$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft File: A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft (raw, json) Hash identifier: wgifAtaYVy6BUcU/ByREfvuDkH763oOyVjLJCA2HZj8= Subject key identifier: 0E:1C:86:69:BF:82:85:96:44:62:D8:0E:C6:46:6C:C8:AA:20:F0:B2 Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A Certificate issuer: /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A Certificate serial: 2F11AE31165EB2EFCEC969DF9818E6640183DB78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft Manifest number: 85 Signing time: Wed 05 Nov 2025 03:48:36 +0000 Manifest this update: Wed 05 Nov 2025 03:43:36 +0000 Manifest next update: Thu 06 Nov 2025 06:45:36 +0000 Files and hashes: 1: 323830343a366330343a3a2f33322d3337203d3e20323730343430.roa (hash: gLiMnxCc6TUkshWx1SWZnO8igGzE1ammRUff+QtRy2c=) 2: 3230302e31332e38342e302f32322d3234203d3e20323730343430.roa (hash: 8tAcj88Dsr6KX0GVpwjVn7wUOpm8augB6XHOYX1uv5I=) 3: A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl (hash: GZvy50tqtPIWloI13zB43+VnxewQ28QvbGf6mLeM6pE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:11:ae:31:16:5e:b2:ef:ce:c9:69:df:98:18:e6:64:01:83:db:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A Validity Not Before: Nov 5 03:43:36 2025 GMT Not After : Nov 6 06:45:36 2025 GMT Subject: CN=0E1C8669BF8285964462D80EC6466CC8AA20F0B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:ca:26:c3:3b:2e:d6:4a:15:e5:2d:40:23: a4:a4:fe:f7:cd:47:e7:29:67:24:f2:02:57:fc:8e: 8a:b3:e3:21:54:67:a0:85:1b:73:32:9e:ed:ad:72: 7b:30:12:c7:5e:a6:09:40:ab:58:4b:00:0f:9a:db: ce:f8:5a:0d:4d:f8:0a:5b:90:d1:11:e3:d4:06:15: ef:35:1f:24:7e:63:e2:4e:c2:47:ed:f5:52:74:3f: 47:dd:0d:1b:52:fd:ec:7f:9c:ab:6a:cb:45:09:f5: 84:f7:96:e4:83:2e:be:dd:d3:2a:a1:91:9b:08:6d: 1f:25:85:e5:46:04:f1:65:b3:ba:9c:fc:4c:3c:55: f7:17:aa:00:4d:66:f1:d3:4e:ea:f6:58:32:61:c7: 7e:a7:8b:fe:c3:6e:b8:c6:1c:51:be:9f:4a:c4:78: 34:be:8c:d0:ad:88:8c:06:b7:13:90:7f:98:0b:20: 03:38:92:a7:d7:ec:e6:f3:d2:55:41:27:a2:0d:7f: 1d:8e:79:0b:b7:19:6d:cf:51:3c:6a:3e:d0:ae:af: 2d:5b:6d:00:f6:05:73:33:3d:05:f0:01:6b:67:e8: fe:fb:e0:42:25:f0:1c:78:32:b0:a3:d8:fd:99:71: 83:5a:71:ca:c9:8b:16:20:73:e5:bb:e3:0c:74:26: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1C:86:69:BF:82:85:96:44:62:D8:0E:C6:46:6C:C8:AA:20:F0:B2 X509v3 Authority Key Identifier: keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:95:c1:b8:5c:0c:cb:c3:b8:c8:0d:9c:59:da:cc:71:66:72: