$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft File: 433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json) Hash identifier: 9/teZ4uQJBcEYuOGvGwR9l3FxZliIZanSj+wc+Daak8= Subject key identifier: 4A:19:D9:11:FD:2F:38:51:27:C6:D8:E6:C1:89:B2:A2:55:D0:67:FA Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13 Certificate issuer: /CN=433BC56DE61BF5759F79705E437131F09597AF13 Certificate serial: 7A6241F8BE2A0E4A4F5A75960C4D3B939A92620C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer Subject info access: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft Manifest number: BF Signing time: Sat 23 Aug 2025 00:08:50 +0000 Manifest this update: Sat 23 Aug 2025 00:03:50 +0000 Manifest next update: Sun 24 Aug 2025 01:48:50 +0000 Files and hashes: 1: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: 8bAQ7Jo++j+cA+qxHe0ya9nSnJQJDI6RwoHueHxSJyw=) 2: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=) 3: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:62:41:f8:be:2a:0e:4a:4f:5a:75:96:0c:4d:3b:93:9a:92:62:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13 Validity Not Before: Aug 23 00:03:50 2025 GMT Not After : Aug 24 01:48:50 2025 GMT Subject: CN=4A19D911FD2F385127C6D8E6C189B2A255D067FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:50:c0:ac:88:f9:ef:a6:0d:43:bd:f0:c0: 36:e7:e3:3c:cb:dc:16:a1:31:c6:20:52:3e:75:56: 71:55:8b:c0:ad:4c:f2:6f:31:aa:91:af:fb:23:d3: e5:96:47:a4:13:33:30:37:7e:14:e8:29:27:29:70: 35:51:50:db:98:e7:32:78:1e:6d:de:7e:f0:dd:af: 87:73:08:fa:0b:63:cc:45:27:2f:e7:68:98:66:33: 7d:57:44:a6:44:f5:c5:fe:f2:a7:47:fc:7f:1e:a5: 25:b3:32:3f:c2:25:b2:4b:eb:80:2e:b3:0b:26:aa: 98:b2:ee:c9:c5:f6:0b:e3:65:fb:09:3f:18:33:ed: c5:eb:a3:b7:16:00:0d:2d:04:40:bb:d3:c2:fd:89: 11:f4:72:53:12:9d:e4:ae:9a:f2:20:d2:ec:fd:4e: c8:98:51:51:32:f5:a0:5f:e0:c1:08:02:5c:b8:ee: 61:aa:d4:1b:06:07:10:68:65:d2:97:85:0a:39:54: a2:06:e0:76:8b:e8:d5:97:e8:d7:25:dc:07:18:e8: ac:8d:a1:f5:4d:3d:bd:fe:ca:86:48:0f:50:5d:87: bb:57:f4:6f:6e:5c:65:ca:e6:f2:b6:f3:69:27:ac: ee:7f:e0:8d:75:d5:b4:3e:ed:fc:d0:18:70:e2:f4: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:D9:11:FD:2F:38:51:27:C6:D8:E6:C1:89:B2:A2:55:D0:67:FA X509v3 Authority Key Identifier: keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6b:f4:d8:49:20:5d:0b:b0:8e:95:59:2d:15:93:31:36:bc: 18:af:8c:95:9a:0d:42:4c:21:79:b4:2e:4d:c8:80:71:be:11: 88:95:f8:4d:36:21:fd:bc:72:17:f1:1e:97:7e:d1:03:38:38: 4a:bf:7b:57:35:de:60:98:3e:80:cc:f1:ed:38:9c:56:30:ac: 07:0b:2c:27:7c:e9:23:61:71:c3:0f:64:fb:62:71:c9:1a:e0: c6:35:20:28:62:21:48:87:00:d2:c9:97:85:77:f9:e2:67:03: 51:91:1e:f5:1b:55:50:ae:69:13:84:47:ec:05:1a:50:b8:e8: 75:f4:54:6d:22:35:35:9d:2e:d0:64:66:ea:6f:89:be:c7:39: 04:33:62:2f:b8:8e:1a:5b:2d:8a:46:1d:84:26:f3:a1:ff:50: 29:2c:e2:3e:3d:0b:87:20:d1:e7:37:ed:b1:33:94:8a:10:5c: 40:e1:a6:8a:f6:4d:e9:f7:88:e1:e4:37:bd:3e:43:f1:9d:bd: da:e4:b0:e4:c3:a0:a4:7b:ee:be:89:a4:3a:e3:7d:e0:fe:fb: 39:f8:99:4b:e4:5e:21:b9:e9:98:51:a6:b9:39:38:41:da:a3: d7:8e:7b:e0:05:a7:fe:83:b2:b3:84:87:fa:2e:bf:45:39:4e: 3f:59:61:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUemJB+L4qDkpPWnWWDE07k5qSYgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkM1NkRFNjFCRjU3NTlGNzk3MDVFNDM3MTMxRjA5 NTk3QUYxMzAeFw0yNTA4MjMwMDAzNTBaFw0yNTA4MjQwMTQ4NTBaMDMxMTAvBgNV BAMTKDRBMTlEOTExRkQyRjM4NTEyN0M2RDhFNkMxODlCMkEyNTVEMDY3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsClDArIj576YNQ73wwDbn4zzL 3BahMcYgUj51VnFVi8CtTPJvMaqRr/sj0+WWR6QTMzA3fhToKScpcDVRUNuY5zJ4 Hm3efvDdr4dzCPoLY8xFJy/naJhmM31XRKZE9cX+8qdH/H8epSWzMj/CJbJL64Au swsmqpiy7snF9gvjZfsJPxgz7cXro7cWAA0tBEC708L9iRH0clMSneSumvIg0uz9 TsiYUVEy9aBf4MEIAly47mGq1BsGBxBoZdKXhQo5VKIG4HaL6NWX6Ncl3AcY6KyN ofVNPb3+yoZID1Bdh7tX9G9uXGXK5vK282knrO5/4I111bQ+7fzQGHDi9FZTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUShnZEf0vOFEnxtjmwYmyolXQZ/owHwYDVR0j BBgwFoAUQzvFbeYb9XWfeXBeQ3Ex8JWXrxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBn cEQvMC80MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JDNTZERTYxQkY1NzU5 Rjc5NzA1RTQzNzEzMUYwOTU5N0FGMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBncEQvMC80 MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX2v02EkgXQuwjpVZLRWTMTa8GK+MlZoNQkwhebQuTciAcb4RiJX4TTYh/bxy F/Eel37RAzg4Sr97VzXeYJg+gMzx7TicVjCsBwssJ3zpI2Fxww9k+2JxyRrgxjUg KGIhSIcA0smXhXf54mcDUZEe9RtVUK5pE4RH7AUaULjodfRUbSI1NZ0u0GRm6m+J vsc5BDNiL7iOGlstikYdhCbzof9QKSziPj0LhyDR5zftsTOUihBcQOGmivZN6feI 4eQ3vT5D8Z292uSw5MOgpHvuvomkOuN94P77OfiZS+ReIbnpmFGmuTk4Qdqj1457 4AWn/oOys4SH+i6/RTlOP1lhgQ== -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:47 2025 by rpki-client