$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.mft File: 44FC5A9A664B2444F593AABE0FA542C0DF508B03.mft (raw, json) Hash identifier: xM6Qvenk6YMiFKH49q25GNyyLLofQ5MEb/oX3ZlznyM= Subject key identifier: 04:19:0A:F6:D1:67:7C:9F:76:63:CC:1A:AD:D4:FB:CC:A5:87:EE:AA Authority key identifier: 44:FC:5A:9A:66:4B:24:44:F5:93:AA:BE:0F:A5:42:C0:DF:50:8B:03 Certificate issuer: /CN=44FC5A9A664B2444F593AABE0FA542C0DF508B03 Certificate serial: 3F7174E45D369A71A7812772E5795FCCB061A7C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC5A9A664B2444F593AABE0FA542C0DF508B03.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.mft Manifest number: 4A Signing time: Wed 20 Aug 2025 00:59:03 +0000 Manifest this update: Wed 20 Aug 2025 00:54:03 +0000 Manifest next update: Thu 21 Aug 2025 04:46:03 +0000 Files and hashes: 1: 323830343a336136343a3a2f33322d3332203d3e20323636303836.roa (hash: eNWvNAP89sbMkK5FxByDC/FaoHi/Nvocjs+IRujIpR4=) 2: 34352e342e3230382e302f32332d3233203d3e20323636303836.roa (hash: KiZhZNwoXx0hqTfqB3IZTAE8PMAjygo9E6RHzKsIOHk=) 3: 44FC5A9A664B2444F593AABE0FA542C0DF508B03.crl (hash: qGC8UVOfqzwunEhN7jUI298e7IpG9syJZgNmCx513PU=) 4: 34352e342e3231302e302f32332d3233203d3e20323636303836.roa (hash: 19yjQF15l1WY7xGvKuoEgaE3+lZPYC/vq9q5gdofQCY=) 5: 34352e342e3230382e302f32322d3232203d3e20323636303836.roa (hash: KbAvwmsdYWxIfLCERWHSVqq3K/1Lz+y9FKZQ7bmu2SY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.crl rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC5A9A664B2444F593AABE0FA542C0DF508B03.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 04:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:71:74:e4:5d:36:9a:71:a7:81:27:72:e5:79:5f:cc:b0:61:a7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44FC5A9A664B2444F593AABE0FA542C0DF508B03 Validity Not Before: Aug 20 00:54:03 2025 GMT Not After : Aug 21 04:46:03 2025 GMT Subject: CN=04190AF6D1677C9F7663CC1AADD4FBCCA587EEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:4f:f1:63:59:3f:0d:de:87:76:36:e3:06: 27:d5:3b:89:2f:03:a9:ab:50:ee:6f:b9:e9:d9:2f: d1:24:0c:77:99:18:0d:a4:72:89:3d:53:a9:3c:bb: 2f:28:5d:cc:89:c1:d0:0f:88:78:66:16:83:cd:d8: 81:2e:54:b1:33:c7:a5:88:cc:9c:a6:b4:9c:a7:99: 06:06:ca:ed:bd:4c:c7:b5:d4:06:33:2e:a4:18:25: 16:2a:b4:20:63:c7:99:49:05:4c:78:d4:4c:4f:95: 77:63:8c:ea:cc:1d:09:de:8b:2d:be:ce:1f:50:92: c1:4c:20:04:c0:31:03:09:29:9c:b3:53:7e:17:33: 89:bb:f2:49:9f:80:4c:da:32:ab:c1:26:3f:df:d7: f3:ba:4c:28:f2:43:82:a4:1f:c1:33:25:85:dc:0b: 07:e6:b5:eb:25:cc:d3:66:d2:cb:3f:99:5b:a3:da: 85:8d:b0:eb:b6:ae:70:cd:38:e6:68:4d:8d:c5:fd: 56:9f:60:86:cf:97:6b:27:a1:80:6a:85:2c:a8:d4: a2:04:5f:0c:13:4c:8c:b2:3c:72:a0:d8:c1:ec:4d: 46:a4:cc:2b:37:07:39:79:b7:a6:44:47:a2:d1:a3: cf:ea:aa:ec:a3:eb:d4:42:62:d8:17:df:bf:b1:70: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:0A:F6:D1:67:7C:9F:76:63:CC:1A:AD:D4:FB:CC:A5:87:EE:AA