$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft File: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json) Hash identifier: AZtww6u5flUorgmOXQjkAkj5cqf604FEEZWuwTk3+30= Subject key identifier: DC:1C:FC:69:44:EF:D9:E3:75:93:04:A4:69:A1:F0:9A:77:3B:B7:DE Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA Certificate issuer: /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Certificate serial: 338CC085EA4F34114878FBD06C78F622D534F43D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft Manifest number: 0229 Signing time: Mon 03 Nov 2025 03:43:01 +0000 Manifest this update: Mon 03 Nov 2025 03:38:01 +0000 Manifest next update: Tue 04 Nov 2025 06:16:01 +0000 Files and hashes: 1: 34352e3136322e3231322e302f32322d3332203d3e20323638353634.roa (hash: ezJVm/RyZ7vHKrjB8DTRPK5q9lhj+iYdELF2LjMpBz0=) 2: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: wCMvy+lONActUFIlwj1lawvRBo9eyNPXNLhNxgg9K/U=) 3: 323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (hash: bw1WW6GWbWeJMCOoifTsH4AiSiS5eco7vGabyTZ4xYs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8c:c0:85:ea:4f:34:11:48:78:fb:d0:6c:78:f6:22:d5:34:f4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Validity Not Before: Nov 3 03:38:01 2025 GMT Not After : Nov 4 06:16:01 2025 GMT Subject: CN=DC1CFC6944EFD9E3759304A469A1F09A773BB7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:97:83:5c:c7:fc:b0:9a:c1:48:0a:68:78: c5:f1:53:f2:8a:ad:27:9f:69:e6:e0:89:08:a4:66: 0e:d5:1f:bd:35:df:ad:19:94:4a:9e:4a:16:37:79: a8:35:cc:13:0c:d0:eb:3e:e6:9e:82:11:63:88:98: de:56:7c:4d:88:3c:be:af:ee:dc:30:62:9e:45:cf: b3:c0:a0:b5:cb:e4:01:11:bf:11:e4:c9:29:4b:5f: 9f:2d:08:ed:58:1b:1e:f4:7f:22:31:a9:67:6b:a7: a6:a2:58:e2:d9:54:b3:56:05:d5:29:9a:39:44:5a: de:3d:11:54:49:65:44:2f:95:e0:a6:c6:5f:a2:c1: d2:89:13:89:f1:a4:a3:2b:53:41:6b:05:9d:46:94: 77:1d:58:15:4f:02:1f:c7:4a:cd:c7:93:89:ab:39: 77:55:55:e1:1a:36:8d:51:4e:fb:0a:e2:44:f8:0c: 9f:5c:3a:19:dc:e3:8a:29:11:d4:ee:ae:6c:cc:62: 30:46:3b:fb:75:40:e0:09:d2:43:4c:75:02:88:cb: 1a:04:48:a0:46:c4:24:9a:e9:63:cf:ad:e1:34:26: 47:17:af:28:10:e3:e2:62:4b:fc:db:82:81:1c:23: 93:f3:82:b7:0b:0c:30:2a:05:62:de:f8:d8:cb:6f: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:FC:69:44:EF:D9:E3:75:93:04:A4:69:A1:F0:9A:77:3B:B7:DE X509v3 Authority Key Identifier: keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9d:db:bb:4d:7c:cd:d0:7f:b7:b3:c1:ee:07:e6:49:68:22: 71:38:d4:cb:a0:ce:e2:0b:7f:7b:5f:3c:ed:7a:cd:1f:40:6d: ff:49:58:75:0b:36:5f:88:de:3b:00:59:85:1e:c2:38:c3:a5: 8c:c3:b9:81:c7:cd:2d:03:52:21:de:fc:db:1f:a1:36:6c:a6: b9:1e:67:28:23:12:cd:ca:79:af:89:0c:d1:f6:39:4e:e7:df: 24:11:88:bd:03:55:5b:87:6e:86:a8:8c:47:5e:4b:42:c0:30: 14:16:ea:ab:35:82:34:01:6e:df:d7:9c:d7:33:a9:57:95:70: 12:0b:33:4d:a3:c8:49:9e:dd:5d:50:0c:ec:e6:3a:0f:d8:b9: f1:73:f6:68:06:62:a5:07:08:1f:0f:ed:79:37:a0:d8:a3:bf: 85:32:a4:d5:a5:c4:79:eb:d1:01:02:09:7f:70:6e:4b:78:28: 9c:19:15:2c:19:96:c7:00:6c:58:3f:98:72:40:78:8a:92:36: 31:ea:8b:e8:b4:dd:8b:bd:23:73:65:6b:d3:4a:65:1a:45:c0: f7:15:b2:52:c3:41:80:08:d0:8d:58:e8:15:ba:ed:87:e1:c3: 8b:c2:98:70:d0:67:9c:6d:95:b6:c4:cc:73:5a:92:1e:a2:a9: ab:41:f2:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM4zAhepPNBFIePvQbHj2ItU09D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzM0MxQ0ZDMTE3QTM3OTE4RDRCRDVCNjRCMjMzQUU5 MTJBNDBCQTAeFw0yNTExMDMwMzM4MDFaFw0yNTExMDQwNjE2MDFaMDMxMTAvBgNV BAMTKERDMUNGQzY5NDRFRkQ5RTM3NTkzMDRBNDY5QTFGMDlBNzczQkI3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9eJeDXMf8sJrBSApoeMXxU/KK rSefaebgiQikZg7VH701360ZlEqeShY3eag1zBMM0Os+5p6CEWOImN5WfE2IPL6v 7twwYp5Fz7PAoLXL5AERvxHkySlLX58tCO1YGx70fyIxqWdrp6aiWOLZVLNWBdUp mjlEWt49EVRJZUQvleCmxl+iwdKJE4nxpKMrU0FrBZ1GlHcdWBVPAh/HSs3Hk4mr OXdVVeEaNo1RTvsK4kT4DJ9cOhnc44opEdTurmzMYjBGO/t1QOAJ0kNMdQKIyxoE SKBGxCSa6WPPreE0JkcXrygQ4+JiS/zbgoEcI5PzgrcLDDAqBWLe+NjLb80XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3Bz8aUTv2eN1kwSkaaHwmnc7t94wHwYDVR0j BBgwFoAU/zPBz8EXo3kY1L1bZLIzrpEqQLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC9GRjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNDMUNGQzExN0EzNzkx OEQ0QkQ1QjY0QjIzM0FFOTEyQTQwQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMC9G RjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYZ3bu018zdB/t7PB7gfmSWgicTjUy6DO4gt/e1887XrNH0Bt/0lYdQs2X4je OwBZhR7COMOljMO5gcfNLQNSId782x+hNmymuR5nKCMSzcp5r4kM0fY5TuffJBGI vQNVW4duhqiMR15LQsAwFBbqqzWCNAFu39ec1zOpV5VwEgszTaPISZ7dXVAM7OY6 D9i58XP2aAZipQcIHw/teTeg2KO/hTKk1aXEeevRAQIJf3BuS3gonBkVLBmWxwBs WD+YckB4ipI2MeqL6LTdi70jc2Vr00plGkXA9xWyUsNBgAjQjVjoFbrth+HDi8KY cNBnnG2VtsTMc1qSHqKpq0HyKw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:27 2025 by rpki-client