$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft File: 5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft (raw, json) Hash identifier: DqjjDAuiQMSYrNEtD3WOEnn6FRuw57g8B+/q518/Hvg= Subject key identifier: 3F:7C:BB:0C:55:BB:A8:9B:23:47:B8:C4:2D:F3:BB:2B:09:7F:30:0F Authority key identifier: 5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45 Certificate issuer: /CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545 Certificate serial: 40F1EAACAF7B7A5CE5744BD82657A82A1E8E15F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer Subject info access: rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft Manifest number: 01C9 Signing time: Mon 20 Oct 2025 11:37:08 +0000 Manifest this update: Mon 20 Oct 2025 11:32:08 +0000 Manifest next update: Tue 21 Oct 2025 14:50:08 +0000 Files and hashes: 1: 5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl (hash: trfZfHW9Jv6sLOKtLGkvozEu9d+TDyiDkqKeDGDXdtU=) 2: 323830343a3233343a3a2f33322d3334203d3e20323632373331.roa (hash: eOHucrTt5fznCbxIQa2o5U8i01RRC7L01SQTWuhYmwQ=) 3: 3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa (hash: YNfCyMZ+7I1Y0iEmIgbKJyl6mt73HWFEW/VHAzFrgas=) 4: 3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa (hash: dyhWJfuOs6ucIkm4RsqJb23MstVwL8dYGVBJsgvxpG0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f1:ea:ac:af:7b:7a:5c:e5:74:4b:d8:26:57:a8:2a:1e:8e:15:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545 Validity Not Before: Oct 20 11:32:08 2025 GMT Not After : Oct 21 14:50:08 2025 GMT Subject: CN=3F7CBB0C55BBA89B2347B8C42DF3BB2B097F300F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:3c:9a:40:36:8a:c3:be:b2:61:93:ab:75: 21:e1:29:13:74:82:5d:8c:55:5b:b9:3f:fa:01:96: 95:83:0f:84:c1:09:e5:0d:ce:03:7d:bc:f7:a9:f7: bb:ea:ea:01:19:f2:bb:44:ef:21:a7:bd:c3:5f:e7: 8c:74:a3:07:23:2e:ca:c7:6d:ca:50:97:40:f7:3d: 31:d8:22:0c:3e:82:33:ff:87:17:50:27:54:c1:7d: d0:51:b9:99:fb:4b:cf:97:72:54:34:ed:91:b3:02: 52:84:58:b7:01:15:83:aa:33:ae:05:ae:53:9f:7c: c8:79:63:a4:82:42:c8:6b:64:b4:f9:5a:a3:6b:55: e4:43:d3:93:7a:37:7b:5b:03:e2:2f:1b:38:7d:d9: 8c:1f:43:8c:5c:84:a9:4d:70:85:6b:1b:8c:b4:c5: 61:3e:eb:ad:2f:b4:67:ce:cb:da:e6:52:82:27:2d: eb:b2:e4:66:3a:fa:fb:f9:6e:e3:3a:61:d6:74:f5: 76:b2:7c:d3:0a:f4:3f:3a:19:15:ac:54:78:f7:02: 30:cc:aa:a3:b1:f1:b9:29:98:57:a6:a5:bf:60:dc: 17:79:f2:ad:bc:a3:48:d9:99:44:b3:1f:89:69:be: c8:7a:0d:82:f5:3f:68:e3:bb:78:ff:5c:f4:c9:f6: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7C:BB:0C:55:BB:A8:9B:23:47:B8:C4:2D:F3:BB:2B:09:7F:30:0F X509v3 Authority Key Identifier: