$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft File: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json) Hash identifier: LQscgKC2UOQPQF2fIu6BZ82gXHh0PPhBqhxQ+6XbXiw= Subject key identifier: 3C:A9:DA:AF:23:75:E6:5E:2B:74:81:2F:94:0C:AA:AD:C4:04:70:F4 Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA Certificate issuer: /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Certificate serial: 590DC53A5B53D6EDC172D8ECD6828D2BEC44DB80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft Manifest number: 0217 Signing time: Mon 20 Oct 2025 15:22:03 +0000 Manifest this update: Mon 20 Oct 2025 15:17:03 +0000 Manifest next update: Tue 21 Oct 2025 15:22:03 +0000 Files and hashes: 1: 323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (hash: bw1WW6GWbWeJMCOoifTsH4AiSiS5eco7vGabyTZ4xYs=) 2: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: KXwdSS5Wwzr5yNjKQJxcTB+qAxsVJeLjZqKHoovC12E=) 3: 34352e3136322e3231322e302f32322d3332203d3e20323638353634.roa (hash: ezJVm/RyZ7vHKrjB8DTRPK5q9lhj+iYdELF2LjMpBz0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0d:c5:3a:5b:53:d6:ed:c1:72:d8:ec:d6:82:8d:2b:ec:44:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Validity Not Before: Oct 20 15:17:03 2025 GMT Not After : Oct 21 15:22:03 2025 GMT Subject: CN=3CA9DAAF2375E65E2B74812F940CAAADC40470F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:4f:2e:a3:60:3a:5b:75:3b:48:20:cb:7a: 5e:80:f4:b7:03:af:2a:73:82:f3:36:7e:b7:82:66: 75:b0:8d:59:a8:9d:41:c5:34:09:1e:48:ce:b0:27: 27:b9:f5:5b:90:ae:83:94:45:f3:55:e7:48:ed:2b: d4:0c:29:ae:2a:f2:f8:a9:be:dc:9f:0a:ce:e8:d9: b2:04:7d:78:18:58:99:2c:84:ab:0a:69:32:14:5b: 28:81:c1:14:c4:d0:1d:21:b2:fe:85:c5:41:86:e4: 54:d7:d7:64:ba:1b:58:bd:0e:48:a7:b2:56:72:8e: 23:eb:14:67:3e:64:ab:c1:76:a3:e3:6b:54:d9:46: 16:d3:7b:da:ed:be:98:16:1c:54:49:91:a8:f8:b2: ab:b8:1a:98:4d:07:1d:75:39:a8:69:25:e6:e1:4b: 0b:60:5a:87:86:7a:b1:d8:0f:4f:83:dd:99:41:01: 83:4e:c6:70:bc:99:51:45:b6:1a:0e:da:d2:73:01: 44:e0:b8:a4:34:ec:fa:4e:7c:17:b8:8d:5c:6b:bb: f3:4d:41:77:6d:ba:3a:f5:8b:71:c2:0b:af:cb:66: f1:75:11:5a:4e:be:50:f6:59:20:da:91:03:bb:2d: 4f:12:11:1f:74:48:3f:66:ce:ea:b8:ea:c0:e4:47: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:DA:AF:23:75:E6:5E:2B:74:81:2F:94:0C:AA:AD:C4:04:70:F4 X509v3 Authority Key Identifier: keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d6:7e:5c:78:00:6f:d8:56:fd:83:f9:df:47:33:87:6d:02: 4b:50:22:d1:d7:6e:79:c3:da:76:84:71:fb:8e:ce:18:f8:4b: 24:0f:f7:88:b7:91:e9:7c:a6:46:53:04:7e:47:f1:f9:50:92: 36:92:6f:e8:6f:ed:fe:a8:21:ff:60:4a:85:9b:86:20:6d:53: 38:93:56:d9:11:e6:a4:7e:29:28:d7:c8:22:69:64:a8:c6:11: e1:fc:a2:ca:e8:00:57:e4:f7:35:9e:c7:2e:dc:59:b7:ea:07: 16:55:50:9c:5c:31:d0:b5:d1:f2:b3:a0:b4:30:36:a9:f9:0f: bf:1d:fa:08:bc:df:61:73:a3:6c:fa:76:1a:e0:f5:c3:9d:5f: 9f:ec:fe:fe:75:98:71:0d:11:88:63:c4:0e:58:5c:71:d0:5d: d1:ff:1b:51:6d:5e:80:d5:f2:af:33:9e:d5:4b:1b:b1:74:ad: 79:33:53:90:bf:e1:ac:4a:d7:24:76:d6:6d:83:de:91:57:29: 3e:c5:50:72:17:41:65:4c:10:fb:fa:ce:51:c4:59:4e:5f:94: 7c:b5:c3:9f:c2:b2:69:b8:bb:50:7e:fc:8c:04:e6:6f:28:1b: 4b:35:28:cc:06:8c:e8:6f:36:3e:71:a0:cd:21:0e:f3:18:76: 1c:d1:72:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWQ3FOltT1u3Bctjs1oKNK+xE24AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzM0MxQ0ZDMTE3QTM3OTE4RDRCRDVCNjRCMjMzQUU5 MTJBNDBCQTAeFw0yNTEwMjAxNTE3MDNaFw0yNTEwMjExNTIyMDNaMDMxMTAvBgNV BAMTKDNDQTlEQUFGMjM3NUU2NUUyQjc0ODEyRjk0MENBQUFEQzQwNDcwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/k8uo2A6W3U7SCDLel6A9LcD rypzgvM2freCZnWwjVmonUHFNAkeSM6wJye59VuQroOURfNV50jtK9QMKa4q8vip vtyfCs7o2bIEfXgYWJkshKsKaTIUWyiBwRTE0B0hsv6FxUGG5FTX12S6G1i9Dkin slZyjiPrFGc+ZKvBdqPja1TZRhbTe9rtvpgWHFRJkaj4squ4GphNBx11OahpJebh SwtgWoeGerHYD0+D3ZlBAYNOxnC8mVFFthoO2tJzAUTguKQ07PpOfBe4jVxru/NN QXdtujr1i3HCC6/LZvF1EVpOvlD2WSDakQO7LU8SER90SD9mzuq46sDkR80vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPKnaryN15l4rdIEvlAyqrcQEcPQwHwYDVR0j BBgwFoAU/zPBz8EXo3kY1L1bZLIzrpEqQLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC9GRjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNDMUNGQzExN0EzNzkx OEQ0QkQ1QjY0QjIzM0FFOTEyQTQwQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMC9G RjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM9Z+XHgAb9hW/YP530czh20CS1Ai0dduecPadoRx+47OGPhLJA/3iLeR6Xym RlMEfkfx+VCSNpJv6G/t/qgh/2BKhZuGIG1TOJNW2RHmpH4pKNfIImlkqMYR4fyi yugAV+T3NZ7HLtxZt+oHFlVQnFwx0LXR8rOgtDA2qfkPvx36CLzfYXOjbPp2GuD1 w51fn+z+/nWYcQ0RiGPEDlhccdBd0f8bUW1egNXyrzOe1UsbsXSteTNTkL/hrErX JHbWbYPekVcpPsVQchdBZUwQ+/rOUcRZTl+UfLXDn8Kyabi7UH78jATmbygbSzUo zAaM6G82PnGgzSEO8xh2HNFy/A== -----END CERTIFICATE-----Generated at Tue Oct 21 04:55:14 2025 by rpki-client