$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft File: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft (raw, json) Hash identifier: ET7B/mrlVCSF/Lu9Vvbw+DALNioeDE02Fc1+iwNeyGs= Subject key identifier: 09:91:8C:29:08:82:80:17:B5:F7:59:F4:DE:D3:B3:2C:48:EE:B0:B0 Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE Certificate issuer: /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Certificate serial: 2656FDFC6EA61BA238CC07BD787FB49ED464F009 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft Manifest number: 0149 Signing time: Wed 05 Nov 2025 16:07:59 +0000 Manifest this update: Wed 05 Nov 2025 16:02:59 +0000 Manifest next update: Thu 06 Nov 2025 19:48:59 +0000 Files and hashes: 1: 34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (hash: ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=) 2: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl (hash: 9gHTG2IQxDBKTBRp2Z113K2swoE5hG5zXaUIm17MbbE=) 3: 323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (hash: ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=) 4: 34352e352e33322e302f32322d3332203d3e20323636393331.roa (hash: i+hKSf7Edy4YPx3dwt4qknf7zzdmCdkBXB6ADwZOLm4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 19:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:56:fd:fc:6e:a6:1b:a2:38:cc:07:bd:78:7f:b4:9e:d4:64:f0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Validity Not Before: Nov 5 16:02:59 2025 GMT Not After : Nov 6 19:48:59 2025 GMT Subject: CN=09918C2908828017B5F759F4DED3B32C48EEB0B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:9a:53:a8:cf:7a:1e:2b:db:77:cd:27:8b: 53:e3:d0:68:63:e2:c1:f4:76:71:4e:9f:c7:09:72: e6:6e:03:c3:3c:89:4d:1e:51:1a:48:e0:e8:ea:6a: 39:da:a4:7e:89:fc:23:d8:31:6d:b3:92:a0:90:b4: aa:ce:4c:f7:fe:80:c7:ef:36:73:77:75:4b:b3:e8: 28:0a:46:ec:14:93:d5:80:15:3b:c0:9b:d9:fa:e3: 6f:1d:fe:e4:f7:08:72:8e:76:46:07:c2:2f:b1:5e: 58:df:b0:de:bb:95:74:19:1f:c6:06:02:f9:ca:6f: 20:0b:a9:c5:69:91:70:98:7c:e1:af:12:9a:9c:46: ea:54:79:d2:67:83:39:5e:05:71:8c:a8:33:da:f0: d4:17:0e:fb:3b:b5:92:de:72:b2:15:cb:bd:76:00: c7:b1:51:47:67:d7:f5:6c:d0:da:55:f8:de:9c:52: 31:f6:2c:ba:88:01:68:6d:f4:c1:81:1a:8e:79:c6: f4:b0:8e:37:dc:25:4a:93:65:0a:c4:20:49:31:bb: c6:24:84:66:ee:81:8f:b9:fe:91:0d:15:ec:f4:f2: 08:50:fd:b1:22:55:ff:e1:5d:cb:30:ff:65:c6:86: 7f:bd:bc:84:04:9a:7b:4a:5b:18:5b:ce:28:88:49: f9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:8C:29:08:82:80:17:B5:F7:59:F4:DE:D3:B3:2C:48:EE:B0:B0 X509v3 Authority Key Identifier: keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:23:c9:b7:a2:1a:03:e8:3a:76:c8:31:f4:65:df:53:8e:e2: 9d:9e:e3:4e:4b:b3:7a:eb:5b:a0:6d:60:ab:37:21:23:e0:f7: 69:30:78:12:fc:97:31:de:d8:2c:ae:08:b7:10:ae:47:cd:26: f7:b2:bc:02:2d:af:cf:c2:2a:5c:aa:b1:27:d9:fe:98:2c:2a: b5:fc:61:8e:6d:6c:29:90:49:d3:55:1b:fb:83:a2:92:f4:82: 36:ff:a6:66:a3:d6:8a:71:7f:53:2d:81:92:ce:37:1d:77:18: 84:97:a1:7c:c6:ac:e4:32:21:4d:a0:df:dd:b4:f5:93:bb:32: 16:a7:2f:46:69:51:f5:9a:1e:96:d4:6b:ea:c8:5b:fd:a2:4e: 3d:a4:00:b8:8f:1c:45:03:57:5c:c9:18:a8:9f:e1:fb:58:21: c5:e6:15:7d:5c:e1:f7:e7:a4:ed:ba:9b:78:99:0c:52:90:2b: c8:5d:2d:d5:bf:2d:d7:3e:74:96:45:8d:7d:03:5d:fd:94:ca: 4b:2a:d1:f5:2b:1d:ef:8d:91:aa:5f:81:f3:79:be:b1:b4:21: b2:5e:ff:1b:37:be:19:56:c2:76:30:ed:36:2f:e1:b9:0c:68: 56:4c:e9:71:36:52:7e:e7:8d:57:70:a2:27:43:7e:f9:53:dc: 62:1a:51:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJlb9/G6mG6I4zAe9eH+0ntRk8AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF QjU1OENDRTAeFw0yNTExMDUxNjAyNTlaFw0yNTExMDYxOTQ4NTlaMDMxMTAvBgNV BAMTKDA5OTE4QzI5MDg4MjgwMTdCNUY3NTlGNERFRDNCMzJDNDhFRUIwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLZpTqM96Hivbd80ni1Pj0Ghj 4sH0dnFOn8cJcuZuA8M8iU0eURpI4OjqajnapH6J/CPYMW2zkqCQtKrOTPf+gMfv NnN3dUuz6CgKRuwUk9WAFTvAm9n6428d/uT3CHKOdkYHwi+xXljfsN67lXQZH8YG AvnKbyALqcVpkXCYfOGvEpqcRupUedJngzleBXGMqDPa8NQXDvs7tZLecrIVy712 AMexUUdn1/Vs0NpV+N6cUjH2LLqIAWht9MGBGo55xvSwjjfcJUqTZQrEIEkxu8Yk hGbugY+5/pENFez08ghQ/bEiVf/hXcsw/2XGhn+9vIQEmntKWxhbziiISfmPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCZGMKQiCgBe191n03tOzLEjusLAwHwYDVR0j BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC9B NTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlCPJt6IaA+g6dsgx9GXfU47inZ7jTkuzeutboG1gqzchI+D3aTB4EvyXMd7Y LK4ItxCuR80m97K8Ai2vz8IqXKqxJ9n+mCwqtfxhjm1sKZBJ01Ub+4OikvSCNv+m ZqPWinF/Uy2Bks43HXcYhJehfMas5DIhTaDf3bT1k7syFqcvRmlR9ZoeltRr6shb /aJOPaQAuI8cRQNXXMkYqJ/h+1ghxeYVfVzh9+ek7bqbeJkMUpAryF0t1b8t1z50 lkWNfQNd/ZTKSyrR9Ssd742Rql+B83m+sbQhsl7/Gze+GVbCdjDtNi/huQxoVkzp cTZSfueNV3CiJ0N++VPcYhpR3Q== -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:19 2025 by rpki-client