$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft File: 444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft (raw, json) Hash identifier: gDJX/zaaHuF0FXWoN95aS4Dqq4eQ7S0z04kytmAikGw= Subject key identifier: 43:54:9E:82:53:EE:56:54:29:61:31:60:1D:23:DA:24:4F:36:B4:CE Authority key identifier: 44:4E:CC:C9:A5:8C:62:DF:43:E3:EA:52:76:90:63:D3:18:C9:1E:DA Certificate issuer: /CN=444ECCC9A58C62DF43E3EA52769063D318C91EDA Certificate serial: 32BDA421DE9C255710763E6AFF0623997A28CD27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444ECCC9A58C62DF43E3EA52769063D318C91EDA.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft Manifest number: 14 Signing time: Thu 09 Apr 2026 04:54:29 +0000 Manifest this update: Thu 09 Apr 2026 04:49:29 +0000 Manifest next update: Fri 10 Apr 2026 08:43:29 +0000 Files and hashes: 1: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: U7CWo12F8Q1GWrsGZSv5yKc6Fyd1ngAI9h6IvX/nWI0=) 2: 444ECCC9A58C62DF43E3EA52769063D318C91EDA.crl (hash: Mdrk64L3mfuvgjEGGTrZBt3SDCkKNMWqVpS8m7hC/qI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.crl rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444ECCC9A58C62DF43E3EA52769063D318C91EDA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 08:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bd:a4:21:de:9c:25:57:10:76:3e:6a:ff:06:23:99:7a:28:cd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444ECCC9A58C62DF43E3EA52769063D318C91EDA Validity Not Before: Apr 9 04:49:29 2026 GMT Not After : Apr 10 08:43:29 2026 GMT Subject: CN=43549E8253EE5654296131601D23DA244F36B4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:68:c6:09:58:0e:a3:f1:c0:29:6c:0a:91: 1a:6a:3d:dd:40:f9:c2:ab:98:48:5b:1a:73:d0:97: 1c:6a:df:1f:a5:6f:e0:7c:fa:4c:45:26:71:fe:01: 39:b3:68:8d:0f:4f:b3:bf:c9:81:50:ab:d8:8b:a5: f9:66:f6:67:1d:90:40:3d:97:d6:97:fd:82:d6:f9: cf:d1:f1:35:00:80:61:91:25:5a:57:2b:46:18:7b: c3:67:68:0b:c5:58:6b:2d:75:3b:80:7a:ba:b5:7e: af:bf:0c:9e:96:c2:0e:3c:f1:d5:55:00:49:06:3f: bc:e4:ef:bf:87:1c:2d:86:5d:84:1b:0d:f8:f5:a0: d5:55:cd:b4:ed:07:f4:75:c8:1a:57:17:80:44:37: ac:d4:78:7d:23:af:d9:6f:9e:bd:21:21:63:73:d6: 2a:4c:77:3a:67:4f:d9:7a:40:bd:5a:c4:26:51:0c: e9:0b:ac:ec:51:fa:2c:4d:e4:d3:83:0a:4a:4a:b1: 9f:5e:aa:24:02:56:c9:4a:e0:28:5f:f4:c6:00:9d: 41:4e:7a:34:d8:77:b4:8a:df:6f:74:0b:54:b8:c2: 4c:0d:46:fb:8a:db:eb:9b:43:c2:07:aa:b9:42:b1: 88:a4:4f:46:45:b9:47:66:96:74:5d:bc:50:51:48: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:9E:82:53:EE:56:54:29:61:31:60:1D:23:DA:24:4F:36:B4:CE X509v3 Authority Key Identifier: