$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: z6YcUf795KuaZS2wPsC9sdWGC2oPsMmkze32IMqEhuI= Subject key identifier: D4:64:D3:F1:BB:52:71:BB:F4:2C:03:BD:5C:99:B7:44:B5:64:BC:63 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 1C37D364F60E92ACDEA8B9F1FBBACE89F3761032 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 0269 Signing time: Tue 01 Jul 2025 12:25:35 +0000 Manifest this update: Tue 01 Jul 2025 12:20:35 +0000 Manifest next update: Wed 02 Jul 2025 15:24:35 +0000 Files and hashes: 1: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: 5Z/n8VsmXjgbVerctQfz/Po/okTAp3OaN0PUc4SYgzQ=) 2: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) 3: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) 4: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 15:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:37:d3:64:f6:0e:92:ac:de:a8:b9:f1:fb:ba:ce:89:f3:76:10:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Jul 1 12:20:35 2025 GMT Not After : Jul 2 15:24:35 2025 GMT Subject: CN=D464D3F1BB5271BBF42C03BD5C99B744B564BC63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:39:b5:7d:cb:48:74:f4:4c:40:15:7c:c7:ae: cb:f7:e2:98:7b:e1:e6:f5:74:da:63:d0:3d:ad:59: 19:28:74:ed:23:cb:18:c0:40:8d:ae:2f:3b:f3:65: 6e:cb:a5:6f:a7:86:b0:98:d8:30:0e:95:22:45:bf: 33:d3:4f:2b:60:f3:31:26:42:09:0f:45:91:5d:3b: 21:47:5d:df:f8:26:0d:69:25:c1:e5:2a:11:c2:b0: b9:6b:9c:e3:2d:ce:fc:90:e0:68:af:53:73:97:48: 48:1d:b1:28:f6:d8:56:1f:10:74:f6:8c:6d:97:62: 33:f0:0b:66:c8:7c:e2:c7:a5:d6:7c:95:04:34:c5: 01:78:a8:1a:91:1f:21:9e:65:e2:96:69:39:ff:82: ee:47:85:43:e3:a3:1e:48:52:99:0b:95:06:df:b8: 69:17:33:7d:23:7d:65:e5:52:f6:fa:7d:8c:ac:e6: 2a:eb:6a:20:02:aa:15:f2:aa:a3:93:ca:59:fe:b4: 36:85:fc:93:f2:8e:3d:88:3d:9e:a2:05:eb:a9:50: 6a:48:55:8b:00:a4:bc:db:6b:b1:0c:71:60:10:fd: c4:b9:f5:4b:d6:2d:57:9c:43:d5:35:b4:06:81:6e: d4:29:e8:69:72:d2:0a:4d:22:1e:82:5e:ee:48:10: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:D3:F1:BB:52:71:BB:F4:2C:03:BD:5C:99:B7:44:B5:64:BC:63 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:12:37:09:4a:54:4c:7d:d1:9d:79:a1:bc:2b:b7:ed:47:81: db:20:e2:1e:b9:1c:eb:c3:69:11:4b:df:42:e5:f1:28:5a:9c: a7:c1:78:cd:13:01:f9:72:73:29:59:b7:6d:69:27:34:46:d1: 3b:bb:8c:d0:f6:4c:b0:d8:21:4b:d7:81:ef:8d:e6:19:0f:32: fe:dd:3c:2d:c5:82:f5:ec:34:45:64:a2:7f:8d:93:23:4a:88: 7d:01:7f:3d:15:1e:7c:60:ac:92:3d:9b:f6:11:20:b0:dd:e2: fa:1b:f5:9b:68:5c:2a:f6:2d:5c:af:c6:f0:ec:16:63:4e:fe: 88:ca:e7:d0:39:9a:fc:69:5c:ec:22:58:67:c7:32:a6:2b:ef: d3:be:34:8a:26:6b:70:a1:01:17:3c:b6:22:8d:bf:04:1c:02: a7:7e:8a:bf:cb:49:25:d7:96:15:a7:11:7b:f8:e7:ee:f5:ee: 7a:bd:e0:6e:28:b2:98:d4:28:86:af:3d:78:84:7a:27:d0:08: a1:a0:ce:e1:04:26:b1:f4:16:c1:30:06:8c:9a:ef:a5:06:65: 93:ca:1f:ff:e3:a3:92:2c:7c:b7:67:e7:2a:6a:cd:34:c6:c0: 73:53:f8:61:ae:c9:00:72:37:e0:68:4b:ea:65:e4:dc:b1:44: 5c:6a:81:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHDfTZPYOkqzeqLnx+7rOifN2EDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTA3MDExMjIwMzVaFw0yNTA3MDIxNTI0MzVaMDMxMTAvBgNV BAMTKEQ0NjREM0YxQkI1MjcxQkJGNDJDMDNCRDVDOTlCNzQ0QjU2NEJDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ObV9y0h09ExAFXzHrsv34ph7 4eb1dNpj0D2tWRkodO0jyxjAQI2uLzvzZW7LpW+nhrCY2DAOlSJFvzPTTytg8zEm QgkPRZFdOyFHXd/4Jg1pJcHlKhHCsLlrnOMtzvyQ4GivU3OXSEgdsSj22FYfEHT2 jG2XYjPwC2bIfOLHpdZ8lQQ0xQF4qBqRHyGeZeKWaTn/gu5HhUPjox5IUpkLlQbf uGkXM30jfWXlUvb6fYys5irraiACqhXyqqOTyln+tDaF/JPyjj2IPZ6iBeupUGpI VYsApLzba7EMcWAQ/cS59UvWLVecQ9U1tAaBbtQp6Gly0gpNIh6CXu5IEDvrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1GTT8btScbv0LAO9XJm3RLVkvGMwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnxI3CUpUTH3RnXmhvCu37UeB2yDiHrkc68NpEUvfQuXxKFqcp8F4zRMB+XJz KVm3bWknNEbRO7uM0PZMsNghS9eB743mGQ8y/t08LcWC9ew0RWSif42TI0qIfQF/ PRUefGCskj2b9hEgsN3i+hv1m2hcKvYtXK/G8OwWY07+iMrn0Dma/Glc7CJYZ8cy pivv0740iiZrcKEBFzy2Io2/BBwCp36Kv8tJJdeWFacRe/jn7vXuer3gbiiymNQo hq89eIR6J9AIoaDO4QQmsfQWwTAGjJrvpQZlk8of/+Ojkix8t2fnKmrNNMbAc1P4 Ya7JAHI34GhL6mXk3LFEXGqB2Q== -----END CERTIFICATE-----Generated at Wed Jul 2 04:00:20 2025 by rpki-client