$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft File: 2028B4F00526FFD4A6479245C26F87EECD0F5352.mft (raw, json) Hash identifier: c9R/Emttm4fT+wBkWYZOS4yo4ykam/Aa4aP4G6egDJc= Subject key identifier: 56:D8:A9:8C:2C:7C:10:43:94:64:88:F1:5C:26:34:B0:BD:17:4B:C9 Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 Certificate issuer: /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Certificate serial: 224A6E028E1D23EFD6DD27D7E06B367AABBB0F20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft Manifest number: 1D Signing time: Mon 20 Oct 2025 08:40:23 +0000 Manifest this update: Mon 20 Oct 2025 08:35:23 +0000 Manifest next update: Tue 21 Oct 2025 10:05:23 +0000 Files and hashes: 1: 323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (hash: 1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=) 2: 3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (hash: unb7feFenHIIwOwVCWy8s62+GYdR241xnz1H4IZGT1E=) 3: 2028B4F00526FFD4A6479245C26F87EECD0F5352.crl (hash: OMesBQ5Rnup3stP62T/zP6MAZXUM1geFPk+IcA2b+HA=) 4: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (hash: /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4a:6e:02:8e:1d:23:ef:d6:dd:27:d7:e0:6b:36:7a:ab:bb:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Validity Not Before: Oct 20 08:35:23 2025 GMT Not After : Oct 21 10:05:23 2025 GMT Subject: CN=56D8A98C2C7C1043946488F15C2634B0BD174BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:88:96:9f:c2:46:de:97:17:fb:29:53:63: 82:4e:03:56:aa:e4:3c:99:40:60:0d:6a:ba:c6:a2: 81:1f:44:5c:98:06:07:1d:1e:04:32:16:89:03:d5: de:12:b5:d2:10:dd:e5:b2:61:5a:0f:bb:d7:3e:26: 83:22:06:56:9d:fa:a6:9c:3e:89:b2:8c:f0:78:03: 13:a3:1b:87:33:55:9c:04:03:b9:b5:fb:2b:de:d6: 6a:c2:74:c5:89:a4:8c:80:7a:88:69:3d:72:88:2b: b1:46:07:1d:f2:e2:7d:de:b5:8a:b0:ce:3f:a7:57: 63:56:0c:ef:85:54:6c:9f:da:e8:c0:8f:ee:81:b4: 68:62:89:56:88:61:43:3a:97:ac:02:fa:54:9a:9a: 96:94:e3:14:41:58:fe:f8:7b:89:5c:37:d2:41:26: 12:ba:ae:9d:41:ef:45:f7:d0:10:7f:e2:41:2c:89: 10:7c:e7:26:c4:6d:c1:af:e5:0e:c7:6c:2f:de:14: d1:b8:f3:a9:f8:02:e1:b8:32:07:3b:0a:88:27:08: 89:03:ba:0a:51:92:d8:2e:42:7f:4e:d8:ea:f2:55: 46:68:40:69:42:69:ab:44:e8:c2:59:ff:43:73:29: 37:e6:0f:0e:07:8c:01:fd:39:b3:cc:70:be:5b:09: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:A9:8C:2C:7C:10:43:94:64:88:F1:5C:26:34:B0:BD:17:4B:C9 X509v3 Authority Key Identifier: keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fe:53:70:d3:f4:1e:df:37:63:b7:71:3f:b6:05:64:7b:c4: 69:13:17:0d:5f:24:de:1c:27:23:3f:16:0b:62:83:39:28:c7: a8:df:53:52:ea:c4:a9:fa:46:77:5e:53:b9:6d:02:1d:a5:93: a0:7d:c4:96:b8:7a:57:fb:7c:70:ca:82:6a:27:f8:76:82:78: ed:fc:ba:2c:0b:06:30:6d:98:18:f5:24:79:cf:83:e6:54:71: 15:5e:f3:50:55:6e:e4:1e:89:c1:90:9b:62:ee:a8:e3:b4:04: e2:b8:8f:f6:e6:57:c5:94:9b:57:36:ab:eb:65:17:44:3c:90: 02:c1:03:11:b0:5a:58:5d:97:22:4e:4e:d0:a8:7e:ef:cf:3e: 41:a0:1c:d4:15:37:e6:6f:da:3d:16:e2:70:01:6a:e1:5c:f4: 6c:f2:e4:90:3a:88:18:59:4e:00:04:b0:28:c2:42:2e:75:38: 5a:b5:d2:37:1d:b3:dd:be:c7:0d:b0:25:16:1e:fe:b8:19:9f: c0:86:c3:09:b5:31:78:b1:0c:71:27:73:4c:60:d3:90:4e:83: 8b:b3:52:32:6b:7e:8c:cd:a1:8b:86:b5:b2:c8:f0:d9:4d:88: 36:a6:44:9f:5b:36:06:2b:f2:c8:00:e0:70:4d:f4:cb:0a:03: 13:99:f6:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIkpuAo4dI+/W3SfX4Gs2equ7DyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyOEI0RjAwNTI2RkZENEE2NDc5MjQ1QzI2Rjg3RUVD RDBGNTM1MjAeFw0yNTEwMjAwODM1MjNaFw0yNTEwMjExMDA1MjNaMDMxMTAvBgNV BAMTKDU2RDhBOThDMkM3QzEwNDM5NDY0ODhGMTVDMjYzNEIwQkQxNzRCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuoiWn8JG3pcX+ylTY4JOA1aq 5DyZQGANarrGooEfRFyYBgcdHgQyFokD1d4StdIQ3eWyYVoPu9c+JoMiBlad+qac PomyjPB4AxOjG4czVZwEA7m1+yve1mrCdMWJpIyAeohpPXKIK7FGBx3y4n3etYqw zj+nV2NWDO+FVGyf2ujAj+6BtGhiiVaIYUM6l6wC+lSampaU4xRBWP74e4lcN9JB JhK6rp1B70X30BB/4kEsiRB85ybEbcGv5Q7HbC/eFNG486n4AuG4Mgc7CognCIkD ugpRktguQn9O2OryVUZoQGlCaatE6MJZ/0NzKTfmDw4HjAH9ObPMcL5bCRJxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVtipjCx8EEOUZIjxXCY0sL0XS8kwHwYDVR0j BBgwFoAUICi08AUm/9SmR5JFwm+H7s0PU1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZt UXIvMC8yMDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMjhCNEYwMDUyNkZGRDRB NjQ3OTI0NUMyNkY4N0VFQ0QwRjUzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZtUXIvMC8y MDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACv5TcNP0Ht83Y7dxP7YFZHvEaRMXDV8k3hwnIz8WC2KDOSjHqN9TUurEqfpG d15TuW0CHaWToH3Elrh6V/t8cMqCaif4doJ47fy6LAsGMG2YGPUkec+D5lRxFV7z UFVu5B6JwZCbYu6o47QE4riP9uZXxZSbVzar62UXRDyQAsEDEbBaWF2XIk5O0Kh+ 788+QaAc1BU35m/aPRbicAFq4Vz0bPLkkDqIGFlOAASwKMJCLnU4WrXSNx2z3b7H DbAlFh7+uBmfwIbDCbUxeLEMcSdzTGDTkE6Di7NSMmt+jM2hi4a1ssjw2U2INqZE n1s2BivyyADgcE30ywoDE5n2TA== -----END CERTIFICATE-----Generated at Mon Oct 20 22:49:31 2025 by rpki-client