$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json) Hash identifier: 6ETxwf0Qzy3fD47qSOxq0oNy0pisqMLh6iMEubId7Lc= Subject key identifier: 3B:D3:36:21:B2:4A:0D:A5:1A:EC:4C:1C:68:67:86:BD:39:20:34:2D Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Certificate serial: 0F81E4DFB0095D8B1E1FDE372919BF4DED3D2BFB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft Manifest number: 0241 Signing time: Mon 09 Jun 2025 21:39:12 +0000 Manifest this update: Mon 09 Jun 2025 21:34:12 +0000 Manifest next update: Wed 11 Jun 2025 00:37:12 +0000 Files and hashes: 1: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: 7mTGxBcJmB0cXKah+UHKsduoO+SpzBlH0SwtKtwt3pY=) 2: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: tgx0Vy+5T1TRke2lMS4iT0Zn+4rmirQHSXevJR078lc=) 3: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: K2iaoHKFumHxJDt1/vxB54spSHY4VsA80VUfccyz/+Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 00:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:81:e4:df:b0:09:5d:8b:1e:1f:de:37:29:19:bf:4d:ed:3d:2b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Validity Not Before: Jun 9 21:34:12 2025 GMT Not After : Jun 11 00:37:12 2025 GMT Subject: CN=3BD33621B24A0DA51AEC4C1C686786BD3920342D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:c0:8e:89:f9:07:7a:0d:c7:b2:67:62:af: c6:12:14:27:f8:17:35:69:2d:21:10:6a:a2:de:74: d7:b5:0a:14:74:10:b8:dc:6b:1e:ab:e6:30:d4:d1: 76:60:07:98:9a:ae:be:d6:8f:b6:7e:8a:d4:ab:61: 84:84:a5:72:df:e4:15:32:ca:78:db:7e:3f:5f:70: 73:3d:2a:24:1e:24:5e:50:33:99:36:27:4f:1f:8c: 7f:82:6d:5d:77:7b:41:44:95:dd:06:33:c4:0c:91: 28:9d:e4:7d:c5:0a:00:1d:40:26:51:a7:ba:2e:1e: 05:d5:dc:5b:68:90:08:08:9e:38:23:69:dc:e6:d4: 8d:17:a9:2e:1c:e8:a4:d9:84:fd:48:63:29:ef:54: 58:a1:9c:51:85:e9:c2:5a:40:00:a4:97:bf:ce:96: bb:1e:3a:95:6d:8f:29:5c:b9:07:46:f9:91:89:e5: 54:18:e2:84:f3:70:0d:9a:67:8f:82:09:98:50:43: f0:b1:58:ce:2d:9a:04:fe:ed:06:08:2f:14:0b:c7: fe:89:24:90:23:61:f0:a0:c7:23:cd:3a:31:0e:04: c0:c0:ed:06:b3:52:a8:64:ef:c8:46:d3:35:48:93: 6f:7e:30:49:95:b1:1b:83:58:56:9c:20:17:ca:0d: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:36:21:B2:4A:0D:A5:1A:EC:4C:1C:68:67:86:BD:39:20:34:2D X509v3 Authority Key Identifier: keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b6:ae:cf:fc:0c:75:f7:b0:3a:52:84:eb:f4:7a:72:21:9b: 7b:0a:b1:39:f1:28:30:d1:d2:b3:0b:c1:ea:87:da:99:eb:92: aa:ec:52:75:c3:4c:65:b2:ce:e7:43:f0:f4:b8:93:e6:d5:d0: ad:7c:7f:07:1a:cd:36:e3:94:17:04:e5:22:75:c5:08:8f:05: c4:33:8b:fb:dd:2a:d9:5f:a9:1e:fa:08:bf:28:a1:4b:2a:66: 1d:c9:06:6d:41:27:ba:49:b1:d5:91:e0:a3:6f:85:33:62:9b: f3:f0:4e:5b:32:3c:8b:23:81:b8:f1:b8:b8:3f:d9:20:89:cb: 5f:87:8d:8a:a1:da:8c:66:1c:60:62:0f:22:5a:5f:4a:49:82: f9:62:c5:8f:e9:55:f6:3b:ea:66:32:90:9c:d3:1c:4b:89:e8: a2:2f:23:68:da:cf:52:51:a7:23:fe:b7:31:ef:39:a3:15:ed: 56:c6:a8:41:1b:e2:2f:64:fe:58:cc:1c:7a:f9:5e:1c:7e:aa: 7c:45:0d:0b:5f:b4:08:c7:32:b4:de:1e:61:d3:1c:ab:ed:97: 1e:fe:5d:58:fb:c6:ac:f1:cf:0d:bb:4a:57:82:ce:90:ec:ee: b6:df:79:a5:0d:18:c8:7a:6d:a7:12:16:50:1d:77:91:a9:33: 48:87:4b:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD4Hk37AJXYseH943KRm/Te09K/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUExQUNBM0E2OTc4QUVDMkQyREY0RDI5RUI0QjM1 OUIzRjY5QjAeFw0yNTA2MDkyMTM0MTJaFw0yNTA2MTEwMDM3MTJaMDMxMTAvBgNV BAMTKDNCRDMzNjIxQjI0QTBEQTUxQUVDNEMxQzY4Njc4NkJEMzkyMDM0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjB8COifkHeg3Hsmdir8YSFCf4 FzVpLSEQaqLedNe1ChR0ELjcax6r5jDU0XZgB5iarr7Wj7Z+itSrYYSEpXLf5BUy ynjbfj9fcHM9KiQeJF5QM5k2J08fjH+CbV13e0FEld0GM8QMkSid5H3FCgAdQCZR p7ouHgXV3FtokAgInjgjadzm1I0XqS4c6KTZhP1IYynvVFihnFGF6cJaQACkl7/O lrseOpVtjylcuQdG+ZGJ5VQY4oTzcA2aZ4+CCZhQQ/CxWM4tmgT+7QYILxQLx/6J JJAjYfCgxyPNOjEOBMDA7QazUqhk78hG0zVIk29+MEmVsRuDWFacIBfKDXyvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO9M2IbJKDaUa7EwcaGeGvTkgNC0wHwYDVR0j BBgwFoAUM+qhrKOml4rsLS300p60s1mz9pswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGpp TWMvMS8zM0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUFBMUFDQTNBNjk3OEFF QzJEMkRGNEQyOUVCNEIzNTlCM0Y2OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGppTWMvMS8z M0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi7auz/wMdfewOlKE6/R6ciGbewqxOfEoMNHSswvB6ofameuSquxSdcNMZbLO 50Pw9LiT5tXQrXx/BxrNNuOUFwTlInXFCI8FxDOL+90q2V+pHvoIvyihSypmHckG bUEnukmx1ZHgo2+FM2Kb8/BOWzI8iyOBuPG4uD/ZIInLX4eNiqHajGYcYGIPIlpf SkmC+WLFj+lV9jvqZjKQnNMcS4nooi8jaNrPUlGnI/63Me85oxXtVsaoQRviL2T+ WMwcevleHH6qfEUNC1+0CMcytN4eYdMcq+2XHv5dWPvGrPHPDbtKV4LOkOzutt95 pQ0YyHptpxIWUB13kakzSIdLVg== -----END CERTIFICATE-----Generated at Tue Jun 10 09:31:30 2025 by rpki-client