$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json) Hash identifier: WAqWEiemYauuv4q6L/zBtAbJeCDZc+koq0xYoiq/V5M= Subject key identifier: 65:85:90:7A:42:9F:81:32:D4:8E:A5:F0:8E:56:7B:75:12:49:FE:F5 Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Certificate serial: 7553666D2FDDEF0F9CA309F96FB57D16C638B440 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft Manifest number: 0238 Signing time: Mon 03 Nov 2025 09:17:46 +0000 Manifest this update: Mon 03 Nov 2025 09:12:46 +0000 Manifest next update: Tue 04 Nov 2025 12:16:46 +0000 Files and hashes: 1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: b80jboX82xcxSZ3qw2OCjnzPhzgnnFmqkZX9yjzY+cU=) 2: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: qThYkkOI/vYy6SuDIV+8CuWzPv1SJI//7zE/BP2cSxw=) 3: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 81YYVwts0/kXPr8fGXqDHUq4bgSQ+jGtgtMpTGK1R/E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:53:66:6d:2f:dd:ef:0f:9c:a3:09:f9:6f:b5:7d:16:c6:38:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Validity Not Before: Nov 3 09:12:46 2025 GMT Not After : Nov 4 12:16:46 2025 GMT Subject: CN=6585907A429F8132D48EA5F08E567B751249FEF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:da:f2:b2:22:ab:ba:39:ab:d6:05:be:12: a5:b5:ce:9d:74:e8:14:43:c3:39:77:63:75:e8:d5: db:6b:f5:3a:2f:b8:02:b4:fa:f1:ed:a0:b1:75:1a: 62:89:32:0c:ab:8a:cc:a4:95:42:36:87:5e:ad:43: 33:05:19:3b:65:32:98:a5:2b:cc:f4:3a:e4:83:04: 52:f0:a5:6a:e2:fe:d7:09:fa:6b:59:9d:20:33:1e: b8:9b:a7:80:38:0c:2f:d5:54:17:8a:e7:20:01:a5: 68:dc:e2:7d:25:b3:ba:55:81:b6:11:c9:a2:cf:5e: bd:ba:b7:08:2c:1f:df:fa:26:e3:9f:2a:47:30:16: 8a:bc:0f:a5:c7:21:c0:9b:6d:59:04:b8:65:75:cb: f3:54:ff:48:d2:1d:a4:00:cb:0c:1c:a1:05:48:af: 67:39:dc:97:2a:3e:45:0d:cd:d4:5b:e5:c8:20:f7: d8:64:4a:64:45:10:4f:52:b3:da:7a:1a:50:59:a0: 5a:3b:2b:83:42:2b:15:45:65:96:65:9a:44:90:b8: b1:58:9c:63:9f:e1:75:99:69:d0:89:d4:dd:8d:c6: a4:84:90:b0:b2:91:aa:d6:b1:ef:69:24:3e:25:1e: 5d:3f:ab:54:0b:cb:38:6c:73:0b:b1:c8:49:c6:4e: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:90:7A:42:9F:81:32:D4:8E:A5:F0:8E:56:7B:75:12:49:FE:F5 X509v3 Authority Key Identifier: keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f4:b3:3b:89:ae:14:4b:d6:7a:f1:91:bf:14:38:06:c1:9a: 41:00:a9:9a:db:c0:ea:26:72:ae:53:27:73:63:2c:b6:b7:e2: f9:7b:1f:2a:4b:b3:52:0d:c1:e4:2d:bf:3f:07:05:e0:5c:58: b8:a2:45:da:19:21:14:9c:a6:f0:44:50:2d:36:14:ba:60:8d: e8:42:de:41:96:47:ab:e5:f8:86:c4:55:5a:b9:7e:30:73:72: c2:e3:e2:c3:97:92:f4:9a:f1:1a:02:46:07:9e:08:54:df:ce: 6a:79:b8:a3:34:33:52:f3:96:a8:01:87:c7:46:07:57:18:bb: 24:a5:7f:fa:9b:c3:50:b3:b2:c3:c3:a2:4b:40:64:57:7e:67: 63:8a:b6:e1:9e:6d:92:6b:a0:14:e0:f8:59:33:f8:d6:5a:e5: 2f:fa:9b:5b:02:a0:81:15:ce:50:19:80:cc:f3:99:d7:c5:d1: f0:3b:d4:6b:43:be:d2:67:2d:b5:d6:b4:31:8d:76:2e:3c:74: 58:7e:a2:40:e7:c1:25:47:ef:83:51:e6:fe:57:43:41:16:98: c1:2f:a3:fb:14:cf:06:f1:50:41:80:80:88:be:98:0f:c0:49: 1b:65:72:50:14:2b:16:81:0f:48:bb:63:cb:60:66:6e:66:dc: 2f:b2:02:f2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdVNmbS/d7w+cown5b7V9FsY4tEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkEx QTIyODZGMDAeFw0yNTExMDMwOTEyNDZaFw0yNTExMDQxMjE2NDZaMDMxMTAvBgNV BAMTKDY1ODU5MDdBNDI5RjgxMzJENDhFQTVGMDhFNTY3Qjc1MTI0OUZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgu9rysiKrujmr1gW+EqW1zp10 6BRDwzl3Y3Xo1dtr9TovuAK0+vHtoLF1GmKJMgyrisyklUI2h16tQzMFGTtlMpil K8z0OuSDBFLwpWri/tcJ+mtZnSAzHribp4A4DC/VVBeK5yABpWjc4n0ls7pVgbYR yaLPXr26twgsH9/6JuOfKkcwFoq8D6XHIcCbbVkEuGV1y/NU/0jSHaQAywwcoQVI r2c53JcqPkUNzdRb5cgg99hkSmRFEE9Ss9p6GlBZoFo7K4NCKxVFZZZlmkSQuLFY nGOf4XWZadCJ1N2NxqSEkLCykarWse9pJD4lHl0/q1QLyzhscwuxyEnGTng5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUZYWQekKfgTLUjqXwjlZ7dRJJ/vUwHwYDVR0j BBgwFoAUKNduCTnwmbR7S4DqK5sHuhoihvAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9yRFluZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZl LzAvMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEQ3NkUwOTM5RjA5OUI0N0I0 QjgwRUEyQjlCMDdCQTFBMjI4NkYwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3JE WW5lM2lHb3k3cUduYTZ2UGdveTJ1aThBRlZjY3dKTGZEUmFzRFpuNmUvMC8yOEQ3 NkUwOTM5RjA5OUI0N0I0QjgwRUEyQjlCMDdCQTFBMjI4NkYwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA APSzO4muFEvWevGRvxQ4BsGaQQCpmtvA6iZyrlMnc2Mstrfi+XsfKkuzUg3B5C2/ PwcF4FxYuKJF2hkhFJym8ERQLTYUumCN6ELeQZZHq+X4hsRVWrl+MHNywuPiw5eS 9JrxGgJGB54IVN/Oanm4ozQzUvOWqAGHx0YHVxi7JKV/+pvDULOyw8OiS0BkV35n Y4q24Z5tkmugFOD4WTP41lrlL/qbWwKggRXOUBmAzPOZ18XR8DvUa0O+0mcttda0 MY12Ljx0WH6iQOfBJUfvg1Hm/ldDQRaYwS+j+xTPBvFQQYCAiL6YD8BJG2VyUBQr FoEPSLtjy2BmbmbcL7IC8g== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:46 2025 by rpki-client