X509v3 Authority Key Identifier: keyid:44:FC:5A:9A:66:4B:24:44:F5:93:AA:BE:0F:A5:42:C0:DF:50:8B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC5A9A664B2444F593AABE0FA542C0DF508B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/44FC5A9A664B2444F593AABE0FA542C0DF508B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0f:e3:0f:69:76:fb:31:70:14:0d:8b:26:60:75:f8:c9:94: cf:25:99:30:27:a7:7b:27:51:c5:fe:a1:9c:0e:4e:a3:35:74: 37:db:c7:ec:eb:c8:3a:11:f3:d8:54:12:1b:dc:d6:ed:13:c4: 84:16:a2:3c:54:88:fe:f7:31:e3:52:50:42:53:af:5d:79:30: b6:f8:8e:12:db:14:35:b6:4f:69:a4:5c:ac:a9:b9:72:3f:98: 55:90:65:13:b4:8a:2d:ef:77:56:c3:e5:08:f5:6d:b6:c9:1a: cb:06:37:45:49:95:b5:c7:19:5d:3c:a8:58:91:d7:99:42:da: d1:79:b5:bd:10:f8:c0:c3:fe:e0:a1:f8:f7:ed:53:bb:f5:7c: 38:f2:ec:48:df:29:9f:75:41:f9:6a:11:c8:53:81:5b:b3:c2: dc:36:7f:7c:55:6b:11:10:72:83:97:9e:0a:08:ed:5a:c2:4e: 8a:77:90:b9:fd:53:11:c1:dd:70:b4:c2:1b:6c:e8:12:b5:0e: b6:58:dd:f5:46:08:e6:e4:5c:84:25:8d:e6:aa:ed:1f:77:eb: 25:79:85:46:65:1d:5a:2d:2f:ce:80:3f:89:6f:a2:78:0f:a6: ac:ad:51:88:2e:01:a9:f9:63:88:a0:86:3b:58:8e:8c:a9:26: 5f:41:15:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP3F05F02mnGngSdy5XlfzLBhp8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRGQzVBOUE2NjRCMjQ0NEY1OTNBQUJFMEZBNTQyQzBE RjUwOEIwMzAeFw0yNTA4MjAwMDU0MDNaFw0yNTA4MjEwNDQ2MDNaMDMxMTAvBgNV BAMTKDA0MTkwQUY2RDE2NzdDOUY3NjYzQ0MxQUFERDRGQkNDQTU4N0VFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkU/xY1k/Dd6HdjbjBifVO4kv A6mrUO5vuenZL9EkDHeZGA2kcok9U6k8uy8oXcyJwdAPiHhmFoPN2IEuVLEzx6WI zJymtJynmQYGyu29TMe11AYzLqQYJRYqtCBjx5lJBUx41ExPlXdjjOrMHQneiy2+ zh9QksFMIATAMQMJKZyzU34XM4m78kmfgEzaMqvBJj/f1/O6TCjyQ4KkH8EzJYXc CwfmteslzNNm0ss/mVuj2oWNsOu2rnDNOOZoTY3F/VafYIbPl2snoYBqhSyo1KIE XwwTTIyyPHKg2MHsTUakzCs3Bzl5t6ZER6LRo8/qquyj69RCYtgX37+xcCDBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBBkK9tFnfJ92Y8wardT7zKWH7qowHwYDVR0j BBgwFoAURPxammZLJET1k6q+D6VCwN9QiwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXh2TGNSREdVRDJQQ1RBdEtSMnZtU3g4ZmhtS3VQTVMxZUYyMUVBc2Z5 REgvMC80NEZDNUE5QTY2NEIyNDQ0RjU5M0FBQkUwRkE1NDJDMERGNTA4QjAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RkM1QTlBNjY0QjI0NDRG NTkzQUFCRTBGQTU0MkMwREY1MDhCMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXh2TGNSREdVRDJQQ1RBdEtSMnZtU3g4ZmhtS3VQTVMxZUYyMUVBc2Z5REgvMC80 NEZDNUE5QTY2NEIyNDQ0RjU5M0FBQkUwRkE1NDJDMERGNTA4QjAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAA/jD2l2+zFwFA2LJmB1+MmUzyWZMCeneydRxf6hnA5OozV0N9vH7OvIOhHz 2FQSG9zW7RPEhBaiPFSI/vcx41JQQlOvXXkwtviOEtsUNbZPaaRcrKm5cj+YVZBl E7SKLe93VsPlCPVttskaywY3RUmVtccZXTyoWJHXmULa0Xm1vRD4wMP+4KH49+1T u/V8OPLsSN8pn3VB+WoRyFOBW7PC3DZ/fFVrERByg5eeCgjtWsJOineQuf1TEcHd cLTCG2zoErUOtljd9UYI5uRchCWN5qrtH3frJXmFRmUdWi0vzoA/iW+ieA+mrK1R iC4BqfljiKCGO1iOjKkmX0EVTA== -----END CERTIFICATE-----Generated at Wed Aug 20 17:24:44 2025 by rpki-client