$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json) Hash identifier: PR36RVsVlDQwWBKFT71Y45ByHmJGew0I26KTrSJlitc= Subject key identifier: 5B:8A:20:97:BA:DB:7A:D9:1D:A4:F3:1F:7B:84:C8:F0:AC:60:44:5B Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Certificate serial: 57ADBF9C1744B1540846824FFED37A46EA7933F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 06:10:50 +0000 Manifest this update: Mon 20 Oct 2025 06:05:50 +0000 Manifest next update: Tue 21 Oct 2025 08:57:50 +0000 Files and hashes: 1: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: kx+etqCWv+jCRD5YXNaXPU45mCg6XbJHOXS5bFWX/Zs=) 2: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: 8/RYnsvG5o8e8mVXICeObu4r9QuNXa3bI0L8JgshNVw=) 3: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: XNkC841ve9KWvadEtpu279aLgGUDqoSDIUeCMVuCIuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ad:bf:9c:17:44:b1:54:08:46:82:4f:fe:d3:7a:46:ea:79:33:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Validity Not Before: Oct 20 06:05:50 2025 GMT Not After : Oct 21 08:57:50 2025 GMT Subject: CN=5B8A2097BADB7AD91DA4F31F7B84C8F0AC60445B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:f0:25:d9:82:5a:69:99:01:9a:2a:b1:11: 4a:8e:7f:31:10:a3:89:da:5e:88:4b:3f:6c:52:7c: 1c:97:13:77:b4:28:d2:2f:73:49:61:5a:78:64:6c: 0e:b0:fb:25:a1:cd:d3:9c:e6:92:29:da:ca:59:b2: 5c:30:6c:b1:c6:8d:6f:b4:30:fa:3c:67:a4:37:7c: e7:31:6c:7a:72:6f:10:fb:af:79:06:9f:52:ac:f2: 0c:49:85:f4:5a:99:49:e4:9c:f9:d5:b0:83:db:93: 0b:a3:cc:3a:b5:ed:0b:af:b4:05:52:4d:20:49:63: 78:ac:79:69:7a:fb:4f:12:a2:91:c4:35:70:63:5d: 12:cf:15:f4:62:85:f8:3f:8b:7e:89:7a:39:90:51: 89:69:e4:93:84:19:9f:2a:cb:46:c6:55:cc:22:3b: f8:b9:f2:85:43:db:40:63:5d:ed:e4:08:85:74:c3: 6a:3b:22:af:23:26:08:78:96:cc:8c:f4:54:0f:03: 5e:de:a4:27:7d:09:96:16:9f:92:d2:92:21:0c:ec: 9b:58:aa:fa:6e:ab:26:3e:3f:f6:25:1e:83:a8:8b: c2:e7:d9:67:32:f7:d3:52:17:f9:92:ff:28:1d:b5: a3:46:ed:bb:46:7f:40:11:37:0e:97:4d:65:44:5d: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:20:97:BA:DB:7A:D9:1D:A4:F3:1F:7B:84:C8:F0:AC:60:44:5B X509v3 Authority Key Identifier: keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b6:0b:c0:7c:0f:a2:b8:c4:27:56:04:7f:9a:b5:22:78:88: 02:40:f7:44:31:20:d5:28:82:de:45:3f:2a:65:8f:54:bb:40: 37:db:9c:31:a5:05:60:9c:e4:0c:9d:a2:0c:58:14:57:fa:79: 5a:0b:0b:7c:ea:45:d7:99:23:71:59:6f:7f:a2:42:ff:bd:56: 32:4a:47:44:25:ee:af:13:5c:7d:df:48:d0:9d:48:91:b4:ce: 74:5f:11:33:6d:23:7d:d2:65:9e:23:2e:7d:ff:89:b2:51:8d: 7e:84:12:8d:e8:ef:29:5c:5e:58:d4:aa:1f:1a:04:35:be:2f: ce:16:2c:01:22:9c:e5:fd:60:f3:24:18:6e:84:82:26:f7:ba: c0:95:c5:b1:29:0c:b4:1f:38:5e:3c:ab:93:2a:8b:36:e0:1a: 5f:ac:92:a3:6a:2c:5a:b0:8d:91:b0:d6:78:f1:3e:7c:d3:69: 52:ad:3c:62:bb:02:eb:af:10:c4:19:00:32:d8:66:cd:86:6c: e8:e0:f9:03:b5:f0:6a:02:9d:5a:05:5b:f6:e3:de:fe:7c:42: 12:d6:f9:98:fa:b3:5e:5d:cc:5f:98:22:9d:96:b4:18:31:33: f8:d3:cd:45:3d:6b:e6:be:a0:92:db:1f:96:a2:0d:4c:24:d6: 3a:2f:1b:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV62/nBdEsVQIRoJP/tN6Rup5M/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF NDY1OTIxODAeFw0yNTEwMjAwNjA1NTBaFw0yNTEwMjEwODU3NTBaMDMxMTAvBgNV BAMTKDVCOEEyMDk3QkFEQjdBRDkxREE0RjMxRjdCODRDOEYwQUM2MDQ0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5/Al2YJaaZkBmiqxEUqOfzEQ o4naXohLP2xSfByXE3e0KNIvc0lhWnhkbA6w+yWhzdOc5pIp2spZslwwbLHGjW+0 MPo8Z6Q3fOcxbHpybxD7r3kGn1Ks8gxJhfRamUnknPnVsIPbkwujzDq17QuvtAVS TSBJY3iseWl6+08SopHENXBjXRLPFfRihfg/i36JejmQUYlp5JOEGZ8qy0bGVcwi O/i58oVD20BjXe3kCIV0w2o7Iq8jJgh4lsyM9FQPA17epCd9CZYWn5LSkiEM7JtY qvpuqyY+P/YlHoOoi8Ln2Wcy99NSF/mS/ygdtaNG7btGf0ARNw6XTWVEXVE1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW4ogl7rbetkdpPMfe4TI8KxgRFswHwYDVR0j BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwbYLwHwPorjEJ1YEf5q1IniIAkD3RDEg1SiC3kU/KmWPVLtAN9ucMaUFYJzk DJ2iDFgUV/p5WgsLfOpF15kjcVlvf6JC/71WMkpHRCXurxNcfd9I0J1IkbTOdF8R M20jfdJlniMuff+JslGNfoQSjejvKVxeWNSqHxoENb4vzhYsASKc5f1g8yQYboSC Jve6wJXFsSkMtB84XjyrkyqLNuAaX6ySo2osWrCNkbDWePE+fNNpUq08YrsC668Q xBkAMthmzYZs6OD5A7XwagKdWgVb9uPe/nxCEtb5mPqzXl3MX5ginZa0GDEz+NPN RT1r5r6gktsflqINTCTWOi8bPA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:17:03 2025 by rpki-client