$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: Q0ljekQu3r+SlOK+UShcg7SvvZoFcnj3iP+Gd8ruKDw= Subject key identifier: F1:57:2F:62:FB:E5:AA:D3:5F:BD:BB:F1:CB:15:11:9A:14:8C:2E:2C Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 2FA28AF73F51E32ED7135D2CE6077D8319447EE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: 01B2 Signing time: Wed 10 Sep 2025 19:36:20 +0000 Manifest this update: Wed 10 Sep 2025 19:31:20 +0000 Manifest next update: Thu 11 Sep 2025 19:57:20 +0000 Files and hashes: 1: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: 1Hkni3TKW3kNQ83mB3nTYeJWQ9mBS7c7zWqWXIg/zDI=) 2: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: PHplbTnXXeq+ONmNsldvZhcMoF9KEK65+ZkGU2g4Cac=) 3: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: YnAj4nnRHR0yIlpmVv3W9tpP6AuEMBjIff491ksaPns=) 4: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: 7Tsl7qx1NouUrFNWT4qI6MJPqrTpsHOTmqv/UGnXNJg=) 5: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: x0bhXKWdahZBgbGGyfWdSe6cAPRpRMZDs0iqksz//xs=) 6: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: Vzzy94kvUWUhTx7QLr4vzuitWlbJCB8GpWrdimQi6+8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Sep 2025 19:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a2:8a:f7:3f:51:e3:2e:d7:13:5d:2c:e6:07:7d:83:19:44:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Sep 10 19:31:20 2025 GMT Not After : Sep 11 19:57:20 2025 GMT Subject: CN=F1572F62FBE5AAD35FBDBBF1CB15119A148C2E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:cf:6d:ca:24:b5:d5:b7:59:51:fa:80:c8: d6:78:b0:73:11:1a:f4:bb:4c:65:02:28:fe:c2:70: 02:2a:0c:93:23:d6:88:2f:3a:be:72:44:3d:59:a9: c6:16:38:58:bc:eb:ed:d1:9e:4f:85:93:fd:eb:ab: 87:10:ef:40:0d:28:d7:b4:c8:67:62:44:93:38:10: 12:dd:c1:c2:af:02:58:ec:c0:8c:89:3f:27:e2:a7: bb:96:43:78:57:bc:b1:dd:81:c6:e6:53:33:e8:7f: 50:e8:38:53:6d:1f:a2:1a:db:73:66:39:ca:f4:66: 54:51:a3:4b:17:6e:bf:9c:5e:04:72:36:ba:13:e3: bb:ac:13:0a:73:2e:31:7d:ed:24:34:4c:db:21:38: 2d:cc:c0:57:8f:62:2f:9d:19:0c:2e:25:8a:77:2c: 40:0a:d9:c6:02:95:57:23:0e:c6:f3:83:d0:c5:71: f4:87:1f:40:8b:21:ec:b1:cc:b7:ec:9a:2f:6d:de: 95:3a:dd:21:6e:3a:ea:55:66:8f:16:f0:71:6d:e3: 9d:5d:7d:50:0b:37:bd:b2:15:90:7b:bf:ff:ca:72: 01:45:ac:0d:b9:74:c7:6e:a9:18:60:be:07:4f:5c: ed:81:e0:43:24:d3:81:23:de:5d:ee:6f:73:8d:29: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:2F:62:FB:E5:AA:D3:5F:BD:BB:F1:CB:15:11:9A:14:8C:2E:2C X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:87:e4:ec:53:34:97:10:1f:05:d8:b4:05:25:f1:fd:33: bc:15:32:e4:c7:c1:7b:e6:50:35:ff:e1:92:79:e2:7c:02:36: fb:83:1a:df:a5:31:2c:49:5c:bb:2d:83:d2:9b:39:83:51:78: 4b:46:8f:22:24:89:d3:6d:68:2b:0f:b6:54:a4:f5:bb:f3:1d: e0:aa:7f:83:4a:69:5a:cb:16:ad:70:52:6c:ba:e0:d5:d0:22: a6:2d:81:b6:48:ba:fd:ab:f2:b3:de:ca:43:1d:c0:ff:e4:2e: 27:cb:a2:67:80:4b:4f:97:88:a6:34:ac:7e:27:0f:54:6f:f7: ef:fc:47:54:a2:f6:af:ac:31:ca:8c:bd:33:99:83:b7:3e:84: 09:16:a6:e0:9c:57:fb:0f:11:ed:43:33:28:c4:e5:08:ad:ed: 6b:8e:be:b3:bb:0e:9b:76:1a:3b:20:8b:21:e5:23:06:a2:e6: 7d:0c:c1:5d:b7:8d:0c:0e:13:73:1b:9d:3e:4c:64:22:85:aa: c5:5f:c3:55:79:d1:ce:26:a3:95:44:c9:ff:21:a6:ce:a4:31: 18:92:de:58:8c:46:c0:82:4c:72:d9:29:44:de:49:d5:66:79: 76:a5:ff:54:9c:f7:e9:be:13:8f:40:9c:48:60:33:67:27:e5: 0e:59:27:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL6KK9z9R4y7XE10s5gd9gxlEfuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTA5MTAxOTMxMjBaFw0yNTA5MTExOTU3MjBaMDMxMTAvBgNV BAMTKEYxNTcyRjYyRkJFNUFBRDM1RkJEQkJGMUNCMTUxMTlBMTQ4QzJFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSf89tyiS11bdZUfqAyNZ4sHMR GvS7TGUCKP7CcAIqDJMj1ogvOr5yRD1ZqcYWOFi86+3Rnk+Fk/3rq4cQ70ANKNe0 yGdiRJM4EBLdwcKvAljswIyJPyfip7uWQ3hXvLHdgcbmUzPof1DoOFNtH6Ia23Nm Ocr0ZlRRo0sXbr+cXgRyNroT47usEwpzLjF97SQ0TNshOC3MwFePYi+dGQwuJYp3 LEAK2cYClVcjDsbzg9DFcfSHH0CLIeyxzLfsmi9t3pU63SFuOupVZo8W8HFt451d fVALN72yFZB7v//KcgFFrA25dMduqRhgvgdPXO2B4EMk04Ej3l3ub3ONKXSfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8VcvYvvlqtNfvbvxyxURmhSMLiwwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaTyH5OxTNJcQHwXYtAUl8f0zvBUy5MfBe+ZQNf/hknnifAI2+4Ma36UxLElc uy2D0ps5g1F4S0aPIiSJ021oKw+2VKT1u/Md4Kp/g0ppWssWrXBSbLrg1dAipi2B tki6/avys97KQx3A/+QuJ8uiZ4BLT5eIpjSsficPVG/37/xHVKL2r6wxyoy9M5mD tz6ECRam4JxX+w8R7UMzKMTlCK3ta46+s7sOm3YaOyCLIeUjBqLmfQzBXbeNDA4T cxudPkxkIoWqxV/DVXnRziajlUTJ/yGmzqQxGJLeWIxGwIJMctkpRN5J1WZ5dqX/ VJz36b4Tj0CcSGAzZyflDlknng== -----END CERTIFICATE-----Generated at Thu Sep 11 02:34:09 2025 by rpki-client