$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft File: C28F148D3E037C892C74D290F0D92B67DAE047D8.mft (raw, json) Hash identifier: YgQoNA8XXohKykveBBULmEf+vqH29emd8jh12CKQIFw= Subject key identifier: B8:DF:A4:C0:37:10:D9:FA:DF:BC:24:BD:6A:CF:D7:DB:41:4C:E7:FE Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 061C41C28F11F8501E55CACCD61F74F89870D7CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft Manifest number: 02CB Signing time: Fri 22 Aug 2025 19:57:15 +0000 Manifest this update: Fri 22 Aug 2025 19:52:15 +0000 Manifest next update: Sat 23 Aug 2025 22:41:15 +0000 Files and hashes: 1: 34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (hash: j4ekDAxcPzMxVY71jo3C1lu031tvoBtUmef4Ipzlevk=) 2: 323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (hash: 0cvHNcgdOrsGhLiSeFftM1H24YlUBTHp9gRnAuF61bI=) 3: 34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (hash: /d2BbJlSHS9sGsfQb7QieDyfoZ5LvCrnCYniJK5uLdY=) 4: 34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (hash: /DsTevO0WMxjHTNJqS8khDVNrOUlrO3XsXL2znmVHuI=) 5: 34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (hash: Oa7B+oOOkq0p2n9equBSwbsDob1k/t+56D4fFqxf+aM=) 6: 34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (hash: rteSfk0a9HxXOSQqFpJfgo+cx5AjGW8WtimmKG47IlU=) 7: C28F148D3E037C892C74D290F0D92B67DAE047D8.crl (hash: J/+90VxX+E/ktYppIhOSlUeMCN41jS3gphgRNY2DDa8=) 8: 34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (hash: xQdx9Hw5Ld9CfOcxJo+1JLhzYex5n/uuwn1h4ZHPX7s=) 9: 34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (hash: NNCeVF8ae34VqoHRAYhFUXBW9ZCqL2CCW88tJsaQQ9c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 22:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1c:41:c2:8f:11:f8:50:1e:55:ca:cc:d6:1f:74:f8:98:70:d7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Aug 22 19:52:15 2025 GMT Not After : Aug 23 22:41:15 2025 GMT Subject: CN=B8DFA4C03710D9FADFBC24BD6ACFD7DB414CE7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:4b:03:98:88:79:cf:8a:fe:d4:64:d5:25: ec:47:63:21:76:bc:ec:a0:30:18:b4:7a:70:85:33: 25:7a:e0:0c:92:49:5a:78:7e:6a:b1:f5:89:bd:53: ac:76:2b:03:9e:60:f8:61:b3:f1:ab:c6:48:7c:09: b8:48:0a:99:41:3a:a7:f3:38:25:be:36:6b:60:51: 27:70:5f:b5:b8:a8:80:81:a6:c9:62:9e:06:a9:06: 0e:23:78:68:59:e7:9b:e6:b7:c3:f1:d5:fd:42:71: f8:52:50:9a:0f:71:9d:1a:1c:b1:86:8a:b4:1f:21: 3c:c9:5c:40:3e:45:3f:17:06:37:ab:7f:c5:53:4d: d6:bd:9d:60:70:a3:65:6f:61:8e:88:ad:7b:f5:49: bf:69:11:96:dd:9a:31:94:1e:00:6a:6c:39:b0:6e: 