$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: be1DJ+WtJimo5hnB39MQ0xPwNw6aC8qW5e0k2d6YnGs= Subject key identifier: 23:E3:7E:BC:31:6C:62:94:36:8A:86:29:16:7F:E0:E6:5C:A5:96:C6 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 7349DDF535FFA32E20051C8D4F0B6EAFE3D2C341 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: 01E8 Signing time: Mon 20 Oct 2025 14:21:54 +0000 Manifest this update: Mon 20 Oct 2025 14:16:54 +0000 Manifest next update: Tue 21 Oct 2025 14:39:54 +0000 Files and hashes: 1: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=) 2: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=) 3: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=) 4: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=) 5: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=) 6: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: iS1oC6E9wXsXSUo0Nq4q5ANj8zjJhFgWa+YYWF9Zfds=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:49:dd:f5:35:ff:a3:2e:20:05:1c:8d:4f:0b:6e:af:e3:d2:c3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Oct 20 14:16:54 2025 GMT Not After : Oct 21 14:39:54 2025 GMT Subject: CN=23E37EBC316C6294368A8629167FE0E65CA596C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:53:1c:79:10:d5:1d:7b:d5:e8:b7:00:49: 24:3b:8e:84:d7:19:6b:e2:f5:da:0f:fb:85:08:f4: 34:a8:81:33:a4:a7:91:c9:10:bb:c5:28:92:05:8e: 98:0a:ae:03:79:b2:e3:ec:5a:87:12:c5:6b:1d:6c: 69:4c:b1:0d:e1:57:55:08:b8:a9:0e:10:c1:8d:fe: 27:a5:aa:ae:11:5c:5e:9a:35:5a:1b:f8:30:a3:cb: 72:87:89:ab:95:f9:bd:ff:a8:3b:c4:8e:4d:8d:e8: a7:ac:82:91:3b:6b:16:d9:01:4b:53:d9:be:18:b1: 13:80:2d:36:ad:a3:9d:2a:fa:fc:6a:a1:9a:64:f9: 4d:1c:5d:c9:b8:9e:f5:1f:45:0e:3a:34:20:5d:2b: 11:70:23:75:9d:ff:e4:92:52:bc:49:db:1f:a4:ff: 55:b2:ee:1b:08:3b:9b:0c:be:19:06:45:8c:9d:3e: b3:25:fc:01:80:9d:95:a1:7b:d7:07:18:44:fb:ff: 07:9c:c2:85:90:f5:59:06:66:fd:9c:6d:1d:61:3a: f0:28:f7:83:26:cd:0d:f7:79:7b:58:63:d8:48:a3: 82:24:0d:8f:59:a8:81:0c:df:2d:16:57:b6:49:95: ce:b9:4a:d7:e7:36:89:4b:b7:1d:39:05:38:35:4e: 4d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:7E:BC:31:6C:62:94:36:8A:86:29:16:7F:E0:E6:5C:A5:96:C6 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:48:10:b6:bf:5c:d4:a4:e1:ed:b9:2d:ef:43:85:f2:dc:11: 0b:54:e7:f8:40:ef:05:cc:9a:8a:63:8f:f8:6b:9f:fc:5b:fd: ca:01:2b:8f:43:22:b6:f6:82:89:52:44:98:93:4d:c6:30:20: 06:98:3a:11:ac:76:af:ee:53:89:42:84:71:b7:2f:8a:54:c0: b0:29:ef:88:b4:24:0e:b1:58:e7:80:6d:a9:f5:09:d4:21:91: 27:4a:d8:00:35:bf:5f:25:25:08:13:d6:98:bb:5d:29:6c:6f: 51:83:d5:bc:72:df:ed:56:9a:4c:c8:27:f5:ed:a2:0d:17:26: 7d:d7:54:ff:9b:33:d9:53:94:85:83:65:66:78:09:e5:21:b1: 76:fe:7f:a9:b0:17:d3:b3:bf:8a:5c:b8:c6:a1:c6:eb:c7:36: bf:d6:82:43:a3:dd:aa:3c:c6:80:75:1a:01:e9:d0:a7:ea:5c: e9:95:b5:3c:a0:3c:86:ff:c7:34:4d:89:69:38:4b:ee:51:bc: d5:ef:35:ca:d5:9b:dd:1a:80:99:16:d0:c6:32:6f:b3:ab:b4: f6:10:c1:23:63:7c:f2:c9:75:cf:74:2a:d4:db:99:1f:62:b8: 33:f4:46:50:a4:f3:26:06:45:ac:a9:4a:46:4a:c0:e7:39:4a: 99:ae:a0:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc0nd9TX/oy4gBRyNTwtur+PSw0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTEwMjAxNDE2NTRaFw0yNTEwMjExNDM5NTRaMDMxMTAvBgNV BAMTKDIzRTM3RUJDMzE2QzYyOTQzNjhBODYyOTE2N0ZFMEU2NUNBNTk2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4lMceRDVHXvV6LcASSQ7joTX GWvi9doP+4UI9DSogTOkp5HJELvFKJIFjpgKrgN5suPsWocSxWsdbGlMsQ3hV1UI uKkOEMGN/ielqq4RXF6aNVob+DCjy3KHiauV+b3/qDvEjk2N6KesgpE7axbZAUtT 2b4YsROALTato50q+vxqoZpk+U0cXcm4nvUfRQ46NCBdKxFwI3Wd/+SSUrxJ2x+k /1Wy7hsIO5sMvhkGRYydPrMl/AGAnZWhe9cHGET7/wecwoWQ9VkGZv2cbR1hOvAo 94MmzQ33eXtYY9hIo4IkDY9ZqIEM3y0WV7ZJlc65StfnNolLtx05BTg1Tk2LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI+N+vDFsYpQ2ioYpFn/g5lyllsYwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT0gQtr9c1KTh7bkt70OF8twRC1Tn+EDvBcyaimOP+Guf/Fv9ygErj0MitvaC iVJEmJNNxjAgBpg6Eax2r+5TiUKEcbcvilTAsCnviLQkDrFY54BtqfUJ1CGRJ0rY ADW/XyUlCBPWmLtdKWxvUYPVvHLf7VaaTMgn9e2iDRcmfddU/5sz2VOUhYNlZngJ 5SGxdv5/qbAX07O/ily4xqHG68c2v9aCQ6PdqjzGgHUaAenQp+pc6ZW1PKA8hv/H NE2JaThL7lG81e81ytWb3RqAmRbQxjJvs6u09hDBI2N88sl1z3Qq1NuZH2K4M/RG UKTzJgZFrKlKRkrA5zlKma6g0g== -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:50 2025 by rpki-client