$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json) Hash identifier: POflVhhzlzTW3a9nzj8eVlwsP0WLFLgQZLKYldzF/ss= Subject key identifier: BC:68:59:47:15:92:D5:32:10:AC:8D:1C:CE:2D:EB:55:73:D3:25:2A Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Certificate serial: 33B50226B9D65CB56C31AC3066D1D1D4BC5BCAD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft Manifest number: 0398 Signing time: Fri 24 Jul 2026 14:32:57 +0000 Manifest this update: Fri 24 Jul 2026 14:27:57 +0000 Manifest next update: Sat 25 Jul 2026 17:40:57 +0000 Files and hashes: 1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: cBtrry0krG7b5QpziVYTrJ98P95UPWg4kULwRV55mXk=) 2: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: AaYd50bmxxQ4sPSwZPsW+mMwR65Wesh+j5u6SG+c1HI=) 3: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: Mw9wrwlp9rBBJe6ke/T542y9Rqq2VB03O7vKyLplFQ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b5:02:26:b9:d6:5c:b5:6c:31:ac:30:66:d1:d1:d4:bc:5b:ca:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Validity Not Before: Jul 24 14:27:57 2026 GMT Not After : Jul 25 17:40:57 2026 GMT Subject: CN=BC6859471592D53210AC8D1CCE2DEB5573D3252A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:e7:71:d8:77:2a:37:74:3a:ce:b3:e1:fe: 0e:28:ed:ea:f7:17:8e:83:7e:a0:ab:cc:9d:00:d1: a1:7a:10:10:24:72:6f:af:20:9a:9c:7c:64:e0:c1: 35:26:95:05:38:34:82:f4:a6:cf:72:3c:7e:f8:73: db:c2:1c:9c:18:eb:59:0c:b8:98:b9:01:1a:41:6a: db:18:39:03:f7:73:c1:84:f7:2c:55:b2:0d:22:60: 7b:67:83:6d:36:4d:25:a2:59:69:9d:21:5d:20:a7: dd:2e:88:c9:1a:15:80:94:4c:20:02:b6:86:55:64: d6:34:66:a8:e6:9f:f3:eb:05:e4:67:39:a5:34:48: 1c:ca:cf:1e:57:c3:28:a3:e9:7a:d9:55:c0:61:71: 22:1a:b6:7c:8a:1a:a2:8f:9a:d9:4d:97:0b:cd:48: 19:c7:90:4e:83:f4:a9:d8:30:92:3d:a7:23:e8:4f: fa:bd:af:f4:38:e8:28:46:b6:31:a7:7b:71:74:da: de:ee:f2:9d:63:ff:c4:e9:42:46:6d:fe:e9:78:a7: 07:5b:17:e9:76:ea:50:7a:34:dd:1a:aa:67:16:82: 3d:43:1c:a1:6c:cf:c3:88:a7:7f:45:76:41:16:4d: fb:6a:75:a3:d1:db:4f:ab:7a:64:a1:10:8e:60:ac: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:68:59:47:15:92:D5:32:10:AC:8D:1C:CE:2D:EB:55:73:D3:25:2A X509v3 Authority Key Identifier: keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5d:ae:db:a8:88:de:ab:ac:a4:a6:9d:58:a3:a2:96:54:6d: c3:d8:86:42:2c:a0:8b:3a:24:31:5c:19:1f:fb:c1:56:2d:8f: e8:27:62:48:98:98:9c:6f:55:5d:fc:e3:ec:78:97:2c:9f:f0: 76:3b:38:96:ff:f7:53:72:91:5c:15:51:8f:49:b6:6d:fa:a6: 52:d4:53:a5:8c:ef:c0:6e:b7:a8:1b:1c:1d:20:bf:65:48:59: 87:3b:e2:5f:8f:59:3e:a5:a6:f7:b1:6c:27:a1:72:7d:d4:ea: 06:8b:8c:90:8b:b9:59:17:e2:14:81:9d:c6:0d:cf:cd:cb:85: fa:e4:fe:11:f8:11:e0:81:1d:f9:38:02:23:84:06:94:d0:53: 38:ff:7e:b9:a6:3b:04:d2:4d:16:ca:30:d1:5d:72:fc:5f:af: 92:ac:73:10:85:c1:f3:b3:55:51:36:e8:f8:e3:c5:83:8e:95: 8b:03:a2:5c:21:9f:8e:63:df:b1:97:95:63:b2:d2:81:3b:a8: ef:a5:ca:80:05:6d:3a:6f:fd:69:b9:01:ad:ef:cc:65:b4:d8: a6:2d:fa:53:c4:f4:2f:04:5d:9b:76:9c:d5:6b:14:ce:4a:f6: 59:96:e7:61:d4:29:c2:d7:d5:15:3f:4b:2a:84:1b:51:1a:19: 8f:48:e5:fa -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUM7UCJrnWXLVsMawwZtHR1LxbytAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkEx QTIyODZGMDAeFw0yNjA3MjQxNDI3NTdaFw0yNjA3MjUxNzQwNTdaMDMxMTAvBgNV BAMTKEJDNjg1OTQ3MTU5MkQ1MzIxMEFDOEQxQ0NFMkRFQjU1NzNEMzI1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETedx2HcqN3Q6zrPh/g4o7er3 F46DfqCrzJ0A0aF6EBAkcm+vIJqcfGTgwTUmlQU4NIL0ps9yPH74c9vCHJwY61kM uJi5ARpBatsYOQP3c8GE9yxVsg0iYHtng202TSWiWWmdIV0gp90uiMkaFYCUTCAC toZVZNY0Zqjmn/PrBeRnOaU0SBzKzx5Xwyij6XrZVcBhcSIatnyKGqKPmtlNlwvN SBnHkE6D9KnYMJI9pyPoT/q9r/Q46ChGtjGne3F02t7u8p1j/8TpQkZt/ul4pwdb F+l26lB6NN0aqmcWgj1DHKFsz8OIp39FdkEWTftqdaPR20+remShEI5grArNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUvGhZRxWS1TIQrI0czi3rVXPTJSowHwYDVR0j BBgwFoAUKNduCTnwmbR7S4DqK5sHuhoihvAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9yRFluZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZl LzAvMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEQ3NkUwOTM5RjA5OUI0N0I0 QjgwRUEyQjlCMDdCQTFBMjI4NkYwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3JE WW5lM2lHb3k3cUduYTZ2UGdveTJ1aThBRlZjY3dKTGZEUmFzRFpuNmUvMC8yOEQ3 NkUwOTM5RjA5OUI0N0I0QjgwRUEyQjlCMDdCQTFBMjI4NkYwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA N12u26iI3quspKadWKOillRtw9iGQiygizokMVwZH/vBVi2P6CdiSJiYnG9VXfzj 7HiXLJ/wdjs4lv/3U3KRXBVRj0m2bfqmUtRTpYzvwG63qBscHSC/ZUhZhzviX49Z PqWm97FsJ6FyfdTqBouMkIu5WRfiFIGdxg3PzcuF+uT+EfgR4IEd+TgCI4QGlNBT OP9+uaY7BNJNFsow0V1y/F+vkqxzEIXB87NVUTbo+OPFg46ViwOiXCGfjmPfsZeV Y7LSgTuo76XKgAVtOm/9abkBre/MZbTYpi36U8T0LwRdm3ac1WsUzkr2WZbnYdQp wtfVFT9LKoQbURoZj0jl+g== -----END CERTIFICATE-----Generated at Fri Jul 24 16:05:41 2026 by rpki-client