$ rpki-client -vvvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: P630E6uhkGprSejh5NbE+/J10s31HFZ537X53/AYOQ0= Subject key identifier: 5A:E9:B7:69:F8:8C:6B:7A:EB:26:5C:F8:32:34:BD:D6:A8:21:C3:DC Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 2F0FF60AC78421EC142EAF63F7D29DB0C25ED77C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 0231 Signing time: Tue 27 Oct 2026 14:36:29 +0000 Manifest this update: Tue 27 Oct 2026 14:31:29 +0000 Manifest next update: Wed 28 Oct 2026 16:18:29 +0000 Files and hashes: 1: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: PSbPNBpC4z/UkWMLvyQURRrzPgA7zuBuPnJeM6KqCRM=) 2: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: qlhTd5UjufQbKs5GXDduOGDR+HlnlhWRrzLlUJSegns=) 3: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: Khe8LBPmipGqNErU+ns8BejjrIhAGHWHgBQHHWhADoA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 16:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0f:f6:0a:c7:84:21:ec:14:2e:af:63:f7:d2:9d:b0:c2:5e:d7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Oct 27 14:31:29 2026 GMT Not After : Oct 28 16:18:29 2026 GMT Subject: CN=5AE9B769F88C6B7AEB265CF83234BDD6A821C3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:6e:df:24:47:1b:35:87:b4:71:81:c3:cc: 51:f1:60:85:8b:a5:a9:4a:82:19:43:73:b6:69:ee: 27:93:b9:83:96:cb:8c:14:f3:5a:37:8b:1e:7f:52: 6e:54:38:a9:31:42:04:3d:e8:ca:2c:78:1c:6f:f3: 7e:04:52:55:55:20:04:ec:ca:6e:31:0a:c7:33:49: ff:c3:40:82:02:6c:e0:49:72:7d:28:05:03:16:15: cf:6f:60:34:e8:30:94:ed:5f:08:59:e0:63:be:df: e3:86:4c:18:03:51:1d:e4:d0:69:70:b3:6f:5b:16: f9:1f:ef:a6:a6:c0:fd:85:7d:38:9b:14:d7:15:c7: 2a:42:ad:3f:fd:b3:07:85:2e:4b:07:50:3e:dc:32: d3:ed:ff:12:03:4a:f9:89:37:75:f1:23:ad:89:1f: 12:e3:e2:5b:4d:4c:ea:d6:02:b4:35:2b:58:e6:d4: 07:8d:85:3b:fb:b0:e9:26:9e:c1:68:dd:a0:25:a1: 4f:4c:d2:fc:1f:b8:5d:f8:b5:2c:f2:fd:a0:0a:fd: 37:1b:b2:f4:c0:9c:27:89:2b:97:cf:6d:82:fa:28: 53:2b:66:b2:f9:1f:cb:7e:dd:05:eb:d3:d3:83:87: ee:13:34:41:ac:3c:3c:7b:35:77:8d:73:e3:53:2b: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:B7:69:F8:8C:6B:7A:EB:26:5C:F8:32:34:BD:D6:A8:21:C3:DC X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:64:93:d7:94:46:00:64:f6:4d:48:57:95:be:1e:ce:35:89: 24:98:4f:93:1a:23:09:6f:ba:0a:58:18:8e:f0:b6:fa:7f:9c: dc:38:a9:07:04:66:53:cd:85:82:21:d2:25:c2:fe:ab:b2:25: 0e:51:ff:0e:ba:49:0c:1b:a0:91:36:e2:13:8c:ec:9f:7a:59: 4d:3f:c3:78:44:b0:1e:e6:8e:23:06:d6:4f:ab:13:2f:a6:b2: 1f:9b:f0:e5:cd:79:5c:cf:43:98:74:03:f8:6f:14:ab:e8:f2: 00:4d:69:f2:e6:9e:20:7d:41:4a:99:22:f3:82:a5:3d:0b:de: 80:de:ac:60:07:30:6e:3c:b4:9f:83:23:83:c9:d2:02:d8:24: 27:56:e9:40:a6:9f:e2:ef:4d:dc:b0:10:c3:5b:fc:39:a1:d6: 10:69:cd:be:f0:bc:44:ec:2f:e2:ca:15:27:8f:2f:77:36:65: be:08:74:b1:95:10:e7:ba:23:6b:59:f3:15:6c:aa:ef:e3:61: af:82:78:db:8a:5c:22:0c:8f:24:db:22:58:7b:59:6d:91:5d: 6f:38:59:30:c1:19:42:1e:ef:30:49:99:b6:34:c5:da:e4:15: 03:1b:5f:44:82:a8:ef:be:37:bc:a6:2c:ef:80:d4:36:d9:97: ac:08:19:48 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIULw/2CseEIewULq9j99KdsMJe13wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNjEwMjcxNDMxMjlaFw0yNjEwMjgxNjE4MjlaMDMxMTAvBgNV BAMTKDVBRTlCNzY5Rjg4QzZCN0FFQjI2NUNGODMyMzRCREQ2QTgyMUMzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMG7fJEcbNYe0cYHDzFHxYIWL palKghlDc7Zp7ieTuYOWy4wU81o3ix5/Um5UOKkxQgQ96MoseBxv834EUlVVIATs ym4xCsczSf/DQIICbOBJcn0oBQMWFc9vYDToMJTtXwhZ4GO+3+OGTBgDUR3k0Glw s29bFvkf76amwP2FfTibFNcVxypCrT/9sweFLksHUD7cMtPt/xIDSvmJN3XxI62J HxLj4ltNTOrWArQ1K1jm1AeNhTv7sOkmnsFo3aAloU9M0vwfuF34tSzy/aAK/Tcb svTAnCeJK5fPbYL6KFMrZrL5H8t+3QXr09ODh+4TNEGsPDx7NXeNc+NTK31FAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUWum3afiMa3rrJlz4MjS91qghw9wwHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fGST15RGAGT2TUhXlb4ezjWJJJhPkxojCW+6ClgYjvC2+n+c3DipBwRmU82FgiHS JcL+q7IlDlH/DrpJDBugkTbiE4zsn3pZTT/DeESwHuaOIwbWT6sTL6ayH5vw5c15 XM9DmHQD+G8Uq+jyAE1p8uaeIH1BSpki84KlPQvegN6sYAcwbjy0n4Mjg8nSAtgk J1bpQKaf4u9N3LAQw1v8OaHWEGnNvvC8ROwv4soVJ48vdzZlvgh0sZUQ57oja1nz FWyq7+Nhr4J424pcIgyPJNsiWHtZbZFdbzhZMMEZQh7vMEmZtjTF2uQVAxtfRIKo 7743vKYs74DUNtmXrAgZSA== -----END CERTIFICATE-----Generated at Tue Oct 27 23:16:34 2026 by rpki-client