$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: UVkE6/00g1V1tT5ibd6m+NrVPkxs5TUmNP0AKY77dk0= Subject key identifier: 78:88:12:4D:FC:5E:60:2E:65:58:1F:4F:4D:F5:0E:EC:4C:E9:3D:4C Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 36C58966492AF9B5E246678C37A4E426643D49CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 0309 Signing time: Sun 02 Nov 2025 19:17:42 +0000 Manifest this update: Sun 02 Nov 2025 19:12:42 +0000 Manifest next update: Mon 03 Nov 2025 20:49:42 +0000 Files and hashes: 1: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: JSr7TuP5kuJirdrYKsM4xjJwYPQFLYLakXpNaRSqJj4=) 3: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /XwYHZupa+FJTNO5XsovX8RlSGV6OfQ7o5Ml47Ou0qE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c5:89:66:49:2a:f9:b5:e2:46:67:8c:37:a4:e4:26:64:3d:49:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Nov 2 19:12:42 2025 GMT Not After : Nov 3 20:49:42 2025 GMT Subject: CN=7888124DFC5E602E65581F4F4DF50EEC4CE93D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:5d:48:ea:bf:7e:4d:85:f1:6d:4b:74:02: e9:39:05:e9:2d:03:86:e2:95:cb:a2:40:60:e5:8e: 13:3a:8a:a3:2d:08:59:18:0f:c1:86:5e:10:56:45: 76:66:c1:13:ec:26:48:a8:4f:0b:96:18:a9:91:1c: 4e:94:c3:a2:5a:1b:c1:43:90:6f:4e:0b:ac:da:b1: 1f:1e:73:7a:5c:e9:73:71:69:9e:e8:19:b5:39:aa: a1:7e:22:21:bf:3c:d1:5e:c8:c7:52:1d:98:c5:c4: 75:09:81:7a:11:c9:fd:4e:7d:0c:4c:41:da:3f:87: 6d:f2:bb:56:01:ae:6a:98:b1:0c:d6:4f:e2:2a:b0: 4d:b9:cd:2f:c4:fe:08:5f:d7:90:ef:cf:61:2f:68: 13:82:90:f8:4f:cf:1e:a0:fc:ac:2c:2e:9d:c3:59: 03:87:42:4b:5b:24:a3:81:f0:3c:e8:d4:2f:f6:02: b0:1f:a8:bd:39:05:da:e4:2a:b1:13:6f:f9:0c:28: 29:8b:ed:98:a6:c1:55:96:5d:63:35:b3:49:97:f3: a3:6d:c8:5a:e5:11:ce:53:00:b5:0f:fd:a4:c9:2f: 21:a2:49:36:40:29:c3:7e:f1:2f:73:59:2e:1b:13: cd:b0:81:bf:80:08:af:a9:06:25:03:75:67:8f:53: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:88:12:4D:FC:5E:60:2E:65:58:1F:4F:4D:F5:0E:EC:4C:E9:3D:4C X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:91:71:e6:96:13:cb:92:b8:22:42:dd:05:7e:00:00:e7:f5: bd:20:81:82:c8:de:49:07:cc:7c:94:f3:9b:7b:db:4a:92:1b: 59:5b:eb:2e:ca:7b:ea:9f:c0:9e:85:9e:2a:f2:bf:e3:5b:da: ea:de:86:66:e7:76:8a:1b:6b:77:22:00:6c:49:76:43:59:8b: e8:d1:0e:e1:85:f9:9a:7e:65:53:22:a5:e9:0b:64:3f:9f:b4: 5b:bf:d4:8b:78:cb:b9:00:2e:36:c9:ff:f8:05:6c:c1:5a:9e: 99:45:0f:c5:d0:49:63:3a:79:05:93:fd:ad:e1:0d:6e:52:3c: 8f:3c:55:6f:5f:24:5a:14:6e:b1:5f:95:35:ec:b5:d0:6c:14: f2:52:6f:28:fe:8c:b4:52:bf:a5:96:7b:aa:6b:76:70:d9:a4: c2:4c:19:aa:31:1e:67:a8:39:eb:ac:85:b4:3f:dc:b7:e7:db: 4b:a7:3b:a4:5b:2f:c1:7f:4d:58:73:fb:12:bf:53:85:1a:eb: b9:45:64:75:a1:55:94:79:bf:f7:a0:06:19:66:e1:42:82:34: 95:0d:86:a9:f4:be:0c:83:f8:61:1b:94:32:4e:d0:e9:59:c8: 01:86:89:b2:bc:14:51:f8:b4:67:50:4e:e2:47:e8:01:4e:de: 64:19:43:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNsWJZkkq+bXiRmeMN6TkJmQ9Sc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTExMDIxOTEyNDJaFw0yNTExMDMyMDQ5NDJaMDMxMTAvBgNV BAMTKDc4ODgxMjRERkM1RTYwMkU2NTU4MUY0RjRERjUwRUVDNENFOTNENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ml1I6r9+TYXxbUt0Auk5Bekt A4bilcuiQGDljhM6iqMtCFkYD8GGXhBWRXZmwRPsJkioTwuWGKmRHE6Uw6JaG8FD kG9OC6zasR8ec3pc6XNxaZ7oGbU5qqF+IiG/PNFeyMdSHZjFxHUJgXoRyf1OfQxM Qdo/h23yu1YBrmqYsQzWT+IqsE25zS/E/ghf15Dvz2EvaBOCkPhPzx6g/KwsLp3D WQOHQktbJKOB8Dzo1C/2ArAfqL05BdrkKrETb/kMKCmL7ZimwVWWXWM1s0mX86Nt yFrlEc5TALUP/aTJLyGiSTZAKcN+8S9zWS4bE82wgb+ACK+pBiUDdWePU2hDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeIgSTfxeYC5lWB9PTfUO7EzpPUwwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZFx5pYTy5K4IkLdBX4AAOf1vSCBgsjeSQfMfJTzm3vbSpIbWVvrLsp76p/A noWeKvK/41va6t6GZud2ihtrdyIAbEl2Q1mL6NEO4YX5mn5lUyKl6QtkP5+0W7/U i3jLuQAuNsn/+AVswVqemUUPxdBJYzp5BZP9reENblI8jzxVb18kWhRusV+VNey1 0GwU8lJvKP6MtFK/pZZ7qmt2cNmkwkwZqjEeZ6g566yFtD/ct+fbS6c7pFsvwX9N WHP7Er9ThRrruUVkdaFVlHm/96AGGWbhQoI0lQ2GqfS+DIP4YRuUMk7Q6VnIAYaJ srwUUfi0Z1BO4kfoAU7eZBlDvQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:30 2025 by rpki-client