$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft File: 28AEA4799AA16796C18CA8950931D4394F01179A.mft (raw, json) Hash identifier: hpkfSO7+UIMiBmFazRG2R3yYEzkbDoKVotXZovOwbQM= Subject key identifier: 65:BE:62:C5:DB:DD:3E:A1:EF:39:DF:5E:12:31:10:7C:64:F8:49:2D Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A Certificate issuer: /CN=28AEA4799AA16796C18CA8950931D4394F01179A Certificate serial: 5EB07138430E65C546C233E4B4735F6F881F645E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft Manifest number: C7 Signing time: Mon 03 Nov 2025 00:50:43 +0000 Manifest this update: Mon 03 Nov 2025 00:45:43 +0000 Manifest next update: Tue 04 Nov 2025 01:14:43 +0000 Files and hashes: 1: 323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (hash: Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=) 2: 323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (hash: qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=) 3: 28AEA4799AA16796C18CA8950931D4394F01179A.crl (hash: UqqGdC3y6hKn9pIUCKBTz362mX3wKaxglikBuKKHLog=) 4: 3137302e38342e3136342e302f32322d3332203d3e20323635303136.roa (hash: y3CoVEWObW7u+N074Y8vxEijHZnpu3jXbFZ4orw4uP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b0:71:38:43:0e:65:c5:46:c2:33:e4:b4:73:5f:6f:88:1f:64:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A Validity Not Before: Nov 3 00:45:43 2025 GMT Not After : Nov 4 01:14:43 2025 GMT Subject: CN=65BE62C5DBDD3EA1EF39DF5E1231107C64F8492D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:cd:71:00:58:40:0f:d5:08:b6:e8:ef:08: af:8e:48:07:42:71:d4:07:5b:85:02:c8:a1:2a:31: 37:5a:e5:ce:d5:37:cf:74:1b:91:64:40:4a:90:f2: 45:bf:34:f7:bb:71:e9:e7:b5:e6:08:46:91:15:86: 38:6d:c2:d0:ef:f9:99:09:8b:50:02:f7:ea:00:58: ff:57:17:77:86:61:fc:44:6b:f9:0f:94:ee:10:65: ac:b6:46:82:ca:6d:a2:16:15:de:bb:7f:74:09:90: 47:53:7e:09:de:4c:d2:98:84:ba:dd:f5:9c:ae:54: 1c:36:c8:2f:b3:f3:d9:20:09:6d:45:1d:ee:d4:3e: 7a:1d:8c:59:d8:a4:3c:b9:9b:37:6f:f5:03:e4:5a: b2:73:d3:c4:ae:c6:05:fa:ec:bb:b8:92:b5:38:01: 3c:d5:f6:b1:2f:1d:67:43:63:9e:a9:d4:ed:33:66: fb:6a:3f:70:6f:a3:06:ab:9b:d1:67:28:6b:2d:28: c3:20:d0:f6:30:3f:60:f0:5d:4d:80:e8:9a:44:13: 78:2f:d8:cd:8e:5a:17:d9:fc:c3:4a:3b:22:c4:1f: a7:e5:a2:74:de:d3:65:18:ef:ec:6f:55:f5:a5:d0: 61:c6:c7:8b:33:36:e2:22:0f:2d:ba:15:13:34:7c: f4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BE:62:C5:DB:DD:3E:A1:EF:39:DF:5E:12:31:10:7C:64:F8:49:2D X509v3 Authority Key Identifier: keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f9:28:dd:b2:9c:55:92:81:bd:36:c2:cb:26:01:06:c3:0f: 52:34:c2:5a:d4:e9:68:9b:e1:70:78:d1:e4:96:55:30:26:36: c1:e2:e3:b9:71:82:5a:ac:84:f4:a3:e2:ca:88:10:22:41:86: 04:89:90:c8:c4:64:22:66:bd:a4:13:cb:fa:15:5e:b2:1e:5d: 16:69:d7:cd:13:d4:54:9b:26:2c:0a:6f:17:9a:77:7f:05:6a: 26:c9:61:b6:b4:b5:62:4c:a3:ca:30:d3:0d:cc:63:67:be:ef: 29:18:8e:31:d4:d7:f0:24:f1:8b:b8:b3:fa:5a:f9:2b:35:79: db:bc:47:93:e0:35:91:d4:40:51:c4:c8:ac:fc:4f:de:dd:60: 9f:64:13:17:95:ae:c5:96:9e:90:63:06:2d:e4:05:b3:ce:01: 09:9d:aa:46:d6:d7:38:4a:01:09:71:cc:9c:3d:d0:ea:0f:aa: cb:55:29:1f:e9:78:07:52:cc:2c:bd:e8:dc:3e:75:0d:35:7c: 11:68:e7:c7:c9:fd:55:68:20:32:ed:db:a2:2c:47:a5:22:b4: 29:c3:a9:99:eb:d7:d1:b8:d1:d6:ad:90:43:59:f5:6e:f3:c8: 55:d9:90:8a:0a:ea:10:ea:93:a3:4d:95:46:20:04:57:49:d0: 0c:30:ae:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXrBxOEMOZcVGwjPktHNfb4gfZF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBRUE0Nzk5QUExNjc5NkMxOENBODk1MDkzMUQ0Mzk0 RjAxMTc5QTAeFw0yNTExMDMwMDQ1NDNaFw0yNTExMDQwMTE0NDNaMDMxMTAvBgNV BAMTKDY1QkU2MkM1REJERDNFQTFFRjM5REY1RTEyMzExMDdDNjRGODQ5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJs1xAFhAD9UItujvCK+OSAdC cdQHW4UCyKEqMTda5c7VN890G5FkQEqQ8kW/NPe7cennteYIRpEVhjhtwtDv+ZkJ i1AC9+oAWP9XF3eGYfxEa/kPlO4QZay2RoLKbaIWFd67f3QJkEdTfgneTNKYhLrd 9ZyuVBw2yC+z89kgCW1FHe7UPnodjFnYpDy5mzdv9QPkWrJz08SuxgX67Lu4krU4 ATzV9rEvHWdDY56p1O0zZvtqP3Bvowarm9FnKGstKMMg0PYwP2DwXU2A6JpEE3gv 2M2OWhfZ/MNKOyLEH6flonTe02UY7+xvVfWl0GHGx4szNuIiDy26FRM0fPTVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZb5ixdvdPqHvOd9eEjEQfGT4SS0wHwYDVR0j BBgwFoAUKK6keZqhZ5bBjKiVCTHUOU8BF5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV WGQvMC8yOEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QUVBNDc5OUFBMTY3OTZD MThDQTg5NTA5MzFENDM5NEYwMTE3OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZVWGQvMC8y OEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARvko3bKcVZKBvTbCyyYBBsMPUjTCWtTpaJvhcHjR5JZVMCY2weLjuXGCWqyE 9KPiyogQIkGGBImQyMRkIma9pBPL+hVesh5dFmnXzRPUVJsmLApvF5p3fwVqJslh trS1YkyjyjDTDcxjZ77vKRiOMdTX8CTxi7iz+lr5KzV527xHk+A1kdRAUcTIrPxP 3t1gn2QTF5WuxZaekGMGLeQFs84BCZ2qRtbXOEoBCXHMnD3Q6g+qy1UpH+l4B1LM LL3o3D51DTV8EWjnx8n9VWggMu3boixHpSK0KcOpmevX0bjR1q2QQ1n1bvPIVdmQ igrqEOqTo02VRiAEV0nQDDCupA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:38 2025 by rpki-client