$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft File: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft (raw, json) Hash identifier: zFJh9yM7RyD+elUlrzJ5SCX0HTMOGGRYcilCdi2r/f0= Subject key identifier: C5:22:68:D7:C9:0E:2A:77:53:A9:E1:D3:83:41:D1:8C:BC:DD:A6:17 Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD Certificate issuer: /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Certificate serial: 76A14958B0C7A6EDC38108EEC9F860F0E249BB65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft Manifest number: 4B Signing time: Mon 03 Nov 2025 12:01:53 +0000 Manifest this update: Mon 03 Nov 2025 11:56:53 +0000 Manifest next update: Tue 04 Nov 2025 15:30:53 +0000 Files and hashes: 1: 323830343a353732343a3a2f33322d313238203d3e20323638303437.roa (hash: VO2mCl9Aq8nQpM2jsbGznOc//ApGYLZ/YC8kl2kia9I=) 2: 34352e3136382e342e302f32322d3332203d3e20323638303437.roa (hash: 2jrHaa+hwH2oFt1Zl6Q8aSVdxmSJjuGdjSzRULxSjCM=) 3: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl (hash: 4F8YymN1mCe8AKCdO4IyRLo82bnaGkGb78KMEZAUTuo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a1:49:58:b0:c7:a6:ed:c3:81:08:ee:c9:f8:60:f0:e2:49:bb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Validity Not Before: Nov 3 11:56:53 2025 GMT Not After : Nov 4 15:30:53 2025 GMT Subject: CN=C52268D7C90E2A7753A9E1D38341D18CBCDDA617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:b8:c9:c0:fe:11:ec:d4:23:84:a7:e7:1f: ac:6c:0c:88:70:a5:bc:88:e8:ca:c9:6c:69:d5:e1: 8d:f3:96:e5:d1:91:9a:13:19:76:c1:4d:33:00:8f: 66:02:1c:6b:d2:1d:f2:07:a2:50:9b:b1:94:dd:47: 31:a5:29:fc:66:71:fa:77:f0:98:f0:a4:30:18:e0: be:bf:1c:b2:79:65:d0:5e:63:36:ed:eb:fd:d5:c2: ff:f4:f1:3a:f0:11:fa:5f:f3:91:d6:21:e1:90:5a: 9a:17:d6:53:4e:de:ec:7c:2e:f4:9b:01:15:36:c8: 2c:63:e6:e3:fe:83:d5:54:3d:e0:7e:fe:3a:ce:35: 01:a9:59:75:07:0a:f8:f7:c7:80:01:b8:93:34:93: a1:93:bc:9b:f1:03:14:4a:c4:d9:2b:00:03:ad:95: e0:20:3c:72:17:17:bd:1a:25:59:71:c5:5f:b2:9e: 7d:47:f8:67:71:22:dc:62:de:82:73:5c:36:61:5d: 55:b6:2d:c9:d3:28:7b:22:a7:a2:bb:f9:ce:3e:29: f7:79:7f:27:dd:ff:5b:1a:ea:c3:fc:9e:12:b9:bb: 44:17:4c:bd:bb:60:a0:cb:fb:da:7f:15:38:de:02: f3:93:a7:6f:bb:76:8c:ed:67:18:72:f4:cd:8b:05: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:22:68:D7:C9:0E:2A:77:53:A9:E1:D3:83:41:D1:8C:BC:DD:A6:17 X509v3 Authority Key Identifier: keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:99:cd:23:9a:93:95:7e:4e:7b:e1:64:4d:ea:b7:55:ef:c6: 48:99:07:80:38:3f:fa:f1:56:12:f9:c6:2e:d7:cf:a1:e9:a3: 3a:6a:f7:24:34:74:fc:96:3e:d1:1e:ed:ac:dd:3b:52:b3:e7: a3:7c:6e:5f:a6:d1:b3:fe:6d:58:37:12:d8:90:65:6e:7b:40: 9c:b3:bc:a8:3c:d5:f9:55:49:ff:03:2d:3b:ea:2d:4e:4f:a2: ad:8f:a2:79:3e:4f:fa:e6:22:c1:66:c6:f2:b4:d1:a5:46:38: e7:7f:9c:cd:74:7f:de:55:1a:89:10:04:2f:90:be:bf:07:66: 9c:d6:24:b0:77:2a:32:ad:45:7b:84:dd:c6:db:f7:83:97:64: af:7b:f7:07:49:10:ac:01:ae:9d:00:15:ad:fc:a6:1c:3a:56: a8:6d:e6:83:70:a0:bc:2c:75:94:f4:a0:44:c1:07:c4:ad:3b: eb:91:7c:f2:ab:0d:85:d4:02:1d:6c:0d:c3:9c:0f:56:ed:7a: eb:dd:c9:76:02:07:a0:ac:0e:c0:20:ce:a5:ca:0b:9e:01:c5: 1f:ed:9c:37:0f:2a:41:34:2e:20:25:9a:1c:6e:b9:a6:d6:ce: af:c3:ae:bb:7d:a7:76:8b:d1:10:f4:ea:72:50:af:b9:9d:50: 7b:0d:0b:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdqFJWLDHpu3DgQjuyfhg8OJJu2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1QjI0MjVCNzU3RkFEMENFQzAyMjZBQTQ3NEUwMjYx Rjc5RDRBRDAeFw0yNTExMDMxMTU2NTNaFw0yNTExMDQxNTMwNTNaMDMxMTAvBgNV BAMTKEM1MjI2OEQ3QzkwRTJBNzc1M0E5RTFEMzgzNDFEMThDQkNEREE2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHrjJwP4R7NQjhKfnH6xsDIhw pbyI6MrJbGnV4Y3zluXRkZoTGXbBTTMAj2YCHGvSHfIHolCbsZTdRzGlKfxmcfp3 8JjwpDAY4L6/HLJ5ZdBeYzbt6/3Vwv/08TrwEfpf85HWIeGQWpoX1lNO3ux8LvSb ARU2yCxj5uP+g9VUPeB+/jrONQGpWXUHCvj3x4ABuJM0k6GTvJvxAxRKxNkrAAOt leAgPHIXF70aJVlxxV+ynn1H+GdxItxi3oJzXDZhXVW2LcnTKHsip6K7+c4+Kfd5 fyfd/1sa6sP8nhK5u0QXTL27YKDL+9p/FTjeAvOTp2+7doztZxhy9M2LBTJNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxSJo18kOKndTqeHTg0HRjLzdphcwHwYDVR0j BBgwFoAUw1skJbdX+tDOwCJqpHTgJh951K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FC TEMvMC9DMzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNUIyNDI1Qjc1N0ZBRDBD RUMwMjI2QUE0NzRFMDI2MUY3OUQ0QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FCTEMvMC9D MzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKZnNI5qTlX5Oe+FkTeq3Ve/GSJkHgDg/+vFWEvnGLtfPoemjOmr3JDR0/JY+ 0R7trN07UrPno3xuX6bRs/5tWDcS2JBlbntAnLO8qDzV+VVJ/wMtO+otTk+irY+i eT5P+uYiwWbG8rTRpUY453+czXR/3lUaiRAEL5C+vwdmnNYksHcqMq1Fe4Tdxtv3 g5dkr3v3B0kQrAGunQAVrfymHDpWqG3mg3CgvCx1lPSgRMEHxK0765F88qsNhdQC HWwNw5wPVu16693JdgIHoKwOwCDOpcoLngHFH+2cNw8qQTQuICWaHG65ptbOr8Ou u32ndovREPTqclCvuZ1Qew0LhA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:35 2025 by rpki-client