$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: 3962Lkb8yfP9zHbC1IiI2gNaEwzXd8+tocucbdWPz1g= Subject key identifier: 0C:03:8D:36:EF:5A:68:C4:6F:3C:1D:D3:F1:7B:D0:4E:AA:85:77:CF Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 75E905FF84F9E06DEE7880474E80F23979DE451B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: 34 Signing time: Fri 08 Aug 2025 08:59:49 +0000 Manifest this update: Fri 08 Aug 2025 08:54:49 +0000 Manifest next update: Sat 09 Aug 2025 12:55:49 +0000 Files and hashes: 1: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) 2: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: hXi22cGY30Lw73sXjMIk3FMyqm9yVXLBtscqXX9yqGQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 12:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e9:05:ff:84:f9:e0:6d:ee:78:80:47:4e:80:f2:39:79:de:45:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Aug 8 08:54:49 2025 GMT Not After : Aug 9 12:55:49 2025 GMT Subject: CN=0C038D36EF5A68C46F3C1DD3F17BD04EAA8577CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:fa:48:af:08:c0:6e:6f:98:76:1a:72:2c: 07:52:fc:ed:17:c7:b8:0d:84:09:6d:3e:42:b8:32: d6:bf:fe:10:e8:e3:40:18:f9:d9:75:5e:6a:ad:2c: c6:15:04:e6:0f:2e:3a:9a:dd:45:f4:e6:da:68:79: 7e:fb:87:03:16:43:d2:b8:66:09:19:09:39:a6:fc: 34:d6:2c:4e:ff:a9:56:9c:52:69:8e:70:f5:b2:0f: 92:90:17:63:40:51:81:4d:11:09:3b:18:2a:f0:6d: 59:4f:6c:64:32:95:8d:25:b4:a5:a6:34:09:db:37: 39:30:12:1c:e7:50:04:3a:39:79:48:cc:0a:85:38: 34:4d:4e:fd:aa:86:3f:4e:05:c3:7e:a2:09:ec:dd: 54:1c:bc:c0:37:8f:66:db:c1:6e:9a:6b:92:19:be: dc:a8:5f:dd:ed:c7:1a:6d:54:ab:27:18:34:6e:36: df:ec:68:d6:66:be:95:62:00:b6:96:9f:67:0a:a5: dc:d7:e0:26:b0:b9:4f:9d:6d:d6:76:23:de:fa:e4: 0e:47:51:55:b9:9a:63:3e:69:b3:5c:6a:fc:08:fa: 7c:c8:6c:4f:38:03:6b:1c:f0:b1:5a:57:c8:72:ca: 8c:99:11:71:6d:ae:40:63:b7:4f:ad:ba:20:16:2d: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:8D:36:EF:5A:68:C4:6F:3C:1D:D3:F1:7B:D0:4E:AA:85:77:CF X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:20:67:85:d3:fd:05:31:55:48:e0:87:0c:9f:b0:47:d4: 42:7f:33:e4:b6:ed:bf:24:66:fd:52:77:d9:41:02:2e:89:04: c9:1c:ff:20:e8:52:e0:cc:68:0d:6f:c9:e4:03:74:a9:f0:0f: d5:64:bb:98:99:24:39:5c:7a:c1:66:3b:66:f1:48:20:9e:75: af:2c:50:34:53:04:9d:5a:d3:9e:cd:14:e9:d4:f6:7e:f9:96: d8:97:28:c1:f8:74:4c:d6:a3:4a:a7:0a:d7:e6:34:b0:2a:09: f5:a0:2a:bc:21:fd:5f:a3:2d:6e:db:d3:97:99:28:ff:16:bc: aa:81:a9:4b:15:9f:6b:9b:b6:dc:7e:c3:f6:24:49:f7:f2:f1: 8e:b7:93:c6:1f:c8:07:37:9b:61:5a:34:c2:08:4d:fb:39:fe: b6:2e:11:0e:ce:41:60:6f:5a:df:0f:36:9d:72:16:26:cb:9a: 43:06:7a:16:87:54:87:f4:d0:11:21:e6:eb:fb:95:01:ee:85: 3b:f7:c7:23:59:1b:54:b2:23:2a:d4:e0:f2:8e:2f:5a:9e:a4: c3:21:66:b3:d9:df:e1:32:5b:8b:2c:2e:cc:06:a7:42:0c:81: fa:37:f9:73:b5:09:89:b7:cd:5b:53:68:8c:3d:f3:75:52:03: 39:0e:62:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdekF/4T54G3ueIBHToDyOXneRRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNTA4MDgwODU0NDlaFw0yNTA4MDkxMjU1NDlaMDMxMTAvBgNV BAMTKDBDMDM4RDM2RUY1QTY4QzQ2RjNDMUREM0YxN0JEMDRFQUE4NTc3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aPpIrwjAbm+YdhpyLAdS/O0X x7gNhAltPkK4Mta//hDo40AY+dl1XmqtLMYVBOYPLjqa3UX05tpoeX77hwMWQ9K4 ZgkZCTmm/DTWLE7/qVacUmmOcPWyD5KQF2NAUYFNEQk7GCrwbVlPbGQylY0ltKWm NAnbNzkwEhznUAQ6OXlIzAqFODRNTv2qhj9OBcN+ogns3VQcvMA3j2bbwW6aa5IZ vtyoX93txxptVKsnGDRuNt/saNZmvpViALaWn2cKpdzX4CawuU+dbdZ2I9765A5H UVW5mmM+abNcavwI+nzIbE84A2sc8LFaV8hyyoyZEXFtrkBjt0+tuiAWLaGLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDAONNu9aaMRvPB3T8XvQTqqFd88wHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGA0gZ4XT/QUxVUjghwyfsEfUQn8z5LbtvyRm/VJ32UECLokEyRz/IOhS4Mxo DW/J5AN0qfAP1WS7mJkkOVx6wWY7ZvFIIJ51ryxQNFMEnVrTns0U6dT2fvmW2Jco wfh0TNajSqcK1+Y0sCoJ9aAqvCH9X6MtbtvTl5ko/xa8qoGpSxWfa5u23H7D9iRJ 9/LxjreTxh/IBzebYVo0wghN+zn+ti4RDs5BYG9a3w82nXIWJsuaQwZ6FodUh/TQ ESHm6/uVAe6FO/fHI1kbVLIjKtTg8o4vWp6kwyFms9nf4TJbiywuzAanQgyB+jf5 c7UJibfNW1NojD3zdVIDOQ5iow== -----END CERTIFICATE-----Generated at Fri Aug 8 20:55:02 2025 by rpki-client