$ rpki-client -vvvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: xrxAmerVQrhmWbA03AFyw9Erm5s+DYP4I9j6NUE+J3A= Subject key identifier: 0D:A0:D4:5A:05:44:53:25:13:4B:F7:06:5C:56:4E:2D:FD:2F:03:2D Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 08EA91DB07E33BAFB576A1F384A551D360F5F0C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 01DA Signing time: Sun 23 Aug 2026 04:10:01 +0000 Manifest this update: Sun 23 Aug 2026 04:05:01 +0000 Manifest next update: Mon 24 Aug 2026 06:55:01 +0000 Files and hashes: 1: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: fmORnhRB/dKjW5WE5EQd5ZrKgGzacdjD5bgKa7CIdj4=) 2: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: Khe8LBPmipGqNErU+ns8BejjrIhAGHWHgBQHHWhADoA=) 3: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: qlhTd5UjufQbKs5GXDduOGDR+HlnlhWRrzLlUJSegns=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 06:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ea:91:db:07:e3:3b:af:b5:76:a1:f3:84:a5:51:d3:60:f5:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Aug 23 04:05:01 2026 GMT Not After : Aug 24 06:55:01 2026 GMT Subject: CN=0DA0D45A05445325134BF7065C564E2DFD2F032D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:5e:c6:80:1e:b2:6b:94:ba:a1:76:50:80: b1:9b:13:f9:1f:fe:34:01:99:35:f0:59:3d:b8:c2: 1b:21:5d:6e:61:c5:a9:83:0c:88:ea:62:93:18:76: 31:55:2e:dd:82:fa:bd:8e:d2:3a:d3:09:72:e2:e5: ea:85:68:dc:df:c8:40:25:d4:44:e0:f3:05:77:15: 27:47:8e:8a:ed:55:12:59:87:0c:c9:8f:9f:db:e9: 2e:39:74:c8:60:16:1b:19:32:c9:4d:00:f8:93:ec: b9:67:c9:3e:68:8b:13:af:04:5b:3e:6b:fb:72:ba: cc:ad:89:fd:71:03:4f:b5:2a:8c:a5:cd:50:ea:20: 55:ff:bf:e0:c6:d4:48:93:d7:18:74:29:a7:ac:aa: f1:af:0d:c6:67:76:0c:15:73:50:f4:70:ce:af:61: 68:24:d9:81:a4:5e:ef:62:90:68:b0:26:8b:90:70: 65:65:1f:02:df:a9:af:e5:32:90:22:aa:f6:86:63: 0d:a2:4c:57:06:79:24:24:a2:1b:55:43:42:ea:0c: 7a:3f:2e:74:41:98:05:73:db:63:63:fc:4b:04:87: 78:dc:76:fd:ec:ed:f0:f3:de:24:26:40:52:e0:a2: 99:84:cd:a9:9c:9d:54:71:23:66:e1:8e:3f:56:c0: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A0:D4:5A:05:44:53:25:13:4B:F7:06:5C:56:4E:2D:FD:2F:03:2D X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:48:6f:ce:1c:82:d1:31:b3:49:3b:38:49:8c:82:e9:b8:eb: 85:12:29:da:11:57:65:a8:12:0b:31:a3:13:99:66:9d:cf:85: 64:61:dc:82:ef:01:ce:db:20:2b:1a:28:1b:86:a8:3e:3f:0d: dc:81:54:0c:bd:1c:c4:e7:5e:f7:4e:8d:7a:9b:db:d9:71:75: d0:8c:9c:2e:7b:6d:46:1c:6e:bb:2b:6e:1a:c5:61:0c:42:bb: f1:c9:30:b6:30:24:92:82:f2:dd:e5:cf:15:6c:27:b1:c6:6f: ed:ab:ee:74:1e:b4:d8:aa:82:6b:65:d1:52:0e:df:b9:1c:b7: bf:ba:59:47:cf:b0:a7:fc:e6:9a:65:94:7e:f6:4b:dd:ca:ff: ba:59:ed:7c:c9:50:f2:7d:44:5c:34:3c:f6:d9:ee:c3:ba:64: 27:44:bc:c9:b6:64:2b:3e:93:c7:8b:5c:3a:24:87:69:08:be: b4:df:be:4b:54:41:04:08:0c:60:90:77:36:4c:79:a7:19:4f: 00:a3:7d:cf:ed:9e:50:ba:67:dd:61:05:d4:25:ac:47:71:64: 17:8f:fc:43:73:9a:d2:99:c9:f4:72:eb:ef:87:36:c7:74:5b: f2:d8:c6:78:8c:b4:5c:f2:47:59:ab:b7:f6:7c:fa:af:e4:24: 55:b0:cb:5b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUCOqR2wfjO6+1dqHzhKVR02D18MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNjA4MjMwNDA1MDFaFw0yNjA4MjQwNjU1MDFaMDMxMTAvBgNV BAMTKDBEQTBENDVBMDU0NDUzMjUxMzRCRjcwNjVDNTY0RTJERkQyRjAzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopl7GgB6ya5S6oXZQgLGbE/kf /jQBmTXwWT24whshXW5hxamDDIjqYpMYdjFVLt2C+r2O0jrTCXLi5eqFaNzfyEAl 1ETg8wV3FSdHjortVRJZhwzJj5/b6S45dMhgFhsZMslNAPiT7LlnyT5oixOvBFs+ a/tyusytif1xA0+1KoylzVDqIFX/v+DG1EiT1xh0KaesqvGvDcZndgwVc1D0cM6v YWgk2YGkXu9ikGiwJouQcGVlHwLfqa/lMpAiqvaGYw2iTFcGeSQkohtVQ0LqDHo/ LnRBmAVz22Nj/EsEh3jcdv3s7fDz3iQmQFLgopmEzamcnVRxI2bhjj9WwD8RAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUDaDUWgVEUyUTS/cGXFZOLf0vAy0wHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA SUhvzhyC0TGzSTs4SYyC6bjrhRIp2hFXZagSCzGjE5lmnc+FZGHcgu8BztsgKxoo G4aoPj8N3IFUDL0cxOde906Nepvb2XF10IycLnttRhxuuytuGsVhDEK78ckwtjAk koLy3eXPFWwnscZv7avudB602KqCa2XRUg7fuRy3v7pZR8+wp/zmmmWUfvZL3cr/ ulntfMlQ8n1EXDQ89tnuw7pkJ0S8ybZkKz6Tx4tcOiSHaQi+tN++S1RBBAgMYJB3 Nkx5pxlPAKN9z+2eULpn3WEF1CWsR3FkF4/8Q3Oa0pnJ9HLr74c2x3Rb8tjGeIy0 XPJHWau39nz6r+QkVbDLWw== -----END CERTIFICATE-----Generated at Sun Aug 23 22:08:55 2026 by rpki-client