$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft File: 5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft (raw, json) Hash identifier: 2aAeNvXkS+78EYaPUAajaGwFoKMUeY1S5qMiMywF1w0= Subject key identifier: 2A:04:5E:9C:9D:16:83:B0:A6:0E:85:AC:F7:75:F5:E3:95:6C:08:C1 Authority key identifier: 5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45 Certificate issuer: /CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545 Certificate serial: 040271872F5AF231E02F51E0DCE954BDEAF612EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer Subject info access: rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft Manifest number: 01DD Signing time: Tue 04 Nov 2025 16:08:01 +0000 Manifest this update: Tue 04 Nov 2025 16:03:01 +0000 Manifest next update: Wed 05 Nov 2025 17:50:01 +0000 Files and hashes: 1: 3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa (hash: YNfCyMZ+7I1Y0iEmIgbKJyl6mt73HWFEW/VHAzFrgas=) 2: 5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl (hash: 74N9BqJY13vJyXlBZUVoq9/7yVZUgLiHJ9v+KmFfA9U=) 3: 323830343a3233343a3a2f33322d3334203d3e20323632373331.roa (hash: eOHucrTt5fznCbxIQa2o5U8i01RRC7L01SQTWuhYmwQ=) 4: 3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa (hash: dyhWJfuOs6ucIkm4RsqJb23MstVwL8dYGVBJsgvxpG0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:02:71:87:2f:5a:f2:31:e0:2f:51:e0:dc:e9:54:bd:ea:f6:12:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545 Validity Not Before: Nov 4 16:03:01 2025 GMT Not After : Nov 5 17:50:01 2025 GMT Subject: CN=2A045E9C9D1683B0A60E85ACF775F5E3956C08C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:b8:89:fe:91:66:2f:80:88:9d:64:49:88: de:b2:62:af:bf:ff:b4:57:6c:33:59:2c:a1:39:38: bf:da:0e:d0:12:c5:ca:9d:b5:f7:f0:44:4e:e3:92: b0:cc:4c:43:60:29:9f:6d:39:ed:69:b4:c6:ba:ae: 6c:26:76:0c:07:8f:ed:ea:ed:03:1c:e3:52:99:f1: 01:fb:ec:98:8a:be:08:33:f8:7d:42:f9:2f:9a:6b: 3a:dd:bd:a3:1f:4a:22:13:db:00:b2:e5:76:b7:71: eb:54:3d:f2:e2:30:06:01:fb:de:a2:82:a1:ce:8e: 37:90:c2:71:6e:94:cc:ae:6d:da:f1:82:62:19:28: 19:99:66:00:f9:fd:c0:fa:8e:3d:e6:b5:45:83:f6: 76:35:ab:9d:d9:ca:ef:2d:d1:c9:92:1a:0c:65:db: 5a:31:1f:ca:0c:73:93:8f:73:4d:09:7c:4a:67:41: b3:4a:66:0e:bf:4f:db:a2:4c:7b:6b:3c:60:48:76: 8c:e9:13:51:84:db:92:1d:cc:a5:66:d5:0e:7d:cd: a0:26:55:96:b9:08:2f:bc:48:04:58:8d:d1:88:f3: fc:cc:b4:3e:c7:0d:66:00:24:b3:18:c5:8a:fc:ca: 31:c4:03:74:63:4e:ad:43:3d:6a:b8:a8:29:43:a3: 08:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:04:5E:9C:9D:16:83:B0:A6:0E:85:AC:F7:75:F5:E3:95:6C:08:C1 X509v3 Authority Key Identifier: