
$ rpki-client -vvf rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
File: 28D273356F90D13FC143833120BC59A454646F71.mft (raw, json)
Hash identifier: vn9Yst569Oqt62irk9igZUWO3VNT+DrOFqp7IGvAWAI=
Subject key identifier: FB:4D:D2:A1:B0:40:DF:B5:A8:56:E1:63:AE:22:C1:8E:87:70:9D:65
Authority key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
Certificate issuer: /CN=28D273356F90D13FC143833120BC59A454646F71
Certificate serial: 6D1DE6ABEF9B18EA866E55322F10AA55FF6AD810
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
Manifest number: 0C
Signing time: Wed 25 Mar 2026 21:55:24 +0000
Manifest this update: Wed 25 Mar 2026 21:50:24 +0000
Manifest next update: Fri 27 Mar 2026 01:29:24 +0000
Files and hashes: 1: 28D273356F90D13FC143833120BC59A454646F71.crl (hash: ximalQyb5bQxl8kuDDc8EV7h8Vc8Koc8a4B9H6i9x9g=)
2: 323830343a393434383a3a2f33322d3332203d3e20323734383333.roa (hash: 3+OUWvJ2paVgdIryDuKrx561qJe0osctthIg1n2by6E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 01:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1d:e6:ab:ef:9b:18:ea:86:6e:55:32:2f:10:aa:55:ff:6a:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D273356F90D13FC143833120BC59A454646F71
Validity
Not Before: Mar 25 21:50:24 2026 GMT
Not After : Mar 27 01:29:24 2026 GMT
Subject: CN=FB4DD2A1B040DFB5A856E163AE22C18E87709D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:32:41:b8:63:f0:5a:38:bc:a9:0c:5b:3e:a7:
9d:76:3d:4a:11:38:0a:21:27:a9:71:2d:7f:9c:e7:
cb:6b:9a:62:2b:c2:f9:fe:57:22:7f:dd:6b:db:ed:
5d:d6:a9:87:46:ae:98:64:52:1a:1c:59:bf:db:f3:
dd:b9:d4:5f:18:31:92:37:b0:cb:1c:53:c8:16:c1:
8f:30:15:fb:8c:94:61:a1:a1:8d:a9:3a:ee:ec:77:
e1:9b:20:0f:39:7f:77:bd:57:47:38:7d:c8:cd:69:
6c:fb:d7:e6:97:67:83:a8:99:ee:ef:37:b9:b2:63:
e6:fd:e3:0e:c1:d0:17:96:7b:e5:db:3e:20:20:24:
4c:29:b3:8f:2e:41:65:44:55:a6:1c:69:13:a9:af:
6c:47:1d:05:74:e5:68:e0:c1:38:bf:22:b2:a4:f1:
e2:2f:1c:f7:b0:fc:fd:b3:96:dd:1b:5e:93:07:20:
1a:1a:cd:00:aa:df:ac:51:13:85:94:2b:4a:84:8e:
db:22:27:a1:c1:27:c8:df:b6:a5:38:66:1a:f8:9b:
4f:05:94:d1:75:24:19:bc:50:68:b0:91:50:30:f8:
b3:f4:6c:85:d3:de:8d:f8:3b:5a:c1:10:13:ff:14:
eb:d8:0a:3a:8f:3e:ce:06:95:85:fc:5f:75:b1:b6:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:D2:A1:B0:40:DF:B5:A8:56:E1:63:AE:22:C1:8E:87:70:9D:65
X509v3 Authority Key Identifier:
keyid:28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4d:9a:24:b6:e0:d0:38:e0:ec:db:60:01:d3:94:a9:26:6b:
ec:82:26:c9:d2:e2:8c:c5:43:dd:c9:4b:1a:21:e8:1e:7b:84:
19:88:23:f8:a4:3f:72:97:b4:19:47:f5:bd:ab:c3:6a:69:6f:
d9:ae:64:5c:b1:b9:8f:77:b0:bc:8f:76:14:aa:c7:ea:ab:e3:
48:29:d2:b0:97:80:3e:d6:8f:ac:f7:e4:df:b3:e0:3f:63:a2:
b6:6d:7f:cb:be:2a:b7:16:f4:4d:e0:c4:45:a8:da:22:3d:e6:
f7:56:22:78:fd:33:2d:22:b8:56:a8:09:f2:7d:ef:30:53:53:
96:39:40:ff:1f:18:5a:c6:cb:0a:91:78:ed:bd:d3:41:4a:fb:
82:7b:4b:61:aa:b3:f8:a4:e5:3e:bd:7d:46:0d:14:35:92:15:
21:05:69:e7:28:d8:98:8b:1f:22:39:30:c5:5f:83:e0:59:b2:
e9:0c:72:42:78:a1:26:1f:3b:17:91:87:ee:fb:74:e9:e2:0a:
ac:5b:99:4a:12:ec:4f:a1:17:7c:d2:22:89:1e:3e:03:fd:19:
0d:12:51:66:47:52:19:31:e1:64:93:62:aa:0d:70:1f:0c:f3:
3a:ac:37:fb:d9:b7:4d:15:8c:d0:fd:44:6e:ec:eb:7a:db:67:
2c:14:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:22:19 2026 by rpki-client