$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft File: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json) Hash identifier: 2Itk4jSMeqli0lMX3XbLo5ackLnta4GC5L68oXVkOJE= Subject key identifier: 3C:DD:06:E7:C9:57:88:F8:16:F6:F0:FD:C8:00:EE:D9:43:3F:A5:50 Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA Certificate issuer: /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Certificate serial: 385DEB942D44613E888ECC7D1FD8CD1D5D81F189 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft Manifest number: 01B9 Signing time: Sun 10 Aug 2025 18:18:47 +0000 Manifest this update: Sun 10 Aug 2025 18:13:47 +0000 Manifest next update: Mon 11 Aug 2025 20:44:47 +0000 Files and hashes: 1: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: mfVFOONGsjuiTznFQSKITz/W1KT8ikR+RYZ6A6PFNgE=) 2: 323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (hash: bw1WW6GWbWeJMCOoifTsH4AiSiS5eco7vGabyTZ4xYs=) 3: 34352e3136322e3231322e302f32322d3332203d3e20323638353634.roa (hash: ezJVm/RyZ7vHKrjB8DTRPK5q9lhj+iYdELF2LjMpBz0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 20:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5d:eb:94:2d:44:61:3e:88:8e:cc:7d:1f:d8:cd:1d:5d:81:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Validity Not Before: Aug 10 18:13:47 2025 GMT Not After : Aug 11 20:44:47 2025 GMT Subject: CN=3CDD06E7C95788F816F6F0FDC800EED9433FA550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8a:09:b7:5f:11:78:c8:68:78:86:be:90:ec: 39:ae:57:80:9c:6f:ce:56:ce:94:84:8a:a3:90:4d: c7:3e:51:88:ee:71:92:0b:01:1e:3e:85:9d:27:59: 8f:97:00:a5:50:17:5e:d5:9f:af:6e:f4:d2:3e:50: 8a:ff:ce:00:bc:6b:fb:e9:d3:ce:6d:23:62:d4:1b: c3:bf:ce:1c:72:5e:c5:ef:e9:98:39:d2:1a:d5:c8: 05:12:d6:26:03:61:fd:ab:03:59:e8:56:dc:56:36: c9:75:7d:e2:59:39:33:5e:e9:5d:47:24:5b:65:3b: e9:ea:cf:0d:bc:3f:0f:1f:d5:25:0c:47:bf:8c:91: 07:85:85:21:0a:1c:c6:a8:29:a5:3a:ea:e0:ad:6f: 92:b2:2e:99:1c:67:2f:b5:42:05:5a:99:c6:c3:30: 01:eb:a3:6a:c7:a6:e3:d3:da:f6:c3:0a:0d:ab:63: 88:3e:86:67:48:0f:25:90:6f:55:de:20:ba:f7:45: 3a:64:3c:61:cb:1e:44:ca:0b:2e:6e:aa:ae:05:54: a0:cf:26:09:00:e0:4f:5b:9b:f1:2e:3d:f3:3e:a7: f9:b9:23:75:ca:76:b0:1b:b9:59:77:1f:0c:a5:e1: b9:4b:94:c9:32:0f:c1:68:21:29:21:4e:60:19:f9: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DD:06:E7:C9:57:88:F8:16:F6:F0:FD:C8:00:EE:D9:43:3F:A5:50 X509v3 Authority Key Identifier: keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d5:4b:cf:c8:dc:9d:95:d0:bf:92:cd:0e:cf:a9:04:16:1a: 24:e6:ec:8f:ad:8a:a4:1f:85:ad:bc:49:60:a4:ba:f6:d7:fa: f8:b0:27:d9:c2:5b:e9:75:94:e9:b0:3f:8a:d2:87:ab:a8:3a: 6d:7d:99:35:67:83:ad:71:d6:9d:0f:ab:70:17:c0:c9:f3:12: f8:59:fb:98:37:5c:ed:58:58:9b:f1:7a:ea:79:51:c4:fc:83: 7c:5b:01:33:10:bd:30:43:8c:6d:a6:67:e4:3e:8c:4d:ee:a8: 67:6c:84:66:0d:1d:b7:dc:2a:17:69:65:69:54:10:42:97:ec: c8:e3:2c:4f:03:c8:a8:2b:68:a0:ae:47:1b:9a:01:a8:64:cb: 49:b2:f2:12:c7:0c:92:95:12:1d:2f:31:67:27:4e:f0:27:25: 55:85:32:e1:2b:d8:24:e3:76:a0:91:b2:35:67:65:d8:0f:83: 22:ff:3d:b8:0c:21:6e:19:1c:ca:bc:d1:22:b1:25:fe:31:9a: 40:59:9a:df:b8:c0:73:05:51:7a:0c:c5:a3:43:97:d1:9a:e9: 51:9d:2c:df:58:cf:f0:f4:5b:97:cb:a3:fb:96:77:ff:fb:12: 66:f1:8b:49:38:fb:ef:0c:23:f2:75:4d:cc:58:ed:87:d0:b6: 31:99:44:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOF3rlC1EYT6Ijsx9H9jNHV2B8YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzM0MxQ0ZDMTE3QTM3OTE4RDRCRDVCNjRCMjMzQUU5 MTJBNDBCQTAeFw0yNTA4MTAxODEzNDdaFw0yNTA4MTEyMDQ0NDdaMDMxMTAvBgNV BAMTKDNDREQwNkU3Qzk1Nzg4RjgxNkY2RjBGREM4MDBFRUQ5NDMzRkE1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqigm3XxF4yGh4hr6Q7DmuV4Cc b85WzpSEiqOQTcc+UYjucZILAR4+hZ0nWY+XAKVQF17Vn69u9NI+UIr/zgC8a/vp 085tI2LUG8O/zhxyXsXv6Zg50hrVyAUS1iYDYf2rA1noVtxWNsl1feJZOTNe6V1H JFtlO+nqzw28Pw8f1SUMR7+MkQeFhSEKHMaoKaU66uCtb5KyLpkcZy+1QgVamcbD MAHro2rHpuPT2vbDCg2rY4g+hmdIDyWQb1XeILr3RTpkPGHLHkTKCy5uqq4FVKDP JgkA4E9bm/EuPfM+p/m5I3XKdrAbuVl3Hwyl4blLlMkyD8FoISkhTmAZ+SGBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPN0G58lXiPgW9vD9yADu2UM/pVAwHwYDVR0j BBgwFoAU/zPBz8EXo3kY1L1bZLIzrpEqQLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC9GRjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNDMUNGQzExN0EzNzkx OEQ0QkQ1QjY0QjIzM0FFOTEyQTQwQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMC9G RjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAudVLz8jcnZXQv5LNDs+pBBYaJObsj62KpB+FrbxJYKS69tf6+LAn2cJb6XWU 6bA/itKHq6g6bX2ZNWeDrXHWnQ+rcBfAyfMS+Fn7mDdc7VhYm/F66nlRxPyDfFsB MxC9MEOMbaZn5D6MTe6oZ2yEZg0dt9wqF2llaVQQQpfsyOMsTwPIqCtooK5HG5oB qGTLSbLyEscMkpUSHS8xZydO8CclVYUy4SvYJON2oJGyNWdl2A+DIv89uAwhbhkc yrzRIrEl/jGaQFma37jAcwVRegzFo0OX0ZrpUZ0s31jP8PRbl8uj+5Z3//sSZvGL STj77wwj8nVNzFjth9C2MZlEPw== -----END CERTIFICATE-----Generated at Mon Aug 11 01:54:06 2025 by rpki-client