$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: xeGV3ovMZotkdDqDuDy9aT6tU67x7qOw8EYF7k0nJ3o= Subject key identifier: A9:0B:F6:7E:CE:FE:DF:AA:E0:CA:C8:E7:14:55:78:7D:53:FD:51:E1 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 08AA32669497AFE437FDD6D4CB23E35C4F23F62B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 029B Signing time: Fri 08 Aug 2025 07:39:26 +0000 Manifest this update: Fri 08 Aug 2025 07:34:26 +0000 Manifest next update: Sat 09 Aug 2025 10:59:26 +0000 Files and hashes: 1: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) 2: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: uIGMcCDQiPYAWb9WAAYqH4YDesOZkRK+NM49v3oviQ8=) 3: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) 4: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:aa:32:66:94:97:af:e4:37:fd:d6:d4:cb:23:e3:5c:4f:23:f6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Aug 8 07:34:26 2025 GMT Not After : Aug 9 10:59:26 2025 GMT Subject: CN=A90BF67ECEFEDFAAE0CAC8E71455787D53FD51E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:db:d8:40:fc:47:05:d5:b4:c1:a5:05:ce: d4:01:3e:d0:8d:1b:1a:f8:38:10:3e:f3:a5:48:08: 6f:2a:f7:81:78:92:27:ec:ed:25:5c:39:d1:3c:89: e9:7e:8a:1a:ed:94:e7:ee:13:fc:03:0e:3a:2f:5d: f2:80:2e:76:ff:3f:a5:3b:2f:6c:3d:33:2d:c8:46: 36:d9:df:54:84:37:ed:16:9d:e6:8b:d5:75:9f:1a: dd:fd:a7:69:28:b5:32:8e:1a:c9:e1:d9:a0:5a:a0: 26:c1:3a:93:fa:85:66:b6:9d:38:0a:44:04:f0:b0: 90:08:5b:07:1d:c0:d3:8b:1e:23:11:71:2b:16:78: 0d:46:62:e5:5e:d0:b4:46:11:ff:fb:e5:cd:87:c5: 6c:66:54:7f:8b:70:7a:fc:02:64:08:1d:83:6d:63: 1c:6a:19:23:7e:7b:cf:fc:3b:fa:ca:ac:4e:3f:90: f8:6e:07:12:96:e2:a1:2c:f2:36:e1:8d:33:e8:68: e1:52:3d:0e:6d:88:b0:ec:0d:37:68:73:c0:1a:2b: 5c:93:23:93:7e:11:80:ae:e8:40:fb:aa:79:b5:8e: 46:e2:5e:99:f5:36:ed:56:59:d0:6c:91:14:77:2b: e8:54:9a:90:98:0c:3a:40:03:cd:ba:11:f8:58:a1: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:F6:7E:CE:FE:DF:AA:E0:CA:C8:E7:14:55:78:7D:53:FD:51:E1 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cd:85:1c:81:33:85:1e:4f:56:e1:2a:5a:48:e7:87:84:f6: 09:90:6b:49:6b:72:04:2a:1d:9b:90:3f:9f:9a:fd:47:81:c0: 1b:8a:8f:59:b5:18:ed:26:e8:4b:36:d7:2b:a9:f4:f6:ec:04: 01:e9:94:76:6a:5f:11:2f:27:0e:be:50:dc:f6:64:db:90:e3: 68:3e:ac:51:9d:eb:44:9e:fe:93:f1:69:44:34:96:50:50:62: cf:55:45:db:36:81:36:29:e2:b7:7d:01:dc:c7:9e:e8:61:b7: 48:2f:dd:da:51:7a:41:9d:ea:b7:83:86:15:16:08:74:1f:7c: 4f:df:a0:51:48:30:f9:df:e8:98:d6:55:74:a8:53:0d:04:d9: 33:31:92:70:49:cc:52:75:d6:b8:fe:59:3e:ed:e9:ab:37:2b: 73:e4:ff:26:82:03:9f:b7:6b:f7:38:62:3c:bd:b8:bf:12:72: 8e:79:84:e9:c0:2e:15:79:17:3d:83:bd:e7:e8:33:30:91:f7: f6:4a:af:9f:ec:cb:0d:36:6d:e1:23:ce:ed:2b:a5:4b:db:cd: 05:11:04:51:36:03:2e:93:fa:22:a1:7d:83:af:74:fa:f5:44: 3e:20:46:68:ab:82:11:67:85:8b:ee:e4:36:08:5b:a3:ea:55: 78:1e:06:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCKoyZpSXr+Q3/dbUyyPjXE8j9iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTA4MDgwNzM0MjZaFw0yNTA4MDkxMDU5MjZaMDMxMTAvBgNV BAMTKEE5MEJGNjdFQ0VGRURGQUFFMENBQzhFNzE0NTU3ODdENTNGRDUxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnNvYQPxHBdW0waUFztQBPtCN Gxr4OBA+86VICG8q94F4kifs7SVcOdE8iel+ihrtlOfuE/wDDjovXfKALnb/P6U7 L2w9My3IRjbZ31SEN+0WneaL1XWfGt39p2kotTKOGsnh2aBaoCbBOpP6hWa2nTgK RATwsJAIWwcdwNOLHiMRcSsWeA1GYuVe0LRGEf/75c2HxWxmVH+LcHr8AmQIHYNt YxxqGSN+e8/8O/rKrE4/kPhuBxKW4qEs8jbhjTPoaOFSPQ5tiLDsDTdoc8AaK1yT I5N+EYCu6ED7qnm1jkbiXpn1Nu1WWdBskRR3K+hUmpCYDDpAA826EfhYoVy/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqQv2fs7+36rgysjnFFV4fVP9UeEwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS82FHIEzhR5PVuEqWkjnh4T2CZBrSWtyBCodm5A/n5r9R4HAG4qPWbUY7Sbo SzbXK6n09uwEAemUdmpfES8nDr5Q3PZk25DjaD6sUZ3rRJ7+k/FpRDSWUFBiz1VF 2zaBNinit30B3Mee6GG3SC/d2lF6QZ3qt4OGFRYIdB98T9+gUUgw+d/omNZVdKhT DQTZMzGScEnMUnXWuP5ZPu3pqzcrc+T/JoIDn7dr9zhiPL24vxJyjnmE6cAuFXkX PYO95+gzMJH39kqvn+zLDTZt4SPO7SulS9vNBREEUTYDLpP6IqF9g690+vVEPiBG aKuCEWeFi+7kNghbo+pVeB4Gnw== -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:09 2025 by rpki-client