$ rpki-client -vvvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: MBeumAGVUaD8Usdf+BtYY41nmTeO4A46n5CoYm0x6xA= Subject key identifier: 49:29:5B:24:17:C8:51:F9:18:08:A3:0E:F6:6C:81:97:47:64:34:CA Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 666194CB318CA2CFCF07DA67FC9D80D7E25ABE3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: 012A Signing time: Sat 22 Aug 2026 17:27:00 +0000 Manifest this update: Sat 22 Aug 2026 17:22:00 +0000 Manifest next update: Sun 23 Aug 2026 19:45:00 +0000 Files and hashes: 1: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: zSnGespVZ/SU9l7tj8sG+4dyUE8Jf4sbTiIfzRqFMn0=) 2: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 3: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) 4: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 19:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:61:94:cb:31:8c:a2:cf:cf:07:da:67:fc:9d:80:d7:e2:5a:be:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: Aug 22 17:22:00 2026 GMT Not After : Aug 23 19:45:00 2026 GMT Subject: CN=49295B2417C851F91808A30EF66C8197476434CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:ab:cb:c0:f9:55:56:71:c8:3d:e4:5c:dd: 57:63:cd:ad:7e:75:2b:8e:4f:a6:f4:33:57:5a:75: 3e:ae:0b:51:48:c6:fa:ce:8e:8c:07:15:e0:44:86: 9b:4d:90:32:b7:60:a2:dd:3b:0d:44:eb:1e:df:be: d9:c3:1c:3b:8b:93:f5:cb:24:f7:c3:2d:6f:c9:8d: 96:11:cd:3c:11:91:78:bd:72:d4:2a:9a:f6:ff:ee: bb:4e:2a:c2:11:8c:a7:6f:70:51:d0:53:4e:7e:9a: 33:c3:b1:13:23:a2:d6:e4:d7:5c:92:d2:83:4d:35: b7:96:04:58:e2:ab:30:ee:5b:f5:67:78:99:36:64: b7:1b:fc:c3:e4:b9:7c:33:9b:21:2c:ed:02:1d:34: a5:b2:13:2d:cf:38:5f:f4:fc:63:41:99:c0:68:ee: 61:7d:da:9d:c8:4c:73:26:1b:55:67:ed:39:8b:6d: 65:09:d0:8b:19:2a:e7:e3:bd:01:f4:e9:8f:09:b2: 43:72:4b:69:6b:a4:58:a6:55:2b:22:9c:e8:38:9c: f5:b8:c2:6b:ea:40:70:9c:7e:c5:a8:0f:28:c5:10: cb:77:a2:af:5a:c1:ec:f8:c1:75:ec:23:fb:70:bc: 87:06:47:71:ee:29:d4:69:87:36:f6:49:a1:0e:cb: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:5B:24:17:C8:51:F9:18:08:A3:0E:F6:6C:81:97:47:64:34:CA X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0c:8e:e0:fb:fd:55:7d:54:0e:a2:b7:2a:57:54:8b:b4:55: 48:e9:11:0f:5b:2a:57:a3:d0:c2:46:e7:99:46:65:53:8f:7a: 6c:8b:d3:1c:01:1d:c6:8b:16:ac:08:b6:8a:a0:e9:e3:d8:c3: 1a:ca:82:18:72:4a:64:c3:25:bd:3d:67:11:67:71:83:4c:d5: 26:26:03:94:b1:39:b8:9d:8a:f9:ef:45:6e:5e:27:cd:b0:50: 96:7d:68:7d:0a:20:43:3a:11:25:c0:54:ce:23:c9:ff:3b:42: 17:e3:b6:74:84:80:fb:70:34:a3:fc:cb:02:d4:89:85:a7:61: d3:02:4e:71:b8:d9:c6:b8:7b:d0:d8:b7:24:f8:e5:8f:ae:5b: b7:98:db:14:8e:d4:8b:ea:c9:de:d4:c3:76:85:4a:19:7b:85: 5a:08:1d:4d:1b:42:a5:e9:17:ee:d4:c9:f5:8c:09:2d:ff:c6: 0e:43:1f:d1:48:15:d5:98:ce:ba:69:8c:64:73:8b:28:39:08: 08:2c:d4:25:ec:b0:90:24:01:68:95:4b:5e:95:dc:38:6e:be: af:ab:19:31:36:5a:ab:91:79:71:51:1d:5a:c3:81:95:0d:15: 4f:71:24:b3:26:35:22:c5:8e:b4:9a:ff:87:95:f3:e0:f4:92: e8:93:d2:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZmGUyzGMos/PB9pn/J2A1+JavjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjA4MjIxNzIyMDBaFw0yNjA4MjMxOTQ1MDBaMDMxMTAvBgNV BAMTKDQ5Mjk1QjI0MTdDODUxRjkxODA4QTMwRUY2NkM4MTk3NDc2NDM0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH06vLwPlVVnHIPeRc3Vdjza1+ dSuOT6b0M1dadT6uC1FIxvrOjowHFeBEhptNkDK3YKLdOw1E6x7fvtnDHDuLk/XL JPfDLW/JjZYRzTwRkXi9ctQqmvb/7rtOKsIRjKdvcFHQU05+mjPDsRMjotbk11yS 0oNNNbeWBFjiqzDuW/VneJk2ZLcb/MPkuXwzmyEs7QIdNKWyEy3POF/0/GNBmcBo 7mF92p3ITHMmG1Vn7TmLbWUJ0IsZKufjvQH06Y8JskNyS2lrpFimVSsinOg4nPW4 wmvqQHCcfsWoDyjFEMt3oq9awez4wXXsI/twvIcGR3HuKdRphzb2SaEOy0eNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSSlbJBfIUfkYCKMO9myBl0dkNMowHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJwyO4Pv9VX1UDqK3KldUi7RVSOkRD1sqV6PQwkbnmUZlU496bIvTHAEdxosW rAi2iqDp49jDGsqCGHJKZMMlvT1nEWdxg0zVJiYDlLE5uJ2K+e9Fbl4nzbBQln1o fQogQzoRJcBUziPJ/ztCF+O2dISA+3A0o/zLAtSJhadh0wJOcbjZxrh70Ni3JPjl j65bt5jbFI7Ui+rJ3tTDdoVKGXuFWggdTRtCpekX7tTJ9YwJLf/GDkMf0UgV1ZjO ummMZHOLKDkICCzUJeywkCQBaJVLXpXcOG6+r6sZMTZaq5F5cVEdWsOBlQ0VT3Ek syY1IsWOtJr/h5Xz4PSS6JPSnw== -----END CERTIFICATE-----Generated at Sun Aug 23 12:00:50 2026 by rpki-client