$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft File: 433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json) Hash identifier: SxlZD5jF6d5Fc91S9+49YbGFe3A84czOoCu8uF85coI= Subject key identifier: D5:A3:21:9F:53:56:E1:FD:58:C9:05:8F:BB:9D:98:76:60:5F:D0:60 Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13 Certificate issuer: /CN=433BC56DE61BF5759F79705E437131F09597AF13 Certificate serial: 5629AC5B1C24C1AFB1CF427B11FA3107105D856A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer Subject info access: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft Manifest number: 011D Signing time: Tue 04 Nov 2025 14:47:00 +0000 Manifest this update: Tue 04 Nov 2025 14:42:00 +0000 Manifest next update: Wed 05 Nov 2025 17:10:00 +0000 Files and hashes: 1: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: 4I3JVl8Qqh2IF1Rw0f8I/z32VCocrS7PWuoeMyVcgfg=) 2: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=) 3: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:29:ac:5b:1c:24:c1:af:b1:cf:42:7b:11:fa:31:07:10:5d:85:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13 Validity Not Before: Nov 4 14:42:00 2025 GMT Not After : Nov 5 17:10:00 2025 GMT Subject: CN=D5A3219F5356E1FD58C9058FBB9D9876605FD060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:9e:79:7b:45:31:82:8e:de:c4:41:da:4b: ee:e4:2a:2d:31:49:af:10:d7:3b:8d:c5:bf:94:19: a9:03:88:b3:1f:ed:80:08:8b:a1:07:ae:53:dc:cd: 14:5b:36:22:9b:e1:b3:43:c2:08:ab:9e:40:15:6a: bc:d9:21:ff:27:f2:ed:84:1d:27:13:c1:35:24:b2: 38:06:d2:eb:93:8a:7e:41:f0:d8:ed:c9:4b:52:29: e9:39:c5:89:86:da:52:00:40:fc:2b:87:e1:2b:0a: 9a:1b:60:6a:1d:80:79:8e:7c:27:f1:f4:1a:40:71: 21:15:9c:ce:df:15:84:bf:e5:07:d7:59:59:e4:40: b9:26:eb:fc:98:8d:ae:38:c7:b5:0d:70:1f:52:22: b2:fb:83:25:c3:55:f8:64:ba:38:1f:6e:5c:25:ad: 79:6f:f8:0e:f4:b3:d6:04:a2:0b:b4:0f:29:57:aa: c4:e5:95:80:9f:01:34:7c:7c:6a:44:89:ce:2d:cf: f5:4c:cd:78:0b:ad:0e:12:1b:ad:bb:7e:85:9c:92: 4a:c4:ff:85:16:ec:83:ff:e3:bc:f3:ea:a5:33:1f: 0c:5e:75:86:e9:2f:82:d9:e5:e9:e7:da:7c:dc:58: d4:bd:94:f5:e5:78:c1:dc:7d:c5:43:4d:54:e6:48: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:21:9F:53:56:E1:FD:58:C9:05:8F:BB:9D:98:76:60:5F:D0:60 X509v3 Authority Key Identifier: keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:39:6d:12:5d:db:6a:34:43:94:4a:63:fb:06:7d:6e:66: 32:6c:19:92:c8:c7:a3:f5:91:ad:bf:71:b7:ed:a2:49:d7:5e: 4a:a7:97:9f:45:89:e8:c5:b1:ca:76:8b:79:eb:04:eb:93:19: b2:df:93:db:4e:45:dd:ca:c0:86:54:42:98:c5:43:99:ed:5a: 81:14:29:d5:cd:5b:f3:d2:a2:78:e5:ba:fb:7d:7e:73:ba:23: 5c:43:3a:cc:d9:ca:68:d8:62:89:52:14:fb:8b:36:10:90:4a: ba:13:fa:ba:56:4b:85:0d:19:c7:44:29:be:77:ca:7e:cb:97: b4:c2:99:f3:d8:02:f4:1e:bf:03:33:32:10:86:fc:a2:15:33: 7d:b3:0e:aa:4f:40:ad:5f:99:73:cc:9b:d2:78:dc:0f:c9:b6: f9:a8:62:42:44:f5:35:c9:ae:90:1f:18:51:b5:6e:0d:26:e2: c0:7d:a5:c2:1f:0a:cf:1d:ec:fb:5e:01:16:5c:42:e6:c7:83: 2c:6e:a3:b3:28:1d:65:7e:d1:69:e0:23:56:58:0d:87:d9:52: f5:c7:59:7a:8d:50:40:e1:3f:c7:c4:47:f0:e5:96:25:77:33: 2b:a8:6b:49:f8:f6:07:dc:8a:9b:ac:bc:f3:25:a3:30:d5:9d: b4:75:e3:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVimsWxwkwa+xz0J7EfoxBxBdhWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkM1NkRFNjFCRjU3NTlGNzk3MDVFNDM3MTMxRjA5 NTk3QUYxMzAeFw0yNTExMDQxNDQyMDBaFw0yNTExMDUxNzEwMDBaMDMxMTAvBgNV BAMTKEQ1QTMyMTlGNTM1NkUxRkQ1OEM5MDU4RkJCOUQ5ODc2NjA1RkQwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzI555e0Uxgo7exEHaS+7kKi0x Sa8Q1zuNxb+UGakDiLMf7YAIi6EHrlPczRRbNiKb4bNDwgirnkAVarzZIf8n8u2E HScTwTUksjgG0uuTin5B8NjtyUtSKek5xYmG2lIAQPwrh+ErCpobYGodgHmOfCfx 9BpAcSEVnM7fFYS/5QfXWVnkQLkm6/yYja44x7UNcB9SIrL7gyXDVfhkujgfblwl rXlv+A70s9YEogu0DylXqsTllYCfATR8fGpEic4tz/VMzXgLrQ4SG627foWckkrE /4UW7IP/47zz6qUzHwxedYbpL4LZ5enn2nzcWNS9lPXleMHcfcVDTVTmSDwZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1aMhn1NW4f1YyQWPu52YdmBf0GAwHwYDVR0j BBgwFoAUQzvFbeYb9XWfeXBeQ3Ex8JWXrxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBn cEQvMC80MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JDNTZERTYxQkY1NzU5 Rjc5NzA1RTQzNzEzMUYwOTU5N0FGMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBncEQvMC80 MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQaM5bRJd22o0Q5RKY/sGfW5mMmwZksjHo/WRrb9xt+2iSddeSqeXn0WJ6MWx ynaLeesE65MZst+T205F3crAhlRCmMVDme1agRQp1c1b89KieOW6+31+c7ojXEM6 zNnKaNhiiVIU+4s2EJBKuhP6ulZLhQ0Zx0QpvnfKfsuXtMKZ89gC9B6/AzMyEIb8 ohUzfbMOqk9ArV+Zc8yb0njcD8m2+ahiQkT1NcmukB8YUbVuDSbiwH2lwh8Kzx3s +14BFlxC5seDLG6jsygdZX7RaeAjVlgNh9lS9cdZeo1QQOE/x8RH8OWWJXczK6hr Sfj2B9yKm6y88yWjMNWdtHXjeg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:23 2025 by rpki-client