$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: qQ8bVuc2B8q6JZPXmslDBUbkwg8S0RPo5OpVGoc1kx8= Subject key identifier: 32:78:07:44:0D:1D:07:A5:D0:67:D6:DB:DD:12:2D:D6:F0:B2:8D:6A Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 2BFF2FC10B5CA3214ABCBFB2327E5CCDC85E32DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: 01FD Signing time: Tue 04 Nov 2025 23:22:01 +0000 Manifest this update: Tue 04 Nov 2025 23:17:01 +0000 Manifest next update: Thu 06 Nov 2025 00:47:01 +0000 Files and hashes: 1: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=) 2: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=) 3: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: pG0ky9ap0JQl7lNdjItCDl7/4MRPdvs3J7r4IelR30E=) 4: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=) 5: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=) 6: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ff:2f:c1:0b:5c:a3:21:4a:bc:bf:b2:32:7e:5c:cd:c8:5e:32:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Nov 4 23:17:01 2025 GMT Not After : Nov 6 00:47:01 2025 GMT Subject: CN=327807440D1D07A5D067D6DBDD122DD6F0B28D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:80:33:00:4c:c6:19:ab:af:53:e4:5f:0f: 44:6f:f3:1c:0a:6c:fa:d1:7e:94:aa:00:4b:52:2a: 0b:29:81:25:c9:fe:d0:37:be:73:76:48:b0:3d:4c: fe:81:e0:31:5f:33:7c:c2:f9:99:9c:16:ec:aa:60: 46:c2:b3:69:c1:70:9e:f5:23:d1:c8:d4:19:93:1b: c6:95:70:5c:33:1f:41:2f:68:7b:c5:a0:78:38:be: 33:97:83:ba:98:38:de:f1:0f:6c:cc:f6:96:b4:a3: ac:ea:98:ee:69:e4:80:53:07:ee:e1:b6:a6:d1:dc: 6f:12:b3:81:20:c6:7b:d0:54:0d:24:e9:86:e4:26: 69:6a:a8:41:b5:c6:58:b2:44:81:59:18:85:a8:bd: 6a:d6:31:89:cd:e7:4a:8f:96:9b:d7:b3:4d:e8:6d: c2:78:a1:92:d9:e7:46:f3:6e:dc:cd:0f:57:dc:00: 0b:a3:70:4b:89:70:43:0d:5c:3f:88:3a:ea:a7:de: 33:a6:01:1f:fa:a5:f2:f9:5d:11:1a:d7:85:4c:21: db:d3:3e:ea:d2:94:72:b1:32:16:52:0a:c6:53:a9: a7:c5:f0:a7:08:48:41:81:9d:0d:be:71:5b:e0:87: 2e:c0:83:0d:1d:d4:42:4e:cf:bb:29:53:2d:96:69: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:07:44:0D:1D:07:A5:D0:67:D6:DB:DD:12:2D:D6:F0:B2:8D:6A X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:51:18:f2:47:6f:3b:f4:61:d1:cb:bf:97:11:ac:67:33: f0:da:14:b4:23:8f:19:af:40:77:85:97:8d:ed:ee:f9:13:78: 9c:bd:17:f8:3e:39:47:dc:cc:cd:e2:4e:6b:11:1c:c6:21:c0: d5:fb:27:ed:49:09:cf:00:60:af:c2:bd:e3:42:c9:db:75:4b: 0f:64:1f:50:c0:43:f6:7b:80:76:2d:84:e8:6b:7b:04:66:6b: 4c:b4:cd:c6:f8:2e:b3:83:33:9b:ee:07:51:29:b6:3f:ee:bd: b4:eb:eb:fe:31:d1:77:de:db:7d:aa:94:1d:b5:16:6b:42:ff: fc:8f:80:5e:27:e7:8e:20:c7:b8:91:61:84:4c:ea:68:bc:18: 77:10:84:f5:ca:67:97:b2:75:0d:28:55:08:7f:33:44:30:f5: ef:f6:91:ec:50:b5:48:84:00:61:d2:4d:fc:27:1d:20:c4:c3: 81:62:6e:60:ab:dc:7f:97:59:29:06:a7:64:09:5b:d0:18:33: 2a:41:a2:1d:a4:a2:bc:74:7a:87:08:05:30:bb:68:ad:c6:38: 28:33:ba:46:bf:89:2f:78:d0:72:b5:e3:32:2b:92:6b:39:7d: ad:05:58:1f:dc:b2:79:c4:e3:c5:fe:af:2f:54:7f:dd:cc:d0: cb:c8:f8:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK/8vwQtcoyFKvL+yMn5czcheMt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTExMDQyMzE3MDFaFw0yNTExMDYwMDQ3MDFaMDMxMTAvBgNV BAMTKDMyNzgwNzQ0MEQxRDA3QTVEMDY3RDZEQkREMTIyREQ2RjBCMjhENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfm4AzAEzGGauvU+RfD0Rv8xwK bPrRfpSqAEtSKgspgSXJ/tA3vnN2SLA9TP6B4DFfM3zC+ZmcFuyqYEbCs2nBcJ71 I9HI1BmTG8aVcFwzH0EvaHvFoHg4vjOXg7qYON7xD2zM9pa0o6zqmO5p5IBTB+7h tqbR3G8Ss4EgxnvQVA0k6YbkJmlqqEG1xliyRIFZGIWovWrWMYnN50qPlpvXs03o bcJ4oZLZ50bzbtzND1fcAAujcEuJcEMNXD+IOuqn3jOmAR/6pfL5XREa14VMIdvT PurSlHKxMhZSCsZTqafF8KcISEGBnQ2+cVvghy7Agw0d1EJOz7spUy2WafibAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMngHRA0dB6XQZ9bb3RIt1vCyjWowHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnQVRGPJHbzv0YdHLv5cRrGcz8NoUtCOPGa9Ad4WXje3u+RN4nL0X+D45R9zM zeJOaxEcxiHA1fsn7UkJzwBgr8K940LJ23VLD2QfUMBD9nuAdi2E6Gt7BGZrTLTN xvgus4Mzm+4HUSm2P+69tOvr/jHRd97bfaqUHbUWa0L//I+AXifnjiDHuJFhhEzq aLwYdxCE9cpnl7J1DShVCH8zRDD17/aR7FC1SIQAYdJN/CcdIMTDgWJuYKvcf5dZ KQanZAlb0BgzKkGiHaSivHR6hwgFMLtorcY4KDO6Rr+JL3jQcrXjMiuSazl9rQVY H9yyecTjxf6vL1R/3czQy8j4NA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:31 2025 by rpki-client