$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft File: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft (raw, json) Hash identifier: XFk7ILcZfaOuBKi+D4jEYNt6+RkiNNek7ResqzuG8vU= Subject key identifier: C7:D4:7A:E0:92:F1:27:35:60:3A:22:88:A2:35:9E:AB:FA:16:4F:EC Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE Certificate issuer: /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Certificate serial: 434CA39A754138B86B121069BA2D7304947D7122 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft Manifest number: 8C Signing time: Mon 16 Jun 2025 19:03:02 +0000 Manifest this update: Mon 16 Jun 2025 18:58:02 +0000 Manifest next update: Tue 17 Jun 2025 22:43:02 +0000 Files and hashes: 1: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl (hash: 0vWsdzltDqib+Jm35JSYxUJMuYFB80HPS6ej4zyNsyM=) 2: 34352e352e33322e302f32322d3332203d3e20323636393331.roa (hash: i+hKSf7Edy4YPx3dwt4qknf7zzdmCdkBXB6ADwZOLm4=) 3: 34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (hash: ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=) 4: 323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (hash: ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 22:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4c:a3:9a:75:41:38:b8:6b:12:10:69:ba:2d:73:04:94:7d:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Validity Not Before: Jun 16 18:58:02 2025 GMT Not After : Jun 17 22:43:02 2025 GMT Subject: CN=C7D47AE092F12735603A2288A2359EABFA164FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:92:72:58:02:e2:37:88:cf:15:3e:ef:c0: 66:45:cf:a7:fa:f1:28:75:88:2a:97:3e:0f:44:b4: 4f:b8:bf:c0:d8:5a:17:58:29:d3:29:a0:66:ad:4b: e5:ab:ac:81:93:fe:dd:88:36:04:f5:8c:ea:58:94: f3:f7:cb:d7:5d:b5:26:7d:31:1b:56:60:39:2c:ae: e1:c4:30:48:ab:16:1e:db:92:a0:b1:8f:4b:0e:1f: 75:e1:c0:bf:fe:af:c8:2d:c4:6f:74:5c:3d:43:e5: e8:3c:a3:2b:b5:6b:e7:ce:81:98:cb:d7:d8:04:a1: 7d:ca:a7:fe:a7:96:7c:9c:09:b1:a0:ce:9a:8b:f8: 7e:5e:e2:ed:17:50:cb:21:a6:15:69:3a:5d:51:c1: be:46:81:67:98:c8:a7:7c:14:5e:2e:84:2f:db:77: 74:6b:d0:1f:2e:af:86:03:3d:ad:7d:a1:9c:88:ae: b1:ea:30:db:3a:cc:82:bf:fe:1a:aa:38:dc:40:fc: d0:12:45:38:4f:6e:69:38:61:30:e1:18:4a:45:e4: ab:26:64:94:53:da:c8:32:fa:8b:39:13:7a:91:63: 37:95:99:80:2b:11:ee:6b:8a:44:65:06:6f:3a:db: a4:61:03:04:39:ed:ef:23:95:43:c4:08:25:05:c2: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:7A:E0:92:F1:27:35:60:3A:22:88:A2:35:9E:AB:FA:16:4F:EC X509v3 Authority Key Identifier: keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a2:6c:b0:d3:98:94:85:64:3d:9b:fd:22:d3:15:aa:a7:0b: f7:d7:3a:9f:52:78:82:3e:c9:57:f4:9f:50:01:00:7c:ad:84: 25:55:33:a6:cf:4f:57:02:06:f1:33:1c:d5:c6:45:27:7f:c7: 45:a5:4b:75:22:e3:1e:55:2e:3f:ae:f6:57:1a:f8:0c:75:be: e7:79:54:59:60:f2:24:eb:2f:40:ab:22:41:54:3d:b2:29:d9: a7:1d:7d:bc:06:49:cd:fa:0b:fc:1f:40:78:30:d1:26:31:54: b6:c0:8c:a4:10:a4:78:fd:4e:b3:d1:2c:85:8c:69:06:7f:f6: 54:04:a8:a5:93:c7:2f:16:c5:a5:58:6f:0c:18:1a:3c:87:3e: 1b:f4:f1:f5:29:02:3f:c2:bf:91:d9:ce:6b:f0:b8:a6:ef:9e: 34:e0:45:c0:7e:5e:15:a5:37:59:1a:17:8f:8e:b3:97:01:b5: 15:e2:b6:02:1f:f3:88:05:77:58:f5:df:a4:6f:1c:88:d7:18: 2d:5a:e7:44:6e:1d:3f:1e:72:09:71:f8:3d:42:07:8f:42:bf: 1f:67:35:6c:97:f5:e4:f8:d3:ac:a7:78:27:d4:a6:05:ac:a0: 3c:2e:b6:3c:7b:3a:7e:e8:81:e8:8b:27:91:22:59:89:cd:3f: 89:fc:e9:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ0yjmnVBOLhrEhBpui1zBJR9cSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF QjU1OENDRTAeFw0yNTA2MTYxODU4MDJaFw0yNTA2MTcyMjQzMDJaMDMxMTAvBgNV BAMTKEM3RDQ3QUUwOTJGMTI3MzU2MDNBMjI4OEEyMzU5RUFCRkExNjRGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hJJyWALiN4jPFT7vwGZFz6f6 8Sh1iCqXPg9EtE+4v8DYWhdYKdMpoGatS+WrrIGT/t2INgT1jOpYlPP3y9ddtSZ9 MRtWYDksruHEMEirFh7bkqCxj0sOH3XhwL/+r8gtxG90XD1D5eg8oyu1a+fOgZjL 19gEoX3Kp/6nlnycCbGgzpqL+H5e4u0XUMshphVpOl1Rwb5GgWeYyKd8FF4uhC/b d3Rr0B8ur4YDPa19oZyIrrHqMNs6zIK//hqqONxA/NASRThPbmk4YTDhGEpF5Ksm ZJRT2sgy+os5E3qRYzeVmYArEe5rikRlBm8626RhAwQ57e8jlUPECCUFwl+hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUx9R64JLxJzVgOiKIojWeq/oWT+wwHwYDVR0j BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC9B NTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW6JssNOYlIVkPZv9ItMVqqcL99c6n1J4gj7JV/SfUAEAfK2EJVUzps9PVwIG 8TMc1cZFJ3/HRaVLdSLjHlUuP672Vxr4DHW+53lUWWDyJOsvQKsiQVQ9sinZpx19 vAZJzfoL/B9AeDDRJjFUtsCMpBCkeP1Os9EshYxpBn/2VASopZPHLxbFpVhvDBga PIc+G/Tx9SkCP8K/kdnOa/C4pu+eNOBFwH5eFaU3WRoXj46zlwG1FeK2Ah/ziAV3 WPXfpG8ciNcYLVrnRG4dPx5yCXH4PUIHj0K/H2c1bJf15PjTrKd4J9SmBaygPC62 PHs6fuiB6IsnkSJZic0/ifzp0w== -----END CERTIFICATE-----Generated at Tue Jun 17 11:58:09 2025 by rpki-client