$ rpki-client -vvf rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft File: 28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft (raw, json) Hash identifier: dsiG0gfQPEh7E1FkCZi/7LFgxSqDDZJ/d6IKPIntG/w= Subject key identifier: 20:FF:DC:F9:D7:EC:F6:B2:15:A9:A2:FD:05:E1:EB:5D:02:F3:74:D2 Authority key identifier: 28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7 Certificate issuer: /CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7 Certificate serial: 0A4665DC2F8934ABE3B021E29DE55B3AF0DE1A66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft Manifest number: 07 Signing time: Fri 08 Aug 2025 11:17:16 +0000 Manifest this update: Fri 08 Aug 2025 11:12:16 +0000 Manifest next update: Sat 09 Aug 2025 14:29:16 +0000 Files and hashes: 1: 3137372e31312e34302e302f32312d3234203d3e20323632323738.roa (hash: KoU3eFALSjPGICMVCP1BxYv2pGWfiANI/PeIwmXTw7c=) 2: 34352e3139302e3232302e302f32322d3234203d3e20323632323738.roa (hash: h5lDrTzXASaiidfepKWG0rcMpwFzPz3KoI1cy3hoLmE=) 3: 28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl (hash: UXzvzkkMK2nLA3c6bc5Tnj5quMvgR89UgB1H9uwk0n8=) 4: 323830343a316563343a3a2f33322d3438203d3e20323632323738.roa (hash: Gu2urhUQzsRYvszVX1ZmDZ5QG45OgpkID4nZ30LKq2Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 14:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:46:65:dc:2f:89:34:ab:e3:b0:21:e2:9d:e5:5b:3a:f0:de:1a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7 Validity Not Before: Aug 8 11:12:16 2025 GMT Not After : Aug 9 14:29:16 2025 GMT Subject: CN=20FFDCF9D7ECF6B215A9A2FD05E1EB5D02F374D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:bf:b4:5f:21:fb:7f:dc:27:91:58:c2:cf: 60:aa:c9:fa:52:14:06:38:4e:2a:1d:6c:94:93:f7: 93:f8:2e:0e:86:e3:f8:b0:ea:15:bc:5e:b6:88:66: 4d:cb:99:5c:b9:81:6c:bc:2d:20:26:fc:07:e9:9a: c1:a1:c7:9d:a8:4a:d8:43:27:8d:86:a8:14:cc:3b: 25:c5:fb:6e:ca:a5:0b:e9:b2:06:25:0b:dd:9a:1e: 94:91:e2:85:63:3e:27:45:6b:7f:fe:8f:ec:a5:a2: 97:34:e6:e0:61:26:63:37:9a:e3:59:b9:33:93:39: e7:5e:36:70:49:ca:8f:60:1d:3f:a7:8e:6c:64:e0: 14:dc:28:30:f4:39:cc:7f:31:fa:ac:1e:6e:e9:35: 13:ae:09:8d:5f:61:cb:40:d0:5b:17:a5:a1:95:13: db:bd:24:1a:30:64:79:90:8c:9b:cd:70:e9:94:7a: ab:5b:31:36:61:5b:36:9a:6b:cd:51:19:d9:3d:86: 65:de:90:a9:72:13:77:20:9c:60:0c:98:bf:0f:cf: 50:78:7f:15:d3:5f:a2:50:ab:c8:12:45:cd:07:34: 22:1d:bd:41:3b:e6:11:9c:53:70:f8:c3:07:09:3e: d0:7c:67:26:5c:e7:97:cc:03:66:d2:5a:c1:2d:a9: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:DC:F9:D7:EC:F6:B2:15:A9:A2:FD:05:E1:EB:5D:02:F3:74:D2 X509v3 Authority Key Identifier: