$ rpki-client -vvvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft File: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft (raw, json) Hash identifier: GzHdfZSw/ThG7HHnXi+PuMPu2dSuhrHhzK7IRyxNv2Q= Subject key identifier: AA:A4:7B:17:FD:AE:BC:77:A2:BB:7F:41:16:41:4C:29:79:1B:8F:CE Authority key identifier: 28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F Certificate issuer: /CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F Certificate serial: 3A597EA5942CF657D65D0DC6EB48D1CB66430B12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft Manifest number: 0491 Signing time: Wed 26 Aug 2026 13:53:27 +0000 Manifest this update: Wed 26 Aug 2026 13:48:27 +0000 Manifest next update: Thu 27 Aug 2026 14:55:27 +0000 Files and hashes: 1: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl (hash: 4jzLhLeQiWffthD/EkL/D1JYrkpK+zb+JMSHX0nqBfw=) 2: 3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa (hash: uFJA11K9DsZG59LUmGLcZHMrhaSsH6EDHRlqpBqdTeY=) 3: 323830343a316331633a3a2f33322d313238203d3e203631363338.roa (hash: VTLyDvTmi6Hrn0S6nW28ns085Cr/31mSReCxTewbpFU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Aug 2026 14:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:59:7e:a5:94:2c:f6:57:d6:5d:0d:c6:eb:48:d1:cb:66:43:0b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F Validity Not Before: Aug 26 13:48:27 2026 GMT Not After : Aug 27 14:55:27 2026 GMT Subject: CN=AAA47B17FDAEBC77A2BB7F4116414C29791B8FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:85:e4:98:dc:b4:b1:d7:89:20:43:25:67: 0d:aa:12:19:99:d7:bb:bd:80:88:a7:d1:8b:c2:ed: ba:5c:a0:f5:af:57:e0:5f:b7:e3:f4:57:fc:40:11: 57:d2:b6:ed:92:1a:83:16:03:e7:c6:5f:82:d7:c8: 3a:ef:ba:4c:25:4e:fc:c4:bc:be:9c:48:f3:f1:bb: d2:10:ba:15:94:4a:6e:5e:c4:08:8d:cc:f4:b7:ce: a3:86:4c:5f:78:a5:29:f7:b9:9b:42:7c:17:91:87: 6a:b8:6c:91:b6:e7:da:07:d6:75:8d:87:ae:68:42: 25:f6:39:6e:a9:3d:43:66:b9:94:99:a5:18:5e:e7: 4c:78:12:2f:de:80:47:ec:af:e6:93:23:36:49:87: 7a:89:57:ee:0b:fb:80:cc:c9:f1:f9:40:0b:aa:fe: ce:35:63:2d:d3:ae:e9:fb:96:22:a0:43:5b:b9:3c: f5:a1:22:bf:c1:7f:09:ff:27:f7:86:fa:7b:51:48: 51:82:fb:14:65:35:9f:27:3b:dc:dd:8e:ce:2b:af: f8:34:8e:0c:46:d4:33:2b:36:7a:fa:68:4b:78:0b: a7:47:07:6b:46:09:c1:e1:fe:49:fe:6c:e9:d9:21: eb:6e:28:18:00:6f:22:23:dc:6d:04:54:5b:b9:e0: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:7B:17:FD:AE:BC:77:A2:BB:7F:41:16:41:4C:29:79:1B:8F:CE X509v3 Authority Key Identifier: keyid:28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:ea:85:e3:55:f5:98:f4:63:87:c7:7a:72:7d:c5:ae:8b: 