9d:20:a0:d2:93:b4:82:cc:0a:49:5e:09:68:b5:d1: db:78:6e:8a:b3:f4:03:9a:a6:1b:5b:d1:89:69:f8: b9:14:1f:f2:cf:40:46:ee:62:c9:65:f4:37:31:18: 7a:b3:47:41:2f:ee:21:41:4b:73:18:89:9e:33:a6: 4c:73:19:a0:da:9c:34:f7:27:52:a8:22:05:b6:02: 0b:d4:b6:35:31:64:07:cf:0b:4e:a8:74:85:e4:04: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:A4:C0:37:10:D9:FA:DF:BC:24:BD:6A:CF:D7:DB:41:4C:E7:FE X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:df:fb:7d:4f:f6:62:de:cf:ca:cf:68:50:13:81:4c:37:ed: ed:a7:30:45:04:dc:c3:90:d8:fb:42:ed:88:ba:ad:a7:ab:25: 6a:75:98:9b:0a:ec:3a:45:b2:72:ac:8c:3a:3c:7b:91:71:22: 03:14:51:3c:2b:64:64:4e:5d:18:b1:01:a0:68:82:71:96:aa: 86:91:b7:aa:3c:d8:db:1c:7a:27:6c:a3:f0:a5:3d:95:98:94: a6:b4:48:1e:92:f8:08:af:ff:c8:c6:3a:94:b4:8c:e3:3c:6c: dc:2b:c3:75:b3:40:0b:ca:82:0b:49:70:91:f5:05:ca:d9:ef: 83:58:2f:c5:dc:0e:6e:74:15:08:20:78:3b:f3:ad:4b:e7:b9: b1:3a:87:53:96:e8:2b:95:22:cc:7d:eb:9b:a8:50:df:65:92: ed:41:61:d5:24:09:73:cc:a1:0a:1f:0f:a8:d7:44:a1:3e:69: c1:e2:62:ab:ff:21:aa:b7:6b:81:67:f6:64:d8:eb:7a:81:34: 2a:6a:0d:fa:e4:5a:2b:0f:21:50:d8:bd:8f:03:3a:9f:83:1b: b2:ce:3a:eb:28:9d:1c:2a:cc:05:8c:ed:0b:fe:49:a9:c2:3c: 59:af:a4:03:9b:59:bf:47:4b:cf:99:ca:4b:e4:ff:d9:52:fb: a6:1a:4c:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBhxBwo8R+FAeVcrM1h90+Jhw188wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTA4MjIxOTUyMTVaFw0yNTA4MjMyMjQxMTVaMDMxMTAvBgNV BAMTKEI4REZBNEMwMzcxMEQ5RkFERkJDMjRCRDZBQ0ZEN0RCNDE0Q0U3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXUsDmIh5z4r+1GTVJexHYyF2 vOygMBi0enCFMyV64AySSVp4fmqx9Ym9U6x2KwOeYPhhs/Grxkh8CbhICplBOqfz OCW+NmtgUSdwX7W4qICBpslingapBg4jeGhZ55vmt8Px1f1CcfhSUJoPcZ0aHLGG irQfITzJXEA+RT8XBjerf8VTTda9nWBwo2VvYY6IrXv1Sb9pEZbdmjGUHgBqbDmw bp0goNKTtILMCkleCWi10dt4boqz9AOaphtb0Ylp+LkUH/LPQEbuYsll9DcxGHqz R0Ev7iFBS3MYiZ4zpkxzGaDanDT3J1KoIgW2AgvUtjUxZAfPC06odIXkBNmBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuN+kwDcQ2frfvCS9as/X20FM5/4wHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVFZ3AvMi9D MjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXN/7fU/2Yt7Pys9oUBOBTDft7acwRQTcw5DY+0LtiLqtp6slanWYmwrsOkWy cqyMOjx7kXEiAxRRPCtkZE5dGLEBoGiCcZaqhpG3qjzY2xx6J2yj8KU9lZiUprRI HpL4CK//yMY6lLSM4zxs3CvDdbNAC8qCC0lwkfUFytnvg1gvxdwObnQVCCB4O/Ot S+e5sTqHU5boK5UizH3rm6hQ32WS7UFh1SQJc8yhCh8PqNdEoT5pweJiq/8hqrdr gWf2ZNjreoE0KmoN+uRaKw8hUNi9jwM6n4Mbss466yidHCrMBYztC/5JqcI8Wa+k A5tZv0dLz5nKS+T/2VL7phpMqA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:29 2025 by rpki-client