$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft File: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft (raw, json) Hash identifier: EV/eBmttmSmys28WKCjQ+9dy6Ym6cf/kxKh4FW1TdMQ= Subject key identifier: 54:F8:B8:40:A6:EC:16:FE:F8:C4:27:42:3A:C8:67:1D:F6:FD:C6:79 Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE Certificate issuer: /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Certificate serial: 579B6A1CAEF32AD99CCBE5E507C866DAC40E9EA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft Manifest number: 0109 Signing time: Thu 18 Sep 2025 07:22:58 +0000 Manifest this update: Thu 18 Sep 2025 07:17:58 +0000 Manifest next update: Fri 19 Sep 2025 07:37:58 +0000 Files and hashes: 1: 323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (hash: ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=) 2: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl (hash: MgWPWLRjwYBPxjEVvhES+XlSFdajjsVL6wQvDWsDFEo=) 3: 34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (hash: ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=) 4: 34352e352e33322e302f32322d3332203d3e20323636393331.roa (hash: i+hKSf7Edy4YPx3dwt4qknf7zzdmCdkBXB6ADwZOLm4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 07:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9b:6a:1c:ae:f3:2a:d9:9c:cb:e5:e5:07:c8:66:da:c4:0e:9e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Validity Not Before: Sep 18 07:17:58 2025 GMT Not After : Sep 19 07:37:58 2025 GMT Subject: CN=54F8B840A6EC16FEF8C427423AC8671DF6FDC679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8e:d2:39:27:43:9a:92:5b:18:d7:23:48:bb: 4a:c9:da:55:21:26:8b:80:72:f5:73:d6:e3:6e:0f: ba:f8:51:25:f9:7a:13:6f:a3:48:a9:ef:f3:9a:29: 95:19:46:96:85:ac:79:e6:fe:99:5d:60:1a:b3:8f: 04:f1:cc:d1:14:34:db:82:1f:8b:e2:de:1b:2c:8b: 95:cc:5e:b1:46:8f:d4:28:84:45:7d:77:d0:6c:08: 95:4b:86:4c:20:a4:55:eb:08:87:1b:8e:d1:79:72: dd:b8:7a:70:d7:7c:d1:84:78:be:ca:92:9f:6a:49: 5f:69:ae:3c:f2:eb:ce:7a:bb:fe:9e:85:5c:cd:1e: d3:d8:1f:4b:7b:28:1e:7a:05:1b:47:64:d3:bc:ca: a7:c3:88:c2:c2:53:89:01:65:c8:39:58:40:f2:c8: b9:3b:a3:4f:b8:57:98:30:10:2d:88:86:e6:b6:f2: a0:f8:8b:70:78:6d:d7:f7:49:3f:10:19:03:4a:e0: c9:2c:d7:d4:5b:f1:71:e8:fe:67:79:c3:07:3f:34: bc:8f:70:df:d7:93:37:54:d9:b1:be:d5:f1:c4:44: 70:f5:07:49:e3:ef:2d:b3:9f:c5:d5:22:fc:2c:53: 0c:da:7a:6b:0e:64:c9:56:26:7b:5d:87:03:5a:9d: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F8:B8:40:A6:EC:16:FE:F8:C4:27:42:3A:C8:67:1D:F6:FD:C6:79 X509v3 Authority Key Identifier: keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:c5:7b:22:81:c3:40:a4:22:c8:7f:96:f4:a5:1d:9a:aa: 46:17:47:98:14:69:8c:3a:5e:67:eb:86:14:80:1a:ec:2f:b5: 23:30:b6:46:ce:fc:f6:76:2a:81:6a:c5:f3:a2:dd:93:f8:25: 2b:e4:85:6c:e1:b4:aa:59:1a:a8:ba:f8:40:85:54:6e:a3:4e: d9:fb:1d:2b:06:4c:1e:8b:5c:c4:a9:6d:74:f5:32:0f:cb:a7: ef:2c:75:4f:62:98:f9:6f:2e:f5:09:6d:9d:22:f0:86:64:fe: 17:63:7b:3c:58:08:34:4d:77:b0:7a:37:a0:14:d7:8e:17:58: dc:3d:bf:c9:de:2d:1b:ce:95:d8:a5:10:20:e6:d6:09:74:85: 21:77:3d:df:37:f2:90:eb:8b:1b:42:5c:0a:17:c7:21:6a:a2: 14:cb:f4:0c:71:fe:76:0b:f0:67:5c:a6:fb:93:38:0d:cf:1c: 23:70:33:70:04:72:eb:9f:ce:90:1f:79:f2:17:28:0f:cd:74: bf:0a:fc:7f:58:07:37:bf:de:cd:7f:00:4e:ad:ce:a1:b9:e8: aa:18:7e:c7:bd:36:b8:39:c4:3c:57:95:c2:9f:b2:e4:29:82: de:a4:ec:7b:3a:8f:ca:33:37:cd:58:f8:fc:a3:b4:b9:ae:80: e1:38:31:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV5tqHK7zKtmcy+XlB8hm2sQOnqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF QjU1OENDRTAeFw0yNTA5MTgwNzE3NThaFw0yNTA5MTkwNzM3NThaMDMxMTAvBgNV BAMTKDU0RjhCODQwQTZFQzE2RkVGOEM0Mjc0MjNBQzg2NzFERjZGREM2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqjtI5J0OaklsY1yNIu0rJ2lUh JouAcvVz1uNuD7r4USX5ehNvo0ip7/OaKZUZRpaFrHnm/pldYBqzjwTxzNEUNNuC H4vi3hssi5XMXrFGj9QohEV9d9BsCJVLhkwgpFXrCIcbjtF5ct24enDXfNGEeL7K kp9qSV9prjzy6856u/6ehVzNHtPYH0t7KB56BRtHZNO8yqfDiMLCU4kBZcg5WEDy yLk7o0+4V5gwEC2Ihua28qD4i3B4bdf3ST8QGQNK4Mks19Rb8XHo/md5wwc/NLyP cN/XkzdU2bG+1fHERHD1B0nj7y2zn8XVIvwsUwzaemsOZMlWJntdhwNanXc7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVPi4QKbsFv74xCdCOshnHfb9xnkwHwYDVR0j BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC9B NTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/PFeyKBw0CkIsh/lvSlHZqqRhdHmBRpjDpeZ+uGFIAa7C+1IzC2Rs789nYq gWrF86Ldk/glK+SFbOG0qlkaqLr4QIVUbqNO2fsdKwZMHotcxKltdPUyD8un7yx1 T2KY+W8u9QltnSLwhmT+F2N7PFgINE13sHo3oBTXjhdY3D2/yd4tG86V2KUQIObW CXSFIXc93zfykOuLG0JcChfHIWqiFMv0DHH+dgvwZ1ym+5M4Dc8cI3AzcARy65/O kB958hcoD810vwr8f1gHN7/ezX8ATq3Oobnoqhh+x702uDnEPFeVwp+y5CmC3qTs ezqPyjM3zVj4/KO0ua6A4Tgxjg== -----END CERTIFICATE-----Generated at Thu Sep 18 16:26:47 2025 by rpki-client