$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft File: C28F148D3E037C892C74D290F0D92B67DAE047D8.mft (raw, json) Hash identifier: Cwz3AxDlDmv26m8qY1LbrkzbydBgbOj/JH1W83i7SYw= Subject key identifier: 84:F4:2E:F4:04:A0:77:37:C9:E6:84:F7:1D:F0:D8:72:0D:00:90:AC Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 2645C6A76C02E599BEB87456C0982695EC7087CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft Manifest number: 02EE Signing time: Thu 18 Sep 2025 01:32:37 +0000 Manifest this update: Thu 18 Sep 2025 01:27:37 +0000 Manifest next update: Fri 19 Sep 2025 04:56:37 +0000 Files and hashes: 1: 34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (hash: j4ekDAxcPzMxVY71jo3C1lu031tvoBtUmef4Ipzlevk=) 2: C28F148D3E037C892C74D290F0D92B67DAE047D8.crl (hash: U1cbQp682JuxRU2j6ilqR9K4ZCq14bDBiK7Risvb+ig=) 3: 34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (hash: xQdx9Hw5Ld9CfOcxJo+1JLhzYex5n/uuwn1h4ZHPX7s=) 4: 323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (hash: 0cvHNcgdOrsGhLiSeFftM1H24YlUBTHp9gRnAuF61bI=) 5: 34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (hash: rteSfk0a9HxXOSQqFpJfgo+cx5AjGW8WtimmKG47IlU=) 6: 34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (hash: /d2BbJlSHS9sGsfQb7QieDyfoZ5LvCrnCYniJK5uLdY=) 7: 34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (hash: /DsTevO0WMxjHTNJqS8khDVNrOUlrO3XsXL2znmVHuI=) 8: 34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (hash: Oa7B+oOOkq0p2n9equBSwbsDob1k/t+56D4fFqxf+aM=) 9: 34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (hash: NNCeVF8ae34VqoHRAYhFUXBW9ZCqL2CCW88tJsaQQ9c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 04:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:45:c6:a7:6c:02:e5:99:be:b8:74:56:c0:98:26:95:ec:70:87:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Sep 18 01:27:37 2025 GMT Not After : Sep 19 04:56:37 2025 GMT Subject: CN=84F42EF404A07737C9E684F71DF0D8720D0090AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c3:5b:07:98:c1:3f:4d:f7:d0:12:2d:8f:52: 2f:2d:4d:ff:7a:61:03:26:f4:3f:ef:e7:18:16:58: 3e:c9:a0:f6:ac:20:ac:28:4f:e5:48:e4:f3:99:a5: 87:47:cb:f4:21:1f:22:6c:37:19:01:75:bb:2e:f9: 86:43:71:a8:66:0f:83:57:dd:01:56:15:98:d5:26: 02:e3:8a:15:f6:7f:22:39:e4:2f:71:fa:7d:ec:70: f1:07:53:9d:98:68:b6:00:e7:16:d4:06:37:13:83: 0b:10:76:e7:7f:a5:9d:54:65:b3:02:b8:46:25:ee: 4f:43:97:a7:86:c3:47:00:b4:7e:ce:50:eb:30:85: 1e:12:7d:05:ad:1d:a0:04:65:bb:55:75:02:04:d3: bd:b4:9c:02:ac:0b:24:cd:99:96:90:50:c0:e7:da: 