$ rpki-client -vvf rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft File: 35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft (raw, json) Hash identifier: yRad1QIZECj5RcnPTke4bwaETf7jRlrCD8bEtGIaxak= Subject key identifier: E1:5A:14:ED:21:E9:EF:EC:E5:BF:5E:E7:82:0B:94:98:6C:83:E1:41 Authority key identifier: 35:B8:F6:D7:DA:45:A0:F5:35:60:A7:E3:72:2A:FF:E1:1D:0C:F6:D7 Certificate issuer: /CN=35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7 Certificate serial: 20638CCBC6C78BFDF9C18149221F6E87BD977487 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer Subject info access: rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft Manifest number: 1E Signing time: Wed 20 Aug 2025 09:53:39 +0000 Manifest this update: Wed 20 Aug 2025 09:48:39 +0000 Manifest next update: Thu 21 Aug 2025 09:58:39 +0000 Files and hashes: 1: 35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl (hash: 26sFn5VjrT43I5qw/fzN6kkYOy23JBL488Oh0L8n+9o=) 2: 3139322e3134312e3134302e302f32322d3234203d3e20323637343638.roa (hash: Smzo1i9R6g7N9a2Byujsv5lcAtfRjtk6lljtbJVzlAk=) 3: 323830343a343166343a3a2f33322d3438203d3e20323637343638.roa (hash: 8rIhjcL9s8Vkdc0tJyUXuIW5ef3TJadev4mDjW+t3Dk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:63:8c:cb:c6:c7:8b:fd:f9:c1:81:49:22:1f:6e:87:bd:97:74:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7 Validity Not Before: Aug 20 09:48:39 2025 GMT Not After : Aug 21 09:58:39 2025 GMT Subject: CN=E15A14ED21E9EFECE5BF5EE7820B94986C83E141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:f1:af:a4:43:e9:63:4d:69:f6:df:53:f6: 24:3c:d6:f3:6f:09:92:c3:35:ee:67:ce:42:5a:fa: 6b:71:54:05:ac:b2:67:53:a1:1f:00:e8:ac:34:71: 1b:6f:ce:98:dc:e8:e3:f9:81:83:38:3e:55:46:90: 10:58:1e:83:13:73:9d:33:4c:ab:66:4d:02:2e:34: 71:c1:3e:cd:5f:9f:5f:55:e7:2d:8e:9a:18:3f:69: da:80:18:7f:a8:eb:26:6e:d8:39:6b:18:c4:83:ca: 34:1d:c3:0c:07:7d:66:30:c9:bd:47:d1:a7:59:c1: 79:9f:44:77:e0:81:bc:bf:c6:3f:74:0e:5c:be:0e: 10:0a:d5:48:40:73:f4:6c:56:73:d2:b4:90:62:38: 36:2b:bb:9e:d4:e8:cd:0a:2b:11:9e:79:21:27:5e: 7d:00:65:2e:c7:77:07:f5:84:50:01:f2:68:77:8e: 51:78:39:5c:2b:83:54:eb:17:9a:bf:a9:8b:cb:2f: 32:f6:61:8c:7b:e0:8b:b2:c4:36:09:c6:f0:98:ec: d2:45:04:e5:f2:da:d9:f8:3a:77:ee:94:2e:40:7a: 95:b0:8f:2e:de:4c:60:6c:e4:2f:eb:94:40:6e:83: 14:0c:60:c0:0b:f1:a9:3f:ee:50:7b:57:4c:51:7e: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5A:14:ED:21:E9:EF:EC:E5:BF:5E:E7:82:0B:94:98:6C:83:E1:41 X509v3 Authority Key Identifier: keyid:35:B8:F6:D7:DA:45:A0:F5:35:60:A7:E3:72:2A:FF:E1:1D:0C:F6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cf:6f:29:47:b3:f5:44:f9:61:2e:eb:a6:eb:bd:57:6d:c2: 