$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: d/b7BIaLbWxCMuE35/naTZfDPU0Iqim3TjZJsPgb3zU= Subject key identifier: 1C:54:5F:CD:8C:DB:37:B8:AC:18:62:D7:F0:8C:33:4B:35:00:BC:F0 Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 026524A2975B59B8C8655AE0DA2FD2ADD89CBE5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: 48 Signing time: Sat 23 Aug 2025 10:45:20 +0000 Manifest this update: Sat 23 Aug 2025 10:40:20 +0000 Manifest next update: Sun 24 Aug 2025 11:40:20 +0000 Files and hashes: 1: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: mtOzYOfP7yTCUVuL/HFJydtV7LoZ5upHeg5ov3dRqN0=) 2: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:65:24:a2:97:5b:59:b8:c8:65:5a:e0:da:2f:d2:ad:d8:9c:be:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Aug 23 10:40:20 2025 GMT Not After : Aug 24 11:40:20 2025 GMT Subject: CN=1C545FCD8CDB37B8AC1862D7F08C334B3500BCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:53:ad:aa:ed:8c:10:9c:dc:0e:66:6e:2b: 59:f8:f4:4f:dd:22:42:56:03:eb:5c:cc:5e:44:08: 38:44:8e:6f:9b:cb:62:e0:20:0a:a2:96:0d:f2:0a: 17:69:4e:7a:44:2a:80:be:7c:d1:03:be:0c:d4:c8: b5:39:93:26:04:9f:ea:ad:90:6b:4c:a2:df:a9:54: 5f:03:7c:1c:df:e7:b4:cb:17:a2:0a:d0:83:c6:6b: 6b:a9:99:14:3a:14:4b:c7:03:7b:d1:75:18:11:43: 40:eb:b6:bd:29:96:f7:c6:70:22:8a:80:1c:29:26: 87:a1:35:d9:6b:7f:cd:54:e9:40:f6:b2:14:fd:66: 6e:10:34:ae:63:5e:ec:5a:46:a2:cc:97:31:e8:9c: 78:20:f8:b3:02:d7:ea:68:c3:13:cb:85:6c:7d:c6: a4:15:e0:bb:6d:40:fa:18:12:7f:5f:e3:f5:ce:12: 09:ba:64:d7:bc:a3:ea:92:8d:2c:72:b3:9a:d5:d6: 2d:62:51:be:51:e6:1e:c3:fa:a0:9d:00:67:67:42: da:6e:7a:4a:9e:f0:37:bb:14:9c:a5:76:64:66:6a: 49:20:17:9c:fb:7a:15:29:65:96:f8:ed:f8:b4:65: 88:97:14:23:ac:ef:77:94:11:09:a7:72:77:64:1d: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:54:5F:CD:8C:DB:37:B8:AC:18:62:D7:F0:8C:33:4B:35:00:BC:F0 X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4b:b3:43:0e:3c:4c:36:e7:44:99:4a:4e:bd:4b:57:1f:4a: b1:9c:bb:73:00:10:d2:47:9a:d4:4d:5e:a6:82:11:9e:95:3b: 8c:18:05:f3:92:35:4e:5e:43:7e:dc:02:bc:25:9a:2d:d0:b0: 99:61:5b:88:38:73:a7:11:b0:bc:64:39:32:8d:31:b6:5f:aa: 2c:e7:05:65:4b:6d:0d:f5:05:48:0b:33:21:c4:bf:34:6c:a1: 54:2c:5c:1f:f0:a7:0c:6c:ff:40:3b:1c:92:a0:e8:0f:60:14: 44:5a:40:e2:b6:24:33:ec:9e:7f:b2:f0:13:71:d9:c4:f0:6d: eb:61:ed:09:bd:7f:bf:d1:c0:8e:72:16:7a:d9:20:94:28:e9: 54:bd:5c:11:98:3e:17:19:07:7b:f0:8b:b4:b9:66:0b:ad:6a: 33:17:25:d0:66:16:18:ba:6f:13:85:3c:01:56:48:ac:4d:d3: 95:cc:cc:dd:fd:9d:1b:6d:f4:1b:cd:17:e0:8f:66:3f:6e:ab: dc:06:fe:0e:86:f4:f7:28:b5:89:53:21:8c:74:11:a1:c9:5e: ae:86:ed:51:7e:7f:b6:d5:27:56:5e:44:89:cd:33:bf:89:a0: 4a:e4:78:ae:a5:59:01:40:a2:fb:bb:72:c2:c8:26:7b:f2:db: ba:5e:30:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAmUkopdbWbjIZVrg2i/Srdicvl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNTA4MjMxMDQwMjBaFw0yNTA4MjQxMTQwMjBaMDMxMTAvBgNV BAMTKDFDNTQ1RkNEOENEQjM3QjhBQzE4NjJEN0YwOEMzMzRCMzUwMEJDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tVOtqu2MEJzcDmZuK1n49E/d IkJWA+tczF5ECDhEjm+by2LgIAqilg3yChdpTnpEKoC+fNEDvgzUyLU5kyYEn+qt kGtMot+pVF8DfBzf57TLF6IK0IPGa2upmRQ6FEvHA3vRdRgRQ0Drtr0plvfGcCKK gBwpJoehNdlrf81U6UD2shT9Zm4QNK5jXuxaRqLMlzHonHgg+LMC1+powxPLhWx9 xqQV4LttQPoYEn9f4/XOEgm6ZNe8o+qSjSxys5rV1i1iUb5R5h7D+qCdAGdnQtpu ekqe8De7FJyldmRmakkgF5z7ehUpZZb47fi0ZYiXFCOs73eUEQmncndkHahJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHFRfzYzbN7isGGLX8IwzSzUAvPAwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0uzQw48TDbnRJlKTr1LVx9KsZy7cwAQ0kea1E1epoIRnpU7jBgF85I1Tl5D ftwCvCWaLdCwmWFbiDhzpxGwvGQ5Mo0xtl+qLOcFZUttDfUFSAszIcS/NGyhVCxc H/CnDGz/QDsckqDoD2AURFpA4rYkM+yef7LwE3HZxPBt62HtCb1/v9HAjnIWetkg lCjpVL1cEZg+FxkHe/CLtLlmC61qMxcl0GYWGLpvE4U8AVZIrE3TlczM3f2dG230 G80X4I9mP26r3Ab+Dob09yi1iVMhjHQRoclerobtUX5/ttUnVl5Eic0zv4mgSuR4 rqVZAUCi+7tywsgme/Lbul4wgQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:43 2025 by rpki-client