$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: 4Sp4gBFeFNVt7aj9S3VF4Zyd+t5NbLfx+oSM0oq9GII= Subject key identifier: 1E:7F:FF:D1:70:E2:60:6F:AC:7E:76:A1:AA:3D:87:08:73:27:29:9F Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 29A1D281A2EAF36940844F982CD70BF7B6951B16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 0111 Signing time: Thu 26 Mar 2026 02:36:57 +0000 Manifest this update: Thu 26 Mar 2026 02:31:57 +0000 Manifest next update: Fri 27 Mar 2026 05:33:57 +0000 Files and hashes: 1: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: OGaboiWwRtBq1tFc9iuuUwE4k2QVmwyBPf4ZsFPhD5k=) 2: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=) 3: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: ftRoesKFKds6Be/kBZJyVwaqm83zyv3oFf2fBISC6Gw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 05:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a1:d2:81:a2:ea:f3:69:40:84:4f:98:2c:d7:0b:f7:b6:95:1b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Mar 26 02:31:57 2026 GMT Not After : Mar 27 05:33:57 2026 GMT Subject: CN=1E7FFFD170E2606FAC7E76A1AA3D87087327299F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:48:a5:1f:d9:36:f5:7e:f6:11:ed:22:b1: b5:4e:58:06:53:75:99:09:84:99:8d:cb:f0:d4:eb: 1e:0a:ed:e9:25:6f:ed:72:51:63:f8:f2:e4:be:6e: af:dd:08:dc:99:98:fc:bb:2a:1c:71:48:58:b3:6c: 6d:57:19:26:2a:e2:b9:d1:a8:99:b7:d0:de:5f:37: e5:a5:a0:a3:c0:ef:24:e6:1b:9a:ba:aa:8f:a3:9d: 10:b2:c6:ca:27:64:68:1c:96:dc:f5:49:6c:d1:8b: af:de:c5:93:44:72:e8:22:31:bd:96:b8:7d:a5:af: 4b:41:1f:dd:5a:d8:84:5d:33:06:54:61:a1:bd:dc: 92:59:76:2e:40:d6:21:e7:b9:8c:41:b0:b1:19:72: 29:83:72:4c:d3:5d:39:a5:50:7e:e4:bb:79:d4:ce: 8c:de:42:87:ac:92:57:36:55:e2:aa:61:ca:57:08: ed:a4:e9:66:af:82:26:3e:7c:ac:4b:87:1f:9e:7c: ef:5a:c1:36:69:4e:6e:c7:53:98:09:ac:20:45:97: 8b:74:80:42:65:05:fc:4e:db:94:1a:e5:6d:ad:76: bf:d6:15:ae:77:93:69:41:ae:4e:45:0d:fd:b5:1e: 44:1e:92:1d:b7:0f:63:ec:ea:d5:3b:4c:fd:0c:13: 01:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7F:FF:D1:70:E2:60:6F:AC:7E:76:A1:AA:3D:87:08:73:27:29:9F X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d2:3a:7e:58:b8:8e:8c:c7:ef:0d:a2:af:11:40:e8:29:0f: 18:02:b1:f6:b2:5f:4e:5b:07:87:09:4b:3d:2b:f5:12:6d:16: 2b:8a:a6:61:40:c5:e2:b5:a3:8b:07:7c:60:52:c8:46:fd:03: 14:0d:2f:58:12:bc:92:3e:64:3e:96:43:75:e3:ff:d9:21:99: 7f:09:cb:fc:69:af:5c:d7:d4:21:a5:72:66:8f:db:98:c2:38: db:1c:70:78:7a:77:03:75:6d:45:2f:ce:9f:1c:fd:d6:ea:77: 0d:e0:d6:c7:f7:54:27:9a:09:51:54:25:e2:b9:ab:ca:3c:15: 8b:63:11:b3:a0:3d:a6:c3:b6:bf:ee:9d:32:ee:7a:7b:c6:2f: d5:5f:59:ef:30:cf:74:66:de:87:d0:01:3f:96:39:67:08:09: e3:c2:6d:77:c7:c1:2e:84:b8:73:d0:0f:bd:10:f1:a3:fa:a7: 4d:c2:03:45:b0:2e:64:82:5b:c0:3d:fe:0e:7b:ca:09:6c:49: 76:76:50:dd:bd:b3:e6:3c:d4:0e:7c:06:b4:37:2c:c2:e5:bc: 6b:f2:28:16:dc:61:6c:f9:b4:fc:dc:fb:db:81:5c:49:56:30: 25:92:bd:fc:25:14:0d:c2:a5:fa:f7:de:18:03:b7:44:55:22: 17:e9:49:21 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKaHSgaLq82lAhE+YLNcL97aVGxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNjAzMjYwMjMxNTdaFw0yNjAzMjcwNTMzNTdaMDMxMTAvBgNV BAMTKDFFN0ZGRkQxNzBFMjYwNkZBQzdFNzZBMUFBM0Q4NzA4NzMyNzI5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8UilH9k29X72Ee0isbVOWAZT dZkJhJmNy/DU6x4K7eklb+1yUWP48uS+bq/dCNyZmPy7KhxxSFizbG1XGSYq4rnR qJm30N5fN+WloKPA7yTmG5q6qo+jnRCyxsonZGgcltz1SWzRi6/exZNEcugiMb2W uH2lr0tBH91a2IRdMwZUYaG93JJZdi5A1iHnuYxBsLEZcimDckzTXTmlUH7ku3nU zozeQoesklc2VeKqYcpXCO2k6WavgiY+fKxLhx+efO9awTZpTm7HU5gJrCBFl4t0 gEJlBfxO25Qa5W2tdr/WFa53k2lBrk5FDf21HkQekh23D2Ps6tU7TP0MEwFpAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUHn//0XDiYG+sfnahqj2HCHMnKZ8wHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA CtI6fli4jozH7w2irxFA6CkPGAKx9rJfTlsHhwlLPSv1Em0WK4qmYUDF4rWjiwd8 YFLIRv0DFA0vWBK8kj5kPpZDdeP/2SGZfwnL/GmvXNfUIaVyZo/bmMI42xxweHp3 A3VtRS/Onxz91up3DeDWx/dUJ5oJUVQl4rmryjwVi2MRs6A9psO2v+6dMu56e8Yv 1V9Z7zDPdGbeh9ABP5Y5ZwgJ48Jtd8fBLoS4c9APvRDxo/qnTcIDRbAuZIJbwD3+ DnvKCWxJdnZQ3b2z5jzUDnwGtDcswuW8a/IoFtxhbPm0/Nz724FcSVYwJZK9/CUU DcKl+vfeGAO3RFUiF+lJIQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:35 2026 by rpki-client