$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft File: 57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft (raw, json) Hash identifier: LWp58b3AiSTJ44UTVggLabhkKNVMk5OZhxSAeAz9jz0= Subject key identifier: 0C:40:30:0C:6C:7F:AB:17:B3:EF:17:F9:F0:73:E9:7E:77:E2:FA:E1 Authority key identifier: 57:B5:0C:DF:E2:0B:64:2A:66:40:80:0E:5E:00:DB:69:A3:6D:4A:F3 Certificate issuer: /CN=57B50CDFE20B642A6640800E5E00DB69A36D4AF3 Certificate serial: 72AA544B82DD9E860A1444A16893D9D420C56FF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft Manifest number: 8D Signing time: Mon 03 Nov 2025 07:19:56 +0000 Manifest this update: Mon 03 Nov 2025 07:14:56 +0000 Manifest next update: Tue 04 Nov 2025 08:47:56 +0000 Files and hashes: 1: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: CyZlU5isE9wGi3h/xSKxtzFuGmGh7hkfGVSrX1jTcpg=) 2: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: OviZj1wS5XOeNusWuWzxM096AIJ3rnyA+h3UJP4k228=) 3: 57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl (hash: 178h90wIkOSKOt7Bqo1Q00WZq5QC523HD8Km/jRwiN0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:aa:54:4b:82:dd:9e:86:0a:14:44:a1:68:93:d9:d4:20:c5:6f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B50CDFE20B642A6640800E5E00DB69A36D4AF3 Validity Not Before: Nov 3 07:14:56 2025 GMT Not After : Nov 4 08:47:56 2025 GMT Subject: CN=0C40300C6C7FAB17B3EF17F9F073E97E77E2FAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:46:ad:2a:ab:7f:69:06:ec:48:1d:a5:87: 1b:fc:40:5a:94:f1:c1:1e:1a:c4:48:96:e6:ea:67: 47:10:5a:81:3e:12:11:e4:4c:ea:da:fb:b7:0d:fa: 93:50:c5:fa:90:7b:fd:64:d4:33:9a:5d:df:96:2a: 68:c0:33:b7:2a:fb:59:fc:f6:9c:15:13:fb:fa:a4: 5f:02:e3:85:00:93:04:68:00:1c:b5:6d:eb:f0:73: 23:bd:8c:8c:38:c0:d2:df:7d:07:8a:d1:4f:44:bf: 28:b0:a5:3f:59:5a:ee:d9:65:28:8c:88:22:36:8b: cf:f3:3b:b2:5b:24:95:21:33:c6:c3:85:89:c5:c9: 6d:b3:0d:48:f4:2f:4e:08:31:3c:8a:b1:ad:4a:2a: 78:11:c5:8e:3d:57:6d:ce:c7:07:5b:c7:60:e4:57: a9:b9:83:42:2a:b0:57:80:cb:fb:8e:76:77:45:d6: 27:71:10:d6:dc:40:98:25:d0:e6:0b:c8:c1:27:de: ef:57:7f:53:69:46:05:66:e4:1e:1e:42:05:cf:cd: 50:de:6f:42:33:a4:64:12:a2:ba:c5:84:6f:b9:69: b5:c4:f5:ec:9d:e5:e7:87:65:95:a5:a5:f7:b6:fc: 38:98:d2:fa:f8:3f:c2:3e:af:08:97:ce:c8:6b:89: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:40:30:0C:6C:7F:AB:17:B3:EF:17:F9:F0:73:E9:7E:77:E2:FA:E1 X509v3 Authority Key Identifier: