$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft File: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft (raw, json) Hash identifier: gLvt5nmQcYVeD7zjwqoqYfFxI82YviPoAXP1zlZLztk= Subject key identifier: C7:1D:11:69:43:7C:D5:18:E7:80:FE:81:8B:77:29:54:84:95:E0:0E Authority key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 Certificate issuer: /CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8 Certificate serial: 06F03759649E3B028BEC5BEB5DAD6C5CAC92EAFD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft Manifest number: 2C Signing time: Wed 05 Nov 2025 16:46:10 +0000 Manifest this update: Wed 05 Nov 2025 16:41:10 +0000 Manifest next update: Thu 06 Nov 2025 16:54:10 +0000 Files and hashes: 1: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl (hash: CJrp7tXel9qnKt2fmdF9GZbyixz5HOKzA4DTP3TA6OY=) 2: 3230302e3135302e3235322e302f32322d3234203d3e203532353237.roa (hash: OCwyX5YTdu8LfAlkRFFy9NK7vnPWDipnn8CmclsKB5s=) 3: 323830343a6465633a3a2f33322d3438203d3e203532353237.roa (hash: bFpFaity00rv0Rl3Fw0iKd35mwwPylywks1Ijj4od3E=) 4: 3137372e3135322e38302e302f32312d3234203d3e203532353237.roa (hash: HjfMgQmsO4AQ827f7sOlQn0eZw55emR1ZUO2VzusW4U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f0:37:59:64:9e:3b:02:8b:ec:5b:eb:5d:ad:6c:5c:ac:92:ea:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8 Validity Not Before: Nov 5 16:41:10 2025 GMT Not After : Nov 6 16:54:10 2025 GMT Subject: CN=C71D1169437CD518E780FE818B7729548495E00E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:56:f0:74:8d:dd:45:20:27:a9:3f:54:a7:f9: 42:bf:f0:42:b7:d5:73:07:c8:f5:eb:51:5a:61:ea: 0d:d2:0d:af:a2:17:84:10:ff:0e:15:c7:40:7a:24: 60:5b:88:24:ba:30:d7:63:e3:f9:88:09:02:90:3c: 44:d2:76:31:53:1b:9e:c2:12:06:dd:fb:49:df:11: 32:70:0e:a2:20:34:97:97:18:5e:4a:98:d4:30:40: ec:84:16:99:4d:4c:98:ae:e0:01:91:08:21:28:af: 32:9a:4e:09:5a:40:cf:a2:aa:46:a1:10:b5:5e:6f: 10:4f:f7:aa:41:d3:34:42:dd:f6:90:6a:71:96:bd: 92:41:1b:ad:31:64:5f:cf:fe:48:61:08:92:af:c4: b5:c2:24:fd:f5:c2:33:84:57:d9:33:6e:6d:fa:98: 23:72:81:dc:b1:6a:2d:bf:9a:cf:30:fb:b4:dd:7c: 9d:9b:38:be:df:b0:f9:0b:f5:6f:1c:db:90:fe:94: 0f:d0:b8:34:17:d2:67:89:e6:70:84:41:64:3a:75: c4:91:cd:8e:1d:7e:0c:9c:bf:6f:8d:77:fc:aa:88: 0d:c7:ab:6e:31:79:99:8f:fd:b1:2f:6e:ba:a4:b0: 5e:ba:f7:49:f5:f1:bb:cf:06:a9:23:5a:c6:56:66: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1D:11:69:43:7C:D5:18:E7:80:FE:81:8B:77:29:54:84:95:E0:0E X509v3 Authority Key Identifier: