$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json) Hash identifier: gfz543As4kL9spUSW1D0LeauyKM94yPl0dT3ETzk+s4= Subject key identifier: 61:77:B2:12:B3:7F:7A:43:67:67:CD:D6:7C:0C:F3:2F:BD:5A:E0:CA Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Certificate serial: 152CABF0122ACD5837726CA8CB5706E87CFEC449 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 02:18:04 +0000 Manifest this update: Wed 05 Nov 2025 02:13:04 +0000 Manifest next update: Thu 06 Nov 2025 03:24:04 +0000 Files and hashes: 1: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: An33+30RtEfqwC52OImd5WP5BDgl4JbBuXSFtrasJx8=) 2: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: kx+etqCWv+jCRD5YXNaXPU45mCg6XbJHOXS5bFWX/Zs=) 3: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: 8/RYnsvG5o8e8mVXICeObu4r9QuNXa3bI0L8JgshNVw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2c:ab:f0:12:2a:cd:58:37:72:6c:a8:cb:57:06:e8:7c:fe:c4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Validity Not Before: Nov 5 02:13:04 2025 GMT Not After : Nov 6 03:24:04 2025 GMT Subject: CN=6177B212B37F7A436767CDD67C0CF32FBD5AE0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:74:16:2e:ac:93:1b:49:b6:b8:55:bc:b2: a8:3a:f4:c2:f4:22:58:17:6f:28:58:15:2c:11:69: 67:b6:67:52:f4:09:1b:01:c1:82:5c:f2:4e:20:29: a5:9a:9e:e2:93:3d:51:f8:6e:f4:94:46:df:00:92: 62:17:d3:6d:7f:33:b7:bf:db:3d:74:51:6f:56:5e: 7c:29:64:67:36:23:84:48:27:04:df:5e:7b:15:33: 27:da:e4:a2:fd:87:6f:1c:98:f9:9f:b1:05:f0:7c: b5:48:c9:4a:88:2b:ac:43:fb:14:fb:3d:9d:8e:66: d7:ea:3c:b1:ff:25:d6:da:1a:cd:9d:44:13:dc:06: 57:33:f6:e0:4c:8e:69:80:62:5b:6c:d0:66:e2:fc: 7e:bd:73:62:db:b3:b8:3b:02:7c:dc:3b:45:4d:26: b3:23:dd:d1:58:65:59:2c:1a:a6:6a:8e:16:55:a5: 09:83:a9:ae:a6:89:fc:bf:34:77:41:15:e9:d0:99: 25:36:9c:90:16:da:1f:35:61:d7:bc:86:ab:69:3f: 2e:95:d9:13:25:7c:89:bf:47:e6:29:bd:3f:d8:88: a7:75:8e:46:73:d6:e4:f6:1b:4d:37:57:01:5a:fe: 56:fc:5e:a2:75:00:fa:65:e0:7a:19:97:94:9f:d1: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:77:B2:12:B3:7F:7A:43:67:67:CD:D6:7C:0C:F3:2F:BD:5A:E0:CA X509v3 Authority Key Identifier: keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:62:e4:af:43:c7:4b:c1:10:cf:d4:ff:04:5f:ab:b8:cb:6c: 21:03:9c:c1:fd:ed:10:2b:5f:80:8c:30:33:4e:64:12:27:fb: 30:f8:30:f7:b7:d5:11:ac:36:c0:f8:3f:9d:e4:8d:ce:c6:97: b8:a8:61:96:09:69:d0:f2:ba:43:03:9e:a7:c2:41:ee:5b:27: 81:62:00:f7:80:0a:38:f5:39:c5:27:d8:75:7f:e4:2b:84:c0: 6d:0e:67:7b:92:97:e6:ef:37:37:9f:d2:62:c8:2a:46:e7:73: 4d:8d:16:1a:db:f9:23:df:a7:da:3b:44:7e:82:56:09:47:7e: e7:d8:d8:35:8b:51:c4:2d:8e:bc:4f:e7:e5:cf:51:c6:11:63: 38:f8:7a:54:2c:a5:1f:97:47:d3:a2:7e:b5:87:ac:1b:fa:0c: 7b:db:ad:92:eb:aa:99:1b:db:35:4c:5e:11:8e:28:8b:1d:b9: 9c:fd:00:85:b1:fc:b7:12:7f:d2:e1:47:48:6d:f6:33:fe:a1: 34:d8:d6:1a:73:47:98:0d:f9:31:08:82:c0:be:53:74:9c:fe: fe:d6:a8:e9:af:74:15:99:36:89:6f:e1:e0:ff:29:a4:a8:81: c9:fb:51:9f:10:8a:30:4b:cf:de:c3:fd:24:3d:f4:ae:53:6a: 7d:b2:55:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFSyr8BIqzVg3cmyoy1cG6Hz+xEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF NDY1OTIxODAeFw0yNTExMDUwMjEzMDRaFw0yNTExMDYwMzI0MDRaMDMxMTAvBgNV BAMTKDYxNzdCMjEyQjM3RjdBNDM2NzY3Q0RENjdDMENGMzJGQkQ1QUUwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3XQWLqyTG0m2uFW8sqg69ML0 IlgXbyhYFSwRaWe2Z1L0CRsBwYJc8k4gKaWanuKTPVH4bvSURt8AkmIX021/M7e/ 2z10UW9WXnwpZGc2I4RIJwTfXnsVMyfa5KL9h28cmPmfsQXwfLVIyUqIK6xD+xT7 PZ2OZtfqPLH/JdbaGs2dRBPcBlcz9uBMjmmAYlts0Gbi/H69c2Lbs7g7AnzcO0VN JrMj3dFYZVksGqZqjhZVpQmDqa6mify/NHdBFenQmSU2nJAW2h81Yde8hqtpPy6V 2RMlfIm/R+YpvT/YiKd1jkZz1uT2G003VwFa/lb8XqJ1APpl4HoZl5Sf0UCnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYXeyErN/ekNnZ83WfAzzL71a4MowHwYDVR0j BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ2Lkr0PHS8EQz9T/BF+ruMtsIQOcwf3tECtfgIwwM05kEif7MPgw97fVEaw2 wPg/neSNzsaXuKhhlglp0PK6QwOep8JB7lsngWIA94AKOPU5xSfYdX/kK4TAbQ5n e5KX5u83N5/SYsgqRudzTY0WGtv5I9+n2jtEfoJWCUd+59jYNYtRxC2OvE/n5c9R xhFjOPh6VCylH5dH06J+tYesG/oMe9utkuuqmRvbNUxeEY4oix25nP0AhbH8txJ/ 0uFHSG32M/6hNNjWGnNHmA35MQiCwL5TdJz+/tao6a90FZk2iW/h4P8ppKiByftR nxCKMEvP3sP9JD30rlNqfbJVHg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:45 2025 by rpki-client