$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json) Hash identifier: 8b3H4ngujb0/jhvE/5Fm64uf1cEsOFly7Bc1cZb33jI= Subject key identifier: 16:3B:61:B3:34:07:32:A1:7C:58:FF:44:09:4E:A7:60:5F:37:21:3E Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Certificate serial: 7D1DABC84D708CC1EC3DCB558DF8E5390B123E7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft Manifest number: 02C7 Signing time: Fri 19 Sep 2025 00:57:04 +0000 Manifest this update: Fri 19 Sep 2025 00:52:04 +0000 Manifest next update: Sat 20 Sep 2025 04:55:04 +0000 Files and hashes: 1: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: 7mTGxBcJmB0cXKah+UHKsduoO+SpzBlH0SwtKtwt3pY=) 2: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: tgx0Vy+5T1TRke2lMS4iT0Zn+4rmirQHSXevJR078lc=) 3: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: 4w1Zsldps5C5HOMXHcxudIiN7nho7UtY9Z6GZP9xIsE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 04:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1d:ab:c8:4d:70:8c:c1:ec:3d:cb:55:8d:f8:e5:39:0b:12:3e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Validity Not Before: Sep 19 00:52:04 2025 GMT Not After : Sep 20 04:55:04 2025 GMT Subject: CN=163B61B3340732A17C58FF44094EA7605F37213E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:96:17:e3:ed:16:06:02:e3:56:88:8a:c9:6a: 43:66:51:ca:73:91:a2:bf:aa:4c:a2:0e:f6:d9:dd: 5e:a2:b9:06:f2:cd:68:45:a0:3b:df:bb:e6:61:d8: d9:35:61:ac:a9:4c:c7:47:d0:7b:01:30:5f:04:90: ba:75:ba:1d:cf:a2:57:0f:87:a0:a8:34:e0:18:47: dd:96:4c:18:5b:79:f6:10:63:06:da:7c:62:ee:d6: 0a:c6:c8:73:00:c0:fd:dc:73:bb:e9:91:6c:34:ce: e0:b6:71:4e:5d:56:c4:dc:3b:e1:a9:85:e2:a0:76: e0:9e:7f:53:db:27:ee:33:e1:4a:ea:90:dd:a7:81: 79:77:94:39:3d:d2:74:91:b3:65:35:7e:8e:57:a2: 20:ab:8c:15:45:da:ee:59:e8:ce:85:52:31:79:15: 4b:9b:65:b3:ed:01:31:b9:cf:af:c6:1d:5d:7a:d4: a3:38:e3:53:ea:f6:a9:28:3b:78:6c:e4:90:bb:5c: ee:88:60:e9:b6:7a:0a:fd:cd:0c:5c:c4:79:4f:60: a3:f4:2e:f2:ce:da:33:cc:c8:67:34:04:7f:2e:28: f5:ab:0e:59:5e:b1:53:fb:f9:3e:94:33:63:a3:7c: 59:a1:dc:44:84:03:d9:71:65:ff:1b:2c:1f:c5:62: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3B:61:B3:34:07:32:A1:7C:58:FF:44:09:4E:A7:60:5F:37:21:3E X509v3 Authority Key Identifier: keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:37:8b:f1:8c:90:97:3b:fb:09:b4:4e:5f:e5:03:a4:ff:f3: 15:b5:cf:d1:59:07:61:7a:88:1f:84:f0:23:3a:cf:c7:6a:48: 6f:7a:ad:01:af:95:be:f1:de:8c:23:db:59:ef:46:ce:b1:d1: 56:8e:28:4a:21:91:f8:db:6b:c7:fa:da:9a:a2:ff:e5:35:75: 92:be:7f:72:7b:d3:7a:ff:4e:2a:5b:ed:23:4a:8f:ef:f6:bf: 53:bc:6d:01:16:14:93:c4:e9:2e:68:a1:9b:c7:af:63:93:68: 1b:0e:49:0b:72:a9:df:99:3e:b8:42:29:dd:d9:21:3b:41:42: 4d:5d:53:ae:fd:38:56:fc:78:f6:89:8c:4b:08:1d:2b:f9:a3: 0d:53:67:2b:41:9b:84:4b:78:c3:5c:27:e8:44:0d:75:6d:ed: 30:a8:43:65:2e:7a:28:a7:1d:42:a0:cd:79:b0:0d:9f:fe:4c: 63:54:ac:ff:50:4a:37:e8:34:ba:d2:a9:7f:d7:62:db:62:5b: 5f:3b:96:ea:a7:1b:bf:4e:62:c4:c7:2c:09:66:cc:56:fc:1c: 5f:99:84:cc:66:a9:cf:aa:e2:82:e5:3c:a6:0a:4e:ce:78:c2: 62:e8:5e:b9:e9:a0:c2:50:30:c9:4a:24:4f:a0:37:f8:59:a5: 45:50:37:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfR2ryE1wjMHsPctVjfjlOQsSPn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUExQUNBM0E2OTc4QUVDMkQyREY0RDI5RUI0QjM1 OUIzRjY5QjAeFw0yNTA5MTkwMDUyMDRaFw0yNTA5MjAwNDU1MDRaMDMxMTAvBgNV BAMTKDE2M0I2MUIzMzQwNzMyQTE3QzU4RkY0NDA5NEVBNzYwNUYzNzIxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzlhfj7RYGAuNWiIrJakNmUcpz kaK/qkyiDvbZ3V6iuQbyzWhFoDvfu+Zh2Nk1YaypTMdH0HsBMF8EkLp1uh3PolcP h6CoNOAYR92WTBhbefYQYwbafGLu1grGyHMAwP3cc7vpkWw0zuC2cU5dVsTcO+Gp heKgduCef1PbJ+4z4UrqkN2ngXl3lDk90nSRs2U1fo5XoiCrjBVF2u5Z6M6FUjF5 FUubZbPtATG5z6/GHV161KM441Pq9qkoO3hs5JC7XO6IYOm2egr9zQxcxHlPYKP0 LvLO2jPMyGc0BH8uKPWrDllesVP7+T6UM2OjfFmh3ESEA9lxZf8bLB/FYgbFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFjthszQHMqF8WP9ECU6nYF83IT4wHwYDVR0j BBgwFoAUM+qhrKOml4rsLS300p60s1mz9pswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGpp TWMvMS8zM0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUFBMUFDQTNBNjk3OEFF QzJEMkRGNEQyOUVCNEIzNTlCM0Y2OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGppTWMvMS8z M0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeTeL8YyQlzv7CbROX+UDpP/zFbXP0VkHYXqIH4TwIzrPx2pIb3qtAa+VvvHe jCPbWe9GzrHRVo4oSiGR+Ntrx/ramqL/5TV1kr5/cnvTev9OKlvtI0qP7/a/U7xt ARYUk8TpLmihm8evY5NoGw5JC3Kp35k+uEIp3dkhO0FCTV1Trv04Vvx49omMSwgd K/mjDVNnK0GbhEt4w1wn6EQNdW3tMKhDZS56KKcdQqDNebANn/5MY1Ss/1BKN+g0 utKpf9di22JbXzuW6qcbv05ixMcsCWbMVvwcX5mEzGapz6riguU8pgpOznjCYuhe uemgwlAwyUokT6A3+FmlRVA3Ew== -----END CERTIFICATE-----Generated at Fri Sep 19 17:47:54 2025 by rpki-client