$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: LBV5GAED/1pn+LSStaTNi9ZAYrCRkGkKfhOliZBc3LE= Subject key identifier: D1:6F:BA:A4:B7:96:EA:1A:F5:66:4F:01:98:09:E0:23:99:62:73:72 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 1783F1FB6EED4E5ED604E01D783440C81AAAA71A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 0311 Signing time: Tue 04 Nov 2025 16:20:59 +0000 Manifest this update: Tue 04 Nov 2025 16:15:59 +0000 Manifest next update: Wed 05 Nov 2025 19:00:59 +0000 Files and hashes: 1: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) 2: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) 3: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=) 4: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: jOYwnXdc8m/Ao93lc6OdLR9u2PQOrR2iS02VGgUcal4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:83:f1:fb:6e:ed:4e:5e:d6:04:e0:1d:78:34:40:c8:1a:aa:a7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Nov 4 16:15:59 2025 GMT Not After : Nov 5 19:00:59 2025 GMT Subject: CN=D16FBAA4B796EA1AF5664F019809E02399627372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:5e:12:a3:3d:8f:e5:a3:34:e3:53:ca:a6: 6f:e4:dd:b6:3c:c1:b4:a3:5d:6e:e8:b3:55:08:ff: 38:7f:d2:09:b2:4c:24:1d:ec:c8:fa:c4:85:ee:b1: b2:6e:0c:4b:bb:77:67:e9:33:eb:4d:12:2f:06:9f: 1b:5c:72:d0:35:47:ef:0c:79:52:5f:26:65:69:37: d9:df:b5:6e:a0:bb:44:e2:1c:78:a7:17:5d:f8:ee: 75:8c:df:46:95:47:cb:3b:d1:62:7a:65:7c:7e:f4: 21:ea:24:2c:e4:c1:1f:ae:64:d1:9e:c0:65:23:b6: 42:ba:64:67:a1:73:b2:cf:b6:1e:8c:92:ec:a1:7c: 24:2a:47:e0:82:a9:03:22:ed:16:aa:c6:81:05:ae: 02:bb:c4:93:f1:04:b3:ab:78:50:6f:ea:52:5e:d0: 80:85:1e:ef:72:dd:e1:ac:96:d3:d3:98:86:65:c5: 75:87:6e:05:8f:20:d1:aa:68:75:0d:ab:70:a5:98: 41:f3:a9:35:7f:7a:22:87:db:96:49:bb:ca:6f:e8: 65:f7:ea:a4:92:cc:8f:ac:db:cc:72:4a:57:14:62: ca:fc:d5:25:c7:c9:0d:81:0e:c4:a4:b3:1b:54:18: 42:05:bf:45:b4:ae:f0:36:3a:b6:15:c3:29:f4:3e: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6F:BA:A4:B7:96:EA:1A:F5:66:4F:01:98:09:E0:23:99:62:73:72 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a4:b3:ab:71:ec:5f:a8:92:39:92:99:40:97:23:91:df:6d: 8a:11:7f:54:a5:78:90:c0:d0:ab:5e:88:c7:3d:23:54:ce:e2: 97:7a:a1:45:b6:dc:3b:f7:7e:e7:fb:2c:56:d4:c0:05:07:2b: b1:2f:a5:84:1c:e9:d8:49:dd:98:de:63:de:4d:70:7b:d2:29: e4:1d:4f:a5:2e:8c:48:dd:e5:bd:0a:28:d0:22:af:6b:c2:e9: 82:2c:5a:3f:48:e8:e4:5a:d6:a7:30:d5:72:a4:60:f6:6b:aa: eb:ec:f5:08:c9:f0:86:08:62:dc:33:23:47:33:c1:78:94:72: 52:bb:98:5f:ac:80:8f:e6:ba:89:55:8a:02:e5:48:07:cb:20: fd:a0:e9:18:e1:ab:49:4b:4a:c0:57:ee:28:db:7a:a7:ce:b6: fd:d5:cb:a8:1d:cf:1a:ce:fb:6c:4c:a6:61:e1:bc:a8:db:2d: 89:a7:eb:93:7e:85:17:75:3c:86:f9:3c:0b:bd:c4:7e:ee:ec: 5a:2c:06:f9:74:d7:62:be:66:40:df:f0:3e:87:8a:e5:19:d7: 24:bc:ea:09:d8:8c:46:21:89:e9:92:0c:17:e7:ce:85:52:92: 5f:17:42:2c:f4:b0:57:41:fd:22:8b:55:7f:f2:09:7b:32:3a: b0:a9:26:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF4Px+27tTl7WBOAdeDRAyBqqpxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTExMDQxNjE1NTlaFw0yNTExMDUxOTAwNTlaMDMxMTAvBgNV BAMTKEQxNkZCQUE0Qjc5NkVBMUFGNTY2NEYwMTk4MDlFMDIzOTk2MjczNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9V4Soz2P5aM041PKpm/k3bY8 wbSjXW7os1UI/zh/0gmyTCQd7Mj6xIXusbJuDEu7d2fpM+tNEi8GnxtcctA1R+8M eVJfJmVpN9nftW6gu0TiHHinF1347nWM30aVR8s70WJ6ZXx+9CHqJCzkwR+uZNGe wGUjtkK6ZGehc7LPth6MkuyhfCQqR+CCqQMi7RaqxoEFrgK7xJPxBLOreFBv6lJe 0ICFHu9y3eGsltPTmIZlxXWHbgWPINGqaHUNq3ClmEHzqTV/eiKH25ZJu8pv6GX3 6qSSzI+s28xySlcUYsr81SXHyQ2BDsSksxtUGEIFv0W0rvA2OrYVwyn0PhGvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0W+6pLeW6hr1Zk8BmAngI5lic3IwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKSzq3HsX6iSOZKZQJcjkd9tihF/VKV4kMDQq16Ixz0jVM7il3qhRbbcO/d+ 5/ssVtTABQcrsS+lhBzp2EndmN5j3k1we9Ip5B1PpS6MSN3lvQoo0CKva8Lpgixa P0jo5FrWpzDVcqRg9muq6+z1CMnwhghi3DMjRzPBeJRyUruYX6yAj+a6iVWKAuVI B8sg/aDpGOGrSUtKwFfuKNt6p862/dXLqB3PGs77bEymYeG8qNstiafrk36FF3U8 hvk8C73Efu7sWiwG+XTXYr5mQN/wPoeK5RnXJLzqCdiMRiGJ6ZIMF+fOhVKSXxdC LPSwV0H9IotVf/IJezI6sKkmIQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:45 2025 by rpki-client