36:fa:96:df:20:77:6b:b1:e6:8e:b0:71:3a:6d:6a:0f:a0:15: cd:6c:76:f5:36:c2:81:e7:1d:b4:6b:58:8a:19:65:4b:0e:1e: 12:aa:8a:ff:ab:c1:2c:a9:c6:df:57:db:a8:07:b7:cd:49:4d: 25:ad:a2:ca:0f:5c:a6:2e:06:6b:da:04:e0:fe:61:92:33:68: 9f:8a:a9:ec:d5:93:b1:9e:f2:66:5d:6d:ea:86:62:84:60:19: 00:0a:24:c6:c2:2c:ac:28:fc:8c:82:6f:9a:82:73:70:b5:c3: 14:8c:b2:fa:92:4b:11:79:5e:df:bd:fb:21:2b:e0:60:63:27: 6f:39:8d:b5:61:42:47:2e:8a:fb:8a:86:2a:32:71:fe:0d:a5: 8f:bd:fd:c4:b3:fa:43:f3:59:84:fb:eb:88:ee:0c:49:25:97: d3:05:dc:92:31:ed:bf:20:f4:f4:a9:5c:91:47:2f:f6:8e:16: 2b:87:19:af:d7:8e:9c:e6:7b:e6:67:86:a1:e1:07:94:89:b7: a3:6e:a4:65:3d:52:0f:4d:9e:46:03:df:d8:5e:ae:0a:6c:e5: 1d:04:09:d6:02:d4:9e:85:26:8d:5b:bc:f1:92:f3:92:87:99: 71:81:4d:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOll+pZQs9lfWXQ3G60jRy2ZDCxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCRDAxNzFDNTREMzQxMjFEMURCREM3N0I1MTJDQkMy NUJFRDY0RjAeFw0yNjA4MjYxMzQ4MjdaFw0yNjA4MjcxNDU1MjdaMDMxMTAvBgNV BAMTKEFBQTQ3QjE3RkRBRUJDNzdBMkJCN0Y0MTE2NDE0QzI5NzkxQjhGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwoXkmNy0sdeJIEMlZw2qEhmZ 17u9gIin0YvC7bpcoPWvV+Bft+P0V/xAEVfStu2SGoMWA+fGX4LXyDrvukwlTvzE vL6cSPPxu9IQuhWUSm5exAiNzPS3zqOGTF94pSn3uZtCfBeRh2q4bJG259oH1nWN h65oQiX2OW6pPUNmuZSZpRhe50x4Ei/egEfsr+aTIzZJh3qJV+4L+4DMyfH5QAuq /s41Yy3Trun7liKgQ1u5PPWhIr/Bfwn/J/eG+ntRSFGC+xRlNZ8nO9zdjs4rr/g0 jgxG1DMrNnr6aEt4C6dHB2tGCcHh/kn+bOnZIetuKBgAbyIj3G0EVFu54CNFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqqR7F/2uvHeiu39BFkFMKXkbj84wHwYDVR0j BBgwFoAUKL0BccVNNBIdHb3He1EsvCW+1k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZ0NDJrdHF2MmduSjhMYW1jeWZ5R2lob3Npb2dqOW5td1VuU2QzU0g1 MjIvMS8yOEJEMDE3MUM1NEQzNDEyMUQxREJEQzc3QjUxMkNCQzI1QkVENjRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QkQwMTcxQzU0RDM0MTIx RDFEQkRDNzdCNTEyQ0JDMjVCRUQ2NEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFZ0NDJrdHF2MmduSjhMYW1jeWZ5R2lob3Npb2dqOW5td1VuU2QzU0g1MjIvMS8y OEJEMDE3MUM1NEQzNDEyMUQxREJEQzc3QjUxMkNCQzI1QkVENjRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgS7qheNV9Zj0Y4fHenJ9xa6LNvqW3yB3a7HmjrBxOm1qD6AVzWx29TbCgecd tGtYihllSw4eEqqK/6vBLKnG31fbqAe3zUlNJa2iyg9cpi4Ga9oE4P5hkjNon4qp 7NWTsZ7yZl1t6oZihGAZAAokxsIsrCj8jIJvmoJzcLXDFIyy+pJLEXle3737ISvg YGMnbzmNtWFCRy6K+4qGKjJx/g2lj739xLP6Q/NZhPvriO4MSSWX0wXckjHtvyD0 9KlckUcv9o4WK4cZr9eOnOZ75meGoeEHlIm3o26kZT1SD02eRgPf2F6uCmzlHQQJ 1gLUnoUmjVu88ZLzkoeZcYFNbA== -----END CERTIFICATE-----Generated at Thu Aug 27 00:13:11 2026 by rpki-client