$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: tjtKQMwg9YnwGQTmB6LciOWEQRKDwePdSXzK1Kpe8rc= Subject key identifier: CC:3C:88:B1:FC:F4:D9:3E:09:D4:F5:8C:16:7F:97:9C:00:AB:AB:11 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 543A2159633AD57D54EB07E4F2F2A03D659DFDB6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 024F Signing time: Sun 15 Jun 2025 18:49:23 +0000 Manifest this update: Sun 15 Jun 2025 18:44:23 +0000 Manifest next update: Mon 16 Jun 2025 20:45:23 +0000 Files and hashes: 1: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /XwYHZupa+FJTNO5XsovX8RlSGV6OfQ7o5Ml47Ou0qE=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: Td+xVsBI1KewTHSq8hrjQ2G0595ZeNuA8z5b4i4AA0o=) 3: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 20:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3a:21:59:63:3a:d5:7d:54:eb:07:e4:f2:f2:a0:3d:65:9d:fd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Jun 15 18:44:23 2025 GMT Not After : Jun 16 20:45:23 2025 GMT Subject: CN=CC3C88B1FCF4D93E09D4F58C167F979C00ABAB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:2c:db:3a:6b:ae:b9:b7:19:c6:86:5d:e5: ad:b5:72:60:50:65:28:c5:63:92:ff:9c:92:e2:6b: 5c:59:ca:6d:c2:81:54:11:c7:5a:6f:a7:86:3f:18: b8:05:c7:db:d5:a3:eb:2e:3a:ad:8f:27:67:6e:52: b3:14:1d:1c:ac:4d:f6:27:97:b0:1c:d4:82:e2:e8: d2:4b:2a:52:45:35:ce:07:1c:8b:14:49:90:61:14: 22:f7:86:c6:85:25:09:6b:1d:52:20:e6:92:07:b9: 9e:d2:ab:95:f8:ff:be:b0:09:ec:4e:b1:77:34:5d: bb:49:53:38:5c:6e:43:1c:6d:93:e4:4c:23:e3:b0: 75:d8:6e:9e:43:f0:f4:7b:03:69:a0:59:4b:d7:b8: 1f:a4:90:b3:ad:46:91:9e:3b:ee:e8:f2:1e:7d:1d: 6d:f8:52:c5:ce:a9:9f:d7:6a:50:0a:f6:db:1c:d1: 6c:ef:44:49:d1:11:3b:c3:fd:ca:21:74:11:2c:23: 98:9e:70:aa:7e:c6:a3:c7:52:99:aa:ca:ce:e1:51: b4:a9:bf:bb:0f:aa:f0:08:23:d5:08:44:85:58:85: cd:c2:8d:9c:b9:2d:b9:b3:ac:b1:9c:b5:e6:a2:80: 32:26:ad:bb:b6:66:45:90:c3:57:f7:8d:eb:a9:34: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3C:88:B1:FC:F4:D9:3E:09:D4:F5:8C:16:7F:97:9C:00:AB:AB:11 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:22:5e:96:60:f2:ad:1b:f2:6c:fd:b0:55:1a:e3:5c:ad:f8: 16:0a:b0:da:5f:32:de:d4:ff:41:b2:bc:99:15:45:38:48:53: c1:7f:cd:27:0c:87:db:c3:67:59:da:9a:0b:7c:b6:e8:a8:f1: d2:36:4e:d9:1b:9f:01:2b:80:5c:0f:b7:ce:01:34:5f:64:66: c5:44:e8:04:2a:49:0e:d3:e9:6a:1f:fc:fd:ee:96:f4:fa:51: 44:03:e6:17:20:ab:0a:35:a2:e7:7b:c4:b2:89:70:3a:82:fd: c4:95:1f:6c:2e:ad:f0:c2:b2:a4:81:68:18:4b:99:d6:79:0d: 33:c4:4a:66:69:0f:9e:0c:b7:b2:44:33:b7:27:51:2e:7d:ac: 0d:bd:dd:26:5b:ab:53:79:f4:aa:6f:6d:b4:d5:90:0a:a8:f7: 52:ad:a9:19:03:75:76:ea:0c:0b:d4:b6:2c:96:c3:1c:e6:39: a2:d4:dc:fa:9b:fa:2a:6b:78:6b:c6:55:9b:3a:a4:00:71:27: 64:41:ae:43:70:df:d8:ac:8f:2c:fd:2e:83:aa:8a:e4:aa:c2: 56:91:9a:41:0b:95:af:80:7c:89:15:69:04:23:ae:90:fa:d3: 8f:1f:48:7b:33:10:97:14:5a:e9:b0:9b:0c:c0:a2:9d:d8:b2: bf:3a:f4:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVDohWWM61X1U6wfk8vKgPWWd/bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTA2MTUxODQ0MjNaFw0yNTA2MTYyMDQ1MjNaMDMxMTAvBgNV BAMTKENDM0M4OEIxRkNGNEQ5M0UwOUQ0RjU4QzE2N0Y5NzlDMDBBQkFCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglyzbOmuuubcZxoZd5a21cmBQ ZSjFY5L/nJLia1xZym3CgVQRx1pvp4Y/GLgFx9vVo+suOq2PJ2duUrMUHRysTfYn l7Ac1ILi6NJLKlJFNc4HHIsUSZBhFCL3hsaFJQlrHVIg5pIHuZ7Sq5X4/76wCexO sXc0XbtJUzhcbkMcbZPkTCPjsHXYbp5D8PR7A2mgWUvXuB+kkLOtRpGeO+7o8h59 HW34UsXOqZ/XalAK9tsc0WzvREnRETvD/cohdBEsI5iecKp+xqPHUpmqys7hUbSp v7sPqvAII9UIRIVYhc3CjZy5LbmzrLGcteaigDImrbu2ZkWQw1f3jeupNCbhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzDyIsfz02T4J1PWMFn+XnACrqxEwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGCJelmDyrRvybP2wVRrjXK34Fgqw2l8y3tT/QbK8mRVFOEhTwX/NJwyH28Nn WdqaC3y26Kjx0jZO2RufASuAXA+3zgE0X2RmxUToBCpJDtPpah/8/e6W9PpRRAPm FyCrCjWi53vEsolwOoL9xJUfbC6t8MKypIFoGEuZ1nkNM8RKZmkPngy3skQztydR Ln2sDb3dJlurU3n0qm9ttNWQCqj3Uq2pGQN1duoMC9S2LJbDHOY5otTc+pv6Kmt4 a8ZVmzqkAHEnZEGuQ3Df2KyPLP0ug6qK5KrCVpGaQQuVr4B8iRVpBCOukPrTjx9I ezMQlxRa6bCbDMCindiyvzr0Pg== -----END CERTIFICATE-----Generated at Mon Jun 16 14:37:54 2025 by rpki-client