76:4f:23:07:37:05:64:d1:39:bf:42:fb:0e:a1:9b:c3:38:18: 11:94:a8:2a:6f:70:f0:08:1b:03:ac:4b:3c:25:d3:7c:17:ed: 2e:97:85:17:7f:62:bb:e9:c6:f1:ea:8b:ae:9e:85:22:eb:cc: 6a:cb:8d:6e:74:1f:06:08:63:53:6b:13:83:0e:f6:43:70:86: f1:89:4a:25:0f:04:f0:6f:36:04:63:00:df:22:2a:31:78:a3: 47:4e:2a:e5:d5:dd:7d:68:b7:a3:49:8c:b1:a8:bf:51:52:f1: a6:69:af:c9:5f:80:e1:84:df:8c:bf:e3:b3:13:53:d8:70:7e: 8c:c0:5e:8a:06:c5:c6:2b:40:e5:f1:bb:7b:7e:ca:e6:b2:6d: 3f:88:6b:23:3f:d4:39:4a:60:b9:08:fa:b0:01:4a:28:ca:ca: 8c:c1:a4:60:47:ec:ba:30:18:48:f8:07:86:a9:4f:e5:89:5e: 12:96:64:ee:8f:8f:81:60:23:8d:89:7a:2d:9b:8a:6c:a8:0d: bb:91:0e:88:f1:1a:70:46:fd:9a:bf:b8:6d:f4:dc:97:7d:40: dc:f7:08:a6:0c:3c:72:63:bd:af:0e:0c:64:d9:7c:3f:ec:3d: 5a:49:9b:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIGOMy8bHi/35wYFJIh9uh72XdIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCOEY2RDdEQTQ1QTBGNTM1NjBBN0UzNzIyQUZGRTEx RDBDRjZENzAeFw0yNTA4MjAwOTQ4MzlaFw0yNTA4MjEwOTU4MzlaMDMxMTAvBgNV BAMTKEUxNUExNEVEMjFFOUVGRUNFNUJGNUVFNzgyMEI5NDk4NkM4M0UxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyPGvpEPpY01p9t9T9iQ81vNv CZLDNe5nzkJa+mtxVAWssmdToR8A6Kw0cRtvzpjc6OP5gYM4PlVGkBBYHoMTc50z TKtmTQIuNHHBPs1fn19V5y2Omhg/adqAGH+o6yZu2DlrGMSDyjQdwwwHfWYwyb1H 0adZwXmfRHfggby/xj90Dly+DhAK1UhAc/RsVnPStJBiODYru57U6M0KKxGeeSEn Xn0AZS7Hdwf1hFAB8mh3jlF4OVwrg1TrF5q/qYvLLzL2YYx74IuyxDYJxvCY7NJF BOXy2tn4OnfulC5AepWwjy7eTGBs5C/rlEBugxQMYMAL8ak/7lB7V0xRfqmVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4VoU7SHp7+zlv17ngguUmGyD4UEwHwYDVR0j BBgwFoAUNbj219pFoPU1YKfjcir/4R0M9tcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWhUTE1UWHJLTEx5aXMxOVVjVVJxTDVCYUViN24yQVhqS25URkZFWGdi VlovMC8zNUI4RjZEN0RBNDVBMEY1MzU2MEE3RTM3MjJBRkZFMTFEMENGNkQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjhGNkQ3REE0NUEwRjUz NTYwQTdFMzcyMkFGRkUxMUQwQ0Y2RDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWhUTE1UWHJLTEx5aXMxOVVjVVJxTDVCYUViN24yQVhqS25URkZFWGdiVlovMC8z NUI4RjZEN0RBNDVBMEY1MzU2MEE3RTM3MjJBRkZFMTFEMENGNkQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD89vKUez9UT5YS7rpuu9V23Cdk8jBzcFZNE5v0L7DqGbwzgYEZSoKm9w8Agb A6xLPCXTfBftLpeFF39iu+nG8eqLrp6FIuvMasuNbnQfBghjU2sTgw72Q3CG8YlK JQ8E8G82BGMA3yIqMXijR04q5dXdfWi3o0mMsai/UVLxpmmvyV+A4YTfjL/jsxNT 2HB+jMBeigbFxitA5fG7e37K5rJtP4hrIz/UOUpguQj6sAFKKMrKjMGkYEfsujAY SPgHhqlP5YleEpZk7o+PgWAjjYl6LZuKbKgNu5EOiPEacEb9mr+4bfTcl31A3PcI pgw8cmO9rw4MZNl8P+w9WkmbZQ== -----END CERTIFICATE-----Generated at Wed Aug 20 19:55:39 2025 by rpki-client