$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft File: C28F148D3E037C892C74D290F0D92B67DAE047D8.mft (raw, json) Hash identifier: dcnyinGfQo+8sMWo67UKSwd0QfjtKlURGq9AhDYOjiI= Subject key identifier: B3:A5:4C:59:DD:0C:4C:5C:F0:13:7B:C8:15:60:18:AD:21:DA:C5:8D Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 04AD52431D59C22A71252F36FC9F3677517C9F2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft Manifest number: 0321 Signing time: Mon 20 Oct 2025 00:59:24 +0000 Manifest this update: Mon 20 Oct 2025 00:54:24 +0000 Manifest next update: Tue 21 Oct 2025 02:21:24 +0000 Files and hashes: 1: 34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (hash: DuWxe9ZqUbvfWLZjmuDliDg+Iiv56HgiRTi6assKwqA=) 2: 34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (hash: N5557z/JE0CqD1kA2YSYextjmxW1FqbzCGsqO0D9r7E=) 3: 34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (hash: C+//D1ZIbboSQ8wbCfirMMAhSs/iYbkygB6/uLDISwM=) 4: 323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (hash: BIOjyTtUC6AcWEdEFj1n6Sm9Y8ku1Fvk5xatCdkoIYU=) 5: C28F148D3E037C892C74D290F0D92B67DAE047D8.crl (hash: /s6mb6VMe2NvFnq23X46CnFU3dIHhPc9iRbYX4PV4Mc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ad:52:43:1d:59:c2:2a:71:25:2f:36:fc:9f:36:77:51:7c:9f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Oct 20 00:54:24 2025 GMT Not After : Oct 21 02:21:24 2025 GMT Subject: CN=B3A54C59DD0C4C5CF0137BC8156018AD21DAC58D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:f4:a6:00:72:97:26:74:93:21:98:41:6f: c8:3d:a7:9f:f8:71:dd:79:86:f6:e2:22:6e:ea:69: 01:68:cd:a5:e7:ad:8b:8d:f3:1b:42:bc:7c:10:14: 39:b0:d0:16:db:40:10:54:92:61:bb:fa:44:b4:3b: 32:b2:11:4b:68:ee:df:f1:6f:ac:36:a6:7c:8c:54: d6:2b:93:6f:b6:e2:dd:78:6f:4d:f3:74:e5:23:f6: 97:1a:1f:82:13:78:2f:b6:b3:f8:c2:45:8d:70:85: 34:a4:5e:2e:d6:55:31:69:0c:fc:8c:0e:fa:0f:e7: 30:5e:17:90:d6:08:79:86:0d:1a:70:b7:3e:bf:1a: 8f:79:47:04:18:c5:11:1c:7f:6b:d3:12:bc:fd:40: f3:70:6c:35:26:2b:e5:94:3e:e3:df:f3:70:04:9d: f5:6b:1c:85:f2:46:63:00:0e:63:69:77:db:81:9d: 5b:98:92:e8:67:30:d2:cc:82:b5:66:69:7c:bf:14: b2:44:40:d4:92:d2:ae:57:d0:3a:10:45:5c:a8:bc: 2c:2b:aa:ed:29:14:23:21:e0:9c:6b:b2:4b:e0:99: 0c:5f:da:25:ca:2f:17:a1:5a:fc:d7:1c:65:c1:34: b6:94:e8:5e:a4:79:92:6e:25:72:ba:de:dc:df:fc: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:4C:59:DD:0C:4C:5C:F0:13:7B:C8:15:60:18:AD:21:DA:C5:8D X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2e:61:c1:1c:aa:b7:3d:b4:7f:b8:84:b8:26:92:d4:85:66: d3:69:03:9a:08:9d:a4:f9:70:25:7c:b6:d8:23:02:fe:f3:e1: c0:c2:31:75:1f:9f:a6:1d:1d:92:1e:13:1d:33:4b:28:b1:03: 0d:fe:bb:57:c4:23:32:64:09:d5:f9:20:59:d9:1e:ef:59:f8: 98:9c:e5:6a:9f:f9:ca:55:68:91:4b:3d:95:de:51:6b:5f:d8: 71:a0:d7:8b:4b:24:71:60:d0:0b:f9:02:70:56:67:b6:38:51: fa:20:eb:3e:dd:24:f9:e8:84:88:02:15:51:3a:b2:00:79:13: 7f:6b:bf:dd:63:69:c0:35:db:87:03:d4:12:e3:d6:85:b9:49: b4:cd:89:22:8e:ea:27:16:b0:85:5a:b8:46:45:31:01:db:37: 33:e4:b8:65:42:1e:3a:e7:d5:ce:38:6f:96:a8:d4:cc:02:c1: 54:4d:7f:d4:90:8c:8d:d6:ca:a4:d5:d6:17:2d:8c:5f:50:81: f4:8d:72:63:3e:de:ef:e1:c0:17:e5:45:51:da:ec:23:31:5b: 8a:04:d2:36:65:8c:73:05:a9:27:13:ed:2b:11:67:24:dd:61: c1:5f:c5:53:7e:4d:7d:b3:4a:0c:ac:00:b2:9b:d1:80:4b:73: f2:ee:4f:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBK1SQx1ZwipxJS82/J82d1F8nyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTEwMjAwMDU0MjRaFw0yNTEwMjEwMjIxMjRaMDMxMTAvBgNV BAMTKEIzQTU0QzU5REQwQzRDNUNGMDEzN0JDODE1NjAxOEFEMjFEQUM1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sPSmAHKXJnSTIZhBb8g9p5/4 cd15hvbiIm7qaQFozaXnrYuN8xtCvHwQFDmw0BbbQBBUkmG7+kS0OzKyEUto7t/x b6w2pnyMVNYrk2+24t14b03zdOUj9pcaH4ITeC+2s/jCRY1whTSkXi7WVTFpDPyM DvoP5zBeF5DWCHmGDRpwtz6/Go95RwQYxREcf2vTErz9QPNwbDUmK+WUPuPf83AE nfVrHIXyRmMADmNpd9uBnVuYkuhnMNLMgrVmaXy/FLJEQNSS0q5X0DoQRVyovCwr qu0pFCMh4JxrskvgmQxf2iXKLxehWvzXHGXBNLaU6F6keZJuJXK63tzf/DGZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs6VMWd0MTFzwE3vIFWAYrSHaxY0wHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVFZ3AvMi9D MjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAey5hwRyqtz20f7iEuCaS1IVm02kDmgidpPlwJXy22CMC/vPhwMIxdR+fph0d kh4THTNLKLEDDf67V8QjMmQJ1fkgWdke71n4mJzlap/5ylVokUs9ld5Ra1/YcaDX i0skcWDQC/kCcFZntjhR+iDrPt0k+eiEiAIVUTqyAHkTf2u/3WNpwDXbhwPUEuPW hblJtM2JIo7qJxawhVq4RkUxAds3M+S4ZUIeOufVzjhvlqjUzALBVE1/1JCMjdbK pNXWFy2MX1CB9I1yYz7e7+HAF+VFUdrsIzFbigTSNmWMcwWpJxPtKxFnJN1hwV/F U35NfbNKDKwAspvRgEtz8u5PKA== -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:06 2025 by rpki-client