$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: /GXJGFRJeeUFKya6acQ7Biz+pHydbm1SQxzY6DoJyY8= Subject key identifier: 18:5F:23:FE:AD:57:C6:F2:AD:89:96:94:B7:45:BF:81:DA:F3:2D:33 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 216C8FCBB8907A012B77CD559D71ECE091CCB7BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: 01F0 Signing time: Sun 26 Oct 2025 08:21:57 +0000 Manifest this update: Sun 26 Oct 2025 08:16:57 +0000 Manifest next update: Mon 27 Oct 2025 09:19:57 +0000 Files and hashes: 1: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=) 2: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: NyiXqW5G5wwZcxHqOgkSIMiD8SYCtxDv/00TOgIPr7s=) 3: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=) 4: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=) 5: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=) 6: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 09:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6c:8f:cb:b8:90:7a:01:2b:77:cd:55:9d:71:ec:e0:91:cc:b7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Oct 26 08:16:57 2025 GMT Not After : Oct 27 09:19:57 2025 GMT Subject: CN=185F23FEAD57C6F2AD899694B745BF81DAF32D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:56:9d:bf:94:89:b2:36:85:02:b8:ce:0b: ef:d3:6e:2b:1b:02:4f:14:8d:ab:5a:80:bc:ce:9c: 1c:ba:01:c9:35:3c:d6:61:1f:aa:e2:3d:36:72:e6: 90:42:bf:c0:af:bb:23:0e:54:1e:68:b8:a1:48:d7: 5a:a7:a9:a0:1f:84:97:8f:21:dc:31:46:c6:80:e0: 97:d2:39:a1:d2:65:21:39:d8:c4:f5:4e:e6:66:84: 4b:c9:99:2c:ba:2d:68:73:99:61:4d:4a:ca:a9:36: 63:64:34:ce:d7:b1:d1:4b:a7:d8:04:50:cb:f4:83: cc:67:b9:10:01:7c:c5:38:23:3e:4a:78:95:10:5b: 84:75:bd:45:65:6a:2c:64:a1:ad:76:c6:f3:34:a1: bf:89:cc:9e:da:38:fe:58:c1:90:75:46:9d:cd:21: 95:09:73:15:e8:bb:75:6c:5e:43:19:af:2e:35:f7: e4:f6:c2:64:bc:c6:07:59:81:af:b4:0d:20:a1:5b: 0a:71:00:00:0d:24:17:a9:21:97:25:04:05:d3:87: 50:cf:7c:14:5a:86:a5:c2:83:cb:a9:c9:9d:70:b4: 2a:07:da:ec:c9:5e:f3:8f:dd:f0:a7:22:ac:c2:1f: 14:34:27:aa:53:cd:a0:3d:de:3b:e5:0c:24:a5:aa: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5F:23:FE:AD:57:C6:F2:AD:89:96:94:B7:45:BF:81:DA:F3:2D:33 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:19:cd:72:2e:37:a9:8c:1e:55:12:b5:c5:e4:e1:c4:ba:1c: bc:ec:86:b1:dd:38:9d:bf:97:7f:9e:9b:07:b8:8b:e5:62:37: 2e:ec:99:7d:21:3c:26:a1:e7:83:3a:99:aa:ee:e6:42:4a:68: fa:a3:2a:66:c1:8d:9b:f9:17:3f:d7:c8:33:ff:b6:f8:f5:98: 0f:b5:57:70:4c:e2:b0:bc:e1:47:3d:44:81:01:09:bc:61:db: fc:7c:d4:af:83:19:9f:0f:55:53:71:15:65:0b:e6:fb:63:06: 81:e9:f4:c1:b1:25:93:2f:26:4e:72:3b:41:5b:a9:c1:5c:b8: e8:52:c4:3f:56:ce:f9:2b:5d:1b:05:6f:eb:c4:3c:96:24:a1: 45:74:e0:fe:00:46:2f:58:6c:38:16:74:ce:6e:ee:42:f2:cf: 75:af:fe:36:5b:21:43:df:c5:ce:8d:cf:b9:fe:2b:83:e1:71: 61:cd:8f:75:de:71:0e:7a:b6:61:be:ac:0a:1a:79:d2:6c:8b: 7c:d6:07:e1:5e:26:16:67:9a:4a:d5:df:14:8a:0e:6b:dd:2b: 7d:99:b4:c7:ce:3e:40:15:ef:35:e8:4e:e2:b4:4b:55:e8:cb: 71:00:34:93:2e:80:77:32:f7:56:34:46:77:03:2e:ba:94:1b: 42:39:71:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIWyPy7iQegErd81VnXHs4JHMt7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTEwMjYwODE2NTdaFw0yNTEwMjcwOTE5NTdaMDMxMTAvBgNV BAMTKDE4NUYyM0ZFQUQ1N0M2RjJBRDg5OTY5NEI3NDVCRjgxREFGMzJEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFFadv5SJsjaFArjOC+/Tbisb Ak8UjatagLzOnBy6Ack1PNZhH6riPTZy5pBCv8CvuyMOVB5ouKFI11qnqaAfhJeP IdwxRsaA4JfSOaHSZSE52MT1TuZmhEvJmSy6LWhzmWFNSsqpNmNkNM7XsdFLp9gE UMv0g8xnuRABfMU4Iz5KeJUQW4R1vUVlaixkoa12xvM0ob+JzJ7aOP5YwZB1Rp3N IZUJcxXou3VsXkMZry419+T2wmS8xgdZga+0DSChWwpxAAANJBepIZclBAXTh1DP fBRahqXCg8upyZ1wtCoH2uzJXvOP3fCnIqzCHxQ0J6pTzaA93jvlDCSlqkorAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGF8j/q1XxvKtiZaUt0W/gdrzLTMwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcxnNci43qYweVRK1xeThxLocvOyGsd04nb+Xf56bB7iL5WI3LuyZfSE8JqHn gzqZqu7mQkpo+qMqZsGNm/kXP9fIM/+2+PWYD7VXcEzisLzhRz1EgQEJvGHb/HzU r4MZnw9VU3EVZQvm+2MGgen0wbElky8mTnI7QVupwVy46FLEP1bO+StdGwVv68Q8 liShRXTg/gBGL1hsOBZ0zm7uQvLPda/+NlshQ9/Fzo3Puf4rg+FxYc2Pdd5xDnq2 Yb6sChp50myLfNYH4V4mFmeaStXfFIoOa90rfZm0x84+QBXvNehO4rRLVejLcQA0 ky6AdzL3VjRGdwMuupQbQjlxuQ== -----END CERTIFICATE-----Generated at Mon Oct 27 01:46:43 2025 by rpki-client