
$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json)
Hash identifier: KhsyVjTjJy//RSc1BP/29LPhrRBKqSnFgwe0fnDaei0=
Subject key identifier: 88:21:3D:CF:18:ED:4E:5E:1D:C7:60:A4:C4:D2:37:B9:E0:B5:08:A9
Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B
Certificate serial: 21C397D8DC373F4D41F679116E49292FDD6FD8E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
Manifest number: 0191
Signing time: Fri 17 Apr 2026 23:08:10 +0000
Manifest this update: Fri 17 Apr 2026 23:03:10 +0000
Manifest next update: Sun 19 Apr 2026 00:48:10 +0000
Files and hashes: 1: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=)
2: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: SnPIwriYx3wh62AKryrvrTg2B/QoUnMPIHiogYhsccc=)
3: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=)
4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 00:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c3:97:d8:dc:37:3f:4d:41:f6:79:11:6e:49:29:2f:dd:6f:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B
Validity
Not Before: Apr 17 23:03:10 2026 GMT
Not After : Apr 19 00:48:10 2026 GMT
Subject: CN=88213DCF18ED4E5E1DC760A4C4D237B9E0B508A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:c4:54:10:8a:12:ca:75:d6:0c:15:aa:e7:
d9:92:b3:aa:c4:32:67:80:8b:78:24:76:bc:a2:b5:
56:9b:e0:37:d2:47:f4:9d:b6:39:e9:79:04:d7:b2:
01:63:f6:45:03:d4:c7:af:14:04:d3:c3:d1:90:3d:
22:6a:25:48:36:c8:d4:b5:81:41:16:a7:77:6e:be:
bf:c6:d4:7b:8e:17:de:06:bd:94:09:20:08:45:7e:
79:3f:e9:a5:fd:1b:ad:c4:3d:7d:20:8b:48:8c:49:
97:31:22:a7:7a:53:63:39:f3:cd:09:de:c7:49:8e:
54:ed:27:df:53:aa:6b:07:4b:2b:48:d2:bd:cf:4f:
9a:5d:78:31:84:f3:f4:9a:59:c3:a1:b7:17:1c:a4:
52:2b:5d:b1:b0:3b:68:3e:7e:1c:9d:9c:66:e4:2f:
87:db:e9:2a:45:8d:f2:b7:fa:e6:b8:df:6b:72:30:
0d:c9:3d:de:c1:85:3e:5b:f3:0b:1b:9c:46:6d:21:
c6:b1:cc:ba:5e:ac:77:2e:1a:4b:9f:98:c8:d2:6f:
02:72:3b:46:e0:07:9d:eb:44:de:c1:bd:18:eb:e4:
bd:76:fc:ef:f5:9c:5d:dd:97:0b:50:8f:dd:d6:2c:
be:7a:1b:93:63:58:a4:9d:bc:00:3e:a4:24:c7:88:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:21:3D:CF:18:ED:4E:5E:1D:C7:60:A4:C4:D2:37:B9:E0:B5:08:A9
X509v3 Authority Key Identifier:
keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c6:b5:44:d8:20:fa:52:ce:f5:62:4f:bb:c3:e9:ec:a5:31:
99:3d:97:ec:89:41:a0:a9:e8:6e:d7:1c:57:08:50:a7:44:a9:
73:22:a0:d4:3b:99:b1:83:4d:a6:ec:70:34:c1:d9:49:01:dd:
89:90:42:c4:36:51:07:3c:92:e7:23:cf:4c:81:1d:35:51:66:
ed:a4:d2:9a:fb:3e:1c:16:c8:6f:02:c0:2d:a8:40:73:38:71:
7d:f0:80:70:a9:2a:41:df:ff:ab:b6:13:19:6d:c2:78:75:88:
b2:87:85:af:9a:25:63:fe:ea:2f:3c:4c:c1:51:ef:52:bd:96:
12:98:a5:b0:35:64:31:80:e9:88:01:5b:cf:eb:1b:12:87:42:
3d:47:e5:06:af:62:b9:cb:18:15:f0:e3:69:ab:7d:bb:eb:3a:
22:05:d3:09:e8:3b:09:b9:e9:cd:81:d9:75:2d:44:44:d1:ac:
97:38:5b:c1:25:6d:b4:63:b6:c1:85:dc:c3:72:2e:b1:03:17:
dc:88:2f:13:b3:3e:bb:30:8f:5c:51:db:50:46:00:bc:d3:3b:
0a:3b:61:f1:c0:6b:d3:21:da:58:8e:36:3a:17:6b:b6:67:77:
13:f6:50:c3:45:40:fc:be:e7:3d:bd:0d:b4:91:1e:52:11:31:
b2:b7:8f:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIcOX2Nw3P01B9nkRbkkpL91v2OAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy
RDdEODM2QjAeFw0yNjA0MTcyMzAzMTBaFw0yNjA0MTkwMDQ4MTBaMDMxMTAvBgNV
BAMTKDg4MjEzRENGMThFRDRFNUUxREM3NjBBNEM0RDIzN0I5RTBCNTA4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxo8RUEIoSynXWDBWq59mSs6rE
MmeAi3gkdryitVab4DfSR/SdtjnpeQTXsgFj9kUD1MevFATTw9GQPSJqJUg2yNS1
gUEWp3duvr/G1HuOF94GvZQJIAhFfnk/6aX9G63EPX0gi0iMSZcxIqd6U2M5880J
3sdJjlTtJ99TqmsHSytI0r3PT5pdeDGE8/SaWcOhtxccpFIrXbGwO2g+fhydnGbk
L4fb6SpFjfK3+ua432tyMA3JPd7BhT5b8wsbnEZtIcaxzLperHcuGkufmMjSbwJy
O0bgB53rRN7BvRjr5L12/O/1nF3dlwtQj93WLL56G5NjWKSdvAA+pCTHiO99AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiCE9zxjtTl4dx2CkxNI3ueC1CKkwHwYDVR0j
BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv
THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy
MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80
NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlca1RNgg+lLO9WJPu8Pp7KUxmT2X7IlBoKnobtccVwhQp0SpcyKg1DuZsYNN
puxwNMHZSQHdiZBCxDZRBzyS5yPPTIEdNVFm7aTSmvs+HBbIbwLALahAczhxffCA
cKkqQd//q7YTGW3CeHWIsoeFr5olY/7qLzxMwVHvUr2WEpilsDVkMYDpiAFbz+sb
EodCPUflBq9iucsYFfDjaat9u+s6IgXTCeg7CbnpzYHZdS1ERNGslzhbwSVttGO2
wYXcw3IusQMX3IgvE7M+uzCPXFHbUEYAvNM7Cjth8cBr0yHaWI42Ohdrtmd3E/ZQ
w0VA/L7nPb0NtJEeUhExsrePKw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:34:18 2026 by rpki-client