keyid:44:4E:CC:C9:A5:8C:62:DF:43:E3:EA:52:76:90:63:D3:18:C9:1E:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444ECCC9A58C62DF43E3EA52769063D318C91EDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:73:16:32:37:2b:3f:8b:db:f6:df:ff:f7:cc:de:84:aa:b0: d1:96:b6:1e:bf:e6:4e:f4:d4:03:e8:48:fe:95:a7:51:7c:c0: 57:66:2d:a3:0c:2f:35:99:c1:1e:5b:cd:23:81:80:99:85:50: de:39:dd:8b:53:97:b9:f1:e5:ed:c7:a4:54:0f:f2:8a:df:41: 6c:b9:9d:21:db:50:6e:5b:f8:32:c1:10:af:69:0a:41:9c:13: fd:6a:44:d0:1d:fb:f6:7a:70:17:69:8e:57:ab:bd:cf:bc:5a: 05:b6:20:15:1d:ee:1b:b2:69:23:74:58:6b:16:81:78:21:8b: 2e:af:d8:2f:56:95:37:46:bb:c0:d8:99:a9:37:66:f6:71:2f: a8:5b:a6:bb:28:a5:0c:9a:4e:ec:d3:41:c2:31:ab:64:29:53: de:9b:a5:81:fa:fb:a4:cb:9d:95:5a:84:01:6a:be:11:27:35: d7:8a:e6:f3:5f:ad:21:da:75:3f:35:57:eb:41:53:cd:cd:11: 73:c0:c7:84:11:ec:d4:da:87:71:47:e8:82:9a:21:69:2c:1a: 49:d2:55:11:3d:fa:5b:6f:ed:7c:66:ef:f8:2a:b6:81:cf:8e: 8e:f5:98:37:98:2a:2f:94:47:15:da:ab:61:c7:47:0e:c1:3c: 9c:7f:59:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMr2kId6cJVcQdj5q/wYjmXoozScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0RUNDQzlBNThDNjJERjQzRTNFQTUyNzY5MDYzRDMx OEM5MUVEQTAeFw0yNjA0MDkwNDQ5MjlaFw0yNjA0MTAwODQzMjlaMDMxMTAvBgNV BAMTKDQzNTQ5RTgyNTNFRTU2NTQyOTYxMzE2MDFEMjNEQTI0NEYzNkI0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1l2jGCVgOo/HAKWwKkRpqPd1A +cKrmEhbGnPQlxxq3x+lb+B8+kxFJnH+ATmzaI0PT7O/yYFQq9iLpflm9mcdkEA9 l9aX/YLW+c/R8TUAgGGRJVpXK0YYe8NnaAvFWGstdTuAerq1fq+/DJ6Wwg488dVV AEkGP7zk77+HHC2GXYQbDfj1oNVVzbTtB/R1yBpXF4BEN6zUeH0jr9lvnr0hIWNz 1ipMdzpnT9l6QL1axCZRDOkLrOxR+ixN5NODCkpKsZ9eqiQCVslK4Chf9MYAnUFO ejTYd7SK3290C1S4wkwNRvuK2+ubQ8IHqrlCsYikT0ZFuUdmlnRdvFBRSA0fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ1SeglPuVlQpYTFgHSPaJE82tM4wHwYDVR0j BBgwFoAURE7MyaWMYt9D4+pSdpBj0xjJHtowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JD NWMvMC80NDRFQ0NDOUE1OEM2MkRGNDNFM0VBNTI3NjkwNjNEMzE4QzkxRURBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NEVDQ0M5QTU4QzYyREY0 M0UzRUE1Mjc2OTA2M0QzMThDOTFFREEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JDNWMvMC80 NDRFQ0NDOUE1OEM2MkRGNDNFM0VBNTI3NjkwNjNEMzE4QzkxRURBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGnMWMjcrP4vb9t//98zehKqw0Za2Hr/mTvTUA+hI/pWnUXzAV2YtowwvNZnB HlvNI4GAmYVQ3jndi1OXufHl7cekVA/yit9BbLmdIdtQblv4MsEQr2kKQZwT/WpE 0B379npwF2mOV6u9z7xaBbYgFR3uG7JpI3RYaxaBeCGLLq/YL1aVN0a7wNiZqTdm 9nEvqFumuyilDJpO7NNBwjGrZClT3pulgfr7pMudlVqEAWq+ESc114rm81+tIdp1 PzVX60FTzc0Rc8DHhBHs1NqHcUfogpohaSwaSdJVET36W2/tfGbv+Cq2gc+OjvWY N5gqL5RHFdqrYcdHDsE8nH9Z1Q== -----END CERTIFICATE-----Generated at Thu Apr 9 11:07:48 2026 by rpki-client