$ rpki-client -vvvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: RtxT6QkYlXa//W/ORdA3RYt0H52oUUMxXTkxkmeZztE= Subject key identifier: 11:DE:53:8E:75:12:A0:31:F5:02:84:EA:D2:C4:D6:ED:BB:30:50:27 Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 119A77D518272566AD9C8D8ED2DFE8B4A0E4CD79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: 0287 Signing time: Thu 29 Oct 2026 11:23:00 +0000 Manifest this update: Thu 29 Oct 2026 11:18:00 +0000 Manifest next update: Fri 30 Oct 2026 13:40:00 +0000 Files and hashes: 1: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: rrGfTynLx0yOrx/Glq2DTK/E007Q+xdanRUjvfCwcjo=) 2: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: amdW00MfUcfHYlZwskoY9lJkfO6Pjqw7+AYH0fQunXY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 13:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9a:77:d5:18:27:25:66:ad:9c:8d:8e:d2:df:e8:b4:a0:e4:cd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Oct 29 11:18:00 2026 GMT Not After : Oct 30 13:40:00 2026 GMT Subject: CN=11DE538E7512A031F50284EAD2C4D6EDBB305027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:c9:ac:8d:a1:32:4c:85:51:1a:b7:8d:e8: a3:61:4e:f0:99:0a:03:a0:95:d1:f2:ee:1c:64:95: 62:3c:af:5c:75:a1:67:7b:f5:70:34:2a:1b:3d:09: 17:9e:63:b5:7d:25:a3:57:bb:2d:b8:fc:3d:a2:c3: 51:1e:3d:19:2c:84:f8:ad:1b:0e:5a:e4:aa:67:28: 75:6b:e2:9a:31:71:78:e5:0b:bc:59:59:db:19:32: 25:93:91:f3:06:ff:2d:64:1f:34:1e:41:aa:ad:eb: 5c:f7:d8:2d:b7:fc:a6:6e:2a:1a:56:10:5b:a2:4e: c6:7f:a8:5c:c6:87:2c:1f:08:25:04:4f:41:bb:22: 32:84:8f:a6:00:cc:95:d6:de:09:a1:73:60:31:b8: 92:fb:9e:6b:f3:30:58:eb:29:40:b1:71:2b:67:f2: ed:25:0e:e4:0b:e5:ea:3f:ce:ad:68:fa:da:96:58: 88:38:84:bc:18:a8:c0:11:5e:50:77:ad:5c:e9:5f: b8:f3:be:e7:c0:17:0a:b4:71:bb:d7:87:6a:ae:c2: a9:07:a4:1d:76:fc:b6:68:d9:d3:6f:76:af:14:09: 23:99:5c:ce:cc:f1:d3:86:95:2b:4c:bd:f6:89:09: a0:e5:36:cf:d5:3c:00:a3:c9:de:9b:49:08:81:1e: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DE:53:8E:75:12:A0:31:F5:02:84:EA:D2:C4:D6:ED:BB:30:50:27 X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:43:fb:20:cb:65:1e:98:24:0d:19:57:1a:a5:cf:58:21: d2:69:7b:6d:f1:e4:eb:07:49:b9:6f:8f:60:f1:58:f9:ad:0a: 9f:05:e8:87:b4:3c:44:e7:ca:33:4f:f6:93:96:4f:27:f5:a4: 88:4d:97:d4:84:34:53:6c:54:19:4b:d1:ac:e3:f1:76:a4:31: 42:6f:b5:93:21:35:b0:17:f2:62:4d:0d:42:62:aa:aa:ba:11: 6d:e7:53:8e:fd:af:12:21:fc:9e:65:89:78:46:4e:5d:ef:9b: 27:c1:90:8d:ed:bd:c7:a6:15:9f:9f:46:f1:6d:c2:a2:f2:df: 2b:2e:86:36:7d:20:c5:17:e8:4e:dc:06:6c:14:df:43:69:0d: ed:b2:d5:d4:0d:98:fa:25:fd:90:b8:70:84:cf:47:f8:36:b8: 65:80:51:44:cd:7b:39:88:0a:71:24:7b:7e:06:69:c0:43:28: a1:1f:95:c8:20:d2:5e:e3:00:02:a5:6b:a0:19:6f:ef:20:77: 85:66:91:d1:76:a9:39:dc:e8:66:0f:d7:05:3d:92:34:0f:8b: 33:37:2d:aa:2d:2f:50:fc:7f:45:d6:52:6b:ae:1c:a4:41:d6: 02:33:4a:ae:b1:8d:06:a1:92:63:9e:40:22:ba:18:a2:12:29: 7b:c8:5f:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEZp31RgnJWatnI2O0t/otKDkzXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNjEwMjkxMTE4MDBaFw0yNjEwMzAxMzQwMDBaMDMxMTAvBgNV BAMTKDExREU1MzhFNzUxMkEwMzFGNTAyODRFQUQyQzRENkVEQkIzMDUwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIsmsjaEyTIVRGreN6KNhTvCZ CgOgldHy7hxklWI8r1x1oWd79XA0Khs9CReeY7V9JaNXuy24/D2iw1EePRkshPit Gw5a5KpnKHVr4poxcXjlC7xZWdsZMiWTkfMG/y1kHzQeQaqt61z32C23/KZuKhpW EFuiTsZ/qFzGhywfCCUET0G7IjKEj6YAzJXW3gmhc2AxuJL7nmvzMFjrKUCxcStn 8u0lDuQL5eo/zq1o+tqWWIg4hLwYqMARXlB3rVzpX7jzvufAFwq0cbvXh2quwqkH pB12/LZo2dNvdq8UCSOZXM7M8dOGlStMvfaJCaDlNs/VPACjyd6bSQiBHuxtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEd5TjnUSoDH1AoTq0sTW7bswUCcwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI2ZD+yDLZR6YJA0ZVxqlz1gh0ml7bfHk6wdJuW+PYPFY+a0KnwXoh7Q8ROfK M0/2k5ZPJ/WkiE2X1IQ0U2xUGUvRrOPxdqQxQm+1kyE1sBfyYk0NQmKqqroRbedT jv2vEiH8nmWJeEZOXe+bJ8GQje29x6YVn59G8W3CovLfKy6GNn0gxRfoTtwGbBTf Q2kN7bLV1A2Y+iX9kLhwhM9H+Da4ZYBRRM17OYgKcSR7fgZpwEMooR+VyCDSXuMA AqVroBlv7yB3hWaR0XapOdzoZg/XBT2SNA+LMzctqi0vUPx/RdZSa64cpEHWAjNK rrGNBqGSY55AIroYohIpe8hfww== -----END CERTIFICATE-----Generated at Thu Oct 29 15:16:01 2026 by rpki-client