$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: Ql6eSpn6rOXgRAssYBkWlX6o6b+p4wWjGN7DevfXPwo= Subject key identifier: AD:39:16:45:0C:EA:EE:14:3C:81:5A:46:2A:5B:AA:56:DE:AD:EE:53 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 5379236DDFD3137A2F7F8B5826AA0132AE05B4C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 0407 Signing time: Wed 13 May 2026 05:19:23 +0000 Manifest this update: Wed 13 May 2026 05:14:23 +0000 Manifest next update: Thu 14 May 2026 06:25:23 +0000 Files and hashes: 1: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: sCP6thMdAA9gDiOxte8RF05RrI/PM5NftY+8foK2su4=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: BmtMGA3UP1Gbp6rjNqyC1eOkoFokimmoffm9IlUJg3Q=) 3: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: n0C9/GkCbLbH9WRPksqqAGPaZd17gx9HuxHuav2/O/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 06:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:79:23:6d:df:d3:13:7a:2f:7f:8b:58:26:aa:01:32:ae:05:b4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: May 13 05:14:23 2026 GMT Not After : May 14 06:25:23 2026 GMT Subject: CN=AD3916450CEAEE143C815A462A5BAA56DEADEE53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:67:2e:63:a4:79:fb:bc:3d:05:ec:cd:01: 99:d0:2f:02:77:d3:b8:b9:c1:cd:c9:b2:4d:8f:33: 07:7b:5d:0f:7c:29:66:fd:be:7c:57:a2:c5:ff:02: 35:e8:9e:9b:45:b7:81:33:e0:db:b9:15:62:b0:26: be:d2:b2:f6:b9:b1:e0:2a:68:1c:24:b5:37:55:fc: 99:a9:fe:a1:4d:0b:eb:17:cf:b6:f2:cb:6d:25:95: c0:12:1e:59:67:47:6f:7c:1e:27:9a:b0:f1:81:64: 23:a6:b0:95:05:ab:21:42:97:dd:3d:d1:76:fb:15: 91:f3:d2:10:6b:55:bb:9a:2d:dd:75:34:6e:d8:6f: bb:f1:d8:57:28:eb:3f:50:8a:61:4f:24:70:32:4f: 03:d1:70:05:05:87:4d:2e:3b:37:b6:bd:0b:39:54: a5:bf:38:ce:31:ab:c0:80:28:c8:aa:52:68:67:af: 48:30:b6:8d:47:f1:79:11:02:f1:8e:7b:c0:e7:12: 5a:e6:f5:6c:e9:74:0b:b8:d5:20:46:fe:41:93:65: f7:82:fa:44:d6:7a:9f:17:a5:75:d6:2c:d0:39:ea: b0:e1:4d:7d:37:78:35:1d:4a:b9:bb:d7:48:1f:4f: a0:32:9e:71:3e:54:46:58:14:25:a7:87:58:63:b1: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:16:45:0C:EA:EE:14:3C:81:5A:46:2A:5B:AA:56:DE:AD:EE:53 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9f:7f:80:82:8c:86:e1:99:42:52:65:c2:34:49:63:06:f1: 7e:3d:18:6b:d1:5f:79:4a:cc:56:21:47:5f:a7:49:3c:df:df: d4:bc:bb:ca:a4:c5:41:53:fd:ad:f7:ad:df:2d:17:1d:d4:9d: 1c:5c:f9:4e:c2:15:43:8b:62:0c:a7:33:55:07:4f:ff:e2:21: 63:02:55:36:e8:03:da:74:42:b9:2e:c4:54:2e:19:16:9b:1b: 46:e5:44:b0:0f:40:77:cd:84:8f:6c:c0:de:74:7a:f2:46:57: ff:2d:56:a7:97:b9:c4:73:fe:59:aa:c1:31:c1:f4:6f:ae:ee: 2f:df:ae:9c:a3:ae:4d:35:49:1b:91:52:64:2d:dc:f3:6f:b3: fc:4a:43:fa:4e:c3:0c:38:44:0d:69:20:f0:a4:09:3c:52:87: 50:84:7f:2b:57:6b:24:07:8b:84:02:98:d4:9e:be:57:68:73: 4f:de:b8:a3:7e:13:c0:b9:a4:2b:1f:14:2c:e4:42:3f:33:5f: f6:ec:b5:7b:29:2e:49:15:71:10:ac:ef:d4:f4:71:eb:02:ed: 27:a4:b2:e3:f0:f4:10:fa:0d:f8:f8:cb:a7:c3:30:95:60:d4: 77:b7:c5:87:c8:75:f4:f5:2b:d9:37:b0:c2:63:35:58:42:cb: d9:bd:04:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU3kjbd/TE3ovf4tYJqoBMq4FtMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNjA1MTMwNTE0MjNaFw0yNjA1MTQwNjI1MjNaMDMxMTAvBgNV BAMTKEFEMzkxNjQ1MENFQUVFMTQzQzgxNUE0NjJBNUJBQTU2REVBREVFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDic2cuY6R5+7w9BezNAZnQLwJ3 07i5wc3Jsk2PMwd7XQ98KWb9vnxXosX/AjXonptFt4Ez4Nu5FWKwJr7Ssva5seAq aBwktTdV/Jmp/qFNC+sXz7byy20llcASHllnR298HieasPGBZCOmsJUFqyFCl909 0Xb7FZHz0hBrVbuaLd11NG7Yb7vx2Fco6z9QimFPJHAyTwPRcAUFh00uOze2vQs5 VKW/OM4xq8CAKMiqUmhnr0gwto1H8XkRAvGOe8DnElrm9WzpdAu41SBG/kGTZfeC +kTWep8XpXXWLNA56rDhTX03eDUdSrm710gfT6AynnE+VEZYFCWnh1hjsbdJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrTkWRQzq7hQ8gVpGKluqVt6t7lMwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC59/gIKMhuGZQlJlwjRJYwbxfj0Ya9FfeUrMViFHX6dJPN/f1Ly7yqTFQVP9 rfet3y0XHdSdHFz5TsIVQ4tiDKczVQdP/+IhYwJVNugD2nRCuS7EVC4ZFpsbRuVE sA9Ad82Ej2zA3nR68kZX/y1Wp5e5xHP+WarBMcH0b67uL9+unKOuTTVJG5FSZC3c 82+z/EpD+k7DDDhEDWkg8KQJPFKHUIR/K1drJAeLhAKY1J6+V2hzT964o34TwLmk Kx8ULORCPzNf9uy1eykuSRVxEKzv1PRx6wLtJ6Sy4/D0EPoN+PjLp8MwlWDUd7fF h8h19PUr2TewwmM1WELL2b0Eng== -----END CERTIFICATE-----Generated at Wed May 13 17:27:19 2026 by rpki-client