$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft File: 44D3F1577250CA6E2174DFB39A484561766D6292.mft (raw, json) Hash identifier: M2evXfMfYX/CU2f3dd6P1G6pvsr1xGPU/Hxd4Ixb9Js= Subject key identifier: 26:13:5C:59:A5:43:D2:82:C3:EA:0B:D2:D9:41:D8:F3:C6:73:80:D6 Authority key identifier: 44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92 Certificate issuer: /CN=44D3F1577250CA6E2174DFB39A484561766D6292 Certificate serial: 08868AF55AB8663E0877A5D41EFAB96EC01B4589 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer Subject info access: rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft Manifest number: 025C Signing time: Tue 01 Jul 2025 05:28:28 +0000 Manifest this update: Tue 01 Jul 2025 05:23:28 +0000 Manifest next update: Wed 02 Jul 2025 06:47:28 +0000 Files and hashes: 1: 3136382e39302e3135322e302f32322d3234203d3e20323731313833.roa (hash: lcS/7Jm6IDKlArZVVfkI+eLNcqAoTj0M0D24A6nrqq8=) 2: 3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa (hash: yRiImvCsufCDLrnmKe1B45WjGBdayjoTMpg+AzXD4DQ=) 3: 44D3F1577250CA6E2174DFB39A484561766D6292.crl (hash: iWq0sln8w7G4q9bmFom8aOMUz1OttzN4CAvFBG335mg=) 4: 323830343a373738343a3a2f33322d3334203d3e20323731313833.roa (hash: 2am6YCtwW+eQ0X3UKbBfSe6HbzuZKAw63CvipIf+sGg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 06:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:86:8a:f5:5a:b8:66:3e:08:77:a5:d4:1e:fa:b9:6e:c0:1b:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44D3F1577250CA6E2174DFB39A484561766D6292 Validity Not Before: Jul 1 05:23:28 2025 GMT Not After : Jul 2 06:47:28 2025 GMT Subject: CN=26135C59A543D282C3EA0BD2D941D8F3C67380D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:d4:85:6e:a3:b0:91:66:8a:73:bc:70:e5: bd:3f:ac:c1:e0:84:ec:df:90:f3:ef:2a:25:a4:7f: fd:05:23:0c:f8:53:6e:ae:5f:bf:d9:83:60:a5:ec: c4:65:c0:80:ed:0c:3f:33:99:49:52:b2:4a:c6:e2: 03:6a:38:83:f1:b3:5a:e3:f8:ed:6d:92:f3:8e:1e: 31:51:66:d6:5f:75:4d:2f:6e:e0:c1:3a:e3:c6:85: d2:31:a9:05:45:84:8e:20:18:6c:0f:fc:13:e6:1a: 19:6d:4d:55:95:0e:5a:47:e0:9f:83:73:5f:cb:8c: 64:67:77:07:f0:92:fb:45:2f:7d:09:82:ac:be:53: 31:ea:17:a6:aa:58:1b:3e:37:b1:33:65:79:3e:2f: 59:e1:8f:8b:e0:95:a4:16:52:e3:b8:fd:eb:e3:7a: 6b:8d:50:18:43:66:7d:43:e9:19:e5:fa:08:f5:65: d8:7a:6a:2e:9e:47:20:d3:d2:64:e4:c9:0e:b4:12: f8:5a:6a:17:de:5a:b9:3a:0e:11:7f:1d:10:bc:3f: 86:d6:45:64:8f:f3:e1:f9:71:08:3e:67:8b:b3:01: 12:16:8e:b3:6b:05:54:65:88:25:c1:82:53:19:7c: da:8b:24:0c:8e:02:07:0f:ed:2a:81:a5:3f:69:63: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:13:5C:59:A5:43:D2:82:C3:EA:0B:D2:D9:41:D8:F3:C6:73:80:D6 X509v3 Authority Key