$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft File: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft (raw, json) Hash identifier: Yqz+OrBshA2ux2+Cdy8ViiOR8JF1FnkYkgA9/6pSAyk= Subject key identifier: 88:EE:82:F3:FD:C7:14:3C:85:B1:AA:CF:35:76:CB:5A:7F:72:FB:7E Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE Certificate issuer: /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Certificate serial: 14A5640320B5E3EA9F2F8A53415C8663C95AAFF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft Manifest number: 0133 Signing time: Sun 19 Oct 2025 19:51:24 +0000 Manifest this update: Sun 19 Oct 2025 19:46:24 +0000 Manifest next update: Mon 20 Oct 2025 23:26:24 +0000 Files and hashes: 1: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl (hash: KAeXfJABwbO1DXnxYaljltxfRdcz+5gnBE3w3J+HnEk=) 2: 323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (hash: ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=) 3: 34352e352e33322e302f32322d3332203d3e20323636393331.roa (hash: i+hKSf7Edy4YPx3dwt4qknf7zzdmCdkBXB6ADwZOLm4=) 4: 34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (hash: ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a5:64:03:20:b5:e3:ea:9f:2f:8a:53:41:5c:86:63:c9:5a:af:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Validity Not Before: Oct 19 19:46:24 2025 GMT Not After : Oct 20 23:26:24 2025 GMT Subject: CN=88EE82F3FDC7143C85B1AACF3576CB5A7F72FB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:54:30:1a:5e:42:6f:a5:b1:0a:7c:77:98: 25:ab:d6:b3:23:dd:55:a1:56:42:0a:4f:84:8b:0a: 52:03:7e:4e:df:8b:5e:a2:51:b5:c4:27:24:12:dc: f2:d2:89:89:f2:d4:d6:5b:a5:77:79:2c:c2:b0:91: 6f:69:7c:c5:32:72:03:10:72:ac:2f:5b:0b:0b:49: a7:27:88:f1:1e:02:f7:36:d0:3e:eb:aa:c9:b5:77: 96:25:d6:4c:a6:94:1d:b1:1a:a2:87:72:0e:17:4a: 1e:c5:3c:d9:02:1c:a0:99:cb:1b:0e:e7:8e:9f:6d: d1:69:52:a8:2e:c3:a9:22:b3:68:3d:0f:27:43:16: af:55:e4:03:7a:e3:dd:65:57:b0:0e:f0:aa:e0:bf: c6:2d:38:5b:76:12:53:91:7b:37:53:01:86:4c:80: df:ae:bc:5f:9c:9a:80:68:30:92:73:7b:66:54:4a: e3:55:96:1a:73:46:5a:77:c9:74:0a:5c:65:cd:e5: d9:a1:62:49:30:f4:f5:36:ad:f6:42:7c:b7:cf:e9: b3:6e:44:9c:2b:72:0f:5e:ab:0c:26:b7:45:26:f8: b8:8b:fe:7d:e0:d9:5c:65:7e:d6:40:4e:b4:c8:12: 77:c0:94:56:d3:cd:fc:23:25:08:c9:1a:88:18:ee: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EE:82:F3:FD:C7:14:3C:85:B1:AA:CF:35:76:CB:5A:7F:72:FB:7E X509v3 Authority Key Identifier: keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4e:b7:d0:11:30:6e:e7:d9:3b:fd:d5:12:07:95:6e:b0:64: 2a:c0:4f:a4:8b:79:41:63:30:8a:33:d8:85:1d:a4:8d:ad:4f: d9:01:cb:01:ca:29:31:43:88:12:30:50:20:b0:88:d6:5d:d2: e4:8a:95:77:e4:bd:c6:92:d6:96:0a:8b:a7:79:5e:38:11:46: ab:df:4b:12:f2:e9:35:f5:c0:0f:38:8c:77:52:03:95:0f:79: 04:9e:72:b7:c6:96:a7:1f:bc:d0:fb:54:44:7f:97:49:11:ae: bd:75:98:be:d6:5f:46:12:9c:27:8d:6b:3c:ac:39:cc:6b:1f: 59:68:47:97:0f:21:9f:ab:2a:63:da:3e:03:ea:41:a8:b3:1e: 8a:b2:c8:cd:b1:7e:79:88:07:4f:36:17:50:27:75:d4:7c:c3: 1c:b0:09:e3:c4:5a:68:0b:e7:80:ca:63:e8:0d:a3:bd:61:56: e1:e4:b4:b5:32:3c:f0:c8:f2:28:21:ea:e3:99:2e:70:f7:f0: b3:47:f8:4e:c4:1a:24:c7:2d:45:b7:3c:e1:91:af:d1:4e:06: 4c:2f:ca:15:59:2b:03:88:b0:38:45:85:7e:f0:f1:f7:e8:37: 41:97:1c:f8:9b:6f:9b:ee:32:85:8d:a4:57:c6:3e:9c:39:22: 0d:7e:05:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFKVkAyC14+qfL4pTQVyGY8lar/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF QjU1OENDRTAeFw0yNTEwMTkxOTQ2MjRaFw0yNTEwMjAyMzI2MjRaMDMxMTAvBgNV BAMTKDg4RUU4MkYzRkRDNzE0M0M4NUIxQUFDRjM1NzZDQjVBN0Y3MkZCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyVQwGl5Cb6WxCnx3mCWr1rMj 3VWhVkIKT4SLClIDfk7fi16iUbXEJyQS3PLSiYny1NZbpXd5LMKwkW9pfMUycgMQ cqwvWwsLSacniPEeAvc20D7rqsm1d5Yl1kymlB2xGqKHcg4XSh7FPNkCHKCZyxsO 546fbdFpUqguw6kis2g9DydDFq9V5AN6491lV7AO8Krgv8YtOFt2ElORezdTAYZM gN+uvF+cmoBoMJJze2ZUSuNVlhpzRlp3yXQKXGXN5dmhYkkw9PU2rfZCfLfP6bNu RJwrcg9eqwwmt0Um+LiL/n3g2VxlftZATrTIEnfAlFbTzfwjJQjJGogY7okzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiO6C8/3HFDyFsarPNXbLWn9y+34wHwYDVR0j BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC9B NTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkk630BEwbufZO/3VEgeVbrBkKsBPpIt5QWMwijPYhR2kja1P2QHLAcopMUOI EjBQILCI1l3S5IqVd+S9xpLWlgqLp3leOBFGq99LEvLpNfXADziMd1IDlQ95BJ5y t8aWpx+80PtURH+XSRGuvXWYvtZfRhKcJ41rPKw5zGsfWWhHlw8hn6sqY9o+A+pB qLMeirLIzbF+eYgHTzYXUCd11HzDHLAJ48RaaAvngMpj6A2jvWFW4eS0tTI88Mjy KCHq45kucPfws0f4TsQaJMctRbc84ZGv0U4GTC/KFVkrA4iwOEWFfvDx9+g3QZcc +Jtvm+4yhY2kV8Y+nDkiDX4FtQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:58 2025 by rpki-client