$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: OXa+Ulcm/vth2nYYxTVTQUdLCXqJxsn6QpMOou1mc1k= Subject key identifier: 35:7B:D1:00:94:86:8C:A3:39:5C:26:10:A6:3F:A1:3C:C1:29:C9:1B Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 51D5295A593CC83C1F6F595FE4737154E5216B15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 0124 Signing time: Thu 09 Apr 2026 00:08:45 +0000 Manifest this update: Thu 09 Apr 2026 00:03:45 +0000 Manifest next update: Fri 10 Apr 2026 01:34:45 +0000 Files and hashes: 1: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: 2+ierszummFHQG3s0KyGiyWKzEPvgnT9CADdFhKdJwc=) 2: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=) 3: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: ftRoesKFKds6Be/kBZJyVwaqm83zyv3oFf2fBISC6Gw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 01:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d5:29:5a:59:3c:c8:3c:1f:6f:59:5f:e4:73:71:54:e5:21:6b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Apr 9 00:03:45 2026 GMT Not After : Apr 10 01:34:45 2026 GMT Subject: CN=357BD10094868CA3395C2610A63FA13CC129C91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:36:be:e3:33:be:61:6f:c8:48:bf:06:50: 58:54:5a:27:8b:7d:b2:4c:fe:da:f9:df:cf:e3:de: 87:52:48:c3:4f:27:a2:a1:35:10:4c:78:f1:a7:13: 1b:f1:0e:aa:47:57:54:21:b0:c4:e7:e3:72:2f:4f: 5a:f6:7d:74:6d:9d:69:06:2d:a8:9b:f7:9d:a4:6d: a7:c3:48:40:1a:b0:3b:16:ec:47:9e:d2:6c:b8:ef: fd:f4:03:bb:7f:c5:cf:f0:fd:51:97:95:b8:27:35: 3f:ec:dc:e4:51:8a:9c:aa:c9:3e:61:bf:ea:06:7a: 29:7d:33:cb:c4:ce:8e:9f:fd:4d:15:1e:32:83:3c: ef:64:2c:0e:47:69:51:ca:ba:99:04:26:5d:4b:83: f9:01:ef:fc:6c:01:37:3c:2a:85:97:ed:eb:aa:cd: e2:2b:de:99:60:70:fd:6c:6e:81:b6:04:72:7d:cb: e2:9d:2a:42:e7:86:9f:44:df:9a:59:86:67:47:a2: ab:ce:6e:d4:e5:1e:56:40:c4:ac:51:fe:f9:77:a7: a5:a5:4b:2a:55:c9:6f:70:d8:57:b0:18:0c:6e:d5: dc:96:78:49:d6:58:b2:cb:60:6a:68:b1:0b:07:31: b4:5f:0d:a9:39:00:cf:bf:a8:a2:cf:24:3b:3d:74: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7B:D1:00:94:86:8C:A3:39:5C:26:10:A6:3F:A1:3C:C1:29:C9:1B X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:00:b3:53:27:8c:45:d2:ab:43:90:5f:1c:fd:35:a0:0d:41: ea:74:76:91:36:58:d8:93:d5:10:ac:17:ca:2e:8c:58:99:ce: 7a:db:1e:55:6e:d3:ca:18:c5:79:21:2c:c7:df:ad:7d:a1:37: 6c:b9:a5:9c:70:4d:04:14:21:6a:84:c2:0b:e6:33:a7:b9:7f: 3d:d3:65:de:db:96:e5:51:37:95:f7:94:9e:52:09:a9:61:3d: 13:46:47:f8:9b:93:34:eb:23:de:10:6b:d8:00:0f:03:57:6a: 90:19:c1:5c:d0:53:63:eb:01:07:bd:69:c6:e2:25:2f:53:ca: 77:e0:d4:cb:79:ae:05:e2:64:41:94:aa:54:db:25:5a:fa:54: f5:29:25:58:c1:71:0d:74:b8:73:4e:79:1e:f6:bc:e2:0c:83: ba:c8:a5:55:ba:7b:91:ba:06:28:3b:a1:af:fa:ac:c6:09:a5: a1:23:ad:ac:f7:f0:6f:b7:52:59:2b:10:4c:ff:4c:03:b2:6c: 4b:d2:6c:fb:80:f1:17:11:87:ad:f7:cc:5e:4b:45:3e:04:70: ac:16:cc:68:cf:c9:16:66:73:00:24:bc:86:dd:7d:31:ab:7f: b9:91:22:8a:1a:2c:38:b5:f6:03:dc:b7:9d:de:83:23:93:0d: 26:c2:86:45 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUdUpWlk8yDwfb1lf5HNxVOUhaxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNjA0MDkwMDAzNDVaFw0yNjA0MTAwMTM0NDVaMDMxMTAvBgNV BAMTKDM1N0JEMTAwOTQ4NjhDQTMzOTVDMjYxMEE2M0ZBMTNDQzEyOUM5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlja+4zO+YW/ISL8GUFhUWieL fbJM/tr538/j3odSSMNPJ6KhNRBMePGnExvxDqpHV1QhsMTn43IvT1r2fXRtnWkG Laib952kbafDSEAasDsW7Eee0my47/30A7t/xc/w/VGXlbgnNT/s3ORRipyqyT5h v+oGeil9M8vEzo6f/U0VHjKDPO9kLA5HaVHKupkEJl1Lg/kB7/xsATc8KoWX7euq zeIr3plgcP1sboG2BHJ9y+KdKkLnhp9E35pZhmdHoqvObtTlHlZAxKxR/vl3p6Wl SypVyW9w2FewGAxu1dyWeEnWWLLLYGposQsHMbRfDak5AM+/qKLPJDs9dPz1AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUNXvRAJSGjKM5XCYQpj+hPMEpyRswHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA jACzUyeMRdKrQ5BfHP01oA1B6nR2kTZY2JPVEKwXyi6MWJnOetseVW7TyhjFeSEs x9+tfaE3bLmlnHBNBBQhaoTCC+Yzp7l/PdNl3tuW5VE3lfeUnlIJqWE9E0ZH+JuT NOsj3hBr2AAPA1dqkBnBXNBTY+sBB71pxuIlL1PKd+DUy3muBeJkQZSqVNslWvpU 9SklWMFxDXS4c055Hva84gyDusilVbp7kboGKDuhr/qsxgmloSOtrPfwb7dSWSsQ TP9MA7JsS9Js+4DxFxGHrffMXktFPgRwrBbMaM/JFmZzACS8ht19Mat/uZEiihos OLX2A9y3nd6DI5MNJsKGRQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:51:40 2026 by rpki-client