$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: 5CyVbv1RjkGMjQtGlRv9pvy7E++a5nUEZNzJy7bAPZ8= Subject key identifier: E9:98:A2:FE:CB:6C:DD:AB:AC:7D:D6:03:EC:45:51:C8:BF:17:53:3C Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 726D18C81EF2D46F0D430955CC610477F6BB5B8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 030C Signing time: Wed 05 Nov 2025 01:37:42 +0000 Manifest this update: Wed 05 Nov 2025 01:32:42 +0000 Manifest next update: Thu 06 Nov 2025 04:17:42 +0000 Files and hashes: 1: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /XwYHZupa+FJTNO5XsovX8RlSGV6OfQ7o5Ml47Ou0qE=) 2: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) 3: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: PJsZKt6DJzoSFVNXJbEGOov0tzReEWAsZswX+hFCEJI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6d:18:c8:1e:f2:d4:6f:0d:43:09:55:cc:61:04:77:f6:bb:5b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Nov 5 01:32:42 2025 GMT Not After : Nov 6 04:17:42 2025 GMT Subject: CN=E998A2FECB6CDDABAC7DD603EC4551C8BF17533C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:0f:d0:d4:fd:bd:7b:1e:30:24:92:6b:a4: 43:19:42:18:ad:05:5a:9a:c5:a7:03:87:16:b0:91: 5a:c5:fd:ca:f4:cb:8a:fb:3d:29:a3:88:7c:3a:cf: c1:6a:e8:61:eb:01:46:9a:d1:35:f3:cc:34:ce:bc: 45:63:a4:7b:91:a8:c4:97:aa:f8:8b:9a:ed:64:52: 2e:ce:64:0d:34:eb:06:f8:45:7b:d6:a5:10:29:74: e8:59:56:bb:38:d1:e0:34:c0:c9:74:32:74:1b:09: 14:6b:39:52:79:4d:79:9c:99:ca:0d:ea:18:68:b1: 80:91:4d:ed:3c:36:a9:ad:d9:31:45:3b:ab:85:82: 56:4e:0c:f5:87:8f:0d:86:ed:1b:4b:ef:26:32:d4: f5:50:20:6d:21:a4:6b:37:e6:f5:32:28:22:c7:55: 8e:c1:f7:78:90:92:c1:b5:79:88:7e:bf:e8:f4:c1: 50:9b:d6:d9:a2:5c:6b:ca:0d:45:fe:18:39:25:11: 3a:fc:55:8e:3f:2f:83:21:fe:1d:71:b6:7b:77:e6: 63:24:c1:b6:ff:dc:15:9b:85:08:93:0d:08:59:7f: 1a:99:ef:b2:6d:e4:97:f3:8c:32:e1:b8:83:2d:09: 28:23:3f:54:ff:9d:cb:9f:43:a5:84:ee:a5:46:f2: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:98:A2:FE:CB:6C:DD:AB:AC:7D:D6:03:EC:45:51:C8:BF:17:53:3C X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:36:7b:88:44:4f:c3:b1:fb:11:f1:02:d0:92:c9:e1:38: 33:14:7a:96:f2:8d:e8:38:c0:7f:5b:77:6b:2a:39:0f:dd:d1: a2:a2:df:79:b4:39:7a:06:55:57:50:c5:81:08:bb:3b:d7:46: 1c:cd:a4:35:85:26:54:7f:80:6d:00:13:fe:59:94:a5:83:91: 06:47:db:18:ac:57:1a:ae:10:67:67:53:4c:35:f8:5d:b2:c4: 61:2f:5b:02:ec:6e:59:e5:53:ff:0b:40:ca:b3:21:3c:9f:8d: 65:45:71:2c:ae:fc:f0:50:ca:fb:2d:f2:a8:ed:3c:a3:bb:8d: 41:b3:d4:65:eb:cc:33:72:72:e8:57:f1:f0:a0:88:d0:13:29: 03:95:2d:9f:36:12:e4:6d:e4:43:54:4a:0a:0a:4f:f3:d3:35: 29:60:24:0f:46:97:14:7a:15:11:6c:19:c4:55:3d:78:1c:ed: b8:7d:a0:e5:38:a9:ae:31:d1:e7:6b:0f:a8:2b:a6:71:04:72: 37:f1:9b:91:b9:a9:3e:ec:6c:09:df:54:88:3f:2f:37:6c:62: 2b:aa:a2:bc:dc:dd:22:b1:22:5d:92:3e:e7:cc:0f:12:b1:d3: a1:51:0e:8d:31:b7:6d:15:5a:9a:49:75:3c:cb:21:9a:21:16: 4d:b0:af:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcm0YyB7y1G8NQwlVzGEEd/a7W4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTExMDUwMTMyNDJaFw0yNTExMDYwNDE3NDJaMDMxMTAvBgNV BAMTKEU5OThBMkZFQ0I2Q0REQUJBQzdERDYwM0VDNDU1MUM4QkYxNzUzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TQ/Q1P29ex4wJJJrpEMZQhit BVqaxacDhxawkVrF/cr0y4r7PSmjiHw6z8Fq6GHrAUaa0TXzzDTOvEVjpHuRqMSX qviLmu1kUi7OZA006wb4RXvWpRApdOhZVrs40eA0wMl0MnQbCRRrOVJ5TXmcmcoN 6hhosYCRTe08Nqmt2TFFO6uFglZODPWHjw2G7RtL7yYy1PVQIG0hpGs35vUyKCLH VY7B93iQksG1eYh+v+j0wVCb1tmiXGvKDUX+GDklETr8VY4/L4Mh/h1xtnt35mMk wbb/3BWbhQiTDQhZfxqZ77Jt5JfzjDLhuIMtCSgjP1T/ncufQ6WE7qVG8u87AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6Zii/sts3ausfdYD7EVRyL8XUzwwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAa42e4hET8Ox+xHxAtCSyeE4MxR6lvKN6DjAf1t3ayo5D93RoqLfebQ5egZV V1DFgQi7O9dGHM2kNYUmVH+AbQAT/lmUpYORBkfbGKxXGq4QZ2dTTDX4XbLEYS9b AuxuWeVT/wtAyrMhPJ+NZUVxLK788FDK+y3yqO08o7uNQbPUZevMM3Jy6Ffx8KCI 0BMpA5UtnzYS5G3kQ1RKCgpP89M1KWAkD0aXFHoVEWwZxFU9eBztuH2g5TiprjHR 52sPqCumcQRyN/GbkbmpPuxsCd9UiD8vN2xiK6qivNzdIrEiXZI+58wPErHToVEO jTG3bRVamkl1PMshmiEWTbCvAA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:07 2025 by rpki-client