$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json) Hash identifier: XNh6GlcoSQD4Y/sPLU5KTF5L322uomDlpfOiC5p9hdU= Subject key identifier: D7:0E:DB:6E:D5:57:0B:F8:32:74:B7:D1:4E:87:78:29:DE:64:2F:60 Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Certificate serial: 1B2F4D6CEE636E5142B9D689E9EE442C43F15046 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft Manifest number: 024C Signing time: Tue 17 Jun 2025 20:31:30 +0000 Manifest this update: Tue 17 Jun 2025 20:26:30 +0000 Manifest next update: Wed 18 Jun 2025 23:28:30 +0000 Files and hashes: 1: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: 8/RYnsvG5o8e8mVXICeObu4r9QuNXa3bI0L8JgshNVw=) 2: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: E52Jh7KWlbtALuXEOsOEFe/Ne8+B9lKukEKTnKNO58s=) 3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: kx+etqCWv+jCRD5YXNaXPU45mCg6XbJHOXS5bFWX/Zs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 23:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2f:4d:6c:ee:63:6e:51:42:b9:d6:89:e9:ee:44:2c:43:f1:50:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Validity Not Before: Jun 17 20:26:30 2025 GMT Not After : Jun 18 23:28:30 2025 GMT Subject: CN=D70EDB6ED5570BF83274B7D14E877829DE642F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:66:b1:55:6d:cf:8f:8a:5c:5d:26:1c:33: cb:6a:6a:ed:45:41:62:ca:5a:f6:17:d8:27:92:df: 04:53:a3:f4:99:33:ee:51:c4:cd:fe:10:63:06:2d: 7e:37:eb:41:47:4f:33:cf:66:8e:55:7f:96:32:d1: 8d:35:a1:47:0b:47:80:31:89:6a:52:ff:8e:3b:f6: ab:50:25:a2:60:82:f8:06:e7:6b:6c:be:ff:2e:5e: ac:e3:3d:e4:75:3b:94:17:f2:7d:fd:71:f4:9b:21: 0a:cb:ce:a0:6d:0c:8c:6d:77:32:00:54:03:c2:0f: 6e:b6:b7:81:b3:a5:24:ae:bd:53:53:e6:dc:a7:74: 60:6b:67:8f:8e:e6:4e:c6:1e:b6:f4:97:99:86:6a: c3:1c:72:4b:72:30:3b:f0:58:67:0b:6a:20:82:ef: 19:35:52:a9:3f:ee:45:3e:ab:0a:1a:ba:9a:fd:b9: 66:5a:88:27:8a:f6:10:20:a4:32:eb:64:72:65:e0: 08:a1:d4:52:26:7c:a5:b7:d8:35:ba:c1:d3:ce:3f: 48:c3:d7:5d:4c:09:54:81:36:5b:91:22:1a:e8:27: 60:f2:e3:a5:47:e5:68:b9:43:49:e4:36:90:38:ec: ff:28:a7:9e:d2:08:b7:2f:3f:74:6a:4c:3c:45:65: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:DB:6E:D5:57:0B:F8:32:74:B7:D1:4E:87:78:29:DE:64:2F:60 X509v3 Authority Key Identifier: keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:22:e1:7a:da:14:91:61:05:d7:33:d2:bb:0d:50:f1:8c:ca: 78:62:1a:b0:59:5c:51:f4:7c:84:40:9e:d1:44:16:78:42:6f: 7c:b7:6f:14:9f:f3:5d:54:ec:38:1b:8d:6b:ea:c5:b6:c9:9e: 29:60:5a:d7:6b:b2:89:5c:99:0a:70:84:2f:07:b3:a6:7f:75: 41:93:3d:5a:c2:cb:65:03:24:93:8d:f7:07:df:c7:aa:a2:43: 74:ce:8c:1c:94:18:af:8d:80:73:75:ef:43:36:0f:7a:87:55: c4:cc:d8:32:0f:b7:4c:c9:fd:8b:aa:63:6e:c5:46:02:04:4c: f8:04:64:9e:e7:6a:26:0f:d7:6e:2a:f6:32:7e:af:f8:26:01: f5:d6:f6:91:4c:ce:74:07:62:1c:e2:70:6c:c0:2a:b0:d2:90: 4d:62:7c:93:b5:96:37:30:1e:31:f2:b8:b4:88:4a:f8:28:e8: 49:be:11:32:c9:17:4a:96:9d:ba:75:96:a9:4c:fd:ef:6f:e1: 7c:91:7e:79:ee:e9:c1:36:7a:6e:2b:b6:0a:bc:9c:f2:76:7e: ab:bd:30:70:49:ff:34:47:58:af:2a:ce:dc:bf:31:60:18:8d: b8:58:55:b8:76:81:32:bc:2c:f1:c8:61:22:9d:67:cf:f8:3c: ac:97:a9:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGy9NbO5jblFCudaJ6e5ELEPxUEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF NDY1OTIxODAeFw0yNTA2MTcyMDI2MzBaFw0yNTA2MTgyMzI4MzBaMDMxMTAvBgNV BAMTKEQ3MEVEQjZFRDU1NzBCRjgzMjc0QjdEMTRFODc3ODI5REU2NDJGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMCWaxVW3Pj4pcXSYcM8tqau1F QWLKWvYX2CeS3wRTo/SZM+5RxM3+EGMGLX4360FHTzPPZo5Vf5Yy0Y01oUcLR4Ax iWpS/4479qtQJaJggvgG52tsvv8uXqzjPeR1O5QX8n39cfSbIQrLzqBtDIxtdzIA VAPCD262t4GzpSSuvVNT5tyndGBrZ4+O5k7GHrb0l5mGasMccktyMDvwWGcLaiCC 7xk1Uqk/7kU+qwoaupr9uWZaiCeK9hAgpDLrZHJl4Aih1FImfKW32DW6wdPOP0jD 111MCVSBNluRIhroJ2Dy46VH5Wi5Q0nkNpA47P8op57SCLcvP3RqTDxFZdzHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1w7bbtVXC/gydLfRTod4Kd5kL2AwHwYDVR0j BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASyLhetoUkWEF1zPSuw1Q8YzKeGIasFlcUfR8hECe0UQWeEJvfLdvFJ/zXVTs OBuNa+rFtsmeKWBa12uyiVyZCnCELwezpn91QZM9WsLLZQMkk433B9/HqqJDdM6M HJQYr42Ac3XvQzYPeodVxMzYMg+3TMn9i6pjbsVGAgRM+ARknudqJg/Xbir2Mn6v +CYB9db2kUzOdAdiHOJwbMAqsNKQTWJ8k7WWNzAeMfK4tIhK+CjoSb4RMskXSpad unWWqUz972/hfJF+ee7pwTZ6biu2Cryc8nZ+q70wcEn/NEdYryrO3L8xYBiNuFhV uHaBMrws8chhIp1nz/g8rJepCQ== -----END CERTIFICATE-----Generated at Wed Jun 18 17:09:50 2025 by rpki-client