keyid:57:B5:0C:DF:E2:0B:64:2A:66:40:80:0E:5E:00:DB:69:A3:6D:4A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e5:76:45:53:38:9b:f2:87:c3:2a:9a:42:97:eb:82:13:9a: ab:f2:9b:1f:fd:e0:03:cb:0d:f8:cf:67:9e:0a:13:09:2e:ed: 4d:57:77:2b:d0:17:28:cd:81:e3:eb:05:7a:b6:d8:ff:5b:57: 61:77:32:73:a3:f7:da:c6:f9:d4:99:63:87:7d:a9:cf:6c:0e: 87:19:8b:5f:04:9e:9b:f9:e2:74:f5:cc:5f:8c:b4:a4:6b:d4: d1:c5:88:71:b4:0c:c6:4d:6d:74:f8:a6:58:a9:38:d1:63:a1: 24:d3:62:fa:30:19:9c:b1:b4:dd:a5:b7:1c:6e:71:f8:ee:3d: 38:c9:a8:c3:c1:43:47:a2:72:dd:e2:4b:ef:4a:c6:d7:19:f9: fb:68:a5:f1:0a:75:02:dc:93:10:91:76:36:f1:08:45:d8:56: 08:d9:f4:50:57:c9:db:44:a3:49:b6:69:e3:af:90:70:0a:56: 99:8e:61:90:1f:7e:66:1f:7d:6e:e8:30:61:e9:8d:5a:62:42: 72:31:e5:12:2f:c3:93:de:21:bf:d2:52:aa:80:01:59:32:7a: 4e:42:3c:21:1d:3f:55:4c:9c:21:47:d7:da:7b:a4:c4:25:21: 62:0e:88:ae:24:c5:46:de:09:8f:1b:a3:f9:aa:ed:72:e4:24: 0a:ff:15:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcqpUS4LdnoYKFEShaJPZ1CDFb/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCNTBDREZFMjBCNjQyQTY2NDA4MDBFNUUwMERCNjlB MzZENEFGMzAeFw0yNTExMDMwNzE0NTZaFw0yNTExMDQwODQ3NTZaMDMxMTAvBgNV BAMTKDBDNDAzMDBDNkM3RkFCMTdCM0VGMTdGOUYwNzNFOTdFNzdFMkZBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiokatKqt/aQbsSB2lhxv8QFqU 8cEeGsRIlubqZ0cQWoE+EhHkTOra+7cN+pNQxfqQe/1k1DOaXd+WKmjAM7cq+1n8 9pwVE/v6pF8C44UAkwRoABy1bevwcyO9jIw4wNLffQeK0U9EvyiwpT9ZWu7ZZSiM iCI2i8/zO7JbJJUhM8bDhYnFyW2zDUj0L04IMTyKsa1KKngRxY49V23Oxwdbx2Dk V6m5g0IqsFeAy/uOdndF1idxENbcQJgl0OYLyMEn3u9Xf1NpRgVm5B4eQgXPzVDe b0IzpGQSorrFhG+5abXE9eyd5eeHZZWlpfe2/DiY0vr4P8I+rwiXzshriTgrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDEAwDGx/qxez7xf58HPpfnfi+uEwHwYDVR0j BBgwFoAUV7UM3+ILZCpmQIAOXgDbaaNtSvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC81N0I1MENERkUyMEI2NDJBNjY0MDgwMEU1RTAwREI2OUEzNkQ0QUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3QjUwQ0RGRTIwQjY0MkE2 NjQwODAwRTVFMDBEQjY5QTM2RDRBRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC81 N0I1MENERkUyMEI2NDJBNjY0MDgwMEU1RTAwREI2OUEzNkQ0QUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOeV2RVM4m/KHwyqaQpfrghOaq/KbH/3gA8sN+M9nngoTCS7tTVd3K9AXKM2B 4+sFerbY/1tXYXcyc6P32sb51Jljh32pz2wOhxmLXwSem/nidPXMX4y0pGvU0cWI cbQMxk1tdPimWKk40WOhJNNi+jAZnLG03aW3HG5x+O49OMmow8FDR6Jy3eJL70rG 1xn5+2il8Qp1AtyTEJF2NvEIRdhWCNn0UFfJ20SjSbZp46+QcApWmY5hkB9+Zh99 bugwYemNWmJCcjHlEi/Dk94hv9JSqoABWTJ6TkI8IR0/VUycIUfX2nukxCUhYg6I riTFRt4Jjxuj+artcuQkCv8Vdw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:26:11 2025 by rpki-client