$ rpki-client -vvvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: XuTJZ0seqLWQEyXsxKtEUB4exUfTyOLvwMrQ5s0tpXc= Subject key identifier: 7E:97:FB:4B:1B:7E:8F:83:64:31:92:C5:16:DE:6F:27:10:8F:07:7F Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 5DC31931FC6C228EB0F0AF0FF51C0020F67906A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 04EA Signing time: Fri 30 Oct 2026 00:54:40 +0000 Manifest this update: Fri 30 Oct 2026 00:49:40 +0000 Manifest next update: Sat 31 Oct 2026 04:25:40 +0000 Files and hashes: 1: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: Tn/GZDPBXgOGJNS/vNqNUMiLzfk5EWAfsV9ZnOThMOk=) 2: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: sCP6thMdAA9gDiOxte8RF05RrI/PM5NftY+8foK2su4=) 3: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /TWEs6CUIjNCggKrbFMvPYhpTfqcLKC8WkNrZDWHiVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 02:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c3:19:31:fc:6c:22:8e:b0:f0:af:0f:f5:1c:00:20:f6:79:06:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Oct 30 00:49:40 2026 GMT Not After : Oct 31 04:25:40 2026 GMT Subject: CN=7E97FB4B1B7E8F83643192C516DE6F27108F077F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:b5:85:4b:f5:ec:d0:13:c7:4d:4b:45:14: 3d:5a:bb:aa:78:75:98:33:6f:a8:c2:57:38:42:a8: b9:59:af:6d:0f:dc:7c:af:19:5c:8c:ce:63:49:45: aa:af:f6:75:dd:da:0f:df:07:eb:a9:41:31:59:0c: 96:97:bb:b0:f5:74:28:83:6e:40:08:01:04:b5:e7: 09:8d:17:21:a6:7f:b7:f4:12:90:48:0b:18:32:64: 2c:e0:ed:ca:e9:ae:93:10:2d:bd:e5:8f:1a:7e:88: cb:04:2a:65:68:e6:f0:98:50:a1:2c:9d:7b:0d:a3: 66:d7:e6:6d:df:98:fc:5c:fc:ab:a9:85:34:dd:5b: 5d:54:c2:01:12:c8:98:49:27:f4:c6:b8:17:e9:6a: 6c:7b:ae:e1:7b:72:d1:b5:e3:87:80:7d:58:a5:41: 28:d7:d9:aa:04:d8:2e:6f:34:19:75:5c:d2:e3:49: d2:8d:59:5a:01:04:9f:c6:03:3b:a9:72:cb:fe:95: 50:8e:ff:8a:76:a3:0b:92:a7:7a:79:03:9d:d4:4b: da:5b:99:9d:39:56:34:30:af:7e:5c:4d:1d:bc:27: 45:c4:ee:b2:f2:5a:01:a1:60:44:6d:c7:2d:c5:9e: 3f:a0:7c:60:10:a6:06:02:17:b8:0b:76:21:4f:30: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:FB:4B:1B:7E:8F:83:64:31:92:C5:16:DE:6F:27:10:8F:07:7F X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:23:45:15:17:ab:0b:3d:7c:e0:30:ab:55:d2:16:8a:cd:d0: fd:8e:2f:1c:f7:dd:34:84:2b:ed:27:3b:d9:42:05:cb:fa:6c: 34:1e:4b:d7:70:65:57:3a:fd:b8:29:b3:3c:11:c6:98:d0:82: ba:1f:2d:6e:99:73:cc:93:d0:ab:b0:07:14:b2:f0:97:08:ce: 49:50:18:15:02:92:1b:93:9a:73:23:5d:0c:c1:d0:11:bf:6f: ca:97:dd:ff:53:0e:b8:dd:16:97:a4:f2:33:d0:2e:04:dc:0f: 5c:48:11:77:9a:1a:4b:84:e3:ad:64:97:eb:d8:c4:87:f5:30: f6:19:09:cb:80:be:c3:c3:1f:2f:62:99:e8:9b:53:fa:e9:29: 5d:19:92:31:84:44:41:96:f0:75:d2:5f:ec:c4:3b:96:57:31: 25:22:a3:72:93:ce:40:a7:3b:d1:57:af:85:5b:1b:80:ef:5b: 7d:5f:f2:b7:96:35:26:3a:c9:90:42:f3:e4:f2:22:e5:9a:9a: db:81:7d:76:76:5f:26:ae:51:32:f7:bb:41:3b:54:8e:57:ab: 1e:76:bf:4b:82:ef:98:15:54:b7:59:a4:2c:80:56:03:f0:9f: df:8f:9d:23:ec:00:8b:8b:65:46:d8:03:5b:2a:2b:a1:8d:9a: d3:74:64:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXcMZMfxsIo6w8K8P9RwAIPZ5BqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNjEwMzAwMDQ5NDBaFw0yNjEwMzEwNDI1NDBaMDMxMTAvBgNV BAMTKDdFOTdGQjRCMUI3RThGODM2NDMxOTJDNTE2REU2RjI3MTA4RjA3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCrWFS/Xs0BPHTUtFFD1au6p4 dZgzb6jCVzhCqLlZr20P3HyvGVyMzmNJRaqv9nXd2g/fB+upQTFZDJaXu7D1dCiD bkAIAQS15wmNFyGmf7f0EpBICxgyZCzg7crprpMQLb3ljxp+iMsEKmVo5vCYUKEs nXsNo2bX5m3fmPxc/KuphTTdW11UwgESyJhJJ/TGuBfpamx7ruF7ctG144eAfVil QSjX2aoE2C5vNBl1XNLjSdKNWVoBBJ/GAzupcsv+lVCO/4p2owuSp3p5A53US9pb mZ05VjQwr35cTR28J0XE7rLyWgGhYERtxy3Fnj+gfGAQpgYCF7gLdiFPMDVfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfpf7Sxt+j4NkMZLFFt5vJxCPB38wHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlCNFFRerCz184DCrVdIWis3Q/Y4vHPfdNIQr7Sc72UIFy/psNB5L13BlVzr9 uCmzPBHGmNCCuh8tbplzzJPQq7AHFLLwlwjOSVAYFQKSG5OacyNdDMHQEb9vypfd /1MOuN0Wl6TyM9AuBNwPXEgRd5oaS4TjrWSX69jEh/Uw9hkJy4C+w8MfL2KZ6JtT +ukpXRmSMYREQZbwddJf7MQ7llcxJSKjcpPOQKc70VevhVsbgO9bfV/yt5Y1JjrJ kELz5PIi5Zqa24F9dnZfJq5RMve7QTtUjlerHna/S4LvmBVUt1mkLIBWA/Cf34+d I+wAi4tlRtgDWyoroY2a03RkvQ== -----END CERTIFICATE-----Generated at Fri Oct 30 03:48:26 2026 by rpki-client