$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft File: 2028B4F00526FFD4A6479245C26F87EECD0F5352.mft (raw, json) Hash identifier: +do8XmVXL6r48+/GLAY/VF6ey2LmBL2KabKC8d1f5J4= Subject key identifier: 98:E7:72:3D:FB:90:16:74:E5:65:EA:0B:7A:AF:41:D3:07:74:D2:40 Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 Certificate issuer: /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Certificate serial: 105BC2DB0F5B7068ECE4B5E3D5BCC90933A87720 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft Manifest number: 31 Signing time: Tue 04 Nov 2025 09:40:23 +0000 Manifest this update: Tue 04 Nov 2025 09:35:23 +0000 Manifest next update: Wed 05 Nov 2025 10:00:23 +0000 Files and hashes: 1: 323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (hash: 1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=) 2: 2028B4F00526FFD4A6479245C26F87EECD0F5352.crl (hash: xoJiPG1He9TZamm+YlsZfZS/v74KwSb7LtScL28k6S4=) 3: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (hash: /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=) 4: 3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (hash: unb7feFenHIIwOwVCWy8s62+GYdR241xnz1H4IZGT1E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5b:c2:db:0f:5b:70:68:ec:e4:b5:e3:d5:bc:c9:09:33:a8:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Validity Not Before: Nov 4 09:35:23 2025 GMT Not After : Nov 5 10:00:23 2025 GMT Subject: CN=98E7723DFB901674E565EA0B7AAF41D30774D240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:9e:cd:5d:03:3d:9a:0d:2b:82:14:99:01: d5:ae:0e:9b:f7:53:23:c7:d7:76:8e:be:41:a0:33: b3:97:59:c1:cb:b4:0e:ae:f3:f1:05:08:9d:2d:20: fb:70:5f:13:7d:b9:87:9e:26:97:10:8f:d9:a1:15: 90:89:6e:f1:99:3e:05:b2:2f:0f:6c:67:89:ae:9a: 2c:b1:df:c0:40:fd:43:a3:fa:ce:a8:b1:f8:f1:b1: e6:2f:86:2b:79:ec:9f:8c:00:95:ee:60:9d:59:6a: 37:f0:7f:9c:a7:16:be:63:f0:be:d8:d7:2f:a8:ca: d0:46:23:9b:7b:dc:f2:2c:c3:45:39:da:7f:d5:b9: f8:23:8b:a8:3b:ca:ec:83:a7:6e:3b:40:ff:76:1d: 0d:40:4c:1f:e8:71:f1:27:e7:29:3d:40:9c:ac:b9: f6:f1:a5:af:b8:7e:9e:2e:ea:bf:d8:55:ab:4b:c0: 1a:62:41:e8:36:fa:74:94:cd:92:9f:03:e4:cd:2f: db:00:58:9b:6f:d2:c5:28:10:73:19:f5:f3:13:d8: 99:5f:8f:0c:dc:4b:72:5c:ce:51:d6:c0:dd:f1:b0: fa:3f:86:42:a5:08:a7:2a:a1:6d:15:48:ca:05:fb: 1c:a5:b1:6d:d0:b6:09:92:93:cc:99:bb:7f:55:ba: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E7:72:3D:FB:90:16:74:E5:65:EA:0B:7A:AF:41:D3:07:74:D2:40 X509v3 Authority Key Identifier: keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:74:2b:26:7d:96:aa:dd:c3:68:40:11:6d:74:d0:84:2e:50: 10:98:f9:8a:95:e1:45:50:16:1b:98:9f:32:f3:90:f0:9e:7f: d3:41:4e:53:5c:4e:49:b7:90:06:1e:4d:e0:a4:a5:56:65:1d: 54:bd:ae:10:ff:56:90:bb:b1:51:b3:98:b3:54:80:e2:4a:31: ff:3a:c0:55:c8:1d:c3:43:30:a6:88:0f:4c:08:56:49:a0:f3: ad:b6:04:6e:60:5a:c5:74:cb:89:00:be:b4:86:c0:8b:4a:9c: b3:a5:93:9d:b1:60:f3:d4:7b:0a:17:d2:95:dc:54:e8:ae:41: 86:b1:14:0e:00:bc:18:1a:6f:27:d0:c1:70:75:a3:ed:94:c1: 7e:b5:76:c5:4e:0d:eb:40:0e:9a:8d:35:c4:39:a2:c3:6e:d1: a6:2c:6f:fd:8e:89:08:2e:f4:73:2d:9f:71:f8:e9:39:20:37: e7:7f:04:51:bb:ce:21:10:4c:c0:30:d6:d4:78:6e:46:31:7a: 80:6a:6d:5b:52:a5:e4:b2:24:eb:f1:f4:99:71:8a:9f:b6:7c: ac:bc:05:12:38:23:c6:d1:11:32:99:b5:c0:f1:0c:c9:8b:40: 8e:d9:ca:eb:f1:59:84:9d:a4:af:63:3a:32:ab:2e:84:3d:e2: 4b:e0:ff:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEFvC2w9bcGjs5LXj1bzJCTOodyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyOEI0RjAwNTI2RkZENEE2NDc5MjQ1QzI2Rjg3RUVD RDBGNTM1MjAeFw0yNTExMDQwOTM1MjNaFw0yNTExMDUxMDAwMjNaMDMxMTAvBgNV BAMTKDk4RTc3MjNERkI5MDE2NzRFNTY1RUEwQjdBQUY0MUQzMDc3NEQyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B57NXQM9mg0rghSZAdWuDpv3 UyPH13aOvkGgM7OXWcHLtA6u8/EFCJ0tIPtwXxN9uYeeJpcQj9mhFZCJbvGZPgWy Lw9sZ4mumiyx38BA/UOj+s6osfjxseYvhit57J+MAJXuYJ1Zajfwf5ynFr5j8L7Y 1y+oytBGI5t73PIsw0U52n/Vufgji6g7yuyDp247QP92HQ1ATB/ocfEn5yk9QJys ufbxpa+4fp4u6r/YVatLwBpiQeg2+nSUzZKfA+TNL9sAWJtv0sUoEHMZ9fMT2Jlf jwzcS3JczlHWwN3xsPo/hkKlCKcqoW0VSMoF+xylsW3QtgmSk8yZu39VuiTVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmOdyPfuQFnTlZeoLeq9B0wd00kAwHwYDVR0j BBgwFoAUICi08AUm/9SmR5JFwm+H7s0PU1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZt UXIvMC8yMDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMjhCNEYwMDUyNkZGRDRB NjQ3OTI0NUMyNkY4N0VFQ0QwRjUzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZtUXIvMC8y MDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHQrJn2Wqt3DaEARbXTQhC5QEJj5ipXhRVAWG5ifMvOQ8J5/00FOU1xOSbeQ Bh5N4KSlVmUdVL2uEP9WkLuxUbOYs1SA4kox/zrAVcgdw0MwpogPTAhWSaDzrbYE bmBaxXTLiQC+tIbAi0qcs6WTnbFg89R7ChfSldxU6K5BhrEUDgC8GBpvJ9DBcHWj 7ZTBfrV2xU4N60AOmo01xDmiw27Rpixv/Y6JCC70cy2fcfjpOSA3538EUbvOIRBM wDDW1HhuRjF6gGptW1Kl5LIk6/H0mXGKn7Z8rLwFEjgjxtERMpm1wPEMyYtAjtnK 6/FZhJ2kr2M6MqsuhD3iS+D/2g== -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:18 2025 by rpki-client