$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: vy77ZR3+qNHAvoyn+2ENzI88Z8uqMWww6StguB5gXyw= Subject key identifier: A4:C6:6B:91:86:0C:2A:6C:A2:31:6C:38:77:50:43:6E:F5:D6:AA:F7 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 2B06D40D2D551EE7951AB647EFF615D6CC13CFA4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 030F Signing time: Mon 03 Nov 2025 06:05:43 +0000 Manifest this update: Mon 03 Nov 2025 06:00:43 +0000 Manifest next update: Tue 04 Nov 2025 06:41:43 +0000 Files and hashes: 1: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=) 2: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) 3: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: REfbxWyg44NWDiBVHKL0kS+5b5ymP7AhBDN8FyPeU4o=) 4: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:06:d4:0d:2d:55:1e:e7:95:1a:b6:47:ef:f6:15:d6:cc:13:cf:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Nov 3 06:00:43 2025 GMT Not After : Nov 4 06:41:43 2025 GMT Subject: CN=A4C66B91860C2A6CA2316C387750436EF5D6AAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:76:f5:96:b1:b0:28:5e:e3:41:c8:a4:cf: b7:15:7a:3f:db:fe:e6:f2:da:6e:2c:9e:a8:ec:ca: 32:6a:ed:0e:6d:3f:b9:20:ed:be:7f:3f:14:e7:4c: 88:ee:52:7a:53:4a:03:6d:2e:50:70:8d:6d:5e:36: ae:1c:b6:85:4b:c3:9c:33:5b:4f:a0:16:7c:f5:d6: 33:26:90:2f:1a:b0:fb:26:b5:7a:20:51:30:60:dd: b2:a5:61:de:14:9c:73:dd:b9:04:03:54:d2:48:c8: dc:12:40:fe:b4:bb:ae:e6:02:bb:bc:dc:51:2d:f0: 0a:a7:30:8b:fa:65:7a:31:78:40:33:45:58:4e:14: b5:cd:62:0b:da:dc:88:36:72:bd:25:2a:06:30:dd: c3:b5:c2:d2:36:94:bd:18:b1:ac:32:33:dc:05:79: 92:33:95:88:72:b0:ce:9c:e6:8e:b1:3e:03:ee:c6: 22:4b:d1:54:06:33:e0:a5:2e:fd:a6:99:3e:76:6c: 4b:e9:a5:2d:4f:4a:b4:38:de:33:a5:af:76:f3:47: 08:aa:f8:5f:b7:a4:27:db:86:92:ba:73:f0:5e:be: 73:9a:f8:f0:ee:2d:f4:cf:e2:3a:4a:63:0a:dd:6b: 91:ab:94:a6:3d:be:c1:a0:59:fe:1f:15:37:c8:0c: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C6:6B:91:86:0C:2A:6C:A2:31:6C:38:77:50:43:6E:F5:D6:AA:F7 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:65:50:48:ff:94:f7:03:68:81:59:3c:cc:5b:81:77:f5:d5: f4:28:6b:66:68:16:10:62:b7:91:35:28:5c:dd:66:d0:ca:d6: ee:97:e1:db:c4:72:94:1d:aa:0b:57:b4:96:59:69:c2:b9:25: a9:a8:42:85:4b:55:ef:5b:b9:0f:7b:97:67:fa:0b:a5:5d:bf: 6f:ad:c7:4e:37:4d:38:fa:f9:d7:40:4c:e7:1b:5d:86:7d:ed: 9a:0f:2f:f5:33:68:6b:ed:71:83:6c:ff:bf:52:97:86:d8:97: f7:af:d1:59:7d:a8:e7:7b:d8:65:ff:e5:ae:32:62:a1:20:bb: 47:d0:14:6a:d1:fd:f4:f4:a9:ee:65:80:db:41:b9:1a:e8:96: 30:36:0f:eb:ee:30:8a:cf:3a:99:37:79:ad:dd:06:f3:fe:b2: 35:80:f2:36:37:d5:fa:f5:da:dd:18:4f:20:a1:00:2b:d9:55: bd:83:72:0c:77:02:46:16:2f:fd:ed:5c:7c:a9:0f:c4:8e:a0: 5e:ae:7f:c6:66:06:fc:b9:98:73:12:49:4a:b7:fe:95:00:22: 36:18:09:ef:0e:be:cd:e5:7e:3f:64:b1:d6:2b:a0:a7:d1:17: a1:04:4b:4b:c5:be:cb:88:c7:44:64:92:b3:e0:b4:7e:77:66: b6:89:7b:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKwbUDS1VHueVGrZH7/YV1swTz6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTExMDMwNjAwNDNaFw0yNTExMDQwNjQxNDNaMDMxMTAvBgNV BAMTKEE0QzY2QjkxODYwQzJBNkNBMjMxNkMzODc3NTA0MzZFRjVENkFBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3nb1lrGwKF7jQcikz7cVej/b /uby2m4snqjsyjJq7Q5tP7kg7b5/PxTnTIjuUnpTSgNtLlBwjW1eNq4ctoVLw5wz W0+gFnz11jMmkC8asPsmtXogUTBg3bKlYd4UnHPduQQDVNJIyNwSQP60u67mAru8 3FEt8AqnMIv6ZXoxeEAzRVhOFLXNYgva3Ig2cr0lKgYw3cO1wtI2lL0YsawyM9wF eZIzlYhysM6c5o6xPgPuxiJL0VQGM+ClLv2mmT52bEvppS1PSrQ43jOlr3bzRwiq +F+3pCfbhpK6c/BevnOa+PDuLfTP4jpKYwrda5GrlKY9vsGgWf4fFTfIDB8XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpMZrkYYMKmyiMWw4d1BDbvXWqvcwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcmVQSP+U9wNogVk8zFuBd/XV9ChrZmgWEGK3kTUoXN1m0MrW7pfh28RylB2q C1e0lllpwrklqahChUtV71u5D3uXZ/oLpV2/b63HTjdNOPr510BM5xtdhn3tmg8v 9TNoa+1xg2z/v1KXhtiX96/RWX2o53vYZf/lrjJioSC7R9AUatH99PSp7mWA20G5 GuiWMDYP6+4wis86mTd5rd0G8/6yNYDyNjfV+vXa3RhPIKEAK9lVvYNyDHcCRhYv /e1cfKkPxI6gXq5/xmYG/LmYcxJJSrf+lQAiNhgJ7w6+zeV+P2Sx1iugp9EXoQRL S8W+y4jHRGSSs+C0fndmtol7fg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:06:52 2025 by rpki-client