$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: SY0empYmKabegCvRf1jzWZik6Wo8PdLqVPKUtuP4U1w= Subject key identifier: B0:CE:F2:94:02:F9:23:71:55:4E:93:23:4F:88:1B:30:62:FA:EF:63 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 5A6AA8184325E0D5BC576F2AB5CD0FFFE122EDD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 03D9 Signing time: Wed 08 Apr 2026 14:47:22 +0000 Manifest this update: Wed 08 Apr 2026 14:42:22 +0000 Manifest next update: Thu 09 Apr 2026 16:12:22 +0000 Files and hashes: 1: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: iKMlDS+ym1alGlII/l4L5Qyo51WYdjLQ4xJsjZ+43uQ=) 2: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: sCP6thMdAA9gDiOxte8RF05RrI/PM5NftY+8foK2su4=) 3: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: n0C9/GkCbLbH9WRPksqqAGPaZd17gx9HuxHuav2/O/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 16:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6a:a8:18:43:25:e0:d5:bc:57:6f:2a:b5:cd:0f:ff:e1:22:ed:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Apr 8 14:42:22 2026 GMT Not After : Apr 9 16:12:22 2026 GMT Subject: CN=B0CEF29402F92371554E93234F881B3062FAEF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:1c:fe:83:50:f7:b4:b0:2b:8d:a8:dc:14: 89:d8:9b:4b:31:54:c7:9a:97:19:00:e4:e7:96:37: 79:b3:1e:5c:dc:3a:86:77:88:d0:a4:ba:a7:92:ab: 14:24:a5:fc:da:f2:3d:af:00:8b:66:4b:25:1c:56: 98:5f:41:27:88:05:78:4e:e0:1f:fe:9f:80:39:9a: ad:b8:01:5c:0c:9f:e9:d4:35:42:e5:72:6e:05:e4: 62:3d:2e:05:d4:e4:3d:d3:4c:60:b3:c1:66:8e:7b: 5f:99:cb:d8:b2:49:22:1a:72:28:dd:b0:a0:25:b4: b3:18:9b:27:01:2b:96:3c:c8:f0:d1:7a:1a:1b:17: 01:c7:49:24:b4:82:81:c9:a1:b9:1b:1c:47:09:e7: 72:9f:3e:f3:67:47:56:2f:c7:42:9d:71:79:94:48: ff:21:a8:28:7a:60:47:d6:62:93:45:b6:9b:c2:e6: 82:3c:cb:7b:3a:04:06:5e:85:88:01:42:25:9f:9e: 5f:f6:bb:df:ff:90:62:54:f1:96:63:f3:22:e1:df: f1:f3:2d:01:2d:72:ce:97:75:96:77:58:1f:59:86: 90:dc:cd:ce:5a:60:27:1f:36:1b:5e:d3:93:d2:5f: 15:d5:36:ae:3f:b5:18:eb:4d:d4:bc:85:be:56:97: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:F2:94:02:F9:23:71:55:4E:93:23:4F:88:1B:30:62:FA:EF:63 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:75:d1:3b:34:96:de:c5:f1:ea:cb:7d:c9:82:31:26:9b:1d: db:22:6b:44:9f:fa:19:da:ec:57:f3:83:50:f9:e3:b2:f6:7f: 88:27:17:33:2a:0d:11:a0:2a:dd:aa:9b:51:e9:e9:68:20:55: 65:57:ed:f8:57:89:cf:fb:d3:74:2f:ea:06:59:56:c6:23:2a: d4:94:6e:79:cc:4d:99:f3:cd:3f:9d:32:d3:85:7d:4f:b0:33: 8d:a9:66:35:99:0c:c8:89:14:61:af:8a:ee:92:f6:b1:fe:e3: e7:fe:ee:0a:18:bb:15:52:61:42:6f:c8:b9:d7:16:2c:8e:ca: 4a:92:2a:e9:31:f9:ed:0e:af:70:94:39:19:56:ad:a3:bf:d7: c7:66:05:23:72:08:13:49:53:6b:21:6b:d9:bd:c7:b2:09:53: 19:6b:1e:33:8f:b3:fa:ac:54:08:ce:39:08:6c:53:b3:2b:2b: 09:da:ae:ef:51:65:e1:1b:b3:31:c0:3c:f2:a8:24:1f:c0:c4: 36:0e:31:dd:cc:ac:0b:92:8d:e4:e6:0a:11:45:58:15:2a:7d: 79:ef:b0:60:38:e9:5b:c1:76:d5:d0:12:aa:2b:db:6f:c5:b3: c0:5b:f1:42:fe:7c:dd:ac:12:c1:ba:2e:28:c0:ab:fd:bc:c4: 7f:34:a2:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWmqoGEMl4NW8V28qtc0P/+Ei7dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNjA0MDgxNDQyMjJaFw0yNjA0MDkxNjEyMjJaMDMxMTAvBgNV BAMTKEIwQ0VGMjk0MDJGOTIzNzE1NTRFOTMyMzRGODgxQjMwNjJGQUVGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedRz+g1D3tLArjajcFInYm0sx VMealxkA5OeWN3mzHlzcOoZ3iNCkuqeSqxQkpfza8j2vAItmSyUcVphfQSeIBXhO 4B/+n4A5mq24AVwMn+nUNULlcm4F5GI9LgXU5D3TTGCzwWaOe1+Zy9iySSIacijd sKAltLMYmycBK5Y8yPDRehobFwHHSSS0goHJobkbHEcJ53KfPvNnR1Yvx0KdcXmU SP8hqCh6YEfWYpNFtpvC5oI8y3s6BAZehYgBQiWfnl/2u9//kGJU8ZZj8yLh3/Hz LQEtcs6XdZZ3WB9ZhpDczc5aYCcfNhte05PSXxXVNq4/tRjrTdS8hb5WlyeLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsM7ylAL5I3FVTpMjT4gbMGL672MwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAInXROzSW3sXx6st9yYIxJpsd2yJrRJ/6GdrsV/ODUPnjsvZ/iCcXMyoNEaAq 3aqbUenpaCBVZVft+FeJz/vTdC/qBllWxiMq1JRuecxNmfPNP50y04V9T7Azjalm NZkMyIkUYa+K7pL2sf7j5/7uChi7FVJhQm/IudcWLI7KSpIq6TH57Q6vcJQ5GVat o7/Xx2YFI3IIE0lTayFr2b3HsglTGWseM4+z+qxUCM45CGxTsysrCdqu71Fl4Ruz McA88qgkH8DENg4x3cysC5KN5OYKEUVYFSp9ee+wYDjpW8F21dASqivbb8WzwFvx Qv583awSwbouKMCr/bzEfzSitA== -----END CERTIFICATE-----Generated at Wed Apr 8 20:22:35 2026 by rpki-client