
$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier: nQI28inua3hFjK74shq0D9sCPMecqAjbP4f4VO+1FQY=
Subject key identifier: 25:DC:B9:07:A0:76:1F:23:AD:1A:CD:4D:70:14:F1:00:48:12:D7:18
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial: 22DFEEFA3147D5915A6004AE2CFF28F1BC8E99C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number: 024A
Signing time: Mon 02 Mar 2026 06:21:20 +0000
Manifest this update: Mon 02 Mar 2026 06:16:20 +0000
Manifest next update: Tue 03 Mar 2026 06:48:20 +0000
Files and hashes: 1: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: VcNMz3m75or7APsaw2Os1G3uXccfROL089HzaGmYfPo=)
2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=)
3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 06:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:df:ee:fa:31:47:d5:91:5a:60:04:ae:2c:ff:28:f1:bc:8e:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Validity
Not Before: Mar 2 06:16:20 2026 GMT
Not After : Mar 3 06:48:20 2026 GMT
Subject: CN=25DCB907A0761F23AD1ACD4D7014F1004812D718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:e2:18:cb:9b:67:3c:d6:12:5d:2e:c9:f4:
1e:4e:2f:17:b6:09:f0:8a:12:3d:e7:0f:de:a2:61:
b7:6c:43:e6:ce:6d:6e:90:fc:6c:e5:21:7a:31:cf:
b4:46:59:a4:db:34:a4:8d:54:9e:76:f3:20:f2:60:
fe:a2:cc:2e:a2:b1:0c:02:23:d8:e2:01:ed:d7:d6:
b3:4e:78:09:01:c7:bf:33:42:3f:69:60:bb:64:59:
e8:dd:76:35:a6:17:41:eb:6f:bd:28:41:99:1c:3b:
f2:df:f0:15:0d:bb:54:3f:63:55:90:d4:f1:b2:38:
e8:b9:72:4d:87:f5:05:48:a0:fd:93:c3:60:8b:f9:
63:8b:c9:82:06:43:f7:39:e0:cf:08:42:e3:36:c9:
14:f3:dd:b9:44:b1:33:38:d7:bf:8a:17:11:f0:74:
fb:85:d0