$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft File: 2028B4F00526FFD4A6479245C26F87EECD0F5352.mft (raw, json) Hash identifier: O8LxglDWev9wdC1i3s47R3oL2yR3EoIV7tcWPUCuNPM= Subject key identifier: 5E:C6:72:77:89:3B:77:6A:97:94:B8:24:1E:F8:DA:C3:DB:51:BD:6C Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 Certificate issuer: /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Certificate serial: 7E92BE926BBFEC5459DDC1BF59EB89E673906E63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft Manifest number: 2F Signing time: Sun 02 Nov 2025 22:50:23 +0000 Manifest this update: Sun 02 Nov 2025 22:45:23 +0000 Manifest next update: Mon 03 Nov 2025 23:38:23 +0000 Files and hashes: 1: 323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (hash: 1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=) 2: 3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (hash: unb7feFenHIIwOwVCWy8s62+GYdR241xnz1H4IZGT1E=) 3: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (hash: /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=) 4: 2028B4F00526FFD4A6479245C26F87EECD0F5352.crl (hash: mQu/egUlMzrIzHfHeacL8hV/P2t2Ah2ReYT1XWwLE/0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:92:be:92:6b:bf:ec:54:59:dd:c1:bf:59:eb:89:e6:73:90:6e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352 Validity Not Before: Nov 2 22:45:23 2025 GMT Not After : Nov 3 23:38:23 2025 GMT Subject: CN=5EC67277893B776A9794B8241EF8DAC3DB51BD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:b3:0e:e3:7b:c6:eb:ee:9f:6f:b3:05:38: 98:3a:14:8a:fb:c7:aa:9b:79:b6:37:7a:52:60:89: 9d:f7:47:1b:b5:b3:72:85:54:3d:7f:4e:fb:50:74: f4:28:53:11:3e:18:bc:18:10:ee:cd:73:f9:81:5a: e7:d6:96:2e:a1:34:e8:ee:d8:4e:1c:ad:4b:eb:92: 33:89:4b:3b:43:9b:64:a0:28:b9:b7:13:d6:ed:3c: 31:63:21:b3:b0:72:9c:c4:29:8d:82:65:ca:ca:fb: b5:ef:f6:a6:0e:99:55:be:ec:e7:86:63:4e:33:18: 29:5c:6b:a9:c9:3a:38:4d:53:16:0e:32:1b:55:4c: cb:84:25:3e:98:37:d9:b7:9a:26:a6:e4:de:db:5e: d7:28:b7:72:ea:e2:af:ea:d5:14:8c:32:b8:1a:3a: 5f:57:e1:42:27:1f:80:4a:f0:6c:cb:68:61:99:7d: dd:48:a6:ff:63:8a:0d:d3:56:65:42:9e:ea:ec:47: 6b:d6:3d:d8:d6:9c:3b:0f:68:c0:30:ef:75:f4:64: fa:0d:d1:fc:cb:9a:1c:a8:57:2d:32:19:1d:a3:ce: 8a:c5:77:2c:ca:77:cb:05:71:3e:d6:f0:77:0e:8f: 73:45:6e:77:e1:09:f5:bd:a4:40:ec:7a:0b:10:b5: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:72:77:89:3B:77:6A:97:94:B8:24:1E:F8:DA:C3:DB:51:BD:6C X509v3 Authority Key Identifier: keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3f:5b:8b:38:6a:2b:fb:d4:fc:e5:45:27:5a:54:a2:93:24: 96:87:d6:79:70:7c:67:b5:d8:b5:3f:44:7a:38:5e:cb:e0:6f: f5:4c:91:53:80:ac:f1:1f:21:15:84:67:f4:0d:58:d3:50:cf: d7:92:3c:f7:74:c4:d0:1a:9a:2e:64:40:ad:2a:3f:bd:8c:c2: 70:a6:fc:92:2f:c2:7b:5c:58:38:42:4c:b2:47:59:0b:f8:ec: b6:3e:e8:d9:a2:a9:32:2a:76:4a:4b:f8:6e:30:b2:16:e6:11: 05:35:07:b8:41:d8:8e:66:c6:85:c6:4a:b9:59:f0:6f:61:4c: ab:4f:7c:27:ae:23:00:5e:8a:8a:f7:c0:d7:bb:a5:94:62:b2: 0b:05:84:0e:a5:7c:3c:8b:20:bb:55:d5:32:64:87:b8:f9:0b: fb:30:d3:65:90:b0:f0:dc:cd:77:7c:fc:4a:70:f2:59:f5:d1: 0b:b1:70:21:d5:ee:a0:03:99:70:25:42:fd:ed:85:a8:4d:0b: 85:4b:a5:17:87:86:9c:c1:03:b4:66:a5:26:b0:cf:9b:e5:e7: 13:57:67:b1:2e:af:88:a1:5b:4d:5b:f4:67:8e:cc:40:59:b8: d7:86:b9:cf:38:60:dd:0a:d6:2e:3f:6a:33:42:82:89:27:5c: ef:74:4f:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfpK+kmu/7FRZ3cG/WeuJ5nOQbmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyOEI0RjAwNTI2RkZENEE2NDc5MjQ1QzI2Rjg3RUVD RDBGNTM1MjAeFw0yNTExMDIyMjQ1MjNaFw0yNTExMDMyMzM4MjNaMDMxMTAvBgNV BAMTKDVFQzY3Mjc3ODkzQjc3NkE5Nzk0QjgyNDFFRjhEQUMzREI1MUJENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ELMO43vG6+6fb7MFOJg6FIr7 x6qbebY3elJgiZ33Rxu1s3KFVD1/TvtQdPQoUxE+GLwYEO7Nc/mBWufWli6hNOju 2E4crUvrkjOJSztDm2SgKLm3E9btPDFjIbOwcpzEKY2CZcrK+7Xv9qYOmVW+7OeG Y04zGClca6nJOjhNUxYOMhtVTMuEJT6YN9m3miam5N7bXtcot3Lq4q/q1RSMMrga Ol9X4UInH4BK8GzLaGGZfd1Ipv9jig3TVmVCnursR2vWPdjWnDsPaMAw73X0ZPoN 0fzLmhyoVy0yGR2jzorFdyzKd8sFcT7W8HcOj3NFbnfhCfW9pEDsegsQtZ4TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXsZyd4k7d2qXlLgkHvjaw9tRvWwwHwYDVR0j BBgwFoAUICi08AUm/9SmR5JFwm+H7s0PU1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZt UXIvMC8yMDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMjhCNEYwMDUyNkZGRDRB NjQ3OTI0NUMyNkY4N0VFQ0QwRjUzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIenAzU0NCYkI3NG9RdFN5cWd4bmVmejNFYmZDN3VMVDZ5YmJmNlZtUXIvMC8y MDI4QjRGMDA1MjZGRkQ0QTY0NzkyNDVDMjZGODdFRUNEMEY1MzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHj9bizhqK/vU/OVFJ1pUopMklofWeXB8Z7XYtT9Eejhey+Bv9UyRU4Cs8R8h FYRn9A1Y01DP15I893TE0BqaLmRArSo/vYzCcKb8ki/Ce1xYOEJMskdZC/jstj7o 2aKpMip2Skv4bjCyFuYRBTUHuEHYjmbGhcZKuVnwb2FMq098J64jAF6KivfA17ul lGKyCwWEDqV8PIsgu1XVMmSHuPkL+zDTZZCw8NzNd3z8SnDyWfXRC7FwIdXuoAOZ cCVC/e2FqE0LhUulF4eGnMEDtGalJrDPm+XnE1dnsS6viKFbTVv0Z47MQFm414a5 zzhg3QrWLj9qM0KCiSdc73RPWg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:09:40 2025 by rpki-client