$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft File: 28AEA4799AA16796C18CA8950931D4394F01179A.mft (raw, json) Hash identifier: 69lAu2ir+6wegpX9Jwk4yrnIJd79o4XnKnyhNj3HttE= Subject key identifier: 2B:A9:D7:55:33:69:D0:8D:5B:11:99:5B:7C:92:9C:14:DD:4E:E3:41 Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A Certificate issuer: /CN=28AEA4799AA16796C18CA8950931D4394F01179A Certificate serial: 294B77C62AF403EB74F0C37B56DB8FDB71D4BC88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft Manifest number: CA Signing time: Wed 05 Nov 2025 03:46:01 +0000 Manifest this update: Wed 05 Nov 2025 03:41:01 +0000 Manifest next update: Thu 06 Nov 2025 07:34:01 +0000 Files and hashes: 1: 323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (hash: qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=) 2: 3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa (hash: y3CoVEWObW7u+N074Y8vxEijHZnpu3jXbFZ4orw4uP8=) 3: 323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (hash: Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=) 4: 28AEA4799AA16796C18CA8950931D4394F01179A.crl (hash: lGu038Yx5Ggn8dGvz+MkAVA0X127reSotSLevHx5XxQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4b:77:c6:2a:f4:03:eb:74:f0:c3:7b:56:db:8f:db:71:d4:bc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A Validity Not Before: Nov 5 03:41:01 2025 GMT Not After : Nov 6 07:34:01 2025 GMT Subject: CN=2BA9D7553369D08D5B11995B7C929C14DD4EE341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:a0:f5:8a:b6:72:b8:1b:e7:08:c2:1b:8a: cd:62:c3:00:2c:83:7d:e4:16:3a:0d:50:2b:ad:b1: 9d:8d:f5:34:09:50:1f:9d:51:03:02:5e:e7:d9:17: db:73:f2:32:4f:30:7c:c6:23:f1:26:13:97:68:57: 89:9d:a2:3d:87:d9:4b:96:17:6b:cd:7f:a2:31:0c: 11:8d:7f:3c:a8:f9:03:96:4c:14:cc:4a:0c:d7:7b: 8b:6e:ad:35:a4:d8:0a:57:3e:11:a7:5d:0e:8e:ec: 87:9c:d7:38:3c:d3:d1:03:29:89:3d:1d:93:14:cb: fb:45:6a:10:43:ed:d6:8e:e8:56:d1:c9:9f:f7:d9: 8a:8d:b3:3c:dd:73:80:d4:1e:3a:0b:16:03:7b:f9: 34:25:17:de:a2:9a:52:45:6e:08:18:73:6e:f4:cc: 88:a2:6e:a8:10:2b:db:db:a5:fd:18:1f:d6:ba:90: db:cd:26:ad:71:75:d8:51:ab:a8:f9:86:22:79:04: a7:36:f3:96:ec:87:a5:8d:f3:3b:98:a7:dc:bc:2d: dc:3e:5f:19:94:34:c3:f8:63:8a:61:0b:d8:71:03: ba:b8:d3:fc:90:b1:d4:65:f6:a4:b6:8c:8f:a7:69: 3b:65:12:a7:0e:0e:00:df:17:4b:02:45:f4:2c:42: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A9:D7:55:33:69:D0:8D:5B:11:99:5B:7C:92:9C:14:DD:4E:E3:41 X509v3 Authority Key Identifier: keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0f:d6:1a:3f:f8:97:ee:b7:71:f6:9b:48:f3:61:a5:27:63: 1c:8a:5f:73:57:bc:fe:38:b1:75:8a:58:29:ca:7b:8b:85:3d: a2:cb:00:27:99:5d:89:3a:a9:af:41:5f:c4:f6:f6:a5:fd:ae: 4a:f8:bc:7c:9a:97:f6:29:1b:03:07:bc:89:85:a7:45:39:e2: 36:04:67:79:86:40:0a:1b:c4:a2:92:d5:21:69:61:71:71:d8: 19:46:d0:fa:de:1e:f8:29:d7:ee:01:c7:06:c0:65:3b:27:eb: e1:c0:79:13:d2:f6:ce:95:d2:25:68:88:f1:42:85:e6:e0:72: ac:7f:77:73:f4:21:67:b3:fb:eb:67:0a:2b:83:02:6c:b1:c4: eb:e8:9c:33:42:38:30:67:ca:49:09:fe:4b:3c:4d:d7:22:20: 24:27:78:66:33:45:41:47:40:dd:a3:82:11:47:40:09:e9:0c: ad:bb:90:7d:e4:43:d1:bc:61:c1:0d:04:23:31:ea:59:1b:82: d2:f7:a2:b1:38:c4:44:60:2d:33:4f:5b:21:55:2e:86:ba:af: e7:4f:63:a1:ba:cc:36:c6:e8:78:5e:b3:10:37:0f:34:85:47: 56:05:53:16:5b:4d:83:e4:94:7e:c1:98:58:de:9c:92:36:a0: d9:d6:e5:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKUt3xir0A+t08MN7VtuP23HUvIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBRUE0Nzk5QUExNjc5NkMxOENBODk1MDkzMUQ0Mzk0 RjAxMTc5QTAeFw0yNTExMDUwMzQxMDFaFw0yNTExMDYwNzM0MDFaMDMxMTAvBgNV BAMTKDJCQTlENzU1MzM2OUQwOEQ1QjExOTk1QjdDOTI5QzE0REQ0RUUzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6KD1irZyuBvnCMIbis1iwwAs g33kFjoNUCutsZ2N9TQJUB+dUQMCXufZF9tz8jJPMHzGI/EmE5doV4mdoj2H2UuW F2vNf6IxDBGNfzyo+QOWTBTMSgzXe4turTWk2ApXPhGnXQ6O7Iec1zg809EDKYk9 HZMUy/tFahBD7daO6FbRyZ/32YqNszzdc4DUHjoLFgN7+TQlF96imlJFbggYc270 zIiibqgQK9vbpf0YH9a6kNvNJq1xddhRq6j5hiJ5BKc285bsh6WN8zuYp9y8Ldw+ XxmUNMP4Y4phC9hxA7q40/yQsdRl9qS2jI+naTtlEqcODgDfF0sCRfQsQmT7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK6nXVTNp0I1bEZlbfJKcFN1O40EwHwYDVR0j BBgwFoAUKK6keZqhZ5bBjKiVCTHUOU8BF5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV WGQvMC8yOEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QUVBNDc5OUFBMTY3OTZD MThDQTg5NTA5MzFENDM5NEYwMTE3OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZVWGQvMC8y OEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASg/WGj/4l+63cfabSPNhpSdjHIpfc1e8/jixdYpYKcp7i4U9ossAJ5ldiTqp r0FfxPb2pf2uSvi8fJqX9ikbAwe8iYWnRTniNgRneYZAChvEopLVIWlhcXHYGUbQ +t4e+CnX7gHHBsBlOyfr4cB5E9L2zpXSJWiI8UKF5uByrH93c/QhZ7P762cKK4MC bLHE6+icM0I4MGfKSQn+SzxN1yIgJCd4ZjNFQUdA3aOCEUdACekMrbuQfeRD0bxh wQ0EIzHqWRuC0veisTjERGAtM09bIVUuhrqv509jobrMNsboeF6zEDcPNIVHVgVT FltNg+SUfsGYWN6ckjag2dblmw== -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:24 2025 by rpki-client