cd:33:b3:fe:34:10:75:31:ef:0e:3e:9a:c3:85:c0:a7:8e:06: 68:8e:db:3c:fc:3d:b4:2b:67:03:ff:59:d9:85:4b:99:f4:40: 81:10:a8:81:28:b5:59:58:a8:09:3d:68:80:84:c8:52:0e:4a: aa:51:65:b9:37:c9:d7:c2:13:59:40:f1:90:40:00:c7:7b:e0: 0d:04:1e:04:a3:83:40:b6:6a:e6:2d:ad:76:c7:7f:cf:4b:b4: 6f:03:f6:c0:a2:5c:29:24:d6:6c:d8:9a:3f:a3:1e:13:c0:c7: e8:29:00:77:fc:c1:f2:f4:ba:3a:1d:2e:ae:71:d7:46:d7:8a: 13:67:84:fa:2c:5c:70:c9:dc:0b:31:d4:ff:32:44:8e:5c:e1: 2b:7f:b1:f5:4c:2a:37:e0:e3:c1:83:2a:22:1f:da:84:c1:17: ce:94:97:64:24:b6:cd:b3:a8:28:7c:ed:b2:5d:04:0e:d0:f4: 91:2b:ed:1d:85:97:51:a4:63:84:9f:e9:07:38:7a:bc:6c:d8: cb:0e:9e:d3:67:77:18:e3:3d:9b:40:c8:9d:92:be:af:3b:87: 66:3c:7f:03:25:57:60:8c:39:27:a1:1d:ad:ae:4f:16:af:2d: 45:9a:20:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULxGuMRZesu/OyWnfmBjmZAGD23gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1Qjg4Q0Y1Nzc5QjAwNjVFREI3N0I5NDk5QjIxQzQz QTNGN0M4QTAeFw0yNTExMDUwMzQzMzZaFw0yNTExMDYwNjQ1MzZaMDMxMTAvBgNV BAMTKDBFMUM4NjY5QkY4Mjg1OTY0NDYyRDgwRUM2NDY2Q0M4QUEyMEYwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUcomwzsu1koV5S1AI6Sk/vfN R+cpZyTyAlf8joqz4yFUZ6CFG3Mynu2tcnswEsdepglAq1hLAA+a2874Wg1N+Apb kNER49QGFe81HyR+Y+JOwkft9VJ0P0fdDRtS/ex/nKtqy0UJ9YT3luSDLr7d0yqh kZsIbR8lheVGBPFls7qc/Ew8VfcXqgBNZvHTTur2WDJhx36ni/7DbrjGHFG+n0rE eDS+jNCtiIwGtxOQf5gLIAM4kqfX7Obz0lVBJ6INfx2OeQu3GW3PUTxqPtCury1b bQD2BXMzPQXwAWtn6P774EIl8Bx4MrCj2P2ZcYNaccrJixYgc+W74wx0JmXrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDhyGab+ChZZEYtgOxkZsyKog8LIwHwYDVR0j BBgwFoAUo1uIz1d5sAZe23e5SZshxDo/fIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2dFNGZXb2pOQlhhaW1jTFdWTFJxdjRqNTlodmdjOTg2NlB0b1RQdEdr SjIvMC9BMzVCODhDRjU3NzlCMDA2NUVEQjc3Qjk0OTlCMjFDNDNBM0Y3QzhBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNUI4OENGNTc3OUIwMDY1 RURCNzdCOTQ5OUIyMUM0M0EzRjdDOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2dFNGZXb2pOQlhhaW1jTFdWTFJxdjRqNTlodmdjOTg2NlB0b1RQdEdrSjIvMC9B MzVCODhDRjU3NzlCMDA2NUVEQjc3Qjk0OTlCMjFDNDNBM0Y3QzhBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZXBuFwMy8O4yA2cWdrMcWZyzTOz/jQQdTHvDj6aw4XAp44GaI7bPPw9tCtn A/9Z2YVLmfRAgRCogSi1WVioCT1ogITIUg5KqlFluTfJ18ITWUDxkEAAx3vgDQQe BKODQLZq5i2tdsd/z0u0bwP2wKJcKSTWbNiaP6MeE8DH6CkAd/zB8vS6Oh0urnHX RteKE2eE+ixccMncCzHU/zJEjlzhK3+x9UwqN+DjwYMqIh/ahMEXzpSXZCS2zbOo KHztsl0EDtD0kSvtHYWXUaRjhJ/pBzh6vGzYyw6e02d3GOM9m0DInZK+rzuHZjx/ AyVXYIw5J6Edra5PFq8tRZog+w== -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:36 2025 by rpki-client