$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/35D703F3478DDA1E42358D542346FBE34E8A8F54.mft File: 35D703F3478DDA1E42358D542346FBE34E8A8F54.mft (raw, json) Hash identifier: G25cUoIdYXAcfM6QzJ1InoVNIad3CamuMUKtvCQfRq4= Subject key identifier: 90:0A:B9:BC:53:82:27:F6:9F:1C:93:37:CE:8D:1F:30:42:DF:1F:97 Authority key identifier: 35:D7:03:F3:47:8D:DA:1E:42:35:8D:54:23:46:FB:E3:4E:8A:8F:54 Certificate issuer: /CN=35D703F3478DDA1E42358D542346FBE34E8A8F54 Certificate serial: 3D358E0A90A2020B54F2150623ECF4BED529D71B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D703F3478DDA1E42358D542346FBE34E8A8F54.cer Subject info access: rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/35D703F3478DDA1E42358D542346FBE34E8A8F54.mft Manifest number: 21 Signing time: Fri 24 Jul 2026 01:25:00 +0000 Manifest this update: Fri 24 Jul 2026 01:20:00 +0000 Manifest next update: Sat 25 Jul 2026 01:54:00 +0000 Files and hashes: 1: 323830343a386432383a3a2f33322d3332203d3e20323733333339.roa (hash: 3TvTbZ5SRe+VHxZkbO9DsCXKCbpRh6LJHVKppI42YWU=) 2: 35D703F3478DDA1E42358D542346FBE34E8A8F54.crl (hash: zLt9r9zcS+hfHaTuByTKdkoeN9vdbY/mMH9r2I80msA=) 3: 323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa (hash: 7t4Kccy53B24lhsLbiqQkWrxhhwfMDIFHt47uLQdoiE=) 4: 323830343a386432383a3130303a3a2f34302d3430203d3e20323733333339.roa (hash: c2wPIDnAiVjO1Viblhy5DjWZnaxZEHwcEbYWISEgaS0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/35D703F3478DDA1E42358D542346FBE34E8A8F54.crl rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/35D703F3478DDA1E42358D542346FBE34E8A8F54.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D703F3478DDA1E42358D542346FBE34E8A8F54.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 01:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:8e:0a:90:a2:02:0b:54:f2:15:06:23:ec:f4:be:d5:29:d7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D703F3478DDA1E42358D542346FBE34E8A8F54 Validity Not Before: Jul 24 01:20:00 2026 GMT Not After : Jul 25 01:54:00 2026 GMT Subject: CN=900AB9BC538227F69F1C9337CE8D1F3042DF1F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:c1:d0:ad:f9:d8:84:d9:b3:d9:8e:01:e0: 16:2b:b0:99:ef:43:7f:12:4f:33:be:44:85:b8:dd: 3b:c6:55:b3:a1:0a:da:1d:95:12:23:4c:cc:3f:07: ee:8f:aa:0d:78:fb:59:aa:60:5d:e9:6e:9f:b9:cd: b9:a6:c3:9f:13:5b:c4:ec:82:39:28:c6:d8:6d:d3: a8:b5:ab:b1:62:69:2a:d1:62:33:bb:f0:9c:77:3d: d2:3f:53:24:11:70:21:57:0a:49:7a:0e:46:ec:f3: 13:fd:0a:ed:f7:e1:04:6f:71:4d:93:cd:7f:20:ad: 4d:d5:71:15:44:07:34:ec:a4:0f:cd:05:d2:09:e2: 5a:ea:f1:0b:3a:7b:61:a0:fd:63:21:fb:bd:82:cc: 00:bd:d7:64:44:c0:f7:50:65:7a:a8:26:e8:57:a9: 5d:cf:73:c7:8b:29:d7:5c:b6:0f:85:86:0d:5f:9a: b4:e2:55:7e:f1:cf:d9:ff:8c:4b:26:c9:5e:a4:7e: a5:5a:89:75:bd:c9:57:c0:87:a7:1b:f3:d6:1b:d4: 02:d1:26:a1:b5:fc:a0:f3:6f:d8:4e:f4:f2:21:c0: 22:18:c7:1e:f7:c4:cd:08:03:52:12:4a:bb:00:2d: a8:22:bc:3b:77:1f:f9:ff:42:e0:b0:45:89:bd:13: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0A:B9:BC:53:82:27:F6:9F:1C:93:37:CE:8D:1F:30:42:DF:1F:97 X509v3 Authority Key Identifier: keyid:35:D7:03:F3:47:8D:DA:1E:42:35:8D:54:23:46:FB:E3:4E:8A:8F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/35D703F3478DDA1E42358D542346FBE34E8A8F54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35D703F3478DDA1E42358D542346FBE34E8A8F54.