keyid:5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:5b:a9:04:eb:0f:d5:6e:56:04:e1:b4:3a:2f:73:63:ab: 6b:80:bb:4c:e9:e6:d1:53:ce:8e:6c:df:9d:64:56:55:8f:b6: 82:65:9c:e7:22:c1:45:a9:a6:4b:71:52:fb:21:2e:bc:90:79: fb:45:15:40:e4:9c:8f:bc:8b:e1:21:3c:db:50:77:32:45:fc: 3b:23:d1:d8:d0:ec:8f:a5:68:a7:6b:12:40:e2:58:77:b2:ac: 7a:c1:e3:0c:71:59:7d:e8:8a:74:26:42:66:74:dc:72:cf:0d: eb:42:84:66:b4:2a:a9:a3:5a:92:61:2b:1f:7e:f0:1e:fb:33: 4b:fb:1e:0f:ab:ae:43:99:4e:04:71:9e:ce:d7:d7:01:81:de: 60:35:e6:00:e2:6e:5b:45:75:66:b3:ff:d6:94:13:28:db:be: 68:3c:83:9b:67:b5:e3:52:68:f1:3e:55:2a:65:5a:af:7d:d1: b6:33:ff:62:48:26:7e:7e:cb:33:2b:9f:52:69:99:71:a9:0d: 65:51:89:b5:81:c8:31:86:ee:94:01:e6:a9:71:59:7c:9b:8b: ba:8b:39:3c:2b:94:66:88:7f:49:0a:d9:46:b3:5b:14:64:16: 87:c7:1c:ce:63:bd:e2:45:4e:fa:4a:ad:8e:78:30:18:cb:50: 8b:06:72:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBAJxhy9a8jHgL1Hg3OlUver2Eu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNURCNkNBMjBGNzM4OUFEREQ0QTM3RDc3MjYzMjBG QjdBRDU0NTAeFw0yNTExMDQxNjAzMDFaFw0yNTExMDUxNzUwMDFaMDMxMTAvBgNV BAMTKDJBMDQ1RTlDOUQxNjgzQjBBNjBFODVBQ0Y3NzVGNUUzOTU2QzA4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxyLiJ/pFmL4CInWRJiN6yYq+/ /7RXbDNZLKE5OL/aDtASxcqdtffwRE7jkrDMTENgKZ9tOe1ptMa6rmwmdgwHj+3q 7QMc41KZ8QH77JiKvggz+H1C+S+aazrdvaMfSiIT2wCy5Xa3cetUPfLiMAYB+96i gqHOjjeQwnFulMyubdrxgmIZKBmZZgD5/cD6jj3mtUWD9nY1q53Zyu8t0cmSGgxl 21oxH8oMc5OPc00JfEpnQbNKZg6/T9uiTHtrPGBIdozpE1GE25IdzKVm1Q59zaAm VZa5CC+8SARYjdGI8/zMtD7HDWYAJLMYxYr8yjHEA3RjTq1DPWq4qClDowgZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKgRenJ0Wg7CmDoWs93X145VsCMEwHwYDVR0j BBgwFoAUXDXbbKIPc4mt3Uo313JjIPt61UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjJ5WjRYZWFIVE52Q3RSY3J6cGo3NWs1VXc4N3ZQWkpLeG9tcVdpRTRO RnYvMC81QzM1REI2Q0EyMEY3Mzg5QURERDRBMzdENzcyNjMyMEZCN0FENTQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMzVEQjZDQTIwRjczODlB RERENEEzN0Q3NzI2MzIwRkI3QUQ1NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjJ5WjRYZWFIVE52Q3RSY3J6cGo3NWs1VXc4N3ZQWkpLeG9tcVdpRTRORnYvMC81 QzM1REI2Q0EyMEY3Mzg5QURERDRBMzdENzcyNjMyMEZCN0FENTQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANONbqQTrD9VuVgThtDovc2Ora4C7TOnm0VPOjmzfnWRWVY+2gmWc5yLBRamm S3FS+yEuvJB5+0UVQOScj7yL4SE821B3MkX8OyPR2NDsj6Vop2sSQOJYd7KsesHj DHFZfeiKdCZCZnTccs8N60KEZrQqqaNakmErH37wHvszS/seD6uuQ5lOBHGeztfX AYHeYDXmAOJuW0V1ZrP/1pQTKNu+aDyDm2e141Jo8T5VKmVar33RtjP/Ykgmfn7L MyufUmmZcakNZVGJtYHIMYbulAHmqXFZfJuLuos5PCuUZoh/SQrZRrNbFGQWh8cc zmO94kVO+kqtjngwGMtQiwZyag== -----END CERTIFICATE-----Generated at Wed Nov 5 03:02:55 2025 by rpki-client