Identifier: keyid:44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:52:5a:5e:b9:7b:59:1d:23:4e:dc:31:ea:3c:a4:b4:88:58: de:30:26:3a:da:f9:67:10:d8:74:f0:68:65:c4:f7:a0:3a:68: 69:b1:f7:19:f7:b4:f2:97:7a:b2:a7:15:96:b3:e2:bc:8c:cb: 91:25:1c:0c:ed:1e:58:b4:ad:32:4e:75:18:88:44:3f:ad:72: 63:62:61:bc:62:7c:5d:49:35:67:8b:58:24:20:0a:2c:73:ec: 7a:80:f7:36:08:2b:f2:01:67:29:0f:b7:e2:1d:d6:01:c7:48: bd:46:cf:32:16:7d:23:d0:3d:b0:2c:7d:5a:c3:32:89:36:5f: a5:19:64:c5:a0:2a:d7:92:1e:f7:be:c0:81:46:f9:58:0d:33: 11:31:b1:9a:4c:78:67:24:1c:b3:01:e6:53:93:af:f7:3e:3f: f4:7c:84:5e:28:2e:18:5a:31:f1:95:18:49:2f:e1:b1:37:bf: 82:11:db:31:d8:9e:c5:ff:e9:ef:58:ea:8c:64:4a:9a:12:d5: af:4b:2d:40:91:62:d8:e7:71:a1:1c:ca:41:60:23:4c:35:a0: 1c:84:66:9a:c0:5d:22:0e:f4:6c:e5:0e:99:6c:02:03:dc:fc: b3:d8:45:7e:44:14:d1:8d:31:a8:ea:12:04:d6:00:f5:38:62: a6:eb:37:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCIaK9Vq4Zj4Id6XUHvq5bsAbRYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDREM0YxNTc3MjUwQ0E2RTIxNzRERkIzOUE0ODQ1NjE3 NjZENjI5MjAeFw0yNTA3MDEwNTIzMjhaFw0yNTA3MDIwNjQ3MjhaMDMxMTAvBgNV BAMTKDI2MTM1QzU5QTU0M0QyODJDM0VBMEJEMkQ5NDFEOEYzQzY3MzgwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXtSFbqOwkWaKc7xw5b0/rMHg hOzfkPPvKiWkf/0FIwz4U26uX7/Zg2Cl7MRlwIDtDD8zmUlSskrG4gNqOIPxs1rj +O1tkvOOHjFRZtZfdU0vbuDBOuPGhdIxqQVFhI4gGGwP/BPmGhltTVWVDlpH4J+D c1/LjGRndwfwkvtFL30Jgqy+UzHqF6aqWBs+N7EzZXk+L1nhj4vglaQWUuO4/evj emuNUBhDZn1D6Rnl+gj1Zdh6ai6eRyDT0mTkyQ60EvhaahfeWrk6DhF/HRC8P4bW RWSP8+H5cQg+Z4uzARIWjrNrBVRliCXBglMZfNqLJAyOAgcP7SqBpT9pY663AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJhNcWaVD0oLD6gvS2UHY88ZzgNYwHwYDVR0j BBgwFoAURNPxV3JQym4hdN+zmkhFYXZtYpIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFM1dDNRMWI3UFJ0U1R6OXFISmdpZ3duRDVmcEtlM0szRUJFOXNOd29w MlAvMS80NEQzRjE1NzcyNTBDQTZFMjE3NERGQjM5QTQ4NDU2MTc2NkQ2MjkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDNGMTU3NzI1MENBNkUy MTc0REZCMzlBNDg0NTYxNzY2RDYyOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFM1dDNRMWI3UFJ0U1R6OXFISmdpZ3duRDVmcEtlM0szRUJFOXNOd29wMlAvMS80 NEQzRjE1NzcyNTBDQTZFMjE3NERGQjM5QTQ4NDU2MTc2NkQ2MjkyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHlJaXrl7WR0jTtwx6jyktIhY3jAmOtr5ZxDYdPBoZcT3oDpoabH3Gfe08pd6 sqcVlrPivIzLkSUcDO0eWLStMk51GIhEP61yY2JhvGJ8XUk1Z4tYJCAKLHPseoD3 Nggr8gFnKQ+34h3WAcdIvUbPMhZ9I9A9sCx9WsMyiTZfpRlkxaAq15Ie977AgUb5 WA0zETGxmkx4ZyQcswHmU5Ov9z4/9HyEXiguGFox8ZUYSS/hsTe/ghHbMdiexf/p 71jqjGRKmhLVr0stQJFi2OdxoRzKQWAjTDWgHIRmmsBdIg70bOUOmWwCA9z8s9hF fkQU0Y0xqOoSBNYA9Thipus3IA== -----END CERTIFICATE-----Generated at Tue Jul 1 18:35:35 2025 by rpki-client