$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json) Hash identifier: 0NXhZpx3BKjee1sKVkFqeQOyM1LdWnP0p9yPK1Oc36Y= Subject key identifier: 7A:4C:36:07:B1:8C:E1:8D:6B:CB:CA:88:06:8E:BE:A3:E5:E7:7C:B2 Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Certificate serial: 54E1B240E104445EF07631B473AE0E758E491D4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft Manifest number: 20 Signing time: Wed 05 Nov 2025 00:59:01 +0000 Manifest this update: Wed 05 Nov 2025 00:54:01 +0000 Manifest next update: Thu 06 Nov 2025 03:43:01 +0000 Files and hashes: 1: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=) 2: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: qjicNS9eU8RrIhB6mSMkbT39a0+eZMJLx0Q+GNnMwDY=) 3: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e1:b2:40:e1:04:44:5e:f0:76:31:b4:73:ae:0e:75:8e:49:1d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Validity Not Before: Nov 5 00:54:01 2025 GMT Not After : Nov 6 03:43:01 2025 GMT Subject: CN=7A4C3607B18CE18D6BCBCA88068EBEA3E5E77CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:5b:6c:c1:56:53:89:be:65:42:75:f7:1c: 41:55:d8:10:ff:e9:c9:de:26:bf:74:e7:e9:04:f6: 4f:41:2f:20:c3:a8:35:e0:a3:32:fd:d0:ae:83:37: 2a:4d:fe:65:09:b7:47:61:70:7a:2e:bc:8a:de:0b: 87:21:f1:f5:53:8a:ad:39:af:e9:ee:c9:72:ee:19: 13:9a:01:16:cb:d6:40:ea:7c:7d:4b:f3:47:53:bb: 67:f9:45:4d:ad:96:7e:f0:4b:08:0e:c8:6d:a6:b9: 3a:28:d4:ef:17:93:36:ae:39:df:79:fe:e0:42:70: f1:41:13:80:c3:5a:5f:8f:e5:2d:e6:b2:5b:77:39: 27:31:3d:0b:11:2b:2f:9a:c6:24:12:cd:0a:00:13: ac:51:8b:52:0a:f0:70:09:e0:08:0a:10:98:0f:99: 1b:71:a9:47:15:7b:1c:b7:8e:29:83:ea:4a:51:e2: df:6e:fb:03:45:44:fd:8a:c1:46:98:17:02:c7:7d: a2:b5:de:d2:48:98:01:59:9f:37:58:d5:81:52:99: 2c:05:8f:99:ed:a5:ab:cf:54:12:02:1e:17:9e:34: e7:6d:dd:89:84:bf:9c:5b:3c:c7:bd:83:f8:8d:e0: 1b:7a:55:99:26:4c:18:62:ca:be:e5:f1:8d:cd:1f: da:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4C:36:07:B1:8C:E1:8D:6B:CB:CA:88:06:8E:BE:A3:E5:E7:7C:B2 X509v3 Authority Key Identifier: keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e2:bc:76:bc:fa:a4:02:8f:f4:8b:ce:e7:44:c2:0b:ce:a7: d9:bc:4f:aa:6c:51:54:17:04:32:a8:e5:3d:40:e3:37:7a:ea: 83:b8:86:f4:55:fa:8f:31:ef:14:66:2e:c8:29:f5:ff:11:8d: a1:0c:58:24:4f:ec:40:45:a6:41:03:f5:e8:9e:f5:97:ca:bc: 2b:a9:f3:6b:5a:51:1d:f0:c8:e0:84:cb:29:de:f6:fe:a4:76: 89:0a:b2:07:b8:7e:0a:9f:d2:8b:8b:b0:aa:7d:d4:99:f1:37: d4:30:34:37:98:d9:a4:88:29:ae:ce:54:33:f4:0a:34:22:1c: 28:99:75:3e:96:60:2f:c6:3b:03:71:5b:fa:c4:25:6f:ea:52: 73:12:dc:18:ab:51:99:6b:cd:9a:69:da:58:3c:cc:88:d1:80: 30:45:30:d3:ae:d5:90:b3:5c:2b:03:88:16:c7:0f:92:3b:b8: 34:7c:98:72:79:8a:21:5c:32:f2:2d:0a:b5:52:1a:0a:6d:99: 90:24:ff:10:d1:3c:6c:b3:d3:2a:ca:f7:88:c9:db:19:8f:d3: 2e:48:bb:33:34:18:ec:79:13:87:f9:d0:6e:d0:6a:e2:2d:9e: 17:17:21:91:d0:e8:c7:4b:8c:4e:c1:8a:c5:82:f2:f4:61:e6: 42:64:37:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVOGyQOEERF7wdjG0c64OdY5JHU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB MURERjBCOTAeFw0yNTExMDUwMDU0MDFaFw0yNTExMDYwMzQzMDFaMDMxMTAvBgNV BAMTKDdBNEMzNjA3QjE4Q0UxOEQ2QkNCQ0E4ODA2OEVCRUEzRTVFNzdDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pVtswVZTib5lQnX3HEFV2BD/ 6cneJr905+kE9k9BLyDDqDXgozL90K6DNypN/mUJt0dhcHouvIreC4ch8fVTiq05 r+nuyXLuGROaARbL1kDqfH1L80dTu2f5RU2tln7wSwgOyG2muToo1O8XkzauOd95 /uBCcPFBE4DDWl+P5S3mslt3OScxPQsRKy+axiQSzQoAE6xRi1IK8HAJ4AgKEJgP mRtxqUcVexy3jimD6kpR4t9u+wNFRP2KwUaYFwLHfaK13tJImAFZnzdY1YFSmSwF j5ntpavPVBICHheeNOdt3YmEv5xbPMe9g/iN4Bt6VZkmTBhiyr7l8Y3NH9qvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUekw2B7GM4Y1ry8qIBo6+o+XnfLIwHwYDVR0j BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjeK8drz6pAKP9IvO50TCC86n2bxPqmxRVBcEMqjlPUDjN3rqg7iG9FX6jzHv FGYuyCn1/xGNoQxYJE/sQEWmQQP16J71l8q8K6nza1pRHfDI4ITLKd72/qR2iQqy B7h+Cp/Si4uwqn3UmfE31DA0N5jZpIgprs5UM/QKNCIcKJl1PpZgL8Y7A3Fb+sQl b+pScxLcGKtRmWvNmmnaWDzMiNGAMEUw067VkLNcKwOIFscPkju4NHyYcnmKIVwy 8i0KtVIaCm2ZkCT/ENE8bLPTKsr3iMnbGY/TLki7MzQY7HkTh/nQbtBq4i2eFxch kdDox0uMTsGKxYLy9GHmQmQ3Jw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:33 2025 by rpki-client