$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft File: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft (raw, json) Hash identifier: N+r0ddBJ9zFq2YLf7Fe7yS9tKljJZIjg+jsTXpv2Sa8= Subject key identifier: 6A:C7:D2:D0:45:54:B3:D4:7E:50:DF:E0:B6:EB:5C:7A:B9:0B:B0:9A Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD Certificate issuer: /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Certificate serial: 7ABA90E6FC98A1869AEA893EDDE6DA6E09211AB7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft Manifest number: 38 Signing time: Mon 20 Oct 2025 09:01:49 +0000 Manifest this update: Mon 20 Oct 2025 08:56:49 +0000 Manifest next update: Tue 21 Oct 2025 10:16:49 +0000 Files and hashes: 1: 34352e3136382e342e302f32322d3332203d3e20323638303437.roa (hash: 2jrHaa+hwH2oFt1Zl6Q8aSVdxmSJjuGdjSzRULxSjCM=) 2: 323830343a353732343a3a2f33322d313238203d3e20323638303437.roa (hash: VO2mCl9Aq8nQpM2jsbGznOc//ApGYLZ/YC8kl2kia9I=) 3: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl (hash: wM1kNWuEjyoVgwVTW9bg2EIYnswFofG8WzDk5Ig7u+Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ba:90:e6:fc:98:a1:86:9a:ea:89:3e:dd:e6:da:6e:09:21:1a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Validity Not Before: Oct 20 08:56:49 2025 GMT Not After : Oct 21 10:16:49 2025 GMT Subject: CN=6AC7D2D04554B3D47E50DFE0B6EB5C7AB90BB09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:03:77:5e:91:4f:6f:81:c9:0d:81:a9:4d: f2:d5:bb:33:ec:2f:65:72:6c:41:1b:39:be:7a:dc: d2:d1:ef:90:b5:f6:6c:99:81:62:0f:06:0f:25:07: 66:15:2b:f4:a3:86:21:71:d0:19:de:75:bb:5d:62: ab:cc:a9:7b:fb:14:c1:48:09:73:19:3b:89:c2:c9: 88:59:33:70:59:f5:8d:eb:fd:21:c7:02:4b:e3:2f: 4f:de:c0:52:47:6c:fb:21:27:7e:dc:75:e8:b5:1a: 5f:6e:b0:b3:73:2b:94:7b:47:fb:9d:4e:84:26:2d: 04:59:c9:3a:9a:c6:d8:fd:6d:6d:96:ee:47:35:f6: ea:74:63:95:82:b4:29:d0:1d:d7:d1:7c:40:d5:c4: 3c:f9:49:18:67:f8:c3:3a:6c:d9:21:88:cd:68:e1: 0a:29:a0:aa:c6:ad:05:ec:fa:7b:04:c4:e2:0a:6f: 76:13:b6:4c:cb:f9:96:aa:df:05:52:1d:64:b6:4a: 74:9c:0f:96:c0:f4:cc:7c:de:00:c1:04:0f:d2:8c: 02:80:c1:ab:6a:8a:e4:71:44:50:6f:31:e5:ff:79: 7a:76:2c:f8:77:2a:22:24:a4:5e:31:e9:e6:92:dd: 51:c3:78:20:46:7a:ab:3c:b4:cf:9a:f6:04:a0:19: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C7:D2:D0:45:54:B3:D4:7E:50:DF:E0:B6:EB:5C:7A:B9:0B:B0:9A X509v3 Authority Key Identifier: keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4b:72:7b:27:9c:4d:2d:e3:8d:c8:07:c4:92:9a:1a:bd:bc: 7d:c7:48:51:6f:a3:49:2e:4d:25:f4:ab:57:27:d7:3b:c7:33: 73:20:dc:92:8b:2c:7f:ea:80:b6:12:ea:7b:3e:2f:55:ee:21: e2:3e:7a:15:5c:e1:77:b6:1c:f8:6a:5b:95:ca:b7:13:d8:40: da:c8:2a:c0:13:d0:00:41:0c:d5:c5:be:4e:4b:88:bf:28:a7: 48:fd:92:aa:7c:d9:6b:e3:da:fb:68:0d:6d:08:f6:57:bb:d5: f5:ba:a6:6c:d4:ab:8b:a6:21:0a:3c:93:30:a7:34:d6:4e:1b: 3f:54:67:44:db:85:75:3a:5d:3e:84:8e:48:27:80:94:31:f8: 80:c8:67:d5:22:2b:28:f0:d4:c5:92:1b:d3:fa:d2:12:2b:09: 2b:cd:62:2b:a5:86:97:4c:83:0e:a0:41:32:7b:05:af:b6:96: 66:57:dc:e8:4d:66:54:e0:d7:8d:56:1b:f9:a1:5a:82:62:e7: 60:ac:d8:34:2c:b4:c8:3c:ae:cf:c2:f4:ee:bd:61:2c:d6:59: 61:b5:b1:58:ba:ae:a4:78:3b:f9:6d:81:00:87:77:ca:3f:b7: 38:49:ac:55:d2:17:16:ab:e9:90:4a:d4:a0:a5:7b:09:21:8b: f3:e2:4c:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUerqQ5vyYoYaa6ok+3ebabgkhGrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1QjI0MjVCNzU3RkFEMENFQzAyMjZBQTQ3NEUwMjYx Rjc5RDRBRDAeFw0yNTEwMjAwODU2NDlaFw0yNTEwMjExMDE2NDlaMDMxMTAvBgNV BAMTKDZBQzdEMkQwNDU1NEIzRDQ3RTUwREZFMEI2RUI1QzdBQjkwQkIwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AwN3XpFPb4HJDYGpTfLVuzPs L2VybEEbOb563NLR75C19myZgWIPBg8lB2YVK/SjhiFx0BnedbtdYqvMqXv7FMFI CXMZO4nCyYhZM3BZ9Y3r/SHHAkvjL0/ewFJHbPshJ37cdei1Gl9usLNzK5R7R/ud ToQmLQRZyTqaxtj9bW2W7kc19up0Y5WCtCnQHdfRfEDVxDz5SRhn+MM6bNkhiM1o 4QopoKrGrQXs+nsExOIKb3YTtkzL+Zaq3wVSHWS2SnScD5bA9Mx83gDBBA/SjAKA watqiuRxRFBvMeX/eXp2LPh3KiIkpF4x6eaS3VHDeCBGeqs8tM+a9gSgGU0dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUasfS0EVUs9R+UN/gtutcerkLsJowHwYDVR0j BBgwFoAUw1skJbdX+tDOwCJqpHTgJh951K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FC TEMvMC9DMzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNUIyNDI1Qjc1N0ZBRDBD RUMwMjI2QUE0NzRFMDI2MUY3OUQ0QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FCTEMvMC9D MzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIEtyeyecTS3jjcgHxJKaGr28fcdIUW+jSS5NJfSrVyfXO8czcyDckossf+qA thLqez4vVe4h4j56FVzhd7Yc+Gpblcq3E9hA2sgqwBPQAEEM1cW+TkuIvyinSP2S qnzZa+Pa+2gNbQj2V7vV9bqmbNSri6YhCjyTMKc01k4bP1RnRNuFdTpdPoSOSCeA lDH4gMhn1SIrKPDUxZIb0/rSEisJK81iK6WGl0yDDqBBMnsFr7aWZlfc6E1mVODX jVYb+aFagmLnYKzYNCy0yDyuz8L07r1hLNZZYbWxWLqupHg7+W2BAId3yj+3OEms VdIXFqvpkErUoKV7CSGL8+JMJw== -----END CERTIFICATE-----Generated at Mon Oct 20 14:53:33 2025 by rpki-client