70:be:76:73:34:fa:cf:a5:09:b1:be:eb:ab:78:f0: ec:5b:75:02:b6:5e:4c:8d:24:2e:92:22:99:83:aa: dd:91:4f:91:f7:10:b5:7a:b4:f3:d9:6c:e7:e7:ce: 03:d2:c2:93:73:c4:52:08:11:ca:30:e1:47:d5:23: 7c:a8:97:98:f0:2e:c8:9e:85:b8:39:61:03:28:d6: e0:b0:ec:76:e4:3c:73:8b:ee:10:e1:64:d1:01:af: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F4:2E:F4:04:A0:77:37:C9:E6:84:F7:1D:F0:D8:72:0D:00:90:AC X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9f:ba:e7:85:a1:ac:cb:a2:ed:6f:8f:bb:0b:a4:7a:d3:8e: c7:98:c5:da:2f:54:e7:db:65:c7:bc:32:2c:9a:a6:b6:8c:de: 60:e8:61:d3:8a:73:f0:0b:cf:7e:fe:7e:18:14:04:21:36:77: 0f:c2:8a:d0:c0:af:30:c0:24:8d:4f:b5:5e:da:38:f1:30:6b: a2:a9:7b:13:c2:03:67:1e:93:a5:ed:14:6a:cc:1f:11:71:75: 50:60:09:7f:64:83:ee:87:50:57:c4:0b:4c:ce:d3:e8:04:cb: c2:61:e6:d3:2d:74:7c:79:85:94:f1:c4:ae:78:e0:36:a0:22: 61:e3:ad:aa:5d:73:46:21:c9:e2:46:2f:4a:52:62:97:0f:6e: 78:10:9a:a2:75:54:18:1c:92:71:48:2c:bd:62:a4:c9:df:0b: 19:c0:a6:a9:04:ca:53:d9:82:7a:ec:6d:eb:85:4c:f1:bc:bc: 6e:27:11:36:e2:d2:5a:50:5a:9e:7f:88:7b:6f:9c:2c:8d:ec: d8:8f:64:ef:1e:0d:dd:01:d7:02:7d:78:a6:3c:08:01:3d:52: b0:52:6f:20:1c:c3:d1:92:7d:63:9c:2b:42:57:55:2f:24:59: fa:02:e0:c5:8f:02:67:82:03:57:6b:dd:95:5f:a1:34:9d:a0: 58:b1:7f:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJkXGp2wC5Zm+uHRWwJgmlexwh88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTA5MTgwMTI3MzdaFw0yNTA5MTkwNDU2MzdaMDMxMTAvBgNV BAMTKDg0RjQyRUY0MDRBMDc3MzdDOUU2ODRGNzFERjBEODcyMEQwMDkwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuw1sHmME/TffQEi2PUi8tTf96 YQMm9D/v5xgWWD7JoPasIKwoT+VI5POZpYdHy/QhHyJsNxkBdbsu+YZDcahmD4NX 3QFWFZjVJgLjihX2fyI55C9x+n3scPEHU52YaLYA5xbUBjcTgwsQdud/pZ1UZbMC uEYl7k9Dl6eGw0cAtH7OUOswhR4SfQWtHaAEZbtVdQIE0720nAKsCyTNmZaQUMDn 2nC+dnM0+s+lCbG+66t48OxbdQK2XkyNJC6SIpmDqt2RT5H3ELV6tPPZbOfnzgPS wpNzxFIIEcow4UfVI3yol5jwLsiehbg5YQMo1uCw7HbkPHOL7hDhZNEBr/pXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhPQu9ASgdzfJ5oT3HfDYcg0AkKwwHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVFZ3AvMi9D MjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATp+654WhrMui7W+PuwuketOOx5jF2i9U59tlx7wyLJqmtozeYOhh04pz8AvP fv5+GBQEITZ3D8KK0MCvMMAkjU+1Xto48TBroql7E8IDZx6Tpe0UaswfEXF1UGAJ f2SD7odQV8QLTM7T6ATLwmHm0y10fHmFlPHErnjgNqAiYeOtql1zRiHJ4kYvSlJi lw9ueBCaonVUGByScUgsvWKkyd8LGcCmqQTKU9mCeuxt64VM8by8bicRNuLSWlBa nn+Ie2+cLI3s2I9k7x4N3QHXAn14pjwIAT1SsFJvIBzD0ZJ9Y5wrQldVLyRZ+gLg xY8CZ4IDV2vdlV+hNJ2gWLF/tw== -----END CERTIFICATE-----Generated at Thu Sep 18 13:48:12 2025 by rpki-client