$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: FfyTT27dSGRKKvAou/ETaj8Wc1mcJiYZ/4UShZRkIJY= Subject key identifier: 88:1A:92:70:D8:BB:FA:63:39:71:B3:94:F2:F3:65:20:82:90:DB:35 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 2CCAD4996BD7008AE652C295BA602C3EAE845973 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 02D3 Signing time: Fri 19 Sep 2025 04:24:15 +0000 Manifest this update: Fri 19 Sep 2025 04:19:15 +0000 Manifest next update: Sat 20 Sep 2025 07:29:15 +0000 Files and hashes: 1: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) 2: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) 3: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: iFuHybfuhqpYZqIcG7IWvEmQMev3ntUJ9JfzSCnvXpc=) 4: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 05:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ca:d4:99:6b:d7:00:8a:e6:52:c2:95:ba:60:2c:3e:ae:84:59:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Sep 19 04:19:15 2025 GMT Not After : Sep 20 07:29:15 2025 GMT Subject: CN=881A9270D8BBFA633971B394F2F365208290DB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:79:03:f5:4c:24:b4:39:0c:1d:46:6e:85: e3:cc:60:97:4e:c4:35:ce:7d:73:c2:f4:5e:73:2d: 9f:f1:d2:ae:7b:42:3f:61:9f:10:23:ed:63:cf:12: f0:64:91:7b:1f:6e:aa:76:56:71:db:02:0b:d9:13: eb:b5:ea:97:f4:9f:0b:8a:49:09:43:e8:7c:55:c4: 6b:35:6f:2f:64:c7:84:b8:52:fc:c3:55:6c:bd:04: 4d:d0:4c:67:15:c9:47:04:a1:88:42:ea:aa:a1:1c: b0:a5:ba:ee:81:2e:fa:f0:2d:da:e5:69:be:5d:28: 7e:c7:4a:f5:55:98:8d:65:5f:0c:85:c8:b3:48:9f: 75:22:a7:2a:b5:57:1c:31:33:f9:12:c0:d1:f8:c7: 67:30:fe:16:b5:1a:ed:8e:9d:a1:87:6d:2e:2f:81: 5b:83:b0:af:9f:88:7e:34:36:b1:d4:3c:b6:ce:5c: 9e:b3:bd:2d:09:ee:0f:b9:3e:83:cf:51:07:dc:17: f5:49:fe:6d:c1:88:45:74:2d:2f:6f:36:46:70:62: 12:1d:3b:da:cf:3d:ba:94:3f:dd:a6:18:a5:6d:30: f8:6d:dc:41:f6:07:80:1c:bb:71:d9:e2:d0:e2:a1: 39:61:49:7c:ff:64:9f:38:30:e2:8e:6b:d9:fe:02: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:92:70:D8:BB:FA:63:39:71:B3:94:F2:F3:65:20:82:90:DB:35 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:d9:c7:ba:ea:07:59:5b:0d:07:62:37:b6:a0:82:7d:a4:af: b6:ba:00:83:ac:f2:41:05:57:86:aa:4f:e4:ac:04:ce:20:c6: af:1a:9f:75:eb:5a:49:c3:d7:37:70:71:b4:72:69:0c:2d:3b: c6:ac:f5:e5:68:05:76:f1:0a:31:7f:58:80:75:3f:84:5f:22: 3e:cf:54:aa:98:02:84:d1:89:ff:fc:fa:b0:47:28:d6:72:1a: 08:2c:9d:2f:86:22:bd:cc:93:92:e7:09:aa:ba:20:6a:ce:f3: 2f:ac:d6:0b:a1:97:dd:ae:49:2f:b7:ad:2f:f7:d3:85:b6:c9: e3:68:3e:04:38:04:ec:2e:34:8b:69:c2:9d:fb:36:97:d1:b3: dc:10:57:7e:9c:36:e6:dc:f3:71:6a:16:b8:43:ed:17:d5:dd: ab:13:98:47:f7:d3:15:43:fc:84:67:1a:db:f9:ee:86:e4:c9: 58:83:be:28:8c:a5:15:54:c4:1e:e8:63:da:dd:83:26:a3:f8: 11:2d:0d:3a:91:78:fc:2f:2a:eb:a7:8e:fd:a0:f1:19:57:44: 23:dd:14:98:99:1a:9c:34:08:d4:1a:94:ca:23:eb:04:86:c8: 97:3a:62:41:d2:32:67:32:e5:b3:ea:d4:f5:82:a0:58:40:28: 75:52:09:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULMrUmWvXAIrmUsKVumAsPq6EWXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTA5MTkwNDE5MTVaFw0yNTA5MjAwNzI5MTVaMDMxMTAvBgNV BAMTKDg4MUE5MjcwRDhCQkZBNjMzOTcxQjM5NEYyRjM2NTIwODI5MERCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QHkD9UwktDkMHUZuhePMYJdO xDXOfXPC9F5zLZ/x0q57Qj9hnxAj7WPPEvBkkXsfbqp2VnHbAgvZE+u16pf0nwuK SQlD6HxVxGs1by9kx4S4UvzDVWy9BE3QTGcVyUcEoYhC6qqhHLCluu6BLvrwLdrl ab5dKH7HSvVVmI1lXwyFyLNIn3Uipyq1VxwxM/kSwNH4x2cw/ha1Gu2OnaGHbS4v gVuDsK+fiH40NrHUPLbOXJ6zvS0J7g+5PoPPUQfcF/VJ/m3BiEV0LS9vNkZwYhId O9rPPbqUP92mGKVtMPht3EH2B4Acu3HZ4tDioTlhSXz/ZJ84MOKOa9n+AojjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiBqScNi7+mM5cbOU8vNlIIKQ2zUwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3dnHuuoHWVsNB2I3tqCCfaSvtroAg6zyQQVXhqpP5KwEziDGrxqfdetaScPX N3BxtHJpDC07xqz15WgFdvEKMX9YgHU/hF8iPs9UqpgChNGJ//z6sEco1nIaCCyd L4YivcyTkucJqrogas7zL6zWC6GX3a5JL7etL/fThbbJ42g+BDgE7C40i2nCnfs2 l9Gz3BBXfpw25tzzcWoWuEPtF9XdqxOYR/fTFUP8hGca2/nuhuTJWIO+KIylFVTE Huhj2t2DJqP4ES0NOpF4/C8q66eO/aDxGVdEI90UmJkanDQI1BqUyiPrBIbIlzpi QdIyZzLls+rU9YKgWEAodVIJ6A== -----END CERTIFICATE-----Generated at Fri Sep 19 07:48:06 2025 by rpki-client