$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json) Hash identifier: UTcZjDTR7lIDUEeUjRiHU9t4yClUqxG8hkqzWSBLw9Q= Subject key identifier: C1:E4:21:C5:F8:83:AE:6C:57:74:CD:80:C0:0B:66:63:CD:B3:1B:1E Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Certificate serial: 22BA996F79FA872B453DC8F3EDFCF661C1DF62BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 20:13:26 +0000 Manifest this update: Tue 04 Nov 2025 20:08:26 +0000 Manifest next update: Wed 05 Nov 2025 23:38:26 +0000 Files and hashes: 1: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: ZIKcS7787op0aqOOtRv316zjE1tm1ppd6QpNlrr11SY=) 2: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: tgx0Vy+5T1TRke2lMS4iT0Zn+4rmirQHSXevJR078lc=) 3: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: 7mTGxBcJmB0cXKah+UHKsduoO+SpzBlH0SwtKtwt3pY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ba:99:6f:79:fa:87:2b:45:3d:c8:f3:ed:fc:f6:61:c1:df:62:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B Validity Not Before: Nov 4 20:08:26 2025 GMT Not After : Nov 5 23:38:26 2025 GMT Subject: CN=C1E421C5F883AE6C5774CD80C00B6663CDB31B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:45:89:e4:50:91:f4:13:c8:72:16:62:49:d1: 95:45:d9:69:d8:31:8c:9c:ec:97:89:8d:b9:37:0a: e5:a2:5e:12:cc:74:f1:07:a7:de:e7:73:e3:32:c0: ce:e9:cd:28:4d:d7:1e:65:70:31:ef:a2:fc:2f:35: df:b2:4f:da:c6:8f:70:06:f1:7b:52:45:d0:ca:85: 42:5b:01:55:10:06:b3:15:dd:80:44:7e:71:67:07: d2:ba:bb:21:a1:34:13:25:46:9f:a2:69:c3:40:11: 16:a2:f6:4f:7b:f0:b4:09:12:7b:e5:67:02:e1:28: 10:8b:0a:23:03:23:51:d6:9c:ea:1f:c4:ad:d0:69: 3a:d2:66:53:bd:32:5c:84:f6:cd:ee:8d:74:37:91: 0b:d1:4c:e5:ea:f1:5c:db:71:1f:8a:02:65:83:93: f1:31:76:d4:99:e5:7f:c0:99:2e:86:c2:30:b2:a5: e8:0d:9b:93:50:ba:30:6e:42:43:37:bf:b9:1d:0b: 79:21:55:f2:e5:4b:7e:ea:10:32:2f:c3:99:22:6a: 2e:37:f8:26:10:d7:d5:e9:b4:33:5a:68:6e:dd:a0: 5d:66:39:1e:ef:d6:a9:68:19:7d:2a:92:5a:a2:f7: 59:9f:ca:d4:43:3d:98:75:57:35:cf:b1:fa:81:31: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:21:C5:F8:83:AE:6C:57:74:CD:80:C0:0B:66:63:CD:B3:1B:1E X509v3 Authority Key Identifier: keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:63:53:cb:25:85:8c:ad:dd:a1:cb:af:68:a7:58:d4:f8:52: 4c:3b:ca:46:41:6c:a6:be:8c:63:c7:37:71:3b:8e:d1:84:fc: a4:6e:d8:35:1f:cb:56:7d:d0:53:fb:69:ec:64:b3:be:d6:34: 62:90:4c:30:4a:16:8d:35:a9:ae:86:54:05:2e:b8:a0:80:be: 52:f7:be:02:9e:e0:39:e7:39:7d:32:25:77:ca:6d:c7:b5:62: 22:d7:5d:29:5b:34:88:52:f2:13:84:20:12:b9:e0:23:ce:6e: 61:f7:5c:10:26:7e:5f:fd:13:09:a6:1b:c9:09:a6:4b:cd:5d: 75:62:46:ad:6d:bb:e1:ed:10:5f:a8:94:5c:85:f2:dc:40:1f: 00:13:5e:ff:dd:ca:58:7b:2a:f4:81:9e:60:1f:fd:0b:b8:e8: 3e:e4:6b:c6:f0:2d:ea:b5:ce:e2:83:62:6f:08:79:88:73:6b: b5:9b:07:e6:47:a8:eb:5c:1d:96:a3:54:c2:18:52:a4:ac:78: da:52:ee:08:d9:45:cb:53:da:b1:42:44:fa:49:ac:8c:05:cc: a1:71:9b:e8:a3:ff:02:5a:75:5f:c7:d2:3f:69:23:31:6e:4f: b2:0b:50:44:53:c2:7a:b7:6b:14:18:7c:dc:dc:ca:89:ce:7a: b7:6c:f8:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIrqZb3n6hytFPcjz7fz2YcHfYrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUExQUNBM0E2OTc4QUVDMkQyREY0RDI5RUI0QjM1 OUIzRjY5QjAeFw0yNTExMDQyMDA4MjZaFw0yNTExMDUyMzM4MjZaMDMxMTAvBgNV BAMTKEMxRTQyMUM1Rjg4M0FFNkM1Nzc0Q0Q4MEMwMEI2NjYzQ0RCMzFCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRYnkUJH0E8hyFmJJ0ZVF2WnY MYyc7JeJjbk3CuWiXhLMdPEHp97nc+MywM7pzShN1x5lcDHvovwvNd+yT9rGj3AG 8XtSRdDKhUJbAVUQBrMV3YBEfnFnB9K6uyGhNBMlRp+iacNAERai9k978LQJEnvl ZwLhKBCLCiMDI1HWnOofxK3QaTrSZlO9MlyE9s3ujXQ3kQvRTOXq8VzbcR+KAmWD k/ExdtSZ5X/AmS6GwjCypegNm5NQujBuQkM3v7kdC3khVfLlS37qEDIvw5kiai43 +CYQ19XptDNaaG7doF1mOR7v1qloGX0qklqi91mfytRDPZh1VzXPsfqBMZOnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUweQhxfiDrmxXdM2AwAtmY82zGx4wHwYDVR0j BBgwFoAUM+qhrKOml4rsLS300p60s1mz9pswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGpp TWMvMS8zM0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRUFBMUFDQTNBNjk3OEFF QzJEMkRGNEQyOUVCNEIzNTlCM0Y2OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhYUm41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGppTWMvMS8z M0VBQTFBQ0EzQTY5NzhBRUMyRDJERjREMjlFQjRCMzU5QjNGNjlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGGNTyyWFjK3docuvaKdY1PhSTDvKRkFspr6MY8c3cTuO0YT8pG7YNR/LVn3Q U/tp7GSzvtY0YpBMMEoWjTWproZUBS64oIC+Uve+Ap7gOec5fTIld8ptx7ViItdd KVs0iFLyE4QgErngI85uYfdcECZ+X/0TCaYbyQmmS81ddWJGrW274e0QX6iUXIXy 3EAfABNe/93KWHsq9IGeYB/9C7joPuRrxvAt6rXO4oNibwh5iHNrtZsH5keo61wd lqNUwhhSpKx42lLuCNlFy1PasUJE+kmsjAXMoXGb6KP/Alp1X8fSP2kjMW5PsgtQ RFPCerdrFBh83NzKic56t2z4ZA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:15 2025 by rpki-client