$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft File: 28AEA4799AA16796C18CA8950931D4394F01179A.mft (raw, json) Hash identifier: +mBU3nCQDdlxXksxel3HVkF3slM+ZX4hT78+Zm3twvo= Subject key identifier: 14:1A:A8:71:99:CA:D6:88:C7:28:FA:B9:AE:E6:6B:09:4B:CD:03:1C Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A Certificate issuer: /CN=28AEA4799AA16796C18CA8950931D4394F01179A Certificate serial: 4D1BE0FFF201B1B213BD5B4CFBB18EE77AFFFD33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft Manifest number: B5 Signing time: Mon 20 Oct 2025 10:25:20 +0000 Manifest this update: Mon 20 Oct 2025 10:20:20 +0000 Manifest next update: Tue 21 Oct 2025 10:36:20 +0000 Files and hashes: 1: 323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (hash: qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=) 2: 323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (hash: Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=) 3: 28AEA4799AA16796C18CA8950931D4394F01179A.crl (hash: N7tu8AK/QS1EZgThkxcW3ISQ9o0x/LM4h1ueqkkQagI=) 4: 3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa (hash: y3CoVEWObW7u+N074Y8vxEijHZnpu3jXbFZ4orw4uP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1b:e0:ff:f2:01:b1:b2:13:bd:5b:4c:fb:b1:8e:e7:7a:ff:fd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A Validity Not Before: Oct 20 10:20:20 2025 GMT Not After : Oct 21 10:36:20 2025 GMT Subject: CN=141AA87199CAD688C728FAB9AEE66B094BCD031C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:50:31:16:3e:9b:c4:7c:c2:31:67:ad:f7:5c: d4:08:89:5c:be:63:2c:7b:3c:56:65:a8:84:17:41: cb:35:29:fe:49:a2:9f:36:19:50:f2:dd:43:fc:0f: e7:55:65:9d:54:43:f6:ea:97:bc:5b:3b:34:f0:24: c0:0a:f1:0a:f7:a4:1a:c8:14:48:f8:e3:03:cd:30: f7:c0:2a:7c:b8:7f:5f:a6:93:1f:1f:2a:6c:e6:4b: 27:90:29:e8:e7:78:a1:f1:dd:f8:16:17:74:1a:59: 09:d4:4c:18:72:97:ad:72:06:81:c3:be:94:de:57: af:d0:54:81:00:de:9e:b3:14:a8:89:d8:b3:52:9e: b0:5f:e5:e3:e3:32:35:4d:cc:ea:78:4f:aa:36:85: 9c:86:e5:11:64:c2:18:66:ef:33:fe:6b:1a:62:c0: 22:89:70:aa:88:fd:61:41:ed:40:d4:55:a7:47:f3: 98:2a:0a:5f:25:e3:d8:6a:8f:ac:f9:c2:3a:99:48: 61:c1:97:38:23:1d:0f:e6:87:8f:ca:9e:75:c4:18: 0f:2a:56:46:13:37:da:3c:00:a1:db:91:b8:21:81: 13:cc:c5:7a:9e:9e:15:cc:ad:41:d7:6b:ab:b5:ee: ed:19:34:b7:7b:1a:6a:7a:76:10:23:01:d7:73:2a: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1A:A8:71:99:CA:D6:88:C7:28:FA:B9:AE:E6:6B:09:4B:CD:03:1C X509v3 Authority Key Identifier: keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:49:63:27:43:ad:68:2b:1a:1d:6e:a3:9a:5d:89:a4:83:f4: 5b:27:1a:6b:e6:9b:d1:bb:5c:68:e6:41:fa:7e:e0:4d:1f:7d: de:cf:a0:74:ce:d6:70:ac:0f:27:85:76:a1:ed:87:d2:df:93: bd:26:72:8b:3c:7e:07:fb:cd:0d:f9:9d:b1:cc:f1:87:37:a8: 71:78:28:d3:63:2f:26:05:51:76:e3:f9:64:05:f9:aa:ce:94: 77:2f:c5:4c:1e:aa:ee:ec:1b:bc:c5:a9:2f:34:39:2f:46:60: 5a:05:7e:33:8c:e4:31:82:66:9e:69:a2:fe:3f:c3:8e:e1:e2: af:87:5c:51:a5:39:bc:6b:34:d7:16:0b:3b:c4:1e:be:a2:16: 03:a7:1a:15:72:2c:2e:8d:c5:d5:7e:ba:1f:72:ec:0c:77:29: 72:b0:ac:0e:f8:d5:a2:c3:82:21:2b:b6:d4:e6:25:af:27:7e: c3:69:45:7a:86:5a:b3:30:6c:aa:96:d1:cd:ec:16:4c:6c:2b: 7b:57:22:61:57:05:ea:e8:26:c6:39:b6:51:f4:e5:7b:67:a5: a5:88:f2:be:88:cd:0c:5d:ae:2d:ad:db:c0:84:3f:03:2a:d4: af:62:ad:96:ae:35:33:f7:6c:a1:d4:44:ac:d8:ca:fd:bb:5a: 81:ad:03:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTRvg//IBsbITvVtM+7GO53r//TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBRUE0Nzk5QUExNjc5NkMxOENBODk1MDkzMUQ0Mzk0 RjAxMTc5QTAeFw0yNTEwMjAxMDIwMjBaFw0yNTEwMjExMDM2MjBaMDMxMTAvBgNV BAMTKDE0MUFBODcxOTlDQUQ2ODhDNzI4RkFCOUFFRTY2QjA5NEJDRDAzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpUDEWPpvEfMIxZ633XNQIiVy+ Yyx7PFZlqIQXQcs1Kf5Jop82GVDy3UP8D+dVZZ1UQ/bql7xbOzTwJMAK8Qr3pBrI FEj44wPNMPfAKny4f1+mkx8fKmzmSyeQKejneKHx3fgWF3QaWQnUTBhyl61yBoHD vpTeV6/QVIEA3p6zFKiJ2LNSnrBf5ePjMjVNzOp4T6o2hZyG5RFkwhhm7zP+axpi wCKJcKqI/WFB7UDUVadH85gqCl8l49hqj6z5wjqZSGHBlzgjHQ/mh4/KnnXEGA8q VkYTN9o8AKHbkbghgRPMxXqenhXMrUHXa6u17u0ZNLd7Gmp6dhAjAddzKjo7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFBqocZnK1ojHKPq5ruZrCUvNAxwwHwYDVR0j BBgwFoAUKK6keZqhZ5bBjKiVCTHUOU8BF5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV WGQvMC8yOEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QUVBNDc5OUFBMTY3OTZD MThDQTg5NTA5MzFENDM5NEYwMTE3OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZVWGQvMC8y OEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeUljJ0OtaCsaHW6jml2JpIP0Wycaa+ab0btcaOZB+n7gTR993s+gdM7WcKwP J4V2oe2H0t+TvSZyizx+B/vNDfmdsczxhzeocXgo02MvJgVRduP5ZAX5qs6Udy/F TB6q7uwbvMWpLzQ5L0ZgWgV+M4zkMYJmnmmi/j/DjuHir4dcUaU5vGs01xYLO8Qe vqIWA6caFXIsLo3F1X66H3LsDHcpcrCsDvjVosOCISu21OYlryd+w2lFeoZaszBs qpbRzewWTGwre1ciYVcF6ugmxjm2UfTle2elpYjyvojNDF2uLa3bwIQ/AyrUr2Kt lq41M/dsodRErNjK/btaga0D5w== -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:05 2025 by rpki-client