTM4NkIwOUE4NjJDRTQ0MjI0Q0UyOTAwRTkzQzBCOTlBRUJDLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA v8+xc3zYqCYpFzj3fgfuVuT7ypxXH4yZm0PvFHyQXPO3b7mPcxw++Im9EOi2IkSC sVp8Q6hyAv1KtefaG7kR9aQrtQmAAcY8HTmoPQAqaW1KWNCWrRnYv+YGwo5LthY/ yHgIVybccd7H9bTMpGnWrsIPqrdBP9LYF+4Aow7WS5U9mNNDXwuQzSvWHZNc1Io0 Br4JBi7Ssu7beKEzHrgvtpSbrr6Gt7VHX4vu/DHaG++eQGkEeJrCAeXprQxFdYv3 2U79nteO+rsFiWoLoca5IDjbil0XEIDG69N8JfxbWcYWo2MwP8LEdfvftZLkZlbu QZc8sxYF19H8ZbyDnTjmDA== -----END CERTIFICATE-----Generated at Sun May 24 14:05:45 2026 by rpki-client