$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: hVC4qDbh2hosr8uUaTL8cPIPASNhiy+BNnIgLiQGzBI= Subject key identifier: 4A:47:8B:41:36:F6:6B:86:66:00:2E:D4:0B:E2:4E:C0:20:E1:19:9D Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 34FB3DBB83716DF6E7A94530785670608D691E71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 028A Signing time: Sat 26 Jul 2025 12:03:05 +0000 Manifest this update: Sat 26 Jul 2025 11:58:05 +0000 Manifest next update: Sun 27 Jul 2025 13:11:05 +0000 Files and hashes: 1: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: drJcJgZS+P/Ur0JO7CLH28RTyZacpaRqL0aZHd5FId4=) 2: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) 3: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) 4: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 13:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fb:3d:bb:83:71:6d:f6:e7:a9:45:30:78:56:70:60:8d:69:1e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Jul 26 11:58:05 2025 GMT Not After : Jul 27 13:11:05 2025 GMT Subject: CN=4A478B4136F66B8666002ED40BE24EC020E1199D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:cf:66:fd:31:63:10:aa:20:9e:f2:0d:6e: 58:c6:59:0a:69:84:8c:9f:4f:66:ca:6b:11:4a:0d: d9:0f:cc:57:c8:55:52:44:0a:d7:fe:06:aa:2d:3a: 58:7e:82:bb:ec:66:5f:df:e8:04:f7:cd:10:1d:4f: 6e:af:82:79:36:38:4e:ed:68:cb:a5:5a:0c:87:c5: 98:91:f2:1b:55:fc:0c:a9:45:72:d7:39:66:38:e7: 6f:9a:bc:b9:f2:f3:8d:c0:52:2c:2c:7b:02:8d:aa: 5f:da:a3:44:ee:f4:69:97:3c:d7:aa:c9:53:74:69: d0:a5:c9:e0:a0:17:9b:b2:ce:9d:53:21:b6:dd:7e: 8d:e4:dc:f2:b0:85:ee:96:bd:71:69:09:75:19:c5: 92:43:38:c9:34:84:10:5d:5e:f8:aa:44:7c:69:4b: 34:95:c9:7a:40:3f:61:cb:d2:e8:5f:22:c2:75:a5: 7f:73:da:89:13:59:0e:37:98:8f:2a:d5:a9:db:c3: 8b:35:78:6d:fd:15:41:2f:ad:65:cb:91:1f:ee:6c: dd:f3:8b:37:15:b0:0a:5f:19:0c:48:b4:a9:9a:60: 6f:fa:3f:a0:b8:a6:80:2f:b9:fb:ce:3f:5a:ea:e0: f4:be:44:f4:cf:00:2f:aa:0f:ea:72:d4:f0:31:38: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:47:8B:41:36:F6:6B:86:66:00:2E:D4:0B:E2:4E:C0:20:E1:19:9D X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5e:c1:da:02:f3:d7:ea:c5:45:3b:72:b9:8b:75:93:ab:d4: fc:71:70:ea:d5:1c:9d:2f:3e:5a:7f:5f:08:89:90:52:2b:3c: 11:dd:b5:7e:2b:a7:8e:c8:35:32:b7:a7:4c:08:d7:d0:d1:f2: 92:66:8c:0a:c5:83:0e:78:63:b4:25:be:d5:42:b6:06:ca:fb: e1:7b:36:2d:9c:4f:86:8c:9e:d8:76:d8:5c:04:ff:e5:47:ff: 1a:0a:0f:3d:39:05:94:0f:0e:c1:49:ff:f8:6e:c4:8a:7f:6c: 57:64:71:3e:19:fc:49:09:34:fd:51:ba:9c:a4:03:fc:22:bf: 62:b2:9d:25:3a:2e:a2:3b:bb:b4:02:25:79:15:52:d2:b1:d9: 17:e4:61:91:a6:f1:54:fc:c1:55:d1:f4:40:03:47:6a:f7:ea: 10:44:d0:e6:db:79:32:70:50:34:33:78:40:cc:ee:ae:fa:f0: ad:2e:52:25:41:eb:0a:72:ea:d2:cd:1d:b3:94:3d:fc:3b:58: 7d:4a:82:3a:86:cf:92:9d:ba:83:8c:3b:9c:1f:5a:d5:92:71: de:45:6c:98:86:c8:a5:e0:f7:2c:64:da:ce:97:58:17:4a:85: b6:35:3d:4b:73:2a:ac:40:fa:5d:68:ff:30:f8:b2:17:03:7d: b2:b9:5e:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNPs9u4NxbfbnqUUweFZwYI1pHnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTA3MjYxMTU4MDVaFw0yNTA3MjcxMzExMDVaMDMxMTAvBgNV BAMTKDRBNDc4QjQxMzZGNjZCODY2NjAwMkVENDBCRTI0RUMwMjBFMTE5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXc9m/TFjEKognvINbljGWQpp hIyfT2bKaxFKDdkPzFfIVVJECtf+BqotOlh+grvsZl/f6AT3zRAdT26vgnk2OE7t aMulWgyHxZiR8htV/AypRXLXOWY452+avLny843AUiwsewKNql/ao0Tu9GmXPNeq yVN0adClyeCgF5uyzp1TIbbdfo3k3PKwhe6WvXFpCXUZxZJDOMk0hBBdXviqRHxp SzSVyXpAP2HL0uhfIsJ1pX9z2okTWQ43mI8q1anbw4s1eG39FUEvrWXLkR/ubN3z izcVsApfGQxItKmaYG/6P6C4poAvufvOP1rq4PS+RPTPAC+qD+py1PAxODArAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSkeLQTb2a4ZmAC7UC+JOwCDhGZ0wHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO17B2gLz1+rFRTtyuYt1k6vU/HFw6tUcnS8+Wn9fCImQUis8Ed21fiunjsg1 MrenTAjX0NHykmaMCsWDDnhjtCW+1UK2Bsr74Xs2LZxPhoye2HbYXAT/5Uf/GgoP PTkFlA8OwUn/+G7Ein9sV2RxPhn8SQk0/VG6nKQD/CK/YrKdJTouoju7tAIleRVS 0rHZF+RhkabxVPzBVdH0QANHavfqEETQ5tt5MnBQNDN4QMzurvrwrS5SJUHrCnLq 0s0ds5Q9/DtYfUqCOobPkp26g4w7nB9a1ZJx3kVsmIbIpeD3LGTazpdYF0qFtjU9 S3MqrED6XWj/MPiyFwN9srlecA== -----END CERTIFICATE-----Generated at Sun Jul 27 00:03:00 2025 by rpki-client