$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json) Hash identifier: scky2JWDbNOce8zdV2ipNDrXO4aBX/8W6H/n9L9AjTQ= Subject key identifier: F2:A6:5D:30:B5:49:08:1B:8F:AF:B3:CC:19:99:C5:4A:B0:ED:47:AD Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Certificate serial: 05D95A60B941E9B1FE5D1ADCD73B26B163AC4586 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft Manifest number: 023A Signing time: Tue 04 Nov 2025 21:50:03 +0000 Manifest this update: Tue 04 Nov 2025 21:45:03 +0000 Manifest next update: Thu 06 Nov 2025 00:13:03 +0000 Files and hashes: 1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: b80jboX82xcxSZ3qw2OCjnzPhzgnnFmqkZX9yjzY+cU=) 2: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: YYla6LeSVKEpYGiU6+b9MxsBsc3IC44rkWw9jVs5OhI=) 3: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 81YYVwts0/kXPr8fGXqDHUq4bgSQ+jGtgtMpTGK1R/E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:5a:60:b9:41:e9:b1:fe:5d:1a:dc:d7:3b:26:b1:63:ac:45:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Validity Not Before: Nov 4 21:45:03 2025 GMT Not After : Nov 6 00:13:03 2025 GMT Subject: CN=F2A65D30B549081B8FAFB3CC1999C54AB0ED47AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:93:52:b7:9c:f2:76:33:4d:3d:1b:26:a4: 87:9f:89:eb:c0:98:1c:d0:6e:d5:c8:39:d5:bc:cf: 0d:53:99:87:1f:86:12:7e:9e:e1:0c:75:91:e4:1a: d1:c4:9b:7d:df:9d:36:ca:e5:66:f4:1e:d9:48:a5: 66:d6:4d:29:8e:99:84:6e:8a:4d:0e:16:64:6a:35: cf:b5:b4:ca:13:ef:4c:cc:54:6f:00:c1:8c:e1:fa: 82:c5:08:2d:56:54:df:b7:ff:ff:e2:55:0d:b8:43: a5:b2:82:de:a2:48:1b:6f:23:2c:30:0e:ef:a5:65: 44:21:bc:ee:31:2c:d1:23:93:92:2a:a9:b7:43:47: 02:fd:be:3b:1a:f7:9e:64:99:48:dd:62:2c:e9:ed: 22:76:a1:22:8b:0f:80:2b:ee:e7:bc:b2:5c:8d:ad: 56:b8:44:1e:ec:70:63:ff:c6:dd:ad:6f:e3:1a:db: 41:34:af:ea:61:f4:c5:07:8b:b7:0d:6b:9a:f2:fc: a5:ce:82:0f:15:aa:09:6d:fa:cb:d5:ce:fa:9d:ff: 21:1d:6d:86:01:7c:cc:45:0a:a9:20:ad:1f:9f:85: 5a:6e:25:5b:3d:3a:54:ee:8d:5e:e9:8a:0e:d8:3d: e1:0f:11:11:43:d7:33:67:3e:5a:ea:57:17:3d:28: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:5D:30:B5:49:08:1B:8F:AF:B3:CC:19:99:C5:4A:B0:ED:47:AD X509v3 Authority Key Identifier: keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:01:bf:d6:1e:de:04:b7:12:cb:31:db:17:e9:33:11:81:85: 35:90:db:1a:cc:3c:3a:b0:ff:9f:f5:8c:1d:d4:dc:e9:e8:1d: 1c:b6:04:67:18:ee:9f:21:75:0b:57:63:ff:a5:ac:ac:49:23: ca:06:31:b6:62:ba:d4:f6:74:5c:11:f1:cd:11:8d:66:c4:f1: c2:28:12:98:3a:3d:18:50:cf:f8:46:25:37:0e:d7:25:1f:99: d8:05:3a:e1:c8:78:d1:cc:3a:e0:a6:23:37:d0:51:06:91:d5: a8:6f:b9:f7:bf:83:3c:28:04:3e:5b:77:13:0f:a4:96:a3:de: 85:f4:e6:4a:5e:22:be:12:40:3c:e8:fc:e2:69:d8:44:2e:8d: f0:f1:b5:71:39:b2:a5:e6:04:85:dd:36:a8:a4:35:c8:62:32: 84:7c:aa:2a:1a:79:fd:d2:e1:78:b8:a2:e5:8f:6c:c3:be:69: 0c:06:8f:f3:0a:0d:11:93:50:fe:5c:cc:b8:86:80:64:34:43: 7a:76:e7:69:ba:e3:03:b8:8f:31:81:e3:91:f2:cf:8e:35:1e: a4:ed:6f:0b:3d:54:9b:c8:d1:2b:84:93:1e:4b:e8:18:da:70: 5b:bc:2b:64:8f:23:12:a5:7d:f4:d0:3f:d9:4a:fe:8a:0a:a8: b9:0d:a3:73 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUBdlaYLlB6bH+XRrc1zsmsWOsRYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkEx QTIyODZGMDAeFw0yNTExMDQyMTQ1MDNaFw0yNTExMDYwMDEzMDNaMDMxMTAvBgNV BAMTKEYyQTY1RDMwQjU0OTA4MUI4RkFGQjNDQzE5OTlDNTRBQjBFRDQ3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AZNSt5zydjNNPRsmpIefievA mBzQbtXIOdW8zw1TmYcfhhJ+nuEMdZHkGtHEm33fnTbK5Wb0HtlIpWbWTSmOmYRu ik0OFmRqNc+1tMoT70zMVG8AwYzh+oLFCC1WVN+3///iVQ24Q6Wygt6iSBtvIyww Du+lZUQhvO4xLNEjk5IqqbdDRwL9vjsa955kmUjdYizp7SJ2oSKLD4Ar7ue8slyN rVa4RB7scGP/xt2tb+Ma20E0r+ph9MUHi7cNa5ry/KXOgg8Vqglt+svVzvqd/yEd bYYBfMxFCqkgrR+fhVpuJVs9OlTujV7pig7YPeEPERFD1zNnPlrqVxc9KMB1AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU8qZdMLVJCBuPr7PMGZnFSrDtR60wHwYDVR0j BBgwFoAUKNduCTnwmbR7S4DqK5sHuhoihvAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9yRFluZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZl LzAvMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEQ3NkUwOTM5RjA5OUI0N0I0 QjgwRUEyQjlCMDdCQTFBMjI4NkYwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3JE WW5lM2lHb3k3cUduYTZ2UGdveTJ1aThBRlZjY3dKTGZEUmFzRFpuNmUvMC8yOEQ3 NkUwOTM5RjA5OUI0N0I0QjgwRUEyQjlCMDdCQTFBMjI4NkYwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA qAG/1h7eBLcSyzHbF+kzEYGFNZDbGsw8OrD/n/WMHdTc6egdHLYEZxjunyF1C1dj /6WsrEkjygYxtmK61PZ0XBHxzRGNZsTxwigSmDo9GFDP+EYlNw7XJR+Z2AU64ch4 0cw64KYjN9BRBpHVqG+597+DPCgEPlt3Ew+klqPehfTmSl4ivhJAPOj84mnYRC6N 8PG1cTmypeYEhd02qKQ1yGIyhHyqKhp5/dLheLii5Y9sw75pDAaP8woNEZNQ/lzM uIaAZDRDenbnabrjA7iPMYHjkfLPjjUepO1vCz1Um8jRK4STHkvoGNpwW7wrZI8j EqV99NA/2Ur+igqouQ2jcw== -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:40 2025 by rpki-client