$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: Nix5G3LWTgatbyGaISyZlRfvvD6p20jaVRaB9DTJIG4= Subject key identifier: F5:CC:1E:AB:E8:63:40:F9:D4:BB:AF:87:6B:62:60:59:AC:23:9C:83 Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 38C87781DD8E38E67C6382D1707C8DC077A53688 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: A8 Signing time: Mon 03 Nov 2025 11:17:28 +0000 Manifest this update: Mon 03 Nov 2025 11:12:28 +0000 Manifest next update: Tue 04 Nov 2025 11:31:28 +0000 Files and hashes: 1: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) 2: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: IrI6bYJxiL6+oUSWhNoE7S5fIeKlOzithd9LPFANq3k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c8:77:81:dd:8e:38:e6:7c:63:82:d1:70:7c:8d:c0:77:a5:36:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Nov 3 11:12:28 2025 GMT Not After : Nov 4 11:31:28 2025 GMT Subject: CN=F5CC1EABE86340F9D4BBAF876B626059AC239C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:96:aa:fe:43:24:7d:05:f3:b6:3b:64:a6: 56:92:6c:d5:d0:94:b4:d6:20:ec:74:87:68:f3:df: 9f:e5:f3:a6:ae:02:ef:34:fd:87:df:33:c9:da:e5: ff:7f:fe:f2:9c:d7:80:5a:fb:47:f8:7e:60:5f:f0: 04:07:42:1f:94:a2:c5:ef:fd:bb:c4:7f:97:83:a8: c2:b0:9c:46:e6:79:30:ec:ea:3f:ec:82:16:ed:2d: 8e:1c:7c:bf:8c:30:46:22:d0:2a:52:70:84:aa:04: dd:04:22:ed:f6:20:6e:ed:9e:df:c0:4c:2f:e0:15: 15:2c:ab:56:e5:e2:f6:93:25:04:a6:1c:cf:0a:ee: ed:80:03:db:c1:3b:f7:fa:b8:67:fb:90:8e:38:d7: d7:e8:98:4a:77:78:3c:37:e8:9a:41:a3:a3:95:d5: 1d:9e:57:d7:61:75:63:38:a2:f3:9e:0d:5a:99:a4: cd:aa:31:6c:d5:50:8a:51:21:b3:e7:b8:eb:05:b8: bd:c2:9b:86:c2:76:0d:55:db:84:69:f4:80:76:9e: ba:51:21:93:5f:c8:ba:59:8a:72:d2:85:e4:11:e9: ac:59:91:83:1d:71:00:8c:fa:89:1c:9c:b9:7c:15: 70:36:d4:1d:a1:e1:a1:07:76:c4:b2:a0:46:ea:7f: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CC:1E:AB:E8:63:40:F9:D4:BB:AF:87:6B:62:60:59:AC:23:9C:83 X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c0:38:2e:b9:85:15:28:1f:3d:12:8f:0c:d5:98:a6:cb:3f: 94:f8:c0:09:f9:9f:f1:3c:6c:87:d9:de:b0:08:e0:ea:2e:6c: 33:98:1b:97:b7:06:f4:4a:f8:3b:f3:a4:57:ba:fd:35:77:43: 80:53:51:2d:79:29:59:36:58:31:6e:02:1c:22:1a:78:5d:bf: 23:0a:d7:6f:d1:5c:0c:c1:b6:ef:66:30:0b:ae:4e:17:1c:4f: 26:b3:cb:3e:5c:9c:e4:04:26:1e:ec:32:ab:d9:6a:6d:1e:7b: cb:33:a1:cf:a3:3f:c6:17:5c:ab:6f:ab:45:fa:40:e9:85:1e: b3:47:7b:0d:20:e1:a8:ca:0b:14:5e:d6:70:a4:2a:e7:5b:97: 73:2f:a4:59:47:18:44:57:07:0c:c6:fe:4f:c4:ef:1b:9a:4f: 0d:18:90:ff:c1:71:80:b4:16:87:c1:58:0c:ff:38:05:e1:13: f4:0b:a2:dc:b7:8a:b4:95:9b:fd:5b:b5:fd:03:46:2d:d5:de: 2c:98:52:cf:4b:9c:b9:ef:cc:e9:25:8d:a2:04:1d:4b:18:b0: 0e:ab:82:10:2a:10:45:46:0e:c8:8f:99:3b:0d:ef:cf:37:6a: 52:ed:3a:33:87:a4:17:db:7e:f1:43:65:94:cc:d8:c4:a0:1d: 2e:3d:98:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOMh3gd2OOOZ8Y4LRcHyNwHelNogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNTExMDMxMTEyMjhaFw0yNTExMDQxMTMxMjhaMDMxMTAvBgNV BAMTKEY1Q0MxRUFCRTg2MzQwRjlENEJCQUY4NzZCNjI2MDU5QUMyMzlDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj9Zaq/kMkfQXztjtkplaSbNXQ lLTWIOx0h2jz35/l86auAu80/YffM8na5f9//vKc14Ba+0f4fmBf8AQHQh+UosXv /bvEf5eDqMKwnEbmeTDs6j/sghbtLY4cfL+MMEYi0CpScISqBN0EIu32IG7tnt/A TC/gFRUsq1bl4vaTJQSmHM8K7u2AA9vBO/f6uGf7kI4419fomEp3eDw36JpBo6OV 1R2eV9dhdWM4ovOeDVqZpM2qMWzVUIpRIbPnuOsFuL3Cm4bCdg1V24Rp9IB2nrpR IZNfyLpZinLSheQR6axZkYMdcQCM+okcnLl8FXA21B2h4aEHdsSyoEbqf7xjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9cweq+hjQPnUu6+Ha2JgWawjnIMwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsA4LrmFFSgfPRKPDNWYpss/lPjACfmf8Txsh9nesAjg6i5sM5gbl7cG9Er4 O/OkV7r9NXdDgFNRLXkpWTZYMW4CHCIaeF2/IwrXb9FcDMG272YwC65OFxxPJrPL Plyc5AQmHuwyq9lqbR57yzOhz6M/xhdcq2+rRfpA6YUes0d7DSDhqMoLFF7WcKQq 51uXcy+kWUcYRFcHDMb+T8TvG5pPDRiQ/8FxgLQWh8FYDP84BeET9Aui3LeKtJWb /Vu1/QNGLdXeLJhSz0ucue/M6SWNogQdSxiwDquCECoQRUYOyI+ZOw3vzzdqUu06 M4ekF9t+8UNllMzYxKAdLj2YEg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:08:26 2025 by rpki-client