$ rpki-client -vvvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: Sk3JYJ6jWVBFTI52qC4rmdIHCSeeQ4a/FdTtTjamrwo= Subject key identifier: 12:F3:BF:C3:38:16:CA:50:A1:46:AD:06:B3:2E:3A:04:0E:05:27:0A Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 63062600229E93D3F85F96702EBBA43C07D2D2CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: 0187 Signing time: Sun 01 Nov 2026 03:57:35 +0000 Manifest this update: Sun 01 Nov 2026 03:52:35 +0000 Manifest next update: Mon 02 Nov 2026 06:22:35 +0000 Files and hashes: 1: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: juWerONDyGKWb7AMRxim5kLOO4h1oaJGPMRhxtqUPNw=) 2: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) 3: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 4: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 06:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:06:26:00:22:9e:93:d3:f8:5f:96:70:2e:bb:a4:3c:07:d2:d2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: Nov 1 03:52:35 2026 GMT Not After : Nov 2 06:22:35 2026 GMT Subject: CN=12F3BFC33816CA50A146AD06B32E3A040E05270A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:bc:8c:30:9e:d7:99:89:92:46:05:a3:c2: c8:77:99:88:10:07:b1:29:11:17:2a:31:39:c5:d8: 15:20:26:6d:fd:fc:50:98:cb:f8:4b:4d:66:9b:c8: 49:f9:96:57:8f:18:d2:10:db:50:f9:ec:62:b2:14: 30:04:6d:72:09:5e:cd:f9:fd:3c:5d:ac:70:88:97: 2d:37:1a:7e:46:50:8f:5a:d5:ad:27:c5:42:02:27: 7c:a2:a1:27:33:54:b7:7c:27:fb:a5:f9:81:0f:6f: 4e:1e:69:1f:9e:87:ff:0b:8f:9e:76:35:62:53:c4: fb:7d:d2:c5:4a:9c:06:fb:41:8f:79:70:ae:5c:f7: 22:d1:d4:4d:db:4a:92:6f:b0:08:75:c7:91:b0:70: 0d:cd:82:9f:f2:6e:50:54:8c:80:5d:f7:50:2f:5f: a3:1d:43:9f:c9:56:06:42:52:52:88:8b:4b:ce:5f: e3:2a:5f:00:cd:52:55:16:8a:9c:1a:38:6f:ed:fd: 94:b7:b0:de:20:8a:18:21:4c:70:4b:bf:42:78:ce: e5:db:b5:7e:0c:b6:9e:00:6f:dd:43:46:74:12:72: 54:10:19:db:20:8f:82:12:dc:82:a7:2b:a7:a0:bf: d7:d1:39:12:d8:39:00:6b:6b:a1:ff:b7:1e:a4:21: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:BF:C3:38:16:CA:50:A1:46:AD:06:B3:2E:3A:04:0E:05:27:0A X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:02:f6:12:19:18:2a:49:91:f5:46:81:d2:45:e8:72:cf:1f: 2d:e2:ad:7d:e2:5a:15:36:4b:57:47:8f:49:88:c1:44:d9:9a: eb:2a:96:47:24:8f:31:3d:06:b0:4a:9a:8d:a8:3a:2c:4d:2c: cc:28:0b:1d:69:77:4e:59:5d:f1:5d:4d:64:d4:27:ad:1a:a5: 01:ba:5d:ff:3f:5c:91:50:00:65:38:74:8a:b1:d5:b9:59:cc: 59:b1:f7:ab:76:9e:1b:43:1f:e3:7c:31:3e:59:44:04:ff:a3: e6:7b:0f:f0:04:48:b6:c0:1d:0e:e0:25:66:d7:d3:85:52:44: 25:23:b5:a1:75:ae:a1:8f:f2:93:41:20:b5:11:bb:75:5b:7e: 49:2d:4e:71:1a:87:70:b0:1e:fb:a9:61:48:fa:a7:7d:b4:f2: 7d:ab:55:97:1d:b1:dc:17:70:7a:e4:23:36:59:67:a1:3c:31: de:20:fe:b2:7b:58:6b:25:f1:9c:da:e2:20:b3:95:5b:d9:e2: 35:32:d0:cc:ae:ca:f8:a3:cc:3f:c2:63:3c:b8:7d:82:13:68: 50:17:50:cd:d2:91:b4:7f:40:0a:29:00:f8:00:25:47:fd:ea: 6b:bd:88:f7:2c:6e:e6:87:67:0b:03:5e:25:41:01:b8:8d:85: 95:8a:06:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYwYmACKek9P4X5ZwLrukPAfS0s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjExMDEwMzUyMzVaFw0yNjExMDIwNjIyMzVaMDMxMTAvBgNV BAMTKDEyRjNCRkMzMzgxNkNBNTBBMTQ2QUQwNkIzMkUzQTA0MEUwNTI3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNbyMMJ7XmYmSRgWjwsh3mYgQ B7EpERcqMTnF2BUgJm39/FCYy/hLTWabyEn5llePGNIQ21D57GKyFDAEbXIJXs35 /TxdrHCIly03Gn5GUI9a1a0nxUICJ3yioSczVLd8J/ul+YEPb04eaR+eh/8Lj552 NWJTxPt90sVKnAb7QY95cK5c9yLR1E3bSpJvsAh1x5GwcA3Ngp/yblBUjIBd91Av X6MdQ5/JVgZCUlKIi0vOX+MqXwDNUlUWipwaOG/t/ZS3sN4gihghTHBLv0J4zuXb tX4Mtp4Ab91DRnQSclQQGdsgj4IS3IKnK6egv9fRORLYOQBra6H/tx6kIXGzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEvO/wzgWylChRq0Gsy46BA4FJwowHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIwL2EhkYKkmR9UaB0kXocs8fLeKtfeJaFTZLV0ePSYjBRNma6yqWRySPMT0G sEqajag6LE0szCgLHWl3Tlld8V1NZNQnrRqlAbpd/z9ckVAAZTh0irHVuVnMWbH3 q3aeG0Mf43wxPllEBP+j5nsP8ARItsAdDuAlZtfThVJEJSO1oXWuoY/yk0EgtRG7 dVt+SS1OcRqHcLAe+6lhSPqnfbTyfatVlx2x3BdweuQjNllnoTwx3iD+sntYayXx nNriILOVW9niNTLQzK7K+KPMP8JjPLh9ghNoUBdQzdKRtH9ACikA+AAlR/3qa72I 9yxu5odnCwNeJUEBuI2FlYoGEQ== -----END CERTIFICATE-----Generated at Sun Nov 1 19:59:02 2026 by rpki-client