$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft File: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json) Hash identifier: C927yVVUPesFMugQe+GeBa9msGbcr1mbjjBUxhA+Log= Subject key identifier: 3E:16:BC:77:66:0F:FD:EA:05:87:34:6C:BA:FD:A1:03:1F:8D:63:FB Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA Certificate issuer: /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Certificate serial: 05E3847FAFDC1BEDEA036BCDBA172B2F69240CD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft Manifest number: 022B Signing time: Tue 04 Nov 2025 16:48:19 +0000 Manifest this update: Tue 04 Nov 2025 16:43:19 +0000 Manifest next update: Wed 05 Nov 2025 18:04:19 +0000 Files and hashes: 1: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: gXM3vp+p/lUGe2rUQrHwgRNyhCoJ031xb/3Rik9S8Cc=) 2: 323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (hash: bw1WW6GWbWeJMCOoifTsH4AiSiS5eco7vGabyTZ4xYs=) 3: 34352e3136322e3231322e302f32322d3332203d3e20323638353634.roa (hash: ezJVm/RyZ7vHKrjB8DTRPK5q9lhj+iYdELF2LjMpBz0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e3:84:7f:af:dc:1b:ed:ea:03:6b:cd:ba:17:2b:2f:69:24:0c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Validity Not Before: Nov 4 16:43:19 2025 GMT Not After : Nov 5 18:04:19 2025 GMT Subject: CN=3E16BC77660FFDEA0587346CBAFDA1031F8D63FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:30:3b:d7:64:1a:39:60:4e:11:e5:96:11: 53:13:1c:23:b8:a3:14:46:55:12:52:5b:ad:64:43: c8:97:3f:1e:27:7f:c3:9c:c0:25:96:c7:ab:c5:6f: 7e:0f:14:a4:0a:14:4d:05:86:d8:4c:8e:28:49:6d: ad:c1:df:be:60:d7:98:13:8d:66:24:b3:a1:c0:44: 68:7e:9b:d3:c4:f7:8e:fa:55:4f:2a:c6:28:1d:ad: fc:9e:ce:4b:4a:5e:09:6b:ff:68:c3:44:fe:52:a7: e0:e4:59:22:26:ef:c1:83:77:69:8a:f1:09:f0:d2: 17:92:1f:08:aa:40:23:25:19:64:54:98:97:6c:dc: 0e:26:ec:b7:48:86:98:66:43:28:12:7d:30:4a:43: 9d:71:75:93:c0:38:cd:e8:4f:41:7e:79:9b:f9:ba: a1:5a:10:ec:45:4d:30:b9:14:d0:76:5e:98:f8:8e: d6:f7:7e:7b:aa:17:4a:4e:4b:04:7c:ef:c9:5d:f7: 04:7c:e6:21:8d:1f:ff:fc:65:c8:16:e2:cf:cf:d6: 75:7f:b7:d5:4b:89:4d:25:c1:3e:34:49:25:56:3d: 5a:d3:58:f0:37:4e:b0:49:7f:25:2d:1a:05:8c:06: 9f:b1:b3:97:2a:5b:ac:7d:03:d1:70:04:31:23:33: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:16:BC:77:66:0F:FD:EA:05:87:34:6C:BA:FD:A1:03:1F:8D:63:FB X509v3 Authority Key Identifier: keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:af:05:aa:36:ec:63:c4:84:94:93:63:ae:47:c6:6e:ca:20: cd:1f:a1:18:7d:9b:65:2f:39:9b:7b:ce:97:33:7e:6e:5e:de: 9e:21:37:a3:fc:a8:dd:3c:07:1f:65:a0:4d:d2:57:67:0b:76: 1c:ca:17:9a:8a:33:5a:7b:78:99:54:b9:34:a2:2e:df:9a:52: 61:37:81:f6:f6:b4:4e:3d:da:8e:1e:a9:d7:ff:6a:23:cb:b4: 51:2b:3c:95:5e:2d:5c:d3:72:cb:e6:b3:a4:9b:28:3c:84:ed: a5:03:b6:83:07:4e:06:32:0d:ec:c4:75:f1:a6:bb:c7:21:46: c8:81:24:a2:88:60:4b:3e:70:43:76:89:99:08:6c:74:53:04: ec:15:1f:72:a0:c5:48:9d:08:22:47:ed:80:0a:94:99:0d:70: b3:a2:c9:68:f9:c0:e5:8e:6b:44:7d:88:d8:1f:6b:da:2b:c4: 1d:d6:d8:2b:cb:41:e9:06:81:28:9f:85:69:62:8e:29:c1:5d: 09:0f:c0:c1:c7:c2:de:4e:2b:f3:d1:05:8e:0d:a2:54:9c:ae: d8:b0:a6:ba:38:24:4e:39:ab:51:69:59:89:b7:5e:d5:7e:c9: f6:02:b2:dd:c3:28:e1:80:52:df:eb:3a:72:8e:09:6b:38:a0: 99:6d:c2:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBeOEf6/cG+3qA2vNuhcrL2kkDNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzM0MxQ0ZDMTE3QTM3OTE4RDRCRDVCNjRCMjMzQUU5 MTJBNDBCQTAeFw0yNTExMDQxNjQzMTlaFw0yNTExMDUxODA0MTlaMDMxMTAvBgNV BAMTKDNFMTZCQzc3NjYwRkZERUEwNTg3MzQ2Q0JBRkRBMTAzMUY4RDYzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FjA712QaOWBOEeWWEVMTHCO4 oxRGVRJSW61kQ8iXPx4nf8OcwCWWx6vFb34PFKQKFE0FhthMjihJba3B375g15gT jWYks6HARGh+m9PE9476VU8qxigdrfyezktKXglr/2jDRP5Sp+DkWSIm78GDd2mK 8Qnw0heSHwiqQCMlGWRUmJds3A4m7LdIhphmQygSfTBKQ51xdZPAOM3oT0F+eZv5 uqFaEOxFTTC5FNB2Xpj4jtb3fnuqF0pOSwR878ld9wR85iGNH//8ZcgW4s/P1nV/ t9VLiU0lwT40SSVWPVrTWPA3TrBJfyUtGgWMBp+xs5cqW6x9A9FwBDEjM5FTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPha8d2YP/eoFhzRsuv2hAx+NY/swHwYDVR0j BBgwFoAU/zPBz8EXo3kY1L1bZLIzrpEqQLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC9GRjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNDMUNGQzExN0EzNzkx OEQ0QkQ1QjY0QjIzM0FFOTEyQTQwQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMC9G RjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAka8FqjbsY8SElJNjrkfGbsogzR+hGH2bZS85m3vOlzN+bl7eniE3o/yo3TwH H2WgTdJXZwt2HMoXmoozWnt4mVS5NKIu35pSYTeB9va0Tj3ajh6p1/9qI8u0USs8 lV4tXNNyy+azpJsoPITtpQO2gwdOBjIN7MR18aa7xyFGyIEkoohgSz5wQ3aJmQhs dFME7BUfcqDFSJ0IIkftgAqUmQ1ws6LJaPnA5Y5rRH2I2B9r2ivEHdbYK8tB6QaB KJ+FaWKOKcFdCQ/AwcfC3k4r89EFjg2iVJyu2LCmujgkTjmrUWlZibde1X7J9gKy 3cMo4YBS3+s6co4JazigmW3CDQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:31 2025 by rpki-client