$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: zFOZeOXLklxnSJuAfHt/7G+rPEzTYNkZJEutAVllFL4= Subject key identifier: 7B:E7:1F:54:28:DE:B2:AC:02:EF:75:0D:0D:8B:DE:EC:4D:D6:26:1C Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 79F7DF61D8DAEF27BC74AA7C26869DF667D1AD2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: 95 Signing time: Mon 20 Oct 2025 09:01:34 +0000 Manifest this update: Mon 20 Oct 2025 08:56:34 +0000 Manifest next update: Tue 21 Oct 2025 10:13:34 +0000 Files and hashes: 1: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) 2: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: AMvWAJsAUHDoZNQFBNWNoOW1CvDVkKFzaaJzj9D/Bk8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f7:df:61:d8:da:ef:27:bc:74:aa:7c:26:86:9d:f6:67:d1:ad:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Oct 20 08:56:34 2025 GMT Not After : Oct 21 10:13:34 2025 GMT Subject: CN=7BE71F5428DEB2AC02EF750D0D8BDEEC4DD6261C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:e2:e9:17:09:74:0b:14:41:cf:2c:48:6b: 92:6c:be:69:b3:cc:2a:ac:7a:2b:7d:ab:e4:77:45: ab:de:08:7c:cf:41:ad:46:58:51:82:24:82:68:27: 61:48:a0:47:de:a3:19:4c:a9:13:5f:9a:2b:f6:a8: e5:97:c6:0f:f3:0b:4b:b4:ba:98:49:dd:84:cd:69: 68:e2:eb:75:3f:13:95:e0:2f:d5:73:28:21:1d:ec: f3:a4:29:63:24:18:b4:db:e9:a9:eb:7d:38:5d:fb: 06:03:c1:b7:14:2f:c9:92:96:ea:c7:38:3f:27:60: 64:a4:5d:49:ff:8a:3f:4d:90:48:d7:2b:25:32:76: 63:1f:6e:60:80:cf:62:3d:f1:3a:83:22:5b:ff:1f: 1d:df:ff:99:64:d6:76:fb:59:b7:87:8f:cd:f4:a1: 55:bb:f9:be:11:c6:ff:04:ac:06:14:95:ba:f4:5f: c6:dd:01:f0:ae:93:7f:d6:dc:9f:5c:af:0d:f8:0d: 83:53:86:aa:32:b4:7c:f0:34:9c:0c:a0:d2:16:20: 0e:d4:fa:c5:31:4d:8f:13:5a:ea:d9:90:dc:90:b3: 14:3a:30:74:05:65:67:66:10:39:8a:8e:d1:32:d0: 79:e1:1c:c8:f5:12:4f:a3:67:e1:4a:24:5f:28:c3: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E7:1F:54:28:DE:B2:AC:02:EF:75:0D:0D:8B:DE:EC:4D:D6:26:1C X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7f:d9:66:39:4c:d2:2d:25:b5:72:89:53:c0:ca:75:83:15: ba:d9:be:d5:70:60:0f:9b:50:2f:06:2b:22:1e:55:1f:73:ab: c0:50:25:12:37:8c:62:bc:64:28:d3:70:81:e7:b8:ff:3f:6c: 21:b0:b0:32:61:ac:f4:85:fc:47:9a:b5:42:ac:de:d3:77:ee: 50:1c:5c:85:4d:dd:dd:5f:c7:78:31:37:37:f7:3a:20:a4:d2: 25:d1:29:1c:c2:cf:5b:d8:c0:2e:bf:a8:4f:6e:0e:fb:bf:b9: 16:4b:1f:88:f8:12:2a:d0:0d:e6:06:34:b5:02:ab:10:71:7e: 3b:79:83:17:83:70:ab:9b:6a:3c:1c:66:d2:e4:b1:bc:6c:fe: 17:dd:37:c7:bf:11:9c:ec:30:3a:b9:dd:21:96:2e:79:25:1d: 64:81:f6:4b:72:26:bb:d8:a8:b6:65:de:e1:b0:41:f5:ee:52: 0e:bb:d7:c4:d6:36:e3:a7:52:c4:6a:24:4e:7a:8d:a9:b0:45: 23:4b:8f:ff:7e:eb:b6:5c:0d:38:5d:04:99:fa:87:dd:9c:62: 83:2a:67:0a:1b:f9:77:11:20:cd:2d:94:a7:ee:29:bc:11:69: e2:04:ea:98:75:1e:50:c3:8f:e5:88:16:66:6b:1d:49:27:ca: 0b:5e:5a:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUefffYdja7ye8dKp8Joad9mfRrSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNTEwMjAwODU2MzRaFw0yNTEwMjExMDEzMzRaMDMxMTAvBgNV BAMTKDdCRTcxRjU0MjhERUIyQUMwMkVGNzUwRDBEOEJERUVDNERENjI2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFOLpFwl0CxRBzyxIa5Jsvmmz zCqseit9q+R3RaveCHzPQa1GWFGCJIJoJ2FIoEfeoxlMqRNfmiv2qOWXxg/zC0u0 uphJ3YTNaWji63U/E5XgL9VzKCEd7POkKWMkGLTb6anrfThd+wYDwbcUL8mSlurH OD8nYGSkXUn/ij9NkEjXKyUydmMfbmCAz2I98TqDIlv/Hx3f/5lk1nb7WbeHj830 oVW7+b4Rxv8ErAYUlbr0X8bdAfCuk3/W3J9crw34DYNThqoytHzwNJwMoNIWIA7U +sUxTY8TWurZkNyQsxQ6MHQFZWdmEDmKjtEy0HnhHMj1Ek+jZ+FKJF8ow54tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe+cfVCjesqwC73UNDYve7E3WJhwwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPn/ZZjlM0i0ltXKJU8DKdYMVutm+1XBgD5tQLwYrIh5VH3OrwFAlEjeMYrxk KNNwgee4/z9sIbCwMmGs9IX8R5q1Qqze03fuUBxchU3d3V/HeDE3N/c6IKTSJdEp HMLPW9jALr+oT24O+7+5FksfiPgSKtAN5gY0tQKrEHF+O3mDF4Nwq5tqPBxm0uSx vGz+F903x78RnOwwOrndIZYueSUdZIH2S3Imu9iotmXe4bBB9e5SDrvXxNY246dS xGokTnqNqbBFI0uP/37rtlwNOF0EmfqH3ZxigypnChv5dxEgzS2Up+4pvBFp4gTq mHUeUMOP5YgWZmsdSSfKC15acg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:40 2025 by rpki-client