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/35D703F3478DDA1E42358D542346FBE34E8A8F54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3b:2a:0f:e4:15:33:98:1f:9b:11:bb:15:fa:54:a6:5d:28: 31:c6:5f:87:7e:45:ec:c8:8b:8c:fb:5c:be:d0:4f:8c:85:b6: 60:89:65:c3:84:2b:0e:5f:ef:36:e3:c5:c0:34:51:cb:1a:71: 21:ab:65:e7:40:4e:00:35:ba:9f:c3:d5:60:69:d8:01:db:df: e2:d2:54:6b:f0:25:b7:92:59:62:0b:d6:5f:12:15:46:d2:96: 81:7d:76:71:1d:29:65:7e:7e:a5:1a:ab:3f:4b:49:46:b3:13: 19:8f:1d:20:8f:03:6d:31:d8:bb:a2:bd:5d:2c:71:af:7a:eb: 09:77:68:b7:e8:78:6a:9a:55:4d:14:2c:dd:f0:c2:11:53:43: 8e:2c:7c:7a:99:c1:e1:ee:ba:1f:02:1d:08:19:9a:9a:96:53: 4b:6d:90:b5:09:fc:48:d9:ea:2c:24:de:c6:96:09:f2:57:d1: f5:04:ff:96:d0:c1:f7:5d:4d:0c:54:f3:2d:fc:87:f2:6e:17: e0:5f:dc:82:ad:a6:29:71:af:5f:98:52:7d:0c:77:26:a0:c9: 3a:e4:d6:50:be:38:61:4a:9d:46:bd:95:05:8f:d0:59:be:f1: ac:a2:90:68:1c:9d:54:65:89:86:80:68:dd:d1:fd:78:8c:4a: 50:c9:87:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPTWOCpCiAgtU8hUGI+z0vtUp1xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVENzAzRjM0NzhEREExRTQyMzU4RDU0MjM0NkZCRTM0 RThBOEY1NDAeFw0yNjA3MjQwMTIwMDBaFw0yNjA3MjUwMTU0MDBaMDMxMTAvBgNV BAMTKDkwMEFCOUJDNTM4MjI3RjY5RjFDOTMzN0NFOEQxRjMwNDJERjFGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJMHQrfnYhNmz2Y4B4BYrsJnv Q38STzO+RIW43TvGVbOhCtodlRIjTMw/B+6Pqg14+1mqYF3pbp+5zbmmw58TW8Ts gjkoxtht06i1q7FiaSrRYjO78Jx3PdI/UyQRcCFXCkl6Dkbs8xP9Cu334QRvcU2T zX8grU3VcRVEBzTspA/NBdIJ4lrq8Qs6e2Gg/WMh+72CzAC912REwPdQZXqoJuhX qV3Pc8eLKddctg+Fhg1fmrTiVX7xz9n/jEsmyV6kfqVaiXW9yVfAh6cb89Yb1ALR JqG1/KDzb9hO9PIhwCIYxx73xM0IA1ISSrsALagivDt3H/n/QuCwRYm9EydPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkAq5vFOCJ/afHJM3zo0fMELfH5cwHwYDVR0j BBgwFoAUNdcD80eN2h5CNY1UI0b7406Kj1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnRyaExnYWp1dnl1ek56ZXZCbzdZZm8xV3VtVzZESlNXdGFyVHhXUWtz SEwvMC8zNUQ3MDNGMzQ3OEREQTFFNDIzNThENTQyMzQ2RkJFMzRFOEE4RjU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1RDcwM0YzNDc4RERBMUU0 MjM1OEQ1NDIzNDZGQkUzNEU4QThGNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnRyaExnYWp1dnl1ek56ZXZCbzdZZm8xV3VtVzZESlNXdGFyVHhXUWtzSEwvMC8z NUQ3MDNGMzQ3OEREQTFFNDIzNThENTQyMzQ2RkJFMzRFOEE4RjU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASzsqD+QVM5gfmxG7FfpUpl0oMcZfh35F7MiLjPtcvtBPjIW2YIllw4QrDl/v NuPFwDRRyxpxIatl50BOADW6n8PVYGnYAdvf4tJUa/Alt5JZYgvWXxIVRtKWgX12 cR0pZX5+pRqrP0tJRrMTGY8dII8DbTHYu6K9XSxxr3rrCXdot+h4appVTRQs3fDC EVNDjix8epnB4e66HwIdCBmampZTS22QtQn8SNnqLCTexpYJ8lfR9QT/ltDB911N DFTzLfyH8m4X4F/cgq2mKXGvX5hSfQx3JqDJOuTWUL44YUqdRr2VBY/QWb7xrKKQ aBydVGWJhoBo3dH9eIxKUMmHTg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:34:38 2026 by rpki-client