$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json) Hash identifier: yVXx5zE9QYaUmczI3LZE02KGauqpdiO9cFK9Jz0iBK4= Subject key identifier: B2:1A:C0:D8:A9:13:0A:09:B1:6D:AE:62:5D:F5:B0:94:FF:D7:B0:D4 Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Certificate serial: 10894D58E6B52F815BBE0E2225FB093012CF4104 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft Manifest number: 0225 Signing time: Mon 20 Oct 2025 00:08:32 +0000 Manifest this update: Mon 20 Oct 2025 00:03:32 +0000 Manifest next update: Tue 21 Oct 2025 02:58:32 +0000 Files and hashes: 1: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: 1gpHIDXA/sfmI8GLO2DZBDpAYByaAlb0O2I/TAprzd4=) 2: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 81YYVwts0/kXPr8fGXqDHUq4bgSQ+jGtgtMpTGK1R/E=) 3: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: b80jboX82xcxSZ3qw2OCjnzPhzgnnFmqkZX9yjzY+cU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:89:4d:58:e6:b5:2f:81:5b:be:0e:22:25:fb:09:30:12:cf:41:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Validity Not Before: Oct 20 00:03:32 2025 GMT Not After : Oct 21 02:58:32 2025 GMT Subject: CN=B21AC0D8A9130A09B16DAE625DF5B094FFD7B0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:09:a6:1a:e5:b4:60:28:e2:1f:b9:3a:07: ad:5d:6e:4c:db:72:23:34:2c:07:13:6f:28:27:56: 21:b1:53:bb:dd:39:6f:05:16:95:3c:0e:b4:54:11: f1:f7:89:be:0b:3c:90:d2:f9:a8:5b:7f:8e:79:85: 47:45:8b:69:85:49:7d:65:02:1c:81:03:e8:96:d4: 31:4a:1c:f4:02:08:f0:5f:d5:5a:66:d3:1e:45:93: d3:ef:be:02:f8:72:72:46:06:9d:07:27:3f:61:5c: a1:94:59:f1:93:18:68:b9:19:26:83:f1:3c:5c:e1: f5:91:9f:6f:f3:53:43:8d:d4:8c:6e:db:b0:f6:ac: c0:aa:9f:ff:23:cd:2b:2e:94:96:2e:6d:78:73:12: ec:1e:a2:44:bc:f7:a6:ed:f9:8c:8a:a6:1d:2c:bb: d8:0a:ff:28:04:4d:bc:c0:55:f0:88:f3:96:f5:63: 1e:a8:4b:60:52:d2:50:ba:5c:9f:a4:58:41:0b:8e: 65:de:c4:e9:12:1a:4f:b6:82:9a:9d:a0:b1:ad:6e: d8:a4:8f:c2:cb:8d:76:48:5d:ef:c1:8a:dd:0a:9e: 75:09:8c:2d:57:66:e8:f9:c1:73:9e:63:10:35:16: 79:ef:63:db:8d:8d:ca:4d:4f:62:d0:e7:b4:81:99: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1A:C0:D8:A9:13:0A:09:B1:6D:AE:62:5D:F5:B0:94:FF:D7:B0:D4 X509v3 Authority Key Identifier: keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:7a:fb:1e:7d:15:6e:6c:8b:c2:a7:66:87:97:19:98:e2: b0:bd:7e:0e:2b:54:33:07:8f:ad:40:b9:15:25:3d:8c:e6:25: 53:95:cb:ff:fa:b5:d1:98:b5:b4:d7:3f:7d:88:7b:5d:cb:3c: 94:3e:62:c0:80:ac:32:8c:03:c5:55:37:0e:52:6f:9a:30:20: 25:79:8a:59:3a:32:06:e0:be:d3:6e:78:c0:6b:25:9a:7d:9c: 48:d2:32:e6:c4:0d:92:cb:b1:52:50:ca:9c:4e:c0:e8:02:61: cd:5f:93:81:a4:71:24:c1:55:00:4a:9d:c6:8b:ab:0e:d9:a3: f1:01:4f:2b:87:17:ec:89:73:44:11:e7:db:d3:06:e3:aa:d3: e8:aa:35:d5:6e:87:eb:fe:4d:bd:0e:ed:b9:9b:a4:c5:74:b5: 55:ca:e1:f2:1c:54:90:00:e8:6a:68:bc:80:27:72:38:9a:ac: 45:59:d5:29:aa:21:b9:67:0a:8b:94:3d:f0:e8:86:36:dd:39: e0:59:a7:14:d0:94:bb:88:73:1d:5d:9e:68:ed:5e:38:52:20: bf:f1:99:3f:fb:cc:98:95:17:9e:fc:6a:a5:bc:e1:65:2c:39: 42:d4:f2:93:96:26:f8:b7:58:24:66:db:74:0b:39:65:f0:d6: d3:fa:eb:6c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEIlNWOa1L4Fbvg4iJfsJMBLPQQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkEx QTIyODZGMDAeFw0yNTEwMjAwMDAzMzJaFw0yNTEwMjEwMjU4MzJaMDMxMTAvBgNV BAMTKEIyMUFDMEQ4QTkxMzBBMDlCMTZEQUU2MjVERjVCMDk0RkZEN0IwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxAmmGuW0YCjiH7k6B61dbkzb ciM0LAcTbygnViGxU7vdOW8FFpU8DrRUEfH3ib4LPJDS+ahbf455hUdFi2mFSX1l AhyBA+iW1DFKHPQCCPBf1Vpm0x5Fk9PvvgL4cnJGBp0HJz9hXKGUWfGTGGi5GSaD 8Txc4fWRn2/zU0ON1Ixu27D2rMCqn/8jzSsulJYubXhzEuweokS896bt+YyKph0s u9gK/ygETbzAVfCI85b1Yx6oS2BS0lC6XJ+kWEELjmXexOkSGk+2gpqdoLGtbtik j8LLjXZIXe/Bit0KnnUJjC1XZuj5wXOeYxA1FnnvY9uNjcpNT2LQ57SBmXMTAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUshrA2KkTCgmxba5iXfWwlP/XsNQwHwYDVR0j BBgwFoAUKNduCTnwmbR7S4DqK5sHuhoihvAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9yRFluZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZl LzAvMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEQ3NkUwOTM5RjA5OUI0N0I0 QjgwRUEyQjlCMDdCQTFBMjI4NkYwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3JE WW5lM2lHb3k3cUduYTZ2UGdveTJ1aThBRlZjY3dKTGZEUmFzRFpuNmUvMC8yOEQ3 NkUwOTM5RjA5OUI0N0I0QjgwRUEyQjlCMDdCQTFBMjI4NkYwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA T0t6+x59FW5si8KnZoeXGZjisL1+DitUMwePrUC5FSU9jOYlU5XL//q10Zi1tNc/ fYh7Xcs8lD5iwICsMowDxVU3DlJvmjAgJXmKWToyBuC+0254wGslmn2cSNIy5sQN ksuxUlDKnE7A6AJhzV+TgaRxJMFVAEqdxourDtmj8QFPK4cX7IlzRBHn29MG46rT 6Ko11W6H6/5NvQ7tuZukxXS1Vcrh8hxUkADoami8gCdyOJqsRVnVKaohuWcKi5Q9 8OiGNt054FmnFNCUu4hzHV2eaO1eOFIgv/GZP/vMmJUXnvxqpbzhZSw5QtTyk5Ym +LdYJGbbdAs5ZfDW0/rrbA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:59 2025 by rpki-client