$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft File: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json) Hash identifier: tZp/4uPWUdijDWknuOD6c09We9OsfUoOHe/xUtzDXG4= Subject key identifier: 3E:07:FF:6B:79:1B:C0:7F:69:19:1B:AF:A3:E6:19:76:4B:4E:60:00 Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA Certificate issuer: /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Certificate serial: 10D07EEBA97EBA10575DC05D0BE8221AE92798F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft Manifest number: 01CA Signing time: Sat 23 Aug 2025 05:44:04 +0000 Manifest this update: Sat 23 Aug 2025 05:39:04 +0000 Manifest next update: Sun 24 Aug 2025 06:59:04 +0000 Files and hashes: 1: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: Yx6pSm7kYxKYGQPDmop+EWNdR9hGfcseg+3RweDk9l0=) 2: 323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (hash: bw1WW6GWbWeJMCOoifTsH4AiSiS5eco7vGabyTZ4xYs=) 3: 34352e3136322e3231322e302f32322d3332203d3e20323638353634.roa (hash: ezJVm/RyZ7vHKrjB8DTRPK5q9lhj+iYdELF2LjMpBz0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 06:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d0:7e:eb:a9:7e:ba:10:57:5d:c0:5d:0b:e8:22:1a:e9:27:98:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Validity Not Before: Aug 23 05:39:04 2025 GMT Not After : Aug 24 06:59:04 2025 GMT Subject: CN=3E07FF6B791BC07F69191BAFA3E619764B4E6000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f8:ec:49:65:25:86:f0:14:87:bc:b2:87:86: e6:32:e7:c7:24:a0:84:e9:a5:75:45:1b:2a:2c:79: d8:fa:ca:3d:66:42:9d:f6:7d:61:5d:ce:96:be:3e: d8:09:e5:50:9e:66:7b:70:7f:54:bf:c3:cc:83:10: 78:1f:ab:86:bd:ea:60:a1:c1:48:f4:0a:e1:36:63: ce:68:b7:a0:b3:72:76:df:8b:c2:7a:4f:8f:bd:6a: 67:0a:e0:61:07:05:e7:f9:5c:0c:0b:71:7c:82:70: 07:09:15:04:73:f3:cf:1b:c0:20:39:49:26:ec:76: bf:84:e7:3b:17:e1:c4:f1:af:92:e5:7d:a9:5b:03: 94:4e:b7:65:82:4f:14:8a:e0:b6:c5:e5:bc:e4:d0: 23:77:e9:54:74:13:2f:f9:cc:c4:d0:9a:a5:b8:90: 55:b6:d9:29:1e:65:8d:20:c7:48:8c:29:5b:e9:8e: 23:02:b7:21:cc:1b:da:fe:8d:56:c3:63:d0:1f:aa: ea:1f:99:5e:fb:60:af:47:03:74:70:a8:0b:61:91: 23:08:a9:e5:d7:22:b9:72:cc:50:c1:06:9b:11:b4: 42:79:a5:0c:59:5e:e8:27:ba:45:d4:3d:c9:65:0e: 7b:1c:ce:1c:d2:5c:23:e3:ee:39:04:90:c9:b6:57: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:FF:6B:79:1B:C0:7F:69:19:1B:AF:A3:E6:19:76:4B:4E:60:00 X509v3 Authority Key Identifier: keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bc:37:a7:03:d3:78:74:3f:6e:d3:41:71:68:70:65:01:02: 51:3f:91:05:5c:7b:c6:73:93:6c:4a:44:09:dc:a6:69:9e:93: 88:55:f7:c5:d1:13:03:86:15:06:b3:64:5f:2b:3b:75:f7:f6: 42:10:3d:1e:26:21:9c:7b:c1:4e:cc:b9:c3:13:fb:7f:79:f7: 30:aa:47:c3:ab:c8:0f:fd:b2:ed:2e:5a:dc:f2:92:8e:b2:f0: 00:74:d4:5a:bd:54:52:9c:30:5d:d4:f9:c2:4b:45:a4:5f:64: a6:42:56:b0:3e:2f:c0:29:9a:43:dd:f7:80:40:b8:7b:f3:fa: fd:7d:2d:f2:2d:bf:80:01:5c:8f:8d:83:1f:2a:d4:55:51:1e: af:6e:da:e8:8f:6e:cd:d8:61:8f:4e:b4:3b:68:b2:9e:4f:ad: 24:cb:91:73:46:da:89:73:de:ec:9e:42:1a:c3:83:0c:32:40: 31:e3:34:64:cd:2b:a4:ff:40:52:97:75:99:ec:ef:5f:fe:5d: 64:90:47:eb:8d:4c:61:b8:8e:86:80:c6:aa:3f:e6:c3:8d:44: f1:1d:d3:35:4e:4c:19:5a:58:40:f6:10:00:aa:fa:51:74:1f: 31:4f:31:da:1c:34:29:3f:ca:83:f5:b2:cf:af:c3:a1:b2:2e: e9:ad:d0:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUENB+66l+uhBXXcBdC+giGuknmPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzM0MxQ0ZDMTE3QTM3OTE4RDRCRDVCNjRCMjMzQUU5 MTJBNDBCQTAeFw0yNTA4MjMwNTM5MDRaFw0yNTA4MjQwNjU5MDRaMDMxMTAvBgNV BAMTKDNFMDdGRjZCNzkxQkMwN0Y2OTE5MUJBRkEzRTYxOTc2NEI0RTYwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr+OxJZSWG8BSHvLKHhuYy58ck oITppXVFGyosedj6yj1mQp32fWFdzpa+PtgJ5VCeZntwf1S/w8yDEHgfq4a96mCh wUj0CuE2Y85ot6Czcnbfi8J6T4+9amcK4GEHBef5XAwLcXyCcAcJFQRz888bwCA5 SSbsdr+E5zsX4cTxr5LlfalbA5ROt2WCTxSK4LbF5bzk0CN36VR0Ey/5zMTQmqW4 kFW22SkeZY0gx0iMKVvpjiMCtyHMG9r+jVbDY9AfquofmV77YK9HA3RwqAthkSMI qeXXIrlyzFDBBpsRtEJ5pQxZXugnukXUPcllDnsczhzSXCPj7jkEkMm2V223AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPgf/a3kbwH9pGRuvo+YZdktOYAAwHwYDVR0j BBgwFoAU/zPBz8EXo3kY1L1bZLIzrpEqQLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC9GRjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNDMUNGQzExN0EzNzkx OEQ0QkQ1QjY0QjIzM0FFOTEyQTQwQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMC9G RjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvLw3pwPTeHQ/btNBcWhwZQECUT+RBVx7xnOTbEpECdymaZ6TiFX3xdETA4YV BrNkXys7dff2QhA9HiYhnHvBTsy5wxP7f3n3MKpHw6vID/2y7S5a3PKSjrLwAHTU Wr1UUpwwXdT5wktFpF9kpkJWsD4vwCmaQ933gEC4e/P6/X0t8i2/gAFcj42DHyrU VVEer27a6I9uzdhhj060O2iynk+tJMuRc0baiXPe7J5CGsODDDJAMeM0ZM0rpP9A Upd1mezvX/5dZJBH641MYbiOhoDGqj/mw41E8R3TNU5MGVpYQPYQAKr6UXQfMU8x 2hw0KT/Kg/Wyz6/DobIu6a3QQg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:03 2025 by rpki-client