keyid:35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1e:e5:8d:7d:56:9f:45:5b:27:af:e3:8d:b4:6a:7a:6b:7a: d8:9a:f3:a2:09:2b:48:06:1d:48:27:90:05:1e:9d:76:73:10: cd:94:8b:5e:b9:31:22:fc:1f:ca:8f:bb:f9:a6:41:8f:6d:9b: a4:06:59:69:e7:6c:7a:4a:1e:b2:a1:27:53:3d:23:76:22:3b: 76:99:a8:f2:d1:a1:5f:af:41:c7:88:99:73:48:d0:6c:0c:f5: 6d:30:c3:5e:3a:55:7c:2d:2e:ec:15:6c:41:49:f9:fd:fb:d7: b5:bf:d5:fb:12:b2:16:45:eb:de:fd:c7:4f:37:d0:ad:19:2c: db:1b:31:8a:a8:d3:20:de:87:1e:c1:2d:b5:a6:44:4b:4e:11: 5a:5e:3b:10:3a:c5:0f:6b:6e:72:e9:bf:bd:2b:8a:97:b0:35: 97:dc:91:84:fb:2c:c7:25:26:d2:aa:f1:15:b2:d4:2d:55:a0: eb:e1:5b:2c:32:82:9f:4e:58:df:f4:7a:57:09:7c:7d:23:5e: d4:78:a0:5e:9f:78:80:77:80:b2:6e:fd:1f:61:84:23:59:de: 61:8e:39:48:78:2e:6a:63:f0:82:8d:3b:15:ac:c1:93:5b:4f: a2:48:c5:1c:4e:e2:97:73:7b:e9:30:8a:df:8a:ba:f4:a7:43: 45:c5:27:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBvA3WWSeOwKL7FvrXa1sXKyS6v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1NDhFQjZCM0U1QjNBMjU3MDY4MERCQkVEQUUwMkQ2 NTNEMDhBODAeFw0yNTExMDUxNjQxMTBaFw0yNTExMDYxNjU0MTBaMDMxMTAvBgNV BAMTKEM3MUQxMTY5NDM3Q0Q1MThFNzgwRkU4MThCNzcyOTU0ODQ5NUUwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQVvB0jd1FICepP1Sn+UK/8EK3 1XMHyPXrUVph6g3SDa+iF4QQ/w4Vx0B6JGBbiCS6MNdj4/mICQKQPETSdjFTG57C Egbd+0nfETJwDqIgNJeXGF5KmNQwQOyEFplNTJiu4AGRCCEorzKaTglaQM+iqkah ELVebxBP96pB0zRC3faQanGWvZJBG60xZF/P/khhCJKvxLXCJP31wjOEV9kzbm36 mCNygdyxai2/ms8w+7TdfJ2bOL7fsPkL9W8c25D+lA/QuDQX0meJ5nCEQWQ6dcSR zY4dfgycv2+Nd/yqiA3Hq24xeZmP/bEvbrqksF6690n18bvPBqkjWsZWZuV/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxx0RaUN81RjngP6Bi3cpVISV4A4wHwYDVR0j BBgwFoAUNVSOtrPls6JXBoDbvtrgLWU9CKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da SkovMC8zNTU0OEVCNkIzRTVCM0EyNTcwNjgwREJCRURBRTAyRDY1M0QwOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NTQ4RUI2QjNFNUIzQTI1 NzA2ODBEQkJFREFFMDJENjUzRDA4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2daSkovMC8z NTU0OEVCNkIzRTVCM0EyNTcwNjgwREJCRURBRTAyRDY1M0QwOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAB7ljX1Wn0VbJ6/jjbRqemt62JrzogkrSAYdSCeQBR6ddnMQzZSLXrkxIvwf yo+7+aZBj22bpAZZaedsekoesqEnUz0jdiI7dpmo8tGhX69Bx4iZc0jQbAz1bTDD XjpVfC0u7BVsQUn5/fvXtb/V+xKyFkXr3v3HTzfQrRks2xsxiqjTIN6HHsEttaZE S04RWl47EDrFD2tucum/vSuKl7A1l9yRhPssxyUm0qrxFbLULVWg6+FbLDKCn05Y 3/R6Vwl8fSNe1HigXp94gHeAsm79H2GEI1neYY45SHguamPwgo07FazBk1tPokjF HE7il3N76TCK34q69KdDRcUnCA== -----END CERTIFICATE-----Generated at Thu Nov 6 00:20:50 2025 by rpki-client