
$ rpki-client -vvf rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
File: 99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft (raw, json)
Hash identifier: MUPUxnXfIkGh+Md2rz6tT1NOs1TvGN4YO4r0rriI+zQ=
Subject key identifier: 1D:33:88:79:34:5E:7E:3E:81:9F:12:92:3F:87:C1:97:73:18:F7:38
Authority key identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
Certificate issuer: /CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
Certificate serial: 1E81B3BD40696E299EC5420D7E6A519BC79AF755
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
Manifest number: 02E0
Signing time: Fri 17 Apr 2026 12:42:22 +0000
Manifest this update: Fri 17 Apr 2026 12:37:22 +0000
Manifest next update: Sat 18 Apr 2026 15:23:22 +0000
Files and hashes: 1: 3137372e34372e3230382e302f32302d3234203d3e20323632343733.roa (hash: U0yjn3ssKnzKQbS9AiwF/mJRWK8mwg+ZGQeYc5yBMpE=)
2: 323830343a376639343a3a2f33322d313238203d3e20323632343733.roa (hash: V8VpwoVgejx9I4lZGwbss/ziyoR1b7LiX97okPnA35U=)
3: 99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl (hash: xqg4oAj2o9Q/2XXBvZxoOsCiipIRw8DVAGFm0LTFquI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl
rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 15:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:81:b3:bd:40:69:6e:29:9e:c5:42:0d:7e:6a:51:9b:c7:9a:f7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
Validity
Not Before: Apr 17 12:37:22 2026 GMT
Not After : Apr 18 15:23:22 2026 GMT
Subject: CN=1D338879345E7E3E819F12923F87C1977318F738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:99:54:50:2b:b8:4c:3c:f0:30:1b:b8:14:
25:23:84:8b:74:8d:e2:72:c4:1c:e4:cf:c2:ad:1d:
72:5b:19:a3:7f:74:76:5e:55:33:d2:84:a7:49:8a:
e7:9c:1f:30:08:25:ee:40:63:89:c5:00:fb:fe:85:
82:54:1d:ff:06:b5:47:2b:9f:f6:35:7c:55:67:02:
b9:67:5b:48:63:eb:48:eb:12:f4:cf:dd:cb:c1:41:
d2:f9:65:ed:17:f3:78:4f:58:08:e8:d9:d0:ac:77:
89:0d:aa:0c:6e:52:a8:ce:24:65:82:eb:46:f3:cd:
c3:2e:b8:3d:09:5d:cf:bc:79:94:51:2a:71:dd:02:
80:0f:bb:a5:55:f4:69:9b:43:a5:a4:22:34:f8:89:
5a:7f:7e:62:8c:fd:25:ca:a4:65:12:e7:4f:41:e4:
83:7a:92:28:de:bd:c6:14:2e:5a:a9:44:c4:6a:29:
f3:e5:4a:7d:a2:8f:30:97:d6:b5:9d:24:e2:1a:2e:
95:c4:02:c3:aa:3e:e3:a9:91:d6:27:e0:f0:fd:8b:
fd:61:ee:c7:70:d5:20:a4:36:1c:3f:28:fd:fa:c6:
a7:db:a4:c3:d0:b7:a8:b9:e6:31:ea:77:f7:5f:71:
ba:ac:78:fc:5f:30:da:db:4d:ad:01:4a:67:6c:3c:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:88:79:34:5E:7E:3E:81:9F:12:92:3F:87:C1:97:73:18:F7:38
X509v3 Authority Key Identifier:
keyid:99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cb:48:e7:0f:bb:c5:9f:dd:f2:6e:0f:ea:2d:ad:b1:cd:56:
b6:57:6f:2f:f1:f3:9e:55:23:ec:45:d7:46:7c:51:fa:15:77:
0b:47:0d:fa:9c:00:88:a0:c2:65:9f:0b:e7:6c:a8:e9:93:2c:
f4:1a:f1:9f:ec:29:b5:1b:76:c8:ee:92:49:e4:f5:3c:85:7c:
aa:f6:af:9b:24:a5:ed:18:6d:81:8c:46:5e:40:a6:8e:5e:2c:
1e:b9:99:49:5a:2c:8e:0d:80:54:fa:15:38:4c:46:ff:1f:5f:
f2:7c:0d:20:e2:a0:cc:1f:33:58:0a:d0:54:73:63:16:96:7a:
9d:1a:74:42:e5:d1:9d:d0:98:27:01:0a:a9:4d:db:51:44:b0:
8a:29:df:c6:96:ee:fa:fc:00:22:5b:40:ae:90:66:4f:b2:e0:
9a:04:92:fc:d7:29:0f:d5:48:31:47:d8:96:bc:56:15:9b:63:
80:1d:5e:e9:ba:e8:2a:7f:aa:09:e8:a1:10:e6:41:e6:58:3c:
75:cc:dd:9e:a9:43:7d:47:3e:52:d5:34:0b:f4:87:fd:a6:f2:
5a:2a:26:7a:95:42:30:fe:17:60:ab:3a:b3:43:d0:f6:bd:28:
d6:13:d5:43:16:49:85:de:88:8f:e7:4f:aa:c1:72:8c:b3:18:
f6:b0:69:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHoGzvUBpbimexUINfmpRm8ea91UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEMjVENTg3RDk1ODlCREI0MjM4M0FBMDVGRDRGNThD
OEU2ODZBRDAeFw0yNjA0MTcxMjM3MjJaFw0yNjA0MTgxNTIzMjJaMDMxMTAvBgNV
BAMTKDFEMzM4ODc5MzQ1RTdFM0U4MTlGMTI5MjNGODdDMTk3NzMxOEY3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfjZlUUCu4TDzwMBu4FCUjhIt0
jeJyxBzkz8KtHXJbGaN/dHZeVTPShKdJiuecHzAIJe5AY4nFAPv+hYJUHf8GtUcr
n/Y1fFVnArlnW0hj60jrEvTP3cvBQdL5Ze0X83hPWAjo2dCsd4kNqgxuUqjOJGWC
60bzzcMuuD0JXc+8eZRRKnHdAoAPu6VV9GmbQ6WkIjT4iVp/fmKM/SXKpGUS509B
5IN6kijevcYULlqpRMRqKfPlSn2ijzCX1rWdJOIaLpXEAsOqPuOpkdYn4PD9i/1h
7sdw1SCkNhw/KP36xqfbpMPQt6i55jHqd/dfcbqsePxfMNrbTa0BSmdsPKofAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHTOIeTRefj6BnxKSP4fBl3MY9zgwHwYDVR0j
BBgwFoAUmdJdWH2Vib20I4OqBf1PWMjmhq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTJ5S2Y1ZU1xUGdqdWszaFRzeEFNUEtSREZXbnkxSHZuS3RQUjVBd1R2
RnIvMC85OUQyNUQ1ODdEOTU4OUJEQjQyMzgzQUEwNUZENEY1OEM4RTY4NkFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5RDI1RDU4N0Q5NTg5QkRC
NDIzODNBQTA1RkQ0RjU4QzhFNjg2QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MTJ5S2Y1ZU1xUGdqdWszaFRzeEFNUEtSREZXbnkxSHZuS3RQUjVBd1R2RnIvMC85
OUQyNUQ1ODdEOTU4OUJEQjQyMzgzQUEwNUZENEY1OEM4RTY4NkFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQstI5w+7xZ/d8m4P6i2tsc1WtldvL/HznlUj7EXXRnxR+hV3C0cN+pwAiKDC
ZZ8L52yo6ZMs9Brxn+wptRt2yO6SSeT1PIV8qvavmySl7RhtgYxGXkCmjl4sHrmZ
SVosjg2AVPoVOExG/x9f8nwNIOKgzB8zWArQVHNjFpZ6nRp0QuXRndCYJwEKqU3b
UUSwiinfxpbu+vwAIltArpBmT7LgmgSS/NcpD9VIMUfYlrxWFZtjgB1e6broKn+q
CeihEOZB5lg8dczdnqlDfUc+UtU0C/SH/abyWiomepVCMP4XYKs6s0PQ9r0o1hPV
QxZJhd6Ij+dPqsFyjLMY9rBpzA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:50:38 2026 by rpki-client