$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json) Hash identifier: 33DEII+RhVWPg9QAPHDVPDjAVVrAGkXDUfYafP3a+c0= Subject key identifier: A7:FA:8F:D6:CD:63:2D:A5:73:6F:32:41:B9:4A:00:0C:BF:8B:7C:40 Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Certificate serial: 52672049B4F2C93FE42A35F379F99DBF087D9C91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft Manifest number: 03D3 Signing time: Wed 08 Apr 2026 11:06:02 +0000 Manifest this update: Wed 08 Apr 2026 11:01:02 +0000 Manifest next update: Thu 09 Apr 2026 13:01:02 +0000 Files and hashes: 1: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: UCfCYcfqXwUL1le+yP17n88i9noijD5swRdCB1oMKmE=) 2: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: Agyx0dyKKaMmuu/EnmtPuB636k6JmcUi/jBqOWwL35E=) 3: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: QR8q+2vhaE0GgDmRqjwo5xAEFQgodlUQtpoWgUIPRQ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:67:20:49:b4:f2:c9:3f:e4:2a:35:f3:79:f9:9d:bf:08:7d:9c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Validity Not Before: Apr 8 11:01:02 2026 GMT Not After : Apr 9 13:01:02 2026 GMT Subject: CN=A7FA8FD6CD632DA5736F3241B94A000CBF8B7C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:e4:58:99:41:7c:26:bd:54:70:fe:de:70: 1f:6b:5f:57:4d:50:67:8e:cd:e1:43:c6:da:f8:06: 23:c6:06:0a:d3:75:0e:d4:7c:01:d1:a7:be:5c:cd: ba:84:f3:e8:88:21:24:94:65:40:50:03:ef:68:38: 09:14:ff:74:ce:7a:35:b9:5a:5b:c7:90:39:48:5b: 84:4f:5e:90:39:66:e6:26:b3:23:5e:22:b0:ce:28: 9e:04:a3:13:8d:a9:c2:c5:12:6c:49:7b:3f:f0:b3: 78:65:cb:f7:18:5d:a4:70:bd:dd:9a:42:2d:ec:23: d0:21:34:19:57:09:55:b1:1f:53:3d:3e:d8:b7:b9: e6:bf:4b:15:32:ae:bd:d7:47:55:b1:d5:6c:d6:b1: 0a:5f:17:c6:65:77:2a:4a:12:2a:76:8f:6c:9e:e0: fd:b1:58:7a:63:c9:61:f5:39:6f:9d:04:21:87:17: 0c:60:70:e0:19:6c:bb:42:33:9d:3d:56:22:40:a0: 0f:d0:5c:8c:66:6b:11:69:11:97:cf:a5:c8:05:27: 83:0e:05:9f:08:90:57:c4:80:c5:98:f0:77:ed:ab: e7:dc:01:aa:3d:4c:f6:a5:50:c2:58:cd:0c:f6:4a: 04:7e:ea:aa:2e:39:86:68:aa:ea:35:46:21:be:32: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:8F:D6:CD:63:2D:A5:73:6F:32:41:B9:4A:00:0C:BF:8B:7C:40 X509v3 Authority Key Identifier: keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:df:f6:53:da:78:cd:94:16:40:24:02:d1:e9:cc:64:2d:aa: c4:26:f7:8f:3d:09:5c:6c:2d:f4:66:87:72:c7:36:3b:00:82: b6:52:91:63:a1:46:81:13:b3:eb:34:5c:74:31:1e:58:ba:1e: 50:9a:56:27:42:54:f2:ce:b6:ae:ae:e6:9b:fe:64:c6:3b:5b: 5a:98:89:f5:76:9c:7b:ee:d0:4e:ca:1d:c3:27:e5:2e:5d:88: 6c:a5:1c:f4:70:8b:b9:dc:46:11:1d:92:e0:15:01:83:18:47: d0:03:f3:78:93:16:66:2b:7b:0f:2e:08:4e:cb:46:39:8f:3f: cf:37:c6:24:ec:e6:b3:f8:ff:28:5d:c5:01:b8:67:0c:c7:a3: fd:08:d3:4e:35:a5:54:74:21:c8:8e:a7:aa:53:41:cb:e6:e1: 16:f0:4f:b2:db:e5:05:54:0f:e2:fa:e5:53:a5:de:dd:98:ba: 93:1e:57:30:bf:cb:28:5b:c2:bd:b5:71:2c:b2:9b:e1:50:68: a0:c8:8f:9f:2c:5b:7f:8e:2c:e0:d4:59:22:69:0f:49:22:18: c0:99:fe:a8:f7:87:eb:fb:01:8f:0a:8c:b1:ea:91:eb:6d:06: 0b:f2:62:e4:fb:d5:be:93:e6:f0:76:40:e9:ed:c3:77:c8:3d: 6d:7c:60:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUmcgSbTyyT/kKjXzefmdvwh9nJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUExQUNBM0E2OTc4QUVDMkQyREY0RDI5RUI0QjM1 OUIzRjY5QjAeFw0yNjA0MDgxMTAxMDJaFw0yNjA0MDkxMzAxMDJaMDMxMTAvBgNV BAMTKEE3RkE4RkQ2Q0Q2MzJEQTU3MzZGMzI0MUI5NEEwMDBDQkY4QjdDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jeRYmUF8Jr1UcP7ecB9rX1dN UGeOzeFDxtr4BiPGBgrTdQ7UfAHRp75czbqE8+iIISSUZUBQA+9oOAkU/3TOejW5 WlvHkDlIW4RPXpA5ZuYmsyNeIrDOKJ4EoxONqcLFEmxJez/ws3hly/cYXaRwvd2a Qi3sI9AhNBlXCVWxH1M9Pti3uea/SxUyrr3XR1Wx1WzWsQpfF8ZldypKEip2j2ye 4P2xWHpjyWH1OW+dBCGHFwxgcOAZbLtCM509ViJAoA/QXIxmaxFpEZfPpcgFJ4MO BZ8IkFfEgMWY8Hftq+fcAao9TPalUMJYzQz2SgR+6qouOYZoquo1RiG+Mqw9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUp/qP1s1jLaVzbzJBuUoADL+LfEAwHwYDVR0j BBgwFoAUM+qhrKOml4rsLS300p60s1mz9pswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGpp TWMvMS8zM0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUFBMUFDQTNBNjk3OEFF QzJEMkRGNEQyOUVCNEIzNTlCM0Y2OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGppTWMvMS8z M0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK9/2U9p4zZQWQCQC0enMZC2qxCb3jz0JXGwt9GaHcsc2OwCCtlKRY6FGgROz 6zRcdDEeWLoeUJpWJ0JU8s62rq7mm/5kxjtbWpiJ9Xace+7QTsodwyflLl2IbKUc 9HCLudxGER2S4BUBgxhH0APzeJMWZit7Dy4ITstGOY8/zzfGJOzms/j/KF3FAbhn DMej/QjTTjWlVHQhyI6nqlNBy+bhFvBPstvlBVQP4vrlU6Xe3Zi6kx5XML/LKFvC vbVxLLKb4VBooMiPnyxbf44s4NRZImkPSSIYwJn+qPeH6/sBjwqMseqR620GC/Ji 5PvVvpPm8HZA6e3Dd8g9bXxgUw== -----END CERTIFICATE-----Generated at Wed Apr 8 16:02:54 2026 by rpki-client