$ rpki-client -vvvf rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft File: 28D273356F90D13FC143833120BC59A454646F71.mft (raw, json) Hash identifier: N6I4fqQ6FGgFjiiDU6uSNMog2s/4VsgAolvEQXECW/E= Subject key identifier: 97:88:13:AD:4D:CB:AD:CE:2B:B6:D5:50:0D:B0:D4:36:EA:15:AE:D2 Authority key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71 Certificate issuer: /CN=28D273356F90D13FC143833120BC59A454646F71 Certificate serial: 38CC9FA3D111F29206DCE99483F1FF5405D4C2C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer Subject info access: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft Manifest number: CA Signing time: Sat 22 Aug 2026 19:18:27 +0000 Manifest this update: Sat 22 Aug 2026 19:13:27 +0000 Manifest next update: Sun 23 Aug 2026 19:33:27 +0000 Files and hashes: 1: 28D273356F90D13FC143833120BC59A454646F71.crl (hash: r6ejSoOe5B6v+clBqJDmdH20hfsDLec59e2Y+KBqF54=) 2: 323830343a393434383a3a2f33322d3332203d3e20323734383333.roa (hash: 3+OUWvJ2paVgdIryDuKrx561qJe0osctthIg1n2by6E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 19:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:9f:a3:d1:11:f2:92:06:dc:e9:94:83:f1:ff:54:05:d4:c2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D273356F90D13FC143833120BC59A454646F71 Validity Not Before: Aug 22 19:13:27 2026 GMT Not After : Aug 23 19:33:27 2026 GMT Subject: CN=978813AD4DCBADCE2BB6D5500DB0D436EA15AED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:2e:7a:78:1c:fb:96:66:db:7b:7f:4f:f3: 36:4a:fb:89:3d:4d:19:d9:35:a9:d7:97:32:ce:bd: 69:32:96:5b:5c:3d:61:2b:3c:1f:2b:3b:33:5a:c2: ea:f1:d4:dc:89:29:7f:38:93:a1:97:3b:47:e3:75: d2:d2:73:73:16:45:7b:a1:5b:b3:7a:4e:3e:89:2b: 97:fc:2d:60:c4:21:14:95:e6:1d:04:d8:10:45:50: 0f:8d:0d:17:db:90:ad:51:dd:5e:95:ff:19:b2:74: 88:66:61:97:8c:19:90:8d:be:6b:77:b9:30:90:ea: 07:4e:69:45:3d:b3:00:0e:16:c1:10:43:4f:85:b8: 51:d4:00:67:3d:2e:03:af:99:94:c4:e9:ad:25:e5: 01:bd:c8:d4:9d:a1:4b:e3:5c:a0:59:b7:f8:99:54: 95:9c:85:3d:85:90:32:28:f4:f9:ff:fa:ff:49:41: 94:69:30:55:51:7a:46:56:4b:1a:c5:ed:78:5e:1b: f9:f3:e2:b8:42:36:b0:66:62:89:8c:ca:6d:2a:18: 76:04:19:48:09:f0:93:97:0d:3d:34:8f:e2:e3:4d: 46:f7:88:f1:de:31:5a:83:a9:da:90:0e:aa:2a:32: 53:b8:74:0e:00:e2:b8:b5:82:cf:b8:74:d1:70:ed: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:88:13:AD:4D:CB:AD:CE:2B:B6:D5:50:0D:B0:D4:36:EA:15:AE:D2 X509v3 Authority Key Identifier: keyid:28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:60:2f:2e:f9:48:b0:af:cc:bf:d8:60:f5:67:d1:14:e3:46: ee:9e:20:c0:e4:f7:43:03:e7:04:eb:b9:9f:89:47:83:5e:62: b4:dc:35:ad:a4:4f:f7:37:01:0a:bd:e3:bd:ea:74:c8:94:c2: df:8b:dc:01:2d:dc:9b:78:7b:c9:2d:b8:dc:c3:57:25:9d:f7: b4:c0:1b:0a:eb:a7:95:42:7b:11:a3:d3:b1:3c:6f:e9:8e:d0: b9:c5:d6:b1:23:52:74:06:95:e4:54:c9:d7:a4:f9:16:5c:4a: b5:0a:ed:7f:a0:a7:52:87:e5:f4:50:21:28:50:89:43:02:83: 6e:fb:73:b3:94:f3:f1:fb:69:80:1a:40:d4:30:ec:f2:5e:d8: c0:47:6c:c4:dd:36:7f:ed:d6:bb:df:e7:b6:58:2b:d6:19:8d: 21:e3:de:06:08:01:99:f6:cb:01:8d:ab:c6:bf:1a:9f:8e:eb: 9d:ae:5c:29:42:c2:f6:6e:33:f4:e5:01:5a:27:99:09:7e:fb: e7:e4:5c:d8:b1:5e:ff:b9:06:b5:8f:e9:0d:7c:6e:78:64:a3: a7:d4:76:dd:43:70:f4:72:fc:91:d4:d9:d0:c8:0f:ef:06:8c: 58:1a:a6:2f:b3:3e:7f:09:2a:1b:21:69:2f:70:89:10:1a:d1: 69:92:7a:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOMyfo9ER8pIG3OmUg/H/VAXUwscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhEMjczMzU2RjkwRDEzRkMxNDM4MzMxMjBCQzU5QTQ1 NDY0NkY3MTAeFw0yNjA4MjIxOTEzMjdaFw0yNjA4MjMxOTMzMjdaMDMxMTAvBgNV BAMTKDk3ODgxM0FENERDQkFEQ0UyQkI2RDU1MDBEQjBENDM2RUExNUFFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSXy56eBz7lmbbe39P8zZK+4k9 TRnZNanXlzLOvWkylltcPWErPB8rOzNawurx1NyJKX84k6GXO0fjddLSc3MWRXuh W7N6Tj6JK5f8LWDEIRSV5h0E2BBFUA+NDRfbkK1R3V6V/xmydIhmYZeMGZCNvmt3 uTCQ6gdOaUU9swAOFsEQQ0+FuFHUAGc9LgOvmZTE6a0l5QG9yNSdoUvjXKBZt/iZ VJWchT2FkDIo9Pn/+v9JQZRpMFVRekZWSxrF7XheG/nz4rhCNrBmYomMym0qGHYE GUgJ8JOXDT00j+LjTUb3iPHeMVqDqdqQDqoqMlO4dA4A4ri1gs+4dNFw7bh9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl4gTrU3Lrc4rttVQDbDUNuoVrtIwHwYDVR0j BBgwFoAUKNJzNW+Q0T/BQ4MxILxZpFRkb3EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkNYWXpZTWMyTXNtc01TTG1NVEFmM2FjdlRleWRzazc3V2ZYOVlIYmRx RFYvMC8yOEQyNzMzNTZGOTBEMTNGQzE0MzgzMzEyMEJDNTlBNDU0NjQ2RjcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4RDI3MzM1NkY5MEQxM0ZD MTQzODMzMTIwQkM1OUE0NTQ2NDZGNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkNYWXpZTWMyTXNtc01TTG1NVEFmM2FjdlRleWRzazc3V2ZYOVlIYmRxRFYvMC8y OEQyNzMzNTZGOTBEMTNGQzE0MzgzMzEyMEJDNTlBNDU0NjQ2RjcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm2AvLvlIsK/Mv9hg9WfRFONG7p4gwOT3QwPnBOu5n4lHg15itNw1raRP9zcB Cr3jvep0yJTC34vcAS3cm3h7yS243MNXJZ33tMAbCuunlUJ7EaPTsTxv6Y7QucXW sSNSdAaV5FTJ16T5FlxKtQrtf6CnUofl9FAhKFCJQwKDbvtzs5Tz8ftpgBpA1DDs 8l7YwEdsxN02f+3Wu9/ntlgr1hmNIePeBggBmfbLAY2rxr8an47rna5cKULC9m4z 9OUBWieZCX775+Rc2LFe/7kGtY/pDXxueGSjp9R23UNw9HL8kdTZ0MgP7waMWBqm L7M+fwkqGyFpL3CJEBrRaZJ60g== -----END CERTIFICATE-----Generated at Sun Aug 23 12:08:57 2026 by rpki-client