$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft File: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft (raw, json) Hash identifier: K1Y7Yg8I8fJivFqyLK5EElU0x0tZ0DzwqTsdqIFqbN8= Subject key identifier: 5E:4D:17:A6:D9:D1:2E:82:AB:29:D6:AE:AE:5F:B2:8D:69:77:49:9D Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE Certificate issuer: /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Certificate serial: 6E88EE4C2356D438080B5908A2F3DA2C53156667 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft Manifest number: 5C Signing time: Sun 11 May 2025 14:54:24 +0000 Manifest this update: Sun 11 May 2025 14:49:24 +0000 Manifest next update: Mon 12 May 2025 17:19:24 +0000 Files and hashes: 1: 34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (hash: ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=) 2: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl (hash: YmwRfgisetRPXas7gzPrRgM9NqpzshX5zxtN+KHt03M=) 3: 34352e352e33322e302f32322d3332203d3e20323636393331.roa (hash: i+hKSf7Edy4YPx3dwt4qknf7zzdmCdkBXB6ADwZOLm4=) 4: 323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (hash: ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 17:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:88:ee:4c:23:56:d4:38:08:0b:59:08:a2:f3:da:2c:53:15:66:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Validity Not Before: May 11 14:49:24 2025 GMT Not After : May 12 17:19:24 2025 GMT Subject: CN=5E4D17A6D9D12E82AB29D6AEAE5FB28D6977499D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7d:b7:4c:ae:9b:e3:2a:ff:54:4d:fc:f6:4d: ce:8e:46:c2:a5:0c:0f:cf:46:4d:b5:92:67:9b:83: 04:d0:83:cb:19:fa:0e:12:52:34:3c:3b:f8:c3:58: 15:36:a2:c4:ef:8f:fb:22:5a:65:b5:c1:ab:2d:08: 64:0b:bf:f7:d7:96:84:a1:f8:4c:76:e1:f2:6b:c4: 6b:44:d5:82:e8:3e:fc:4f:3d:15:63:3d:6c:c5:c3: e3:59:a8:fb:15:2c:2a:50:5e:68:58:3b:06:db:8e: ca:bc:f6:b8:61:11:c9:91:0d:ac:c7:1e:5b:a7:04: 32:03:9d:a3:eb:59:e8:97:79:38:b1:16:f5:bc:d4: 2b:de:93:da:41:07:e1:2f:6f:d5:4c:34:0f:f1:90: 17:6f:3a:27:0e:15:ec:0d:b5:82:ee:2a:c5:6e:5c: 08:a7:3b:e4:1a:06:55:8d:06:55:f4:77:fd:0d:60: af:9d:79:d7:7d:cf:d8:cc:76:f7:e4:cd:ec:a8:96: bb:15:c2:1d:3a:9b:8f:49:92:55:2d:25:14:27:1b: 13:b7:e6:f6:d1:f0:8c:ea:44:db:29:38:ba:5f:83: 24:c0:84:49:53:55:36:7b:e2:03:0e:56:ed:11:df: 81:64:f7:9d:d2:7f:0e:ac:50:49:8c:a0:72:99:63: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4D:17:A6:D9:D1:2E:82:AB:29:D6:AE:AE:5F:B2:8D:69:77:49:9D X509v3 Authority Key Identifier: keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7b:27:38:4b:c7:8c:75:47:f1:3d:41:c7:a3:df:f2:b3:be: 11:8a:e5:02:64:73:5a:6c:30:1e:89:7c:1c:0f:3b:25:a0:c8: 12:dc:54:47:53:ee:0c:5b:20:ed:e0:fe:2b:27:a7:07:04:4f: 50:76:ca:df:86:ff:1b:1b:27:d6:42:d2:34:e8:24:6a:be:76: f8:81:27:aa:cf:e3:3c:e1:7f:03:36:d3:7d:66:c5:e7:af:ec: d4:39:f3:dc:a6:93:89:fd:bc:16:5e:73:71:d0:f1:78:79:50: ec:be:a1:73:d3:21:bd:69:dc:bd:9f:4a:88:97:0f:c0:00:a5: 43:af:71:1c:db:76:4e:1b:7f:7a:7d:ed:5c:ac:f7:71:17:b7: ea:06:92:25:1d:f5:4f:c8:8d:f8:d9:3c:2c:41:fe:a6:2d:4d: 35:28:fe:53:94:76:23:57:32:41:da:40:07:e7:29:4b:31:0a: 6f:11:08:30:6f:12:2c:b5:d6:02:32:97:35:d5:ad:b1:f0:6e: 44:db:ec:ae:0e:b4:26:10:7f:b7:a2:18:e0:af:a0:30:3a:b5: 9e:59:95:e5:2a:c4:5e:68:2b:1f:bd:ed:c3:90:7d:30:50:11: 02:5d:63:fb:46:31:38:8d:b8:4d:ce:06:50:f4:05:5b:80:5c: 2c:8f:a4:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbojuTCNW1DgIC1kIovPaLFMVZmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF QjU1OENDRTAeFw0yNTA1MTExNDQ5MjRaFw0yNTA1MTIxNzE5MjRaMDMxMTAvBgNV BAMTKDVFNEQxN0E2RDlEMTJFODJBQjI5RDZBRUFFNUZCMjhENjk3NzQ5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5fbdMrpvjKv9UTfz2Tc6ORsKl DA/PRk21kmebgwTQg8sZ+g4SUjQ8O/jDWBU2osTvj/siWmW1wastCGQLv/fXloSh +Ex24fJrxGtE1YLoPvxPPRVjPWzFw+NZqPsVLCpQXmhYOwbbjsq89rhhEcmRDazH HlunBDIDnaPrWeiXeTixFvW81Cvek9pBB+Evb9VMNA/xkBdvOicOFewNtYLuKsVu XAinO+QaBlWNBlX0d/0NYK+dedd9z9jMdvfkzeyolrsVwh06m49JklUtJRQnGxO3 5vbR8IzqRNspOLpfgyTAhElTVTZ74gMOVu0R34Fk953Sfw6sUEmMoHKZY7d/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXk0XptnRLoKrKdaurl+yjWl3SZ0wHwYDVR0j BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC9B NTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeXsnOEvHjHVH8T1Bx6Pf8rO+EYrlAmRzWmwwHol8HA87JaDIEtxUR1PuDFsg 7eD+KyenBwRPUHbK34b/Gxsn1kLSNOgkar52+IEnqs/jPOF/AzbTfWbF56/s1Dnz 3KaTif28Fl5zcdDxeHlQ7L6hc9MhvWncvZ9KiJcPwAClQ69xHNt2Tht/en3tXKz3 cRe36gaSJR31T8iN+Nk8LEH+pi1NNSj+U5R2I1cyQdpAB+cpSzEKbxEIMG8SLLXW AjKXNdWtsfBuRNvsrg60JhB/t6IY4K+gMDq1nlmV5SrEXmgrH73tw5B9MFARAl1j +0YxOI24Tc4GUPQFW4BcLI+kfg== -----END CERTIFICATE-----Generated at Sun May 11 22:24:51 2025 by rpki-client