keyid:5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:39:79:f8:fd:e4:bb:08:40:b2:0a:f6:e5:02:be:97:23:64: 21:a4:53:c8:70:7d:e5:90:67:18:49:c5:b2:b5:1d:4c:3a:c7: a4:36:6b:26:3b:a6:cf:3f:a2:71:b4:42:f7:18:84:90:d5:e0: 64:3f:43:5c:89:fb:0f:8d:bd:80:8b:d0:27:98:b3:78:4a:e9: 13:cf:fa:18:9b:a4:e8:e1:b2:41:54:ac:e1:35:ed:a0:ce:1e: 99:49:87:88:88:64:ee:60:47:c3:1c:ff:4f:7e:3b:32:8a:e3: fa:02:9c:b1:9c:db:6c:2f:0d:29:4a:8b:2c:3f:ca:e2:68:cc: 22:fa:6f:ad:b6:90:3a:e9:01:46:5b:04:2e:b2:1b:86:06:71: 74:02:49:e3:4d:4a:a2:03:da:0a:6c:34:db:b8:d7:5e:4f:ac: b4:f4:23:9f:db:d3:85:b0:b5:a0:bd:66:e1:55:b6:02:0c:7e: 82:92:9b:c4:08:a5:cf:b1:8e:6c:46:cd:8b:c2:27:c9:ce:75: 73:52:e1:7e:40:46:0b:9f:8a:de:a3:ee:30:62:d9:31:fa:c7: 78:07:c6:64:66:2a:c3:8f:ee:27:52:e2:e0:32:f5:cb:9a:eb: c1:8b:53:4e:86:77:15:53:42:09:d5:e5:e6:5f:4f:e6:0b:e8: cf:fb:e4:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQPHqrK97elzldEvYJleoKh6OFfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNURCNkNBMjBGNzM4OUFEREQ0QTM3RDc3MjYzMjBG QjdBRDU0NTAeFw0yNTEwMjAxMTMyMDhaFw0yNTEwMjExNDUwMDhaMDMxMTAvBgNV BAMTKDNGN0NCQjBDNTVCQkE4OUIyMzQ3QjhDNDJERjNCQjJCMDk3RjMwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqDyaQDaKw76yYZOrdSHhKRN0 gl2MVVu5P/oBlpWDD4TBCeUNzgN9vPep97vq6gEZ8rtE7yGnvcNf54x0owcjLsrH bcpQl0D3PTHYIgw+gjP/hxdQJ1TBfdBRuZn7S8+XclQ07ZGzAlKEWLcBFYOqM64F rlOffMh5Y6SCQshrZLT5WqNrVeRD05N6N3tbA+IvGzh92YwfQ4xchKlNcIVrG4y0 xWE+660vtGfOy9rmUoInLeuy5GY6+vv5buM6YdZ09XayfNMK9D86GRWsVHj3AjDM qqOx8bkpmFempb9g3Bd58q28o0jZmUSzH4lpvsh6DYL1P2jju3j/XPTJ9iaZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP3y7DFW7qJsjR7jELfO7Kwl/MA8wHwYDVR0j BBgwFoAUXDXbbKIPc4mt3Uo313JjIPt61UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjJ5WjRYZWFIVE52Q3RSY3J6cGo3NWs1VXc4N3ZQWkpLeG9tcVdpRTRO RnYvMC81QzM1REI2Q0EyMEY3Mzg5QURERDRBMzdENzcyNjMyMEZCN0FENTQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMzVEQjZDQTIwRjczODlB RERENEEzN0Q3NzI2MzIwRkI3QUQ1NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjJ5WjRYZWFIVE52Q3RSY3J6cGo3NWs1VXc4N3ZQWkpLeG9tcVdpRTRORnYvMC81 QzM1REI2Q0EyMEY3Mzg5QURERDRBMzdENzcyNjMyMEZCN0FENTQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUTl5+P3kuwhAsgr25QK+lyNkIaRTyHB95ZBnGEnFsrUdTDrHpDZrJjumzz+i cbRC9xiEkNXgZD9DXIn7D429gIvQJ5izeErpE8/6GJuk6OGyQVSs4TXtoM4emUmH iIhk7mBHwxz/T347Morj+gKcsZzbbC8NKUqLLD/K4mjMIvpvrbaQOukBRlsELrIb hgZxdAJJ401KogPaCmw027jXXk+stPQjn9vThbC1oL1m4VW2Agx+gpKbxAilz7GO bEbNi8Inyc51c1LhfkBGC5+K3qPuMGLZMfrHeAfGZGYqw4/uJ1Li4DL1y5rrwYtT ToZ3FVNCCdXl5l9P5gvoz/vkDQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:51 2025 by rpki-client