$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: AZBKGwkVVabucdxJuk74XdN8AnAeuR/0YtmSQcPAMsI= Subject key identifier: 24:C5:7A:6F:74:99:9E:34:D7:3D:51:54:27:61:CE:97:B5:CD:D3:D8 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 7C3237DB60C7C0D573F28D2AA1F0E84CFC93DEC1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 0294 Signing time: Wed 06 Aug 2025 20:27:54 +0000 Manifest this update: Wed 06 Aug 2025 20:22:54 +0000 Manifest next update: Thu 07 Aug 2025 22:23:54 +0000 Files and hashes: 1: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /XwYHZupa+FJTNO5XsovX8RlSGV6OfQ7o5Ml47Ou0qE=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: tBhgm51met8HKrECPhyAhBFEnuzhOmz4yv900VXYR3Y=) 3: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 22:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:32:37:db:60:c7:c0:d5:73:f2:8d:2a:a1:f0:e8:4c:fc:93:de:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Aug 6 20:22:54 2025 GMT Not After : Aug 7 22:23:54 2025 GMT Subject: CN=24C57A6F74999E34D73D51542761CE97B5CDD3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:c4:07:5e:b2:87:46:f2:27:87:a4:40:c8: 05:e2:b8:11:11:63:ca:e0:38:c7:88:c0:1b:74:a0: fb:96:a3:2c:21:c7:4d:2b:ce:f3:e5:44:b2:be:e4: 00:b0:13:c0:91:05:97:58:0d:14:af:7b:fb:b6:3d: de:03:44:e5:ca:39:54:4a:18:68:1c:03:e0:0c:65: f8:7b:36:13:76:7c:2c:29:47:2a:1d:36:1b:da:52: 58:c3:dd:60:bc:b8:6a:a0:c7:6c:49:99:1e:11:04: af:1c:8b:8a:9c:54:90:a8:ca:96:96:ab:92:37:1d: 60:93:f5:26:e3:92:59:9f:6f:a4:e6:aa:64:d8:7a: 90:f0:2e:a3:d7:83:3a:95:ab:f3:84:84:83:7e:cf: c5:20:d0:b4:a5:fc:3a:ad:ff:32:99:7b:69:6f:8e: 3f:c2:b9:2a:10:33:12:8b:9f:4c:7f:03:85:9b:5e: d9:65:c6:16:66:8f:76:a8:5c:0f:58:d0:35:26:dd: 90:6c:e5:e8:ac:14:e3:a1:f9:5f:d5:4d:80:05:ba: 2f:a8:d2:b6:3c:dc:60:73:18:04:01:95:12:a4:2b: 7f:d2:5f:b6:b4:64:07:1c:6d:ad:bd:f7:19:ac:df: ed:74:99:ed:63:5b:22:22:cf:26:fa:35:5e:fa:fe: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:7A:6F:74:99:9E:34:D7:3D:51:54:27:61:CE:97:B5:CD:D3:D8 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:2a:85:5d:f3:f6:19:d7:ad:5b:5f:09:e4:06:4f:4f:c9: 28:64:a5:b9:33:c1:c3:44:bc:f6:eb:54:b5:71:8b:2f:23:c5: aa:ab:fb:a5:8c:2f:a0:46:9f:7e:2e:99:51:fd:e7:f5:7e:ad: 38:c4:6c:3c:7d:5f:f3:a6:94:a6:5d:20:ee:bb:88:e3:77:7b: bc:a2:fb:e7:71:d1:34:4c:1a:b4:23:84:39:a4:f5:9a:03:2c: 22:c3:80:7f:76:3b:fd:ce:16:3d:09:04:28:33:23:df:44:76: 2a:2b:4b:01:c7:72:74:1a:2e:59:4d:52:74:ee:38:1a:a3:45: 0f:13:b9:44:7d:d1:68:38:8c:65:4b:13:b2:46:46:fe:0a:c7: a3:9f:6a:c3:df:39:f6:a2:40:f9:8e:ec:66:c4:3e:76:ec:b5: 59:fc:1f:05:77:44:91:5d:0e:62:c3:36:54:ca:19:e3:1d:5b: 98:a2:55:c3:31:33:69:30:d2:58:82:ad:78:29:cc:98:99:03: 8d:50:58:ca:9a:6c:1c:f9:54:28:7c:78:dd:36:2b:5a:b0:7e: 63:4f:51:05:06:0b:82:86:1d:d6:bb:61:24:42:bf:21:17:61: 37:51:ea:7a:fe:5c:5b:8c:99:a5:25:87:3b:6c:c6:94:18:0b: ff:f1:07:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfDI322DHwNVz8o0qofDoTPyT3sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTA4MDYyMDIyNTRaFw0yNTA4MDcyMjIzNTRaMDMxMTAvBgNV BAMTKDI0QzU3QTZGNzQ5OTlFMzRENzNENTE1NDI3NjFDRTk3QjVDREQzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUY8QHXrKHRvInh6RAyAXiuBER Y8rgOMeIwBt0oPuWoywhx00rzvPlRLK+5ACwE8CRBZdYDRSve/u2Pd4DROXKOVRK GGgcA+AMZfh7NhN2fCwpRyodNhvaUljD3WC8uGqgx2xJmR4RBK8ci4qcVJCoypaW q5I3HWCT9Sbjklmfb6TmqmTYepDwLqPXgzqVq/OEhIN+z8Ug0LSl/Dqt/zKZe2lv jj/CuSoQMxKLn0x/A4WbXtllxhZmj3aoXA9Y0DUm3ZBs5eisFOOh+V/VTYAFui+o 0rY83GBzGAQBlRKkK3/SX7a0ZAccba299xms3+10me1jWyIizyb6NV76/rTJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJMV6b3SZnjTXPVFUJ2HOl7XN09gwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuoqhV3z9hnXrVtfCeQGT0/JKGSluTPBw0S89utUtXGLLyPFqqv7pYwvoEaf fi6ZUf3n9X6tOMRsPH1f86aUpl0g7ruI43d7vKL753HRNEwatCOEOaT1mgMsIsOA f3Y7/c4WPQkEKDMj30R2KitLAcdydBouWU1SdO44GqNFDxO5RH3RaDiMZUsTskZG /grHo59qw9859qJA+Y7sZsQ+duy1WfwfBXdEkV0OYsM2VMoZ4x1bmKJVwzEzaTDS WIKteCnMmJkDjVBYyppsHPlUKHx43TYrWrB+Y09RBQYLgoYd1rthJEK/IRdhN1Hq ev5cW4yZpSWHO2zGlBgL//EHAg== -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:22 2025 by rpki-client