$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: Q4g8FnaAjZ+s8jvBhVgD6OY484sKloYu/xHyZL1I6Ro= Subject key identifier: 57:15:6F:2B:B1:7A:80:8F:A2:A7:86:BF:4D:09:EA:D1:50:83:36:E5 Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 3A3B6217F56E97B2961D36AE6443927E68F272AD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 3F Signing time: Sun 19 Oct 2025 22:50:21 +0000 Manifest this update: Sun 19 Oct 2025 22:45:21 +0000 Manifest next update: Mon 20 Oct 2025 22:56:21 +0000 Files and hashes: 1: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: ftRoesKFKds6Be/kBZJyVwaqm83zyv3oFf2fBISC6Gw=) 2: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: VBSC4RlW3/8fGtwezool7PmQGrIE7BGYyK9UggbJN5A=) 3: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3b:62:17:f5:6e:97:b2:96:1d:36:ae:64:43:92:7e:68:f2:72:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Oct 19 22:45:21 2025 GMT Not After : Oct 20 22:56:21 2025 GMT Subject: CN=57156F2BB17A808FA2A786BF4D09EAD1508336E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dd:d3:1f:87:46:72:ad:e2:59:50:76:3e:67: 1f:e4:39:67:4f:a4:42:07:2d:91:e1:67:e6:f3:8f: 1c:f8:ba:f9:f7:d7:77:1c:9a:e6:ed:26:56:e5:dd: d5:bf:a8:38:6c:a0:c8:4f:da:be:41:81:3e:f1:d9: 63:d6:7a:d7:11:44:59:ff:e2:a5:25:d0:d9:d4:93: 06:1f:24:a9:77:64:62:fd:d7:0d:24:a6:b3:2e:a4: 9a:b2:f0:79:11:f7:fa:a6:4d:53:4f:63:a8:ee:fb: 89:47:3e:c4:22:19:dd:f9:7a:b8:be:3e:4a:2a:e2: 37:91:ca:9c:53:36:05:1f:ce:95:8f:ee:1e:d6:17: 13:67:d6:88:0c:a1:4e:17:ac:5b:3b:d9:8e:b1:eb: 1f:6d:6d:68:47:e5:78:29:cf:a2:41:bb:89:5b:09: 6b:14:be:18:e7:1c:03:96:ac:59:0a:3c:67:c7:2b: 6e:43:02:3f:9f:12:8c:67:9a:83:ce:1c:87:1e:84: e0:3c:aa:f5:74:ef:0f:00:c1:2b:93:b6:f0:b7:03: 55:86:45:f5:1d:71:8c:54:73:88:6a:ae:94:e7:63: cb:e6:b6:75:e2:71:da:fc:0b:8c:f7:be:ea:20:aa: 9a:a2:16:9b:d0:ad:e7:a4:be:d3:cd:47:fe:61:21: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:15:6F:2B:B1:7A:80:8F:A2:A7:86:BF:4D:09:EA:D1:50:83:36:E5 X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ee:1d:13:45:28:ac:dd:d8:e4:45:51:8e:63:5c:73:1e:84: 6d:1b:5c:82:ef:d9:a8:5e:a3:fe:1b:58:03:c5:63:e5:4d:9c: d1:48:24:46:98:e7:45:d0:e4:ff:04:33:f1:5a:a8:73:68:44: a7:55:91:97:1d:a1:9c:b1:92:95:34:81:3a:d1:9b:77:43:4f: 85:b8:bf:a8:84:fd:ea:47:ac:81:c4:23:d7:08:e7:7d:58:0d: 7a:c4:1f:c5:71:35:d9:a6:93:c6:e2:d2:a7:e2:ab:d4:b1:09: 29:49:bd:9f:97:1c:9d:d0:47:52:6d:92:fd:1b:11:07:dd:7a: 9b:79:13:0a:23:0a:cf:62:ea:d5:1d:08:2c:d1:fb:b9:3d:fc: f1:ed:4e:93:7c:64:6d:1d:16:44:62:42:e4:6a:58:e6:d4:30: 8b:a2:76:d0:44:8b:4d:77:82:06:02:6b:9e:5e:33:58:5f:fc: 2b:0f:b5:1d:88:9e:13:4b:f6:fa:a3:b0:b7:a8:40:6d:0c:d9: e1:9f:52:70:fa:01:a3:11:bb:96:13:59:6c:e1:99:12:2d:8f: dc:3a:ae:98:78:90:4e:8e:dc:31:e2:21:e7:7c:06:35:14:bd: de:01:86:62:08:85:03:4d:c3:ad:f6:dd:78:92:9f:ce:7b:b2: b7:74:f1:cb -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUOjtiF/Vul7KWHTauZEOSfmjycq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNTEwMTkyMjQ1MjFaFw0yNTEwMjAyMjU2MjFaMDMxMTAvBgNV BAMTKDU3MTU2RjJCQjE3QTgwOEZBMkE3ODZCRjREMDlFQUQxNTA4MzM2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv3dMfh0ZyreJZUHY+Zx/kOWdP pEIHLZHhZ+bzjxz4uvn313ccmubtJlbl3dW/qDhsoMhP2r5BgT7x2WPWetcRRFn/ 4qUl0NnUkwYfJKl3ZGL91w0kprMupJqy8HkR9/qmTVNPY6ju+4lHPsQiGd35eri+ Pkoq4jeRypxTNgUfzpWP7h7WFxNn1ogMoU4XrFs72Y6x6x9tbWhH5Xgpz6JBu4lb CWsUvhjnHAOWrFkKPGfHK25DAj+fEoxnmoPOHIcehOA8qvV07w8AwSuTtvC3A1WG RfUdcYxUc4hqrpTnY8vmtnXicdr8C4z3vuogqpqiFpvQreekvtPNR/5hIe2XAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUVxVvK7F6gI+ip4a/TQnq0VCDNuUwHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA N+4dE0UorN3Y5EVRjmNccx6EbRtcgu/ZqF6j/htYA8Vj5U2c0UgkRpjnRdDk/wQz 8Vqoc2hEp1WRlx2hnLGSlTSBOtGbd0NPhbi/qIT96kesgcQj1wjnfVgNesQfxXE1 2aaTxuLSp+Kr1LEJKUm9n5ccndBHUm2S/RsRB916m3kTCiMKz2Lq1R0ILNH7uT38 8e1Ok3xkbR0WRGJC5GpY5tQwi6J20ESLTXeCBgJrnl4zWF/8Kw+1HYieE0v2+qOw t6hAbQzZ4Z9ScPoBoxG7lhNZbOGZEi2P3DqumHiQTo7cMeIh53wGNRS93gGGYgiF A03DrfbdeJKfznuyt3Txyw== -----END CERTIFICATE-----Generated at Mon Oct 20 15:28:12 2025 by rpki-client