keyid:28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:77:2c:48:cd:a5:5a:5b:8a:53:62:03:3b:d2:7b:86:78:e0: e1:37:c3:73:b3:c1:79:51:a6:69:92:7f:7f:6a:ad:40:59:f3: a9:c0:d5:7e:c8:fd:f3:b6:ab:5a:89:46:df:1e:49:a3:7e:9f: 48:7c:df:da:80:2e:7d:a1:e4:0e:73:21:b8:4a:70:07:39:67: 42:7b:09:be:ee:4f:b4:c6:d2:c4:9f:ca:85:5a:91:17:3d:5c: 9b:8b:7c:92:30:a1:5c:eb:90:6d:98:69:04:93:00:28:22:c8: 30:56:42:2a:32:83:27:e8:54:e0:7d:df:dd:40:b3:33:a1:3c: d4:86:11:8b:d8:00:53:4d:4c:4e:d7:d8:62:1a:e9:9e:2f:32: 0c:94:32:ec:a2:65:ca:5c:90:d7:1d:e0:1a:f7:75:45:69:fd: ff:19:58:be:dc:99:75:f8:4d:8b:1d:c0:33:5a:5e:36:f4:18: 9c:06:e6:6e:f0:ac:fc:b9:55:b7:ec:91:ab:4a:98:c3:89:25: 5b:c8:0d:da:11:bd:c3:07:80:a7:81:9f:5d:82:a7:56:96:3d: 27:15:18:ed:35:c8:28:d5:2d:b4:f7:52:f4:3b:fd:57:64:f2: 43:bc:e7:e5:85:a1:96:4f:c0:05:3e:f4:5f:e2:6d:f7:da:5c: a3:76:17:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCkZl3C+JNKvjsCHineVbOvDeGmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBMTRGQjQ4RDhGNjE5OUIwRjNDMkI1RTc5ODA1QzI4 RjdDRkJDNzAeFw0yNTA4MDgxMTEyMTZaFw0yNTA4MDkxNDI5MTZaMDMxMTAvBgNV BAMTKDIwRkZEQ0Y5RDdFQ0Y2QjIxNUE5QTJGRDA1RTFFQjVEMDJGMzc0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWb+0XyH7f9wnkVjCz2CqyfpS FAY4TiodbJST95P4Lg6G4/iw6hW8XraIZk3LmVy5gWy8LSAm/AfpmsGhx52oSthD J42GqBTMOyXF+27KpQvpsgYlC92aHpSR4oVjPidFa3/+j+ylopc05uBhJmM3muNZ uTOTOedeNnBJyo9gHT+njmxk4BTcKDD0Ocx/MfqsHm7pNROuCY1fYctA0FsXpaGV E9u9JBowZHmQjJvNcOmUeqtbMTZhWzaaa81RGdk9hmXekKlyE3cgnGAMmL8Pz1B4 fxXTX6JQq8gSRc0HNCIdvUE75hGcU3D4wwcJPtB8ZyZc55fMA2bSWsEtqdxpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIP/c+dfs9rIVqaL9BeHrXQLzdNIwHwYDVR0j BBgwFoAUKKFPtI2PYZmw88K155gFwo98+8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmdQRFlqTURTVjR6Z3k1Y21MVHlrRFJ6eGJ2b2dMZHlvNUs2SGRyVHM3 REYvMC8yOEExNEZCNDhEOEY2MTk5QjBGM0MyQjVFNzk4MDVDMjhGN0NGQkM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QTE0RkI0OEQ4RjYxOTlC MEYzQzJCNUU3OTgwNUMyOEY3Q0ZCQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmdQRFlqTURTVjR6Z3k1Y21MVHlrRFJ6eGJ2b2dMZHlvNUs2SGRyVHM3REYvMC8y OEExNEZCNDhEOEY2MTk5QjBGM0MyQjVFNzk4MDVDMjhGN0NGQkM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsHcsSM2lWluKU2IDO9J7hnjg4TfDc7PBeVGmaZJ/f2qtQFnzqcDVfsj987ar WolG3x5Jo36fSHzf2oAufaHkDnMhuEpwBzlnQnsJvu5PtMbSxJ/KhVqRFz1cm4t8 kjChXOuQbZhpBJMAKCLIMFZCKjKDJ+hU4H3f3UCzM6E81IYRi9gAU01MTtfYYhrp ni8yDJQy7KJlylyQ1x3gGvd1RWn9/xlYvtyZdfhNix3AM1peNvQYnAbmbvCs/LlV t+yRq0qYw4klW8gN2hG9wweAp4GfXYKnVpY9JxUY7TXIKNUttPdS9Dv9V2TyQ7zn 5YWhlk/ABT70X+Jt99pco3YXfA== -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:11 2025 by rpki-client