$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: f/C5ImR0Ca639qTR85OS+QFdW3nc9TN9i/2bO6oBgcc= Subject key identifier: DB:01:10:BA:C3:0F:D5:2F:3A:0A:57:61:04:45:06:88:34:D4:7B:E3 Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 09ED990F5A1FBA00CF6FD6F80E80F4ED48BE9799 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: B1 Signing time: Sat 23 May 2026 22:57:53 +0000 Manifest this update: Sat 23 May 2026 22:52:53 +0000 Manifest next update: Mon 25 May 2026 00:41:53 +0000 Files and hashes: 1: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: lQL0ktpFQ1iD5GxS3Orj8zmC0IvVz7GIJ4POYhlSMBw=) 2: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 3: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) 4: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 00:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ed:99:0f:5a:1f:ba:00:cf:6f:d6:f8:0e:80:f4:ed:48:be:97:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: May 23 22:52:53 2026 GMT Not After : May 25 00:41:53 2026 GMT Subject: CN=DB0110BAC30FD52F3A0A57610445068834D47BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:a6:5e:e8:f8:41:af:89:d9:90:e9:6b:bf: f1:e8:2d:43:95:9f:b7:ae:a6:b3:a9:a9:fe:1d:2a: 20:69:da:53:a9:30:e8:c7:c9:9c:ef:57:42:4a:e1: c0:3f:40:00:8f:38:58:af:35:b0:0f:0d:fc:ff:11: a7:c6:e9:18:5d:a2:31:f6:ec:d4:8e:b3:18:d9:d4: 26:34:4f:11:cc:e1:ef:35:b1:89:3c:da:72:bf:92: 89:ed:d2:2a:58:27:01:26:cd:61:8c:6e:07:6f:0b: 12:f0:68:83:20:90:d9:ff:77:82:1c:28:5c:05:c1: ab:58:9e:1b:18:ef:89:13:4e:32:c7:2b:3b:e0:a6: 39:9a:74:ae:25:ea:53:08:ef:e8:0d:6b:ee:81:01: ed:4a:70:2c:49:a2:59:95:8a:13:6e:07:f1:61:ad: 59:87:43:41:d9:07:7b:85:9d:08:f0:fd:fb:a5:a7: 91:5a:bb:a1:62:b6:bc:d1:8b:28:fa:83:3c:bf:fa: eb:16:c3:e7:82:8f:21:69:64:83:e1:06:d4:e6:a4: 33:4a:d3:58:ea:d8:21:58:24:66:17:63:de:a3:95: 33:9c:5c:6e:f9:33:e8:09:69:ae:c0:6a:91:df:6e: 99:08:7f:99:51:dd:7c:56:1f:59:9a:2c:fe:f5:23: f3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:10:BA:C3:0F:D5:2F:3A:0A:57:61:04:45:06:88:34:D4:7B:E3 X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6b:86:c2:3a:78:4d:d6:f1:2c:80:e0:8a:5e:cb:e1:fa:fa: 68:2e:cb:57:11:45:84:12:81:7b:fb:87:7c:e2:11:97:48:a1: ca:5d:b7:3e:a1:74:d2:1e:57:a8:30:fa:85:2a:2a:8f:b1:60: fb:91:1c:98:f7:ff:99:43:0d:0e:92:fc:1d:9c:70:82:6e:18: de:df:c4:d2:0b:34:48:c7:61:2a:20:b9:8c:a7:79:92:5e:cf: 2f:b8:30:7e:1e:5a:27:28:47:50:03:d8:15:75:e1:a0:2b:c5: fa:11:0d:6d:a2:1a:db:c6:bb:2e:63:57:93:75:e5:37:17:4b: f8:49:a6:67:d8:1f:2d:7b:f6:b6:9f:c7:13:03:47:d1:45:07: 1f:30:c8:8f:88:4c:0f:d8:52:a4:87:56:41:de:c5:98:c0:d7: 3c:a9:48:7a:09:4b:41:66:36:65:af:ca:eb:40:5a:7d:9e:0c: 4e:0c:12:6e:d5:e3:37:c5:5b:ce:e4:1f:53:84:24:51:51:58: 4a:c2:f5:16:c8:ee:41:7b:39:65:77:aa:04:34:16:ca:cf:e1: eb:a9:8b:a5:4c:27:e1:40:86:89:49:94:72:47:6a:81:5e:f3: 43:0a:da:39:8a:78:53:fa:23:c7:4f:1b:24:f0:b2:e8:09:04: 77:61:c1:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCe2ZD1ofugDPb9b4DoD07Ui+l5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjA1MjMyMjUyNTNaFw0yNjA1MjUwMDQxNTNaMDMxMTAvBgNV BAMTKERCMDExMEJBQzMwRkQ1MkYzQTBBNTc2MTA0NDUwNjg4MzRENDdCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbh6Ze6PhBr4nZkOlrv/HoLUOV n7euprOpqf4dKiBp2lOpMOjHyZzvV0JK4cA/QACPOFivNbAPDfz/EafG6RhdojH2 7NSOsxjZ1CY0TxHM4e81sYk82nK/kont0ipYJwEmzWGMbgdvCxLwaIMgkNn/d4Ic KFwFwatYnhsY74kTTjLHKzvgpjmadK4l6lMI7+gNa+6BAe1KcCxJolmVihNuB/Fh rVmHQ0HZB3uFnQjw/fulp5Fau6FitrzRiyj6gzy/+usWw+eCjyFpZIPhBtTmpDNK 01jq2CFYJGYXY96jlTOcXG75M+gJaa7AapHfbpkIf5lR3XxWH1maLP71I/O3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2wEQusMP1S86CldhBEUGiDTUe+MwHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAamuGwjp4TdbxLIDgil7L4fr6aC7LVxFFhBKBe/uHfOIRl0ihyl23PqF00h5X qDD6hSoqj7Fg+5EcmPf/mUMNDpL8HZxwgm4Y3t/E0gs0SMdhKiC5jKd5kl7PL7gw fh5aJyhHUAPYFXXhoCvF+hENbaIa28a7LmNXk3XlNxdL+EmmZ9gfLXv2tp/HEwNH 0UUHHzDIj4hMD9hSpIdWQd7FmMDXPKlIeglLQWY2Za/K60BafZ4MTgwSbtXjN8Vb zuQfU4QkUVFYSsL1FsjuQXs5ZXeqBDQWys/h66mLpUwn4UCGiUmUckdqgV7zQwra OYp4U/ojx08bJPCy6AkEd2HBVQ== -----END CERTIFICATE-----Generated at Sun May 24 14:13:37 2026 by rpki-client