$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: BKt9Ety9Sd+cbO6p+SH3ZF/Wqkst1ksPMdd1rF6EbWQ= Subject key identifier: 3A:52:2E:C5:96:33:E3:F5:50:61:49:A6:52:A7:FE:BA:5E:16:AE:F1 Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 7AC6D7E05FB22139A78415D7457A02FA55D7251B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: 0178 Signing time: Thu 09 Apr 2026 08:22:47 +0000 Manifest this update: Thu 09 Apr 2026 08:17:47 +0000 Manifest next update: Fri 10 Apr 2026 08:40:47 +0000 Files and hashes: 1: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: KGX6d4yWty6yBs9NCemPm4xSYihTX3u8JuBVlpzYsH0=) 2: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 08:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c6:d7:e0:5f:b2:21:39:a7:84:15:d7:45:7a:02:fa:55:d7:25:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Apr 9 08:17:47 2026 GMT Not After : Apr 10 08:40:47 2026 GMT Subject: CN=3A522EC59633E3F5506149A652A7FEBA5E16AEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:67:10:0c:42:f8:a8:27:82:da:78:5c:40: 2a:ea:14:2f:d4:91:1b:36:46:04:fe:1c:d1:e6:b2: 50:d9:33:56:c4:c2:c1:d6:8a:a6:60:a7:f0:d2:a0: 3c:09:32:77:34:2c:51:d2:2f:8d:b3:34:60:6c:f0: fd:6e:6a:40:c7:98:9e:32:54:ab:02:b1:31:ae:98: 1d:22:5a:16:0f:15:d6:2d:8e:e9:09:10:fa:02:89: 78:7c:a5:67:5f:b2:dd:32:08:6f:43:06:83:89:94: 31:05:a2:35:a7:09:31:30:8e:cc:f2:3b:8e:44:cf: 13:26:f0:79:19:40:d7:35:cd:01:fe:95:9c:b2:0d: b0:4c:0b:05:2c:17:3a:a9:e5:3c:cb:6f:cf:f2:b1: 74:41:7c:e7:98:bc:70:6c:17:58:d3:e2:ce:17:a1: 1c:52:04:c0:0a:ac:ba:e9:b8:e0:0e:15:e6:b8:d0: be:09:9b:fd:4a:06:fb:85:39:e2:9d:3e:65:41:e8: ec:bb:86:87:26:fb:ee:75:c9:be:4a:4b:b0:55:f3: d0:69:d3:48:86:f5:8f:e4:fc:ee:84:80:c1:18:44: 41:f9:2b:b4:e6:25:7b:2b:ed:19:e4:8a:c3:71:a7: a0:8b:5b:b7:aa:b3:a1:3a:02:0b:94:51:ec:6a:33: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:2E:C5:96:33:E3:F5:50:61:49:A6:52:A7:FE:BA:5E:16:AE:F1 X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7d:47:c0:8a:e9:46:7d:0c:b7:02:27:a0:df:28:d5:c1:0c: bb:98:99:24:4c:0e:5f:9d:81:c0:46:10:c9:99:d9:b5:a9:76: cf:93:22:45:56:28:05:1c:21:2e:7e:73:5c:55:73:a5:33:8a: 10:58:db:f4:e2:01:b6:0f:96:94:00:38:41:f8:94:f5:23:16: 2a:bc:d0:f1:4d:a5:c6:92:93:08:e8:18:fc:04:58:cc:ec:fa: d9:27:90:3b:40:21:34:1a:4b:57:fb:2b:ea:6f:4e:16:0e:83: a9:86:49:73:fb:20:ef:d4:9c:c9:07:1c:d6:6d:a9:fe:2c:02: 2e:93:4f:d7:b2:2f:b2:81:7a:dc:60:14:39:80:c8:6a:04:f2: d8:31:6d:15:7c:c5:6d:0c:f9:0a:af:9c:67:d4:aa:85:f8:4a: 01:67:e5:79:a8:3b:f3:7f:25:b7:27:2f:06:c8:cd:15:0d:4a: 0f:17:93:56:e7:53:17:52:a4:52:80:37:0f:b1:3c:e7:67:40: 90:ec:a0:fb:ce:54:30:58:9e:a1:ae:f6:eb:c1:88:fe:97:1c: 63:dd:2f:33:a4:39:a7:f7:f7:8e:b3:86:ad:ea:9d:a5:58:f9: bc:22:5c:32:e0:ea:fb:e8:73:36:91:dd:6f:b9:a5:c9:df:d6: b8:6e:8c:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUesbX4F+yITmnhBXXRXoC+lXXJRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNjA0MDkwODE3NDdaFw0yNjA0MTAwODQwNDdaMDMxMTAvBgNV BAMTKDNBNTIyRUM1OTYzM0UzRjU1MDYxNDlBNjUyQTdGRUJBNUUxNkFFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SGcQDEL4qCeC2nhcQCrqFC/U kRs2RgT+HNHmslDZM1bEwsHWiqZgp/DSoDwJMnc0LFHSL42zNGBs8P1uakDHmJ4y VKsCsTGumB0iWhYPFdYtjukJEPoCiXh8pWdfst0yCG9DBoOJlDEFojWnCTEwjszy O45EzxMm8HkZQNc1zQH+lZyyDbBMCwUsFzqp5TzLb8/ysXRBfOeYvHBsF1jT4s4X oRxSBMAKrLrpuOAOFea40L4Jm/1KBvuFOeKdPmVB6Oy7hocm++51yb5KS7BV89Bp 00iG9Y/k/O6EgMEYREH5K7TmJXsr7RnkisNxp6CLW7eqs6E6AguUUexqM61JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOlIuxZYz4/VQYUmmUqf+ul4WrvEwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmH1HwIrpRn0MtwInoN8o1cEMu5iZJEwOX52BwEYQyZnZtal2z5MiRVYoBRwh Ln5zXFVzpTOKEFjb9OIBtg+WlAA4QfiU9SMWKrzQ8U2lxpKTCOgY/ARYzOz62SeQ O0AhNBpLV/sr6m9OFg6DqYZJc/sg79ScyQcc1m2p/iwCLpNP17IvsoF63GAUOYDI agTy2DFtFXzFbQz5Cq+cZ9SqhfhKAWfleag7838ltycvBsjNFQ1KDxeTVudTF1Kk UoA3D7E852dAkOyg+85UMFieoa7268GI/pccY90vM6Q5p/f3jrOGreqdpVj5vCJc MuDq++hzNpHdb7mlyd/WuG6MOA== -----END CERTIFICATE-----Generated at Thu Apr 9 12:52:51 2026 by rpki-client