$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: Sw6OraIpXLD4nHPBDLcrrYMn9IAOzBH4XjRXmw8nBEk= Subject key identifier: CE:D9:67:7D:C9:60:0C:37:26:18:36:B7:17:A1:C6:1F:BD:F1:03:97 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 574FC41447B63561EBCDC22B238C86E0332C4AEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 02AE Signing time: Fri 22 Aug 2025 21:56:05 +0000 Manifest this update: Fri 22 Aug 2025 21:51:05 +0000 Manifest next update: Sun 24 Aug 2025 01:10:05 +0000 Files and hashes: 1: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) 2: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) 3: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) 4: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: lzTd3+xKw4Lix5qcUN/zDbUDwuF06RQQW4qsEcAuquI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4f:c4:14:47:b6:35:61:eb:cd:c2:2b:23:8c:86:e0:33:2c:4a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Aug 22 21:51:05 2025 GMT Not After : Aug 24 01:10:05 2025 GMT Subject: CN=CED9677DC9600C37261836B717A1C61FBDF10397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:80:b6:f3:e1:6b:f7:dc:54:7e:75:60:f6: 5a:6a:4f:fc:0d:c4:c1:79:82:d8:c1:0a:22:e4:ba: 00:e3:98:8b:c7:c7:3d:a7:1c:9b:2e:09:71:57:82: db:a9:c2:0d:e6:8c:25:a1:7d:af:49:ca:28:c8:b3: 4e:fc:31:11:d8:43:f1:1d:d3:c1:28:73:e9:fc:0d: 3d:44:89:1c:8e:1f:1a:05:f8:6d:1e:d7:0f:c7:ef: 4d:e2:4d:2e:dc:16:79:d2:ae:c4:2e:a9:9a:6d:0f: 21:ef:ea:72:d5:dd:40:94:db:67:97:43:e0:d7:dd: d5:37:dd:5e:30:85:3c:20:b9:b7:eb:47:54:3d:73: 98:e8:75:63:d1:ee:e3:1c:44:ec:76:20:e2:28:60: 21:73:b3:d1:ac:62:04:b7:67:ac:5f:05:22:14:6c: d1:2e:20:60:5e:51:51:9c:9e:8f:cf:f0:c7:91:c4: 64:2f:20:5e:e6:98:2e:00:7d:df:df:b2:52:74:20: 85:41:4e:40:4f:60:4e:66:25:84:ba:25:75:ff:45: e0:96:25:eb:34:02:fe:67:78:18:3d:02:59:e9:19: 83:22:63:0c:01:ee:f2:af:5c:e2:b9:94:33:e9:b7: 03:22:78:d2:bd:43:5e:1a:25:44:90:d1:0a:13:61: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D9:67:7D:C9:60:0C:37:26:18:36:B7:17:A1:C6:1F:BD:F1:03:97 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b2:a1:cf:1e:2a:a3:54:dc:ac:5e:e9:42:cf:51:06:f0:b6: 6d:4e:cd:5d:b2:de:0f:43:88:a2:cb:65:d4:ab:16:16:51:82: 4e:37:c4:75:a4:10:d3:68:e5:d8:a2:01:70:1a:5d:af:ed:a2: 4e:16:7a:bd:4b:80:3c:a8:8b:70:59:97:cf:51:c8:16:a5:0e: cb:ac:1a:bf:c1:e3:29:db:97:4c:1e:00:71:22:ff:a3:be:ab: d0:13:28:fb:10:b9:e7:3f:2a:3f:b7:84:df:70:43:73:16:c3: b4:ee:33:23:7f:33:1f:f5:d9:4e:3e:84:36:15:af:28:f9:0e: 1a:31:d2:e5:26:28:8f:e2:fc:9b:94:48:33:00:22:64:a2:a9: 79:bc:34:4f:33:0d:4f:54:7a:76:80:a1:ba:07:f2:25:64:fe: db:c8:6d:91:0e:75:81:30:f6:6e:75:16:16:d3:e7:c0:58:60: 84:aa:9d:56:55:a2:0d:ce:83:fd:32:d7:f4:a2:99:bc:97:ef: 70:d6:7e:2f:7a:b7:2c:8d:2e:80:49:8d:31:8d:ae:4e:13:b3: 94:dc:95:7b:4d:1a:bf:ba:f0:e3:08:80:c6:b4:b2:60:4f:c9: f2:26:63:b3:f6:cc:98:ee:c1:5a:2a:5d:f7:05:bd:b7:a5:44: 0b:f7:2a:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV0/EFEe2NWHrzcIrI4yG4DMsSuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTA4MjIyMTUxMDVaFw0yNTA4MjQwMTEwMDVaMDMxMTAvBgNV BAMTKENFRDk2NzdEQzk2MDBDMzcyNjE4MzZCNzE3QTFDNjFGQkRGMTAzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEIC28+Fr99xUfnVg9lpqT/wN xMF5gtjBCiLkugDjmIvHxz2nHJsuCXFXgtupwg3mjCWhfa9JyijIs078MRHYQ/Ed 08Eoc+n8DT1EiRyOHxoF+G0e1w/H703iTS7cFnnSrsQuqZptDyHv6nLV3UCU22eX Q+DX3dU33V4whTwgubfrR1Q9c5jodWPR7uMcROx2IOIoYCFzs9GsYgS3Z6xfBSIU bNEuIGBeUVGcno/P8MeRxGQvIF7mmC4Afd/fslJ0IIVBTkBPYE5mJYS6JXX/ReCW Jes0Av5neBg9AlnpGYMiYwwB7vKvXOK5lDPptwMieNK9Q14aJUSQ0QoTYbYjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUztlnfclgDDcmGDa3F6HGH73xA5cwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh7Khzx4qo1TcrF7pQs9RBvC2bU7NXbLeD0OIostl1KsWFlGCTjfEdaQQ02jl 2KIBcBpdr+2iThZ6vUuAPKiLcFmXz1HIFqUOy6wav8HjKduXTB4AcSL/o76r0BMo +xC55z8qP7eE33BDcxbDtO4zI38zH/XZTj6ENhWvKPkOGjHS5SYoj+L8m5RIMwAi ZKKpebw0TzMNT1R6doChugfyJWT+28htkQ51gTD2bnUWFtPnwFhghKqdVlWiDc6D /TLX9KKZvJfvcNZ+L3q3LI0ugEmNMY2uThOzlNyVe00av7rw4wiAxrSyYE/J8iZj s/bMmO7BWipd9wW9t6VEC/cqTQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:21 2025 by rpki-client