
$ rpki-client -vvf rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
File: 28D273356F90D13FC143833120BC59A454646F71.mft (raw, json)
Hash identifier: vjvnMe9nevPXF+f6XeeafWgV97Kt+SzwIyw4oAoBuBM=
Subject key identifier: 28:EC:A4:4E:56:D8:9F:F5:57:B0:45:03:F2:B5:AC:86:C2:20:6F:D7
Authority key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
Certificate issuer: /CN=28D273356F90D13FC143833120BC59A454646F71
Certificate serial: 0AE49C898E21C1328C8C934A4E1877B972136BFB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
Manifest number: 2A
Signing time: Fri 17 Apr 2026 15:42:35 +0000
Manifest this update: Fri 17 Apr 2026 15:37:35 +0000
Manifest next update: Sat 18 Apr 2026 16:49:35 +0000
Files and hashes: 1: 28D273356F90D13FC143833120BC59A454646F71.crl (hash: FvngEzszGWw0COLYJv5ZZd7H7aPMo/73+hEpHKItMzs=)
2: 323830343a393434383a3a2f33322d3332203d3e20323734383333.roa (hash: 3+OUWvJ2paVgdIryDuKrx561qJe0osctthIg1n2by6E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 16:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e4:9c:89:8e:21:c1:32:8c:8c:93:4a:4e:18:77:b9:72:13:6b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D273356F90D13FC143833120BC59A454646F71
Validity
Not Before: Apr 17 15:37:35 2026 GMT
Not After : Apr 18 16:49:35 2026 GMT
Subject: CN=28ECA44E56D89FF557B04503F2B5AC86C2206FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:c0:1a:55:68:0c:65:95:03:26:c3:bc:7c:
83:d0:e2:e3:3e:38:29:21:d5:ff:ae:22:0d:ab:f5:
79:2c:a1:90:29:62:83:74:3a:8f:1b:de:d8:2a:0f:
1b:34:cf:10:d3:49:8e:0f:83:18:a3:cc:62:45:19:
eb:a1:7b:a1:b9:ee:6d:65:74:13:55:40:f5:8b:28:
c7:ac:5d:47:55:8a:61:9a:df:16:c4:b7:49:67:38:
9d:44:6c:94:07:83:39:6c:2f:ce:c4:47:ec:fb:d8:
27:fd:b8:69:a7:53:aa:74:4e:63:82:fe:6a:00:f3:
06:bb:b2:84:1a:4d:ed:ce:d7:a5:20:97:45:29:1c:
be:4d:8d:72:f5:bb:f8:c5:cd:d1:72:4a:fc:dc:65:
e0:52:f1:67:20:af:4a:51:c4:8a:e7:f2:62:8e:65:
74:99:6f:60:55:a3:80:a1:41:32:dc:4c:7c:b5:21:
4c:6f:16:ef:d4:9a:1a:dd:66:4a:31:b3:1a:18:44:
ca:4f:f6:cd:78:7a:ca:3e:72:79:a6:0b:ef:e9:c4:
8e:26:98:ab:08:8d:af:75:98:57:4d:61:cc:54:9d:
d5:9e:88:24:e4:f9:f7:24:c0:e2:69:3e:f4:6f:aa:
9c:38:a4:32:0e:80:d5:1a:b7:33:4c:b4:b0:d9:46:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:A4:4E:56:D8:9F:F5:57:B0:45:03:F2:B5:AC:86:C2:20:6F:D7
X509v3 Authority Key Identifier:
keyid:28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c8:d4:aa:71:21:79:d7:c0:c9:ee:42:34:51:50:53:8a:f0:
6b:d8:76:60:a3:99:ce:b1:92:4e:e0:44:e2:ac:49:89:4e:ba:
4f:80:26:cc:45:7a:82:3c:f9:83:b8:4b:ad:72:75:cd:b2:89:
3b:ce:3b:06:68:44:d8:9b:4a:47:53:c3:ce:64:44:90:2d:85:
99:68:32:81:13:ef:b7:1a:b6:35:85:79:41:5f:63:f6:26:49:
8d:21:c8:44:6f:5f:3b:f6:06:71:d0:af:2b:3c:6b:cd:9d:0f:
f8:be:3f:45:10:51:5a:90:14:73:b7:0c:a9:5c:a3:1e:43:5c:
81:da:f5:0a:47:84:81:94:34:6c:ae:88:9e:29:62:f8:ab:88:
85:20:5d:aa:9c:c4:4f:c2:59:17:44:41:b7:3a:92:61:65:6a:
a9:40:ff:87:0b:c0:0a:d6:f8:e5:a6:d0:55:8d:b3:90:86:a1:
ff:f6:2a:91:cd:b4:f7:af:e6:a5:fb:d8:0b:fd:31:d4:1c:9d:
d8:7a:a1:4f:5d:19:28:80:85:ca:d2:17:f5:1a:4f:44:09:ff:
9e:f2:b2:bd:ec:be:30:03:c5:9a:9b:22:19:92:98:dd:98:7e:
a5:8b:91:b5:f8:e5:41:05:81:4d:e6:d1:f8:1a:d4:71:cd:05:
93:2a:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:35 2026 by rpki-client