$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft File: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft (raw, json) Hash identifier: dcDAXLohhtLPt8yZltdG5Cb8DRIWKKkcMtk9lwVxnJc= Subject key identifier: A0:46:C9:D0:A8:13:2E:F6:82:BA:41:CD:C8:0F:00:A7:53:A2:BC:BF Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD Certificate issuer: /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Certificate serial: 29CF8030B6BB595C1F32A18BBE53613C4D472B33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft Manifest number: 4D Signing time: Wed 05 Nov 2025 02:16:53 +0000 Manifest this update: Wed 05 Nov 2025 02:11:53 +0000 Manifest next update: Thu 06 Nov 2025 04:11:53 +0000 Files and hashes: 1: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl (hash: edbT7RiY9mwJKbm0DJCJ43p/btZ8Wq/fk/1D/S0qDQU=) 2: 323830343a353732343a3a2f33322d313238203d3e20323638303437.roa (hash: VO2mCl9Aq8nQpM2jsbGznOc//ApGYLZ/YC8kl2kia9I=) 3: 34352e3136382e342e302f32322d3332203d3e20323638303437.roa (hash: 2jrHaa+hwH2oFt1Zl6Q8aSVdxmSJjuGdjSzRULxSjCM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cf:80:30:b6:bb:59:5c:1f:32:a1:8b:be:53:61:3c:4d:47:2b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Validity Not Before: Nov 5 02:11:53 2025 GMT Not After : Nov 6 04:11:53 2025 GMT Subject: CN=A046C9D0A8132EF682BA41CDC80F00A753A2BCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:a8:b0:54:8d:7d:c8:1b:a6:5d:49:bf:30: 5e:33:37:cf:3a:f2:20:25:68:44:00:cc:e7:7f:b2: 90:43:6d:e9:94:4a:65:35:ff:1c:6f:d2:ef:5e:65: 50:d9:77:b8:b9:38:05:dc:0c:ee:25:0c:d2:ef:75: bf:aa:63:c1:b7:d3:8f:12:b1:04:a5:dd:77:b0:86: 37:da:0c:04:3c:fa:c2:fe:0a:73:cd:cc:03:87:29: 08:ed:9d:fd:04:d0:f7:20:0f:19:cf:08:e5:5d:58: 17:ff:b2:de:20:e5:65:1e:58:66:3d:92:08:f2:fd: 1a:e3:08:2a:27:23:a5:b9:d6:c2:3d:61:f7:e4:e8: e2:74:c5:03:79:eb:9a:86:a0:be:bf:45:18:00:70: 5b:99:f8:36:9d:63:e9:02:d6:4a:1b:41:27:4f:82: b6:e4:41:c0:10:8f:26:6b:d1:16:08:48:24:80:e1: 97:40:6d:4c:9e:b5:73:f1:07:a0:3f:87:2c:a8:a7: eb:e2:da:67:a4:fc:43:7d:6c:7d:31:87:b9:86:bc: d3:6f:5a:e0:39:3e:31:46:46:7e:6c:b5:11:62:d8: 25:65:e4:7e:5b:47:01:e4:f6:76:86:e4:e8:ee:68: a5:ab:a8:48:1c:25:dd:9e:64:25:83:7b:fb:54:af: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:C9:D0:A8:13:2E:F6:82:BA:41:CD:C8:0F:00:A7:53:A2:BC:BF X509v3 Authority Key Identifier: keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:51:21:58:3c:17:fa:46:40:43:b5:1d:05:19:4f:79:8c:ef: b3:49:78:a9:c4:01:9e:66:62:b9:4b:5a:c7:54:3a:16:e0:7b: dd:25:80:69:cd:4b:8f:c9:4f:ff:09:78:a1:52:8c:b9:5b:0a: e5:f6:cb:35:ea:cf:69:be:f2:2a:6b:8f:78:74:ea:bc:27:30: 77:56:65:cd:d6:4c:3a:78:5b:9d:e0:88:1c:84:6f:e7:d0:d4: 69:79:40:78:fb:40:bb:f3:b0:e9:16:cf:b9:02:e7:25:12:da: a4:b3:c9:67:97:06:87:09:e4:c2:ab:4c:c3:e9:a5:c2:ba:24: bb:df:f9:8e:58:d9:c2:a6:7d:d1:18:49:aa:b4:8a:bf:1f:7e: ac:0b:af:d6:bb:3d:ad:32:bb:f6:c4:c7:5d:bb:a8:7d:94:21: f2:8c:5c:b7:12:04:27:aa:99:9a:a4:8f:c3:50:5d:5b:c7:db: 77:57:26:d8:30:ed:17:8b:c9:29:47:f6:8d:0a:bf:16:e9:d4: b4:c1:9e:7c:46:f6:0d:fb:6b:c9:a2:ba:22:af:f0:dc:c6:63: ec:33:49:64:d4:60:d3:ae:62:bb:79:f7:4b:a9:ea:f8:04:94: 11:05:be:45:ca:67:5a:b1:62:e9:e5:51:11:f8:86:c8:9f:69: 91:31:da:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKc+AMLa7WVwfMqGLvlNhPE1HKzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1QjI0MjVCNzU3RkFEMENFQzAyMjZBQTQ3NEUwMjYx Rjc5RDRBRDAeFw0yNTExMDUwMjExNTNaFw0yNTExMDYwNDExNTNaMDMxMTAvBgNV BAMTKEEwNDZDOUQwQTgxMzJFRjY4MkJBNDFDREM4MEYwMEE3NTNBMkJDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93KiwVI19yBumXUm/MF4zN886 8iAlaEQAzOd/spBDbemUSmU1/xxv0u9eZVDZd7i5OAXcDO4lDNLvdb+qY8G3048S sQSl3XewhjfaDAQ8+sL+CnPNzAOHKQjtnf0E0PcgDxnPCOVdWBf/st4g5WUeWGY9 kgjy/RrjCConI6W51sI9Yffk6OJ0xQN565qGoL6/RRgAcFuZ+DadY+kC1kobQSdP grbkQcAQjyZr0RYISCSA4ZdAbUyetXPxB6A/hyyop+vi2mek/EN9bH0xh7mGvNNv WuA5PjFGRn5stRFi2CVl5H5bRwHk9naG5OjuaKWrqEgcJd2eZCWDe/tUr5ZlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoEbJ0KgTLvaCukHNyA8Ap1OivL8wHwYDVR0j BBgwFoAUw1skJbdX+tDOwCJqpHTgJh951K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FC TEMvMC9DMzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNUIyNDI1Qjc1N0ZBRDBD RUMwMjI2QUE0NzRFMDI2MUY3OUQ0QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FCTEMvMC9D MzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbFEhWDwX+kZAQ7UdBRlPeYzvs0l4qcQBnmZiuUtax1Q6FuB73SWAac1Lj8lP /wl4oVKMuVsK5fbLNerPab7yKmuPeHTqvCcwd1ZlzdZMOnhbneCIHIRv59DUaXlA ePtAu/Ow6RbPuQLnJRLapLPJZ5cGhwnkwqtMw+mlwroku9/5jljZwqZ90RhJqrSK vx9+rAuv1rs9rTK79sTHXbuofZQh8oxctxIEJ6qZmqSPw1BdW8fbd1cm2DDtF4vJ KUf2jQq/FunUtMGefEb2DftryaK6Iq/w3MZj7DNJZNRg065iu3n3S6nq+ASUEQW+ RcpnWrFi6eVREfiGyJ9pkTHaeg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:21:29 2025 by rpki-client