
$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
File: D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft (raw, json)
Hash identifier: s3mru5t7UZQck4fX/tkIbOrAP8ayhf4/9StwrITtfxY=
Subject key identifier: EC:97:C0:BC:C9:8B:55:4E:0C:DF:D5:F1:BD:5A:A8:A1:93:05:00:5C
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Certificate issuer: /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial: 1337B3C9383C2CFBFA2B754E8D1780E3996D3B09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
Manifest number: 018D
Signing time: Mon 02 Mar 2026 11:13:27 +0000
Manifest this update: Mon 02 Mar 2026 11:08:27 +0000
Manifest next update: Tue 03 Mar 2026 14:49:27 +0000
Files and hashes: 1: 3230302e33362e3231322e302f32322d3234203d3e20323731333833.roa (hash: uYfQM6YKSgvOOW9mte5IfDz0qPNh0BQj/v17JCn1X+c=)
2: 323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (hash: vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=)
3: D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl (hash: FAaMTXZ6H5OBw5MSx2wlN3O6qvKd7CDwp0Onxi/RH14=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 14:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:37:b3:c9:38:3c:2c:fb:fa:2b:75:4e:8d:17:80:e3:99:6d:3b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Validity
Not Before: Mar 2 11:08:27 2026 GMT
Not After : Mar 3 14:49:27 2026 GMT
Subject: CN=EC97C0BCC98B554E0CDFD5F1BD5AA8A19305005C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:98:39:f5:fa:e6:28:c1:88:e9:4f:93:86:
b5:07:fb:c2:a7:51:8f:57:32:04:b0:00:4c:6c:3f:
f7:0b:2a:7f:53:26:2d:b2:6c:a5:96:5a:a7:8a:36:
b3:71:b2:32:46:b3:56:e5:3e:5f:57:f8:5a:d0:a8:
63:c1:c4:3f:47:ec:86:2f:24:6a:83:2e:06:20:73:
cd:24:98:de:f4:c6:7d:3d:e4:b1:85:26:97:60:2b:
1d:64:b1:36:51:cf:03:2c:84:62:2a:55:5e:fb:9e:
9f:55:6e:65:73:28:3f:64:d7:c1:3b:41:dd:05:ec:
95:eb:d0:fa:1e:ec:27:47:32:be:2b:fe:61:5e:b1:
f7:e4:7b:fc:d6:17:98:16:e2:4a:f0:d3:a3:af:00:
04:65:98:68:04:a7:83:49:97:ee:9b:63:bf:52:87:
f6:41:d1:31:ba:26:c6:d1:3e:c0:15:1e:09:21:d0:
6d:0c:16:48:0a:87:40:dc:73:8c:a8:1a:59:ca:7f:
eb:b4:62:17:5d:8d:2d:95:1e:cb:70:cc:3b:95:09:
bd:62:e0:5f:c8:1c:33:f9:7c:1f:66:c5:e3:1d:b7:
cf:42:1c:f4:76:a0:38:1f:71:9a:9d:7a:f5:d0:91:
a4:bc:18:d7:f7:47:e6:c0:0d:bf:52:6b:ae:b4:2f:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:C0:BC:C9:8B:55:4E:0C:DF:D5:F1:BD:5A:A8:A1:93:05:00:5C
X509v3 Authority Key Identifier:
keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:38:cc:98:cf:6e:aa:b3:af:44:56:16:26:7f:6b:da:49:
85:60:c0:a8:9b:a6:70:e5:fc:fd:69:b9:ae:77:bd:28:5d:ce:
a2:c4:5d:6d:2a:a4:f4:67:1d:bc:33:51:91:18:08:e9:ec:c1:
28:cc:d4:1f:fa:82:80:70:41:75:0e:a6:93:af:0b:bb:71:cc:
d2:77:1b:5a:61:99:b2:06:11:39:c3:5b:97:7b:86:4b:d0:f2:
1c:72:17:53:d4:37:ba:ce:7b:d6:b5:95:c5:25:a7:7d:ad:35:
54:14:0b:51:85:4b:8f:f8:ec:65:59:1e:de:62:1b:dd:a9:53:
1a:54:42:9b:a6:a1:1e:fb:8a:bf:7b:77:52:f4:38:1f:70:ea:
27:7a:16:30:7a:c6:72:ae:35:fa:5d:55:e3:a5:85:10:94:bd:
3c:ba:b2:f6:99:08:78:c8:f3:f3:32:09:b9:3f:d0:d0:16:d0:
e0:3f:95:41:c8:87:f9:52:b8:b1:36:fe:27:e8:a7:ac:47:c2:
0c:7a:7b:87:30:4c:a0:00:77:65:7a:b3:99:be:7f:f1:63:86:
78:2f:eb:c7:a5:9e:02:86:43:6a:51:a8:f5:49:1f:f0:e9:36:
7a:f4:a4:f4:d0:f4:f3:f1:c6:8e:41:23:76:bb:fe:42:30:07:
64:fe:95:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEzezyTg8LPv6K3VOjReA45ltOwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1RDMxMzhGNUVCODU1OTRDMjIwNUFGOTM4REJBNEQ4
RDEyOUNDNDAeFw0yNjAzMDIxMTA4MjdaFw0yNjAzMDMxNDQ5MjdaMDMxMTAvBgNV
BAMTKEVDOTdDMEJDQzk4QjU1NEUwQ0RGRDVGMUJENUFBOEExOTMwNTAwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fJg59frmKMGI6U+ThrUH+8Kn
UY9XMgSwAExsP/cLKn9TJi2ybKWWWqeKNrNxsjJGs1blPl9X+FrQqGPBxD9H7IYv
JGqDLgYgc80kmN70xn095LGFJpdgKx1ksTZRzwMshGIqVV77np9VbmVzKD9k18E7
Qd0F7JXr0Poe7CdHMr4r/mFesffke/zWF5gW4krw06OvAARlmGgEp4NJl+6bY79S
h/ZB0TG6JsbRPsAVHgkh0G0MFkgKh0Dcc4yoGlnKf+u0YhddjS2VHstwzDuVCb1i
4F/IHDP5fB9mxeMdt89CHPR2oDgfcZqdevXQkaS8GNf3R+bADb9Sa660LyUbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7JfAvMmLVU4M39XxvVqooZMFAFwwHwYDVR0j
BBgwFoAU1F0xOPXrhVlMIgWvk426TY0SnMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZZWlNNNXJ1RTFCbnY2alYxclNzUFpQOG9UWmluUU5zWlJNMUtBUEN6
MXIvMC9ENDVEMzEzOEY1RUI4NTU5NEMyMjA1QUY5MzhEQkE0RDhEMTI5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUQzMTM4RjVFQjg1NTk0
QzIyMDVBRjkzOERCQTREOEQxMjlDQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkZZWlNNNXJ1RTFCbnY2alYxclNzUFpQOG9UWmluUU5zWlJNMUtBUEN6MXIvMC9E
NDVEMzEzOEY1RUI4NTU5NEMyMjA1QUY5MzhEQkE0RDhEMTI5Q0M0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGvk4zJjPbqqzr0RWFiZ/a9pJhWDAqJumcOX8/Wm5rne9KF3OosRdbSqk9Gcd
vDNRkRgI6ezBKMzUH/qCgHBBdQ6mk68Lu3HM0ncbWmGZsgYROcNbl3uGS9DyHHIX
U9Q3us571rWVxSWnfa01VBQLUYVLj/jsZVke3mIb3alTGlRCm6ahHvuKv3t3UvQ4
H3DqJ3oWMHrGcq41+l1V46WFEJS9PLqy9pkIeMjz8zIJuT/Q0BbQ4D+VQciH+VK4
sTb+J+inrEfCDHp7hzBMoAB3ZXqzmb5/8WOGeC/rx6WeAoZDalGo9Ukf8Ok2evSk
9ND08/HGjkEjdrv+QjAHZP6Vew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:14 2026 by rpki-client