$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft File: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json) Hash identifier: 1ytjt1NPR5MkD76i+oglJUds1KUSUXYuCpmMekdiZ3k= Subject key identifier: 41:86:42:8E:DC:10:F6:66:0C:AF:A5:37:86:E3:6D:0E:34:3E:83:A1 Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0 Certificate issuer: /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0 Certificate serial: 21E9E7137312A4DA088E2BAD2668E6CE8A1D9CCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft Manifest number: 0205 Signing time: Tue 05 Aug 2025 14:53:12 +0000 Manifest this update: Tue 05 Aug 2025 14:48:12 +0000 Manifest next update: Wed 06 Aug 2025 16:57:12 +0000 Files and hashes: 1: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: rHdFYL1RlzFnCXx0011eWG/cENm/pj6zKRN5HC669XI=) 2: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: znoCnr6e93GYcQiATLXvvDwtHsiWt69jotK53/EWZEc=) 3: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: ESPKyBn9k2Tj8mx8/vctfD0aZVU4OT6BupSSD8qOqhg=) 4: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: bBA4YJnUAawjGiuamZaJBjW4CIb/F/ARVaXg+y15IiE=) 5: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: NyhFyeCKsyzw9N/AuH1BDhS76oUWXd9+od5LyOG1qmk=) 6: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: ikb/eeov6bRBVVWN56xhzBR63CMjpkK522BDfSEzQU4=) 7: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 4ExtZvI8MqUvFVTsDf2h2l9l2Z/3J8appcSPENQekV4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 16:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e9:e7:13:73:12:a4:da:08:8e:2b:ad:26:68:e6:ce:8a:1d:9c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0 Validity Not Before: Aug 5 14:48:12 2025 GMT Not After : Aug 6 16:57:12 2025 GMT Subject: CN=4186428EDC10F6660CAFA53786E36D0E343E83A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:90:df:b5:f0:df:93:b4:7e:7e:ee:69:6e: ce:58:0e:13:3d:f4:2d:1a:da:02:a9:84:05:db:48: c4:70:65:a0:7b:56:12:0c:db:f5:ba:ad:4b:1f:5c: 1f:98:b6:93:98:8c:e0:8d:d4:c5:95:39:7e:a0:6d: b7:76:35:92:4b:18:5a:cf:a1:03:5b:e2:c6:c9:e8: eb:9b:a7:30:d6:3d:2c:7e:62:7e:f3:13:e2:8f:e9: b9:17:ba:c0:15:d8:5e:81:86:61:cc:88:68:7d:9e: 1c:95:39:a1:c3:c2:63:4e:55:5b:f6:81:22:d3:f6: ba:78:7a:fd:fa:11:43:7a:55:6f:4e:ed:94:7a:b4: e7:c6:ad:da:e4:dd:23:43:c1:19:4f:29:e0:d4:1e: 9a:ae:09:7e:aa:d7:df:14:47:c9:a2:15:a1:5a:6b: 11:8f:d7:a8:16:cc:35:44:ec:b0:8b:09:2f:a9:cc: 8f:ea:7d:ad:3d:9c:88:c6:73:1b:9f:ca:ee:d0:e5: df:86:c2:be:09:98:5f:c7:e7:e5:07:9b:fc:00:b8: 30:f1:58:eb:fe:9f:b6:74:db:a5:bc:3c:1a:e3:47: 20:13:8a:ec:38:a9:c7:31:0a:f5:c3:94:8f:f1:fc: 34:05:28:89:01:67:09:81:04:ca:03:d5:1b:9b:d0: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:42:8E:DC:10:F6:66:0C:AF:A5:37:86:E3:6D:0E:34:3E:83:A1 X509v3 Authority Key Identifier: keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:db:fc:72:3d:14:a9:b5:8a:89:14:78:30:4d:6c:20:46:3c: 58:d3:63:7c:42:eb:c5:ce:7c:29:01:96:77:e4:39:ef:28:3f: 11:69:1d:02:03:fd:50:14:c2:14:46:c7:51:99:cb:c6:37:35: 0c:47:2e:5c:a7:15:a5:6f:ab:1d:a1:e8:a8:56:3d:1c:2b:1f: b3:36:92:85:8c:f3:e8:f3:d1:fe:00:42:67:ae:68:f0:bd:d1: dd:b5:e8:74:7f:48:66:d3:a7:16:b6:3e:a7:3a:c3:ca:e7:1b: 64:b8:e0:3c:59:3b:bb:44:91:ba:ef:e7:f6:b8:d1:8c:b8:65: 9e:eb:6b:6f:72:ef:eb:b6:b7:9e:ad:98:99:8b:00:7b:4b:60: 90:6c:86:53:7a:c6:be:1b:08:28:e3:a6:40:ce:bb:58:53:3e: 91:44:58:db:cf:97:e4:88:27:49:52:f2:3e:dc:fc:50:8f:d7: ce:80:56:50:4c:12:a4:d4:3b:05:ed:0d:2f:59:e8:9e:8a:4f: 23:1f:c9:ac:9a:1c:f6:87:6d:cb:75:34:d5:f8:85:4c:62:ff: 8b:25:e4:09:e1:01:39:2f:49:ed:9a:ad:34:5d:2f:87:94:85: 75:de:f6:b8:8f:47:53:75:b8:4b:26:f3:b3:c9:47:31:e1:a1: fa:07:68:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIennE3MSpNoIjiutJmjmzoodnMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzQkREMzQ3NTQ3NUQ5QzhENjIzMkNCMUZEOTBGRDUy Q0Q4Q0ZEMDAeFw0yNTA4MDUxNDQ4MTJaFw0yNTA4MDYxNjU3MTJaMDMxMTAvBgNV BAMTKDQxODY0MjhFREMxMEY2NjYwQ0FGQTUzNzg2RTM2RDBFMzQzRTgzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlzpDftfDfk7R+fu5pbs5YDhM9 9C0a2gKphAXbSMRwZaB7VhIM2/W6rUsfXB+YtpOYjOCN1MWVOX6gbbd2NZJLGFrP oQNb4sbJ6OubpzDWPSx+Yn7zE+KP6bkXusAV2F6BhmHMiGh9nhyVOaHDwmNOVVv2 gSLT9rp4ev36EUN6VW9O7ZR6tOfGrdrk3SNDwRlPKeDUHpquCX6q198UR8miFaFa axGP16gWzDVE7LCLCS+pzI/qfa09nIjGcxufyu7Q5d+Gwr4JmF/H5+UHm/wAuDDx WOv+n7Z026W8PBrjRyATiuw4qccxCvXDlI/x/DQFKIkBZwmBBMoD1Rub0LUtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQYZCjtwQ9mYMr6U3huNtDjQ+g6EwHwYDVR0j BBgwFoAUYzvdNHVHXZyNYjLLH9kP1SzYz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGR3aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4 Mk4vMC82MzNCREQzNDc1NDc1RDlDOEQ2MjMyQ0IxRkQ5MEZENTJDRDhDRkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzM0JERDM0NzU0NzVEOUM4 RDYyMzJDQjFGRDkwRkQ1MkNEOENGRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGR3aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4Mk4vMC82 MzNCREQzNDc1NDc1RDlDOEQ2MjMyQ0IxRkQ5MEZENTJDRDhDRkQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ9v8cj0UqbWKiRR4ME1sIEY8WNNjfELrxc58KQGWd+Q57yg/EWkdAgP9UBTC FEbHUZnLxjc1DEcuXKcVpW+rHaHoqFY9HCsfszaShYzz6PPR/gBCZ65o8L3R3bXo dH9IZtOnFrY+pzrDyucbZLjgPFk7u0SRuu/n9rjRjLhlnutrb3Lv67a3nq2YmYsA e0tgkGyGU3rGvhsIKOOmQM67WFM+kURY28+X5IgnSVLyPtz8UI/XzoBWUEwSpNQ7 Be0NL1nonopPIx/JrJoc9odty3U01fiFTGL/iyXkCeEBOS9J7ZqtNF0vh5SFdd72 uI9HU3W4Sybzs8lHMeGh+gdoFA== -----END CERTIFICATE-----Generated at Wed Aug 6 07:54:49 2025 by rpki-client