$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json) Hash identifier: nbqSRfrjCCC6KnP3bN+RlS5NMQlkVLE8aAk0jifvX9E= Subject key identifier: 65:C2:47:66:68:D3:67:8C:72:12:34:C2:6D:EC:C9:BD:B8:62:7E:37 Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Certificate serial: 586F23BD46E6EF9CD2A22E6EE67A45DD599B9DA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft Manifest number: 1E Signing time: Mon 03 Nov 2025 11:34:01 +0000 Manifest this update: Mon 03 Nov 2025 11:29:01 +0000 Manifest next update: Tue 04 Nov 2025 13:01:01 +0000 Files and hashes: 1: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: 6W8SUZxAENA4uqh8BVFmb/C8M8jE1TwSWJz3d2VqM2M=) 2: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=) 3: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6f:23:bd:46:e6:ef:9c:d2:a2:2e:6e:e6:7a:45:dd:59:9b:9d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Validity Not Before: Nov 3 11:29:01 2025 GMT Not After : Nov 4 13:01:01 2025 GMT Subject: CN=65C2476668D3678C721234C26DECC9BDB8627E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:23:8f:bc:5f:c3:a1:3f:fa:63:10:92:56: d6:90:f5:d7:c1:2e:84:26:a8:64:bd:50:f6:d1:4b: f6:1c:49:12:9b:11:1f:3d:cb:2f:55:2e:4a:05:08: a5:f7:c3:cd:40:7d:54:84:35:21:59:0a:f6:4c:74: c9:35:dc:79:f2:be:03:1b:21:46:8e:6a:11:5f:e9: 96:f5:d5:62:c0:df:00:7d:75:b3:b4:e4:b3:58:eb: 0c:47:48:a1:7d:1b:cc:16:fc:c4:50:16:ce:1a:48: 20:7f:5b:45:c4:d1:92:ee:b9:e7:61:24:e1:36:c0: ed:2c:93:5c:da:67:24:ee:00:f4:5b:07:6e:b6:23: 0e:17:26:e7:7f:08:05:46:3d:d3:24:4d:d6:65:bb: 05:06:73:ac:27:52:e5:b5:49:a4:71:54:20:82:d7: 99:76:c7:e4:26:6f:77:a7:ea:a8:b9:da:7d:46:cb: 4b:3d:09:94:ae:8e:a0:b3:8b:55:cc:c7:b4:5e:57: a3:5f:62:87:5c:3e:14:e8:cb:e5:9d:cd:e4:18:9e: 7a:e7:a1:5e:66:be:51:67:c4:f7:c5:ce:b6:54:aa: e3:3d:c1:98:d0:c0:92:c4:53:ab:19:85:d4:38:fe: 16:b3:a2:bd:f4:86:ab:f5:c3:0b:a6:b7:c2:ce:c6: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:47:66:68:D3:67:8C:72:12:34:C2:6D:EC:C9:BD:B8:62:7E:37 X509v3 Authority Key Identifier: keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:75:d1:3c:72:fe:80:c0:43:a0:05:5f:7e:98:0b:5f:6f: b7:5e:08:48:07:09:c4:26:43:5d:c8:b1:4e:c0:8b:d2:5e:8d: 7e:2f:a4:ab:c8:c1:b6:1b:e2:f3:e4:02:09:2a:0a:2c:27:57: a6:46:83:0c:74:37:1e:d8:d3:81:f4:90:dd:d6:68:f8:a3:04: 29:61:fa:48:f5:77:10:a1:8f:96:1c:03:3f:13:79:4f:fb:12: 98:33:65:74:18:c9:2a:b3:62:9c:2e:a8:97:ca:29:c9:2c:14: 90:de:71:9c:0a:8e:51:bf:a3:0d:9a:00:4d:dd:12:ae:78:8e: 39:13:1a:4a:39:c5:32:b9:23:85:f7:a9:9d:18:7a:84:fb:6e: e7:4d:84:de:74:fb:e0:c1:51:b1:30:2d:f3:f6:c0:03:3f:cd: bc:d0:5a:04:9f:33:9c:f3:ce:14:42:84:83:cf:1b:8a:be:43: 72:e9:cb:72:59:1d:8c:01:28:de:c0:0f:76:70:c1:a7:2c:d4: 7b:83:c2:f4:2c:88:23:e2:85:6f:8d:da:a1:45:86:06:6e:95: 2c:4d:e4:ef:c6:d2:c1:ef:82:3e:8e:ad:f4:e3:d7:dc:31:aa: 5b:47:14:e1:d6:af:42:f9:e0:32:bb:aa:fb:da:c7:46:bc:00: 60:53:b4:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWG8jvUbm75zSoi5u5npF3VmbnagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB MURERjBCOTAeFw0yNTExMDMxMTI5MDFaFw0yNTExMDQxMzAxMDFaMDMxMTAvBgNV BAMTKDY1QzI0NzY2NjhEMzY3OEM3MjEyMzRDMjZERUNDOUJEQjg2MjdFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgXSOPvF/DoT/6YxCSVtaQ9dfB LoQmqGS9UPbRS/YcSRKbER89yy9VLkoFCKX3w81AfVSENSFZCvZMdMk13HnyvgMb IUaOahFf6Zb11WLA3wB9dbO05LNY6wxHSKF9G8wW/MRQFs4aSCB/W0XE0ZLuuedh JOE2wO0sk1zaZyTuAPRbB262Iw4XJud/CAVGPdMkTdZluwUGc6wnUuW1SaRxVCCC 15l2x+Qmb3en6qi52n1Gy0s9CZSujqCzi1XMx7ReV6NfYodcPhToy+WdzeQYnnrn oV5mvlFnxPfFzrZUquM9wZjQwJLEU6sZhdQ4/hazor30hqv1wwumt8LOxkldAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZcJHZmjTZ4xyEjTCbezJvbhifjcwHwYDVR0j BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6B10Txy/oDAQ6AFX36YC19vt14ISAcJxCZDXcixTsCL0l6Nfi+kq8jBthvi 8+QCCSoKLCdXpkaDDHQ3HtjTgfSQ3dZo+KMEKWH6SPV3EKGPlhwDPxN5T/sSmDNl dBjJKrNinC6ol8opySwUkN5xnAqOUb+jDZoATd0SrniOORMaSjnFMrkjhfepnRh6 hPtu502E3nT74MFRsTAt8/bAAz/NvNBaBJ8znPPOFEKEg88bir5DcunLclkdjAEo 3sAPdnDBpyzUe4PC9CyII+KFb43aoUWGBm6VLE3k78bSwe+CPo6t9OPX3DGqW0cU 4davQvngMruq+9rHRrwAYFO0WQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:14:26 2025 by rpki-client