$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft File: 2028B4F00526FFD4A6479245C26F87EECD0F5352.mft (raw, json) Hash identifier: WUQIZHJzbsXYYOjxyaW5wPm5RCFsGa+pypwFSohC6Ks= Subject key identifier: 8C:DA:25:47:EF:3A:16:EE:30:09:9F:50:0C:03:17:01:F2:51:C2:D2 Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 Certificate issuer: /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Certificate serial: B7AB6B50C4044D3FD011F48433903F2961CACE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft Manifest number: CD Signing time: Mon 02 Mar 2026 04:45:25 +0000 Manifest this update: Mon 02 Mar 2026 04:40:25 +0000 Manifest next update: Tue 03 Mar 2026 06:14:25 +0000 Files and hashes: 1: 2028B4F00526FFD4A6479245C26F87EECD0F5352.crl (hash: VGycP22HZJ4ADEDAyrtRj1Ss/TdqV6xMNsQK411wROk=) 2: 323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (hash: 1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=) 3: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (hash: /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=) 4: 3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (hash: unb7feFenHIIwOwVCWy8s62+GYdR241xnz1H4IZGT1E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 06:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b7:ab:6b:50:c4:04:4d:3f:d0:11:f4:84:33:90:3f:29:61:ca:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Validity Not Before: Mar 2 04:40:25 2026 GMT Not After : Mar 3 06:14:25 2026 GMT Subject: CN=8CDA2547EF3A16EE30099F500C031701F251C2D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:1e:78:3f:ac:f0:b3:b0:b5:01:77:b2:48: 53:8d:96:f4:0f:51:0b:67:80:7e:11:53:3f:4a:36: 5d:a6:71:ab:90:59:6d:aa:8c:c9:5b:3e:cf:5e:2e: 88:cc:4a:f7:19:d2:87:b1:c8:b1:b9:90:27:98:0d: 81:83:d5:e3:99:c4:3a:0f:b4:c5:60:0c:71:59:cd: 47:15:c8:6b:d9:b2:47:c8:a5:ef:eb:c9:45:bc:44: 36:b3:2e:c7:12:17:54:d1:0e:31:8b:d4:2f:03:69: 27:6c:3c:6e:2f:24:33:4e:47:dc:94:c7:e3:57:8f: bd:81:7e:c2:58:3d:df:19:68:82:c3:f6:c9:4d:ca: 10:6b:dc:ad:dc:ba:61:df:7e:60:65:06:17:ff:57: 46:fc:c9:0f:f2:ac:79:d4:6e:bb:6c:8a:6f:46:76: 12:91:e5:b1:2b:98:07:7a:8c:b8:6f:13:02:f5:68: 3f:e4:e4:f5:a7:29:59:7b:1e:9e:7a:b3:00:5d:2c: 61:4a:a2:b0:4b:77:e0:84:fc:5c:19:0e:df:07:e2: f9:a1:8b:73:de:af:32:d8:7c:fb:eb:3c:b0:96:12: c1:2f:3b:38:10:73:45:20:bb:86:ab:0a:9b:dc:9f: 3a:cf:ef:1f:38:6a:7d:27:f8:54:f6:c2:6d:74:97: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DA:25:47:EF:3A:16:EE:30:09:9F:50:0C:03:17:01:F2:51:C2:D2 X509v3 Authority Key Identifier: keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fa:09:a4:25:19:12:15:10:0f:ea:97:26:5a:82:68:05:8c: 4d:4d:f4:b8:43:e9:7b:fc:4a:24:d6:de:1b:c8:8c:7b:b9:42: 49:87:60:d9:db:f7:80:ec:fb:34:84:f7:89:ca:a7:cb:e5:2c: fe:42:73:66:cd:15:b3:70:8e:20:10:74:80:91:ef:ab:da:eb: 82:e6:b7:b2:e8:93:cd:72:2b:d1:3f:21:ad:bf:f9:3f:3b:23: 14:96:9e:48:f7:f2:b1:c5:f0:e8:87:ab:b5:4f:ea:db:09:e2: e3:b7:ce:6e:94:ca:00:55:2c:32:e3:72:39:27:b4:9d:37:81: 83:03:bc:b0:80:85:8b:c9:d9:01:b6:af:94:e5:41:de:2d:e3: 20:b7:aa:b9:27:36:93:b1:02:2c:0c:57:19:0f:c5:9e:cb:7a: 71:fc:9f:5c:27:ff:56:5f:3a:c5:d8:bd:ff:6c:1c:24:5a:a8: 5f:e5:31:da:64:73:00:79:fc:35:0a:be:f0:5d:35:3b:2c:c7: e1:5d:1a:37:6b:50:6a:ae:e0:11:ae:3c:3d:27:58:c6:63:9e: db:bd:03:c4:a8:69:a9:fa:b8:22:53:4b:48:bb:21:0b:01:bd: 7c:74:9f:77:39:d8:90:d7:cf:a1:e3:45:e5:b1:b5:ee:20:90: 58:c6:a8:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUALera1DEBE0/0BH0hDOQPylhys4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyOEI0RjAwNTI2RkZENEE2NDc5MjQ1QzI2Rjg3RUVD RDBGNTM1MjAeFw0yNjAzMDIwNDQwMjVaFw0yNjAzMDMwNjE0MjVaMDMxMTAvBgNV BAMTKDhDREEyNTQ3RUYzQTE2RUUzMDA5OUY1MDBDMDMxNzAxRjI1MUMyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDh54P6zws7C1AXeySFONlvQP UQtngH4RUz9KNl2mcauQWW2qjMlbPs9eLojMSvcZ0oexyLG5kCeYDYGD1eOZxDoP tMVgDHFZzUcVyGvZskfIpe/ryUW8RDazLscSF1TRDjGL1C8DaSdsPG4vJDNOR9yU x+NXj72BfsJYPd8ZaILD9slNyhBr3K3cumHffmBlBhf/V0b8yQ/yrHnUbrtsim9G dhKR5bErmAd6jLhvEwL1aD/k5PWnKVl7Hp56swBdLGFKorBLd+CE/FwZDt8H4vmh i3PerzLYfPvrPLCWEsEvOzgQc0Ugu4arCpvcnzrP7x84an0n+FT2wm10l7pnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjNolR+86Fu4wCZ9QDAMXAfJRwtIwHwYDVR0j BBgwFoAUICi08AUm/9SmR5JFwm+H7s0PU1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZt UXIvMC8yMDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMjhCNEYwMDUyNkZGRDRB NjQ3OTI0NUMyNkY4N0VFQ0QwRjUzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZtUXIvMC8y MDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq/oJpCUZEhUQD+qXJlqCaAWMTU30uEPpe/xKJNbeG8iMe7lCSYdg2dv3gOz7 NIT3icqny+Us/kJzZs0Vs3COIBB0gJHvq9rrgua3suiTzXIr0T8hrb/5PzsjFJae SPfyscXw6IertU/q2wni47fObpTKAFUsMuNyOSe0nTeBgwO8sICFi8nZAbavlOVB 3i3jILequSc2k7ECLAxXGQ/Fnst6cfyfXCf/Vl86xdi9/2wcJFqoX+Ux2mRzAHn8 NQq+8F01OyzH4V0aN2tQaq7gEa48PSdYxmOe270DxKhpqfq4IlNLSLshCwG9fHSf dznYkNfPoeNF5bG17iCQWMao9Q== -----END CERTIFICATE-----Generated at Mon Mar 2 16:13:20 2026 by rpki-client