$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json) Hash identifier: K0mHu+xTSy1cBXNK6ixZCMkzyo3Wqs0XvuU5rOTH7aM= Subject key identifier: 2D:C3:E4:F2:71:0C:BF:AC:1F:52:47:DC:1F:0D:8B:38:A5:19:B7:CB Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Certificate serial: 5435E813013FEB84A654FDE35AE39D17F969E730 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft Manifest number: 0B Signing time: Sun 19 Oct 2025 23:38:52 +0000 Manifest this update: Sun 19 Oct 2025 23:33:52 +0000 Manifest next update: Tue 21 Oct 2025 01:17:52 +0000 Files and hashes: 1: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=) 2: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: IjUNG8V/iVSEiwYdQ1JPyDV0qCuUiKA+nddxzhuMVVI=) 3: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:35:e8:13:01:3f:eb:84:a6:54:fd:e3:5a:e3:9d:17:f9:69:e7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Validity Not Before: Oct 19 23:33:52 2025 GMT Not After : Oct 21 01:17:52 2025 GMT Subject: CN=2DC3E4F2710CBFAC1F5247DC1F0D8B38A519B7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:0d:f9:3d:24:f7:1d:99:bb:83:13:76:79: 50:67:09:4a:97:da:01:f2:f6:51:7f:7a:97:d1:19: 28:dc:db:36:e5:45:4b:7f:96:1d:23:1c:51:24:a2: de:bb:d5:b2:f3:e8:4f:9e:b1:7a:71:73:62:4e:eb: 6b:10:38:e9:64:bc:3b:ad:65:50:70:4a:f5:eb:37: bb:62:c4:ea:09:08:34:b7:04:0c:6f:8f:d3:ec:f6: 6e:03:33:9b:e1:3c:a8:86:d9:b5:39:48:52:cc:66: 65:e5:da:fe:5c:68:1d:fb:cd:1a:65:50:0e:18:ea: ad:0c:ee:34:e8:77:15:8b:7d:e9:bd:c4:49:17:7e: c3:dc:b1:a1:c7:97:1d:78:18:77:79:b7:7e:41:d3: e0:5b:2d:b8:fd:52:a4:ca:45:dd:32:ff:88:32:40: b3:19:52:22:9e:7f:45:89:55:5b:f6:37:59:25:fc: ee:51:f5:6d:a8:d8:56:1b:c6:2e:c8:5f:2e:9e:a1: 14:dc:e5:18:51:7e:e6:67:9b:4c:54:9f:b4:cb:1b: 1d:81:cd:f6:da:a4:9d:0b:41:c9:f9:a5:0a:46:36: 8f:0e:f4:b9:01:84:6e:42:fc:2f:8d:6c:3c:ca:4c: 76:8d:fa:84:46:8d:f9:be:39:a0:13:7e:db:df:91: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:E4:F2:71:0C:BF:AC:1F:52:47:DC:1F:0D:8B:38:A5:19:B7:CB X509v3 Authority Key Identifier: keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c9:bf:60:50:3c:3d:7b:1c:96:6b:74:11:c0:5d:3a:dd:8a: 99:4c:34:8a:46:81:b3:c8:a6:21:ea:45:81:f5:64:9a:5b:3d: 11:32:04:7a:af:d3:1f:d3:9f:5e:88:13:d5:f7:c2:e9:7e:fe: f9:9a:16:ef:e4:d6:d1:7b:c9:6d:f6:d2:fe:6f:fd:23:2f:83: a2:8a:76:6e:76:7f:c3:04:ca:f3:73:a7:de:1d:e9:ce:1d:f3: 51:ea:fa:bd:09:6f:90:3f:64:e5:4f:2b:64:5b:ee:57:21:50: 15:af:5a:62:8f:a2:48:89:11:14:ad:9f:4c:31:bf:cc:30:db: e7:f9:10:c5:ef:ec:48:77:ae:15:1f:b7:5e:39:2d:1b:1b:b7: eb:0a:38:1d:ff:65:0b:18:ce:86:64:30:9c:39:60:d7:83:26: e2:07:0e:79:62:fc:48:da:b3:d1:be:f7:12:a5:4d:65:69:11: 2b:2c:6e:51:da:92:2c:4c:04:81:bf:dc:19:39:1e:d0:4d:6f: 2b:1f:8d:89:b5:da:f4:d7:c6:a5:3b:7f:5d:dd:95:d3:be:cd: 97:c5:76:59:11:1e:3a:4b:86:87:d3:54:e2:41:f3:0a:bd:aa: d0:f9:9a:0f:70:58:a6:20:98:fc:81:67:38:a1:25:73:60:c9: 54:31:41:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVDXoEwE/64SmVP3jWuOdF/lp5zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB MURERjBCOTAeFw0yNTEwMTkyMzMzNTJaFw0yNTEwMjEwMTE3NTJaMDMxMTAvBgNV BAMTKDJEQzNFNEYyNzEwQ0JGQUMxRjUyNDdEQzFGMEQ4QjM4QTUxOUI3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXQ35PST3HZm7gxN2eVBnCUqX 2gHy9lF/epfRGSjc2zblRUt/lh0jHFEkot671bLz6E+esXpxc2JO62sQOOlkvDut ZVBwSvXrN7tixOoJCDS3BAxvj9Ps9m4DM5vhPKiG2bU5SFLMZmXl2v5caB37zRpl UA4Y6q0M7jTodxWLfem9xEkXfsPcsaHHlx14GHd5t35B0+BbLbj9UqTKRd0y/4gy QLMZUiKef0WJVVv2N1kl/O5R9W2o2FYbxi7IXy6eoRTc5RhRfuZnm0xUn7TLGx2B zfbapJ0LQcn5pQpGNo8O9LkBhG5C/C+NbDzKTHaN+oRGjfm+OaATftvfkcEXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULcPk8nEMv6wfUkfcHw2LOKUZt8swHwYDVR0j BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ8m/YFA8PXsclmt0EcBdOt2KmUw0ikaBs8imIepFgfVkmls9ETIEeq/TH9Of XogT1ffC6X7++ZoW7+TW0XvJbfbS/m/9Iy+Doop2bnZ/wwTK83On3h3pzh3zUer6 vQlvkD9k5U8rZFvuVyFQFa9aYo+iSIkRFK2fTDG/zDDb5/kQxe/sSHeuFR+3Xjkt Gxu36wo4Hf9lCxjOhmQwnDlg14Mm4gcOeWL8SNqz0b73EqVNZWkRKyxuUdqSLEwE gb/cGTke0E1vKx+NibXa9NfGpTt/Xd2V077Nl8V2WREeOkuGh9NU4kHzCr2q0Pma D3BYpiCY/IFnOKElc2DJVDFBzg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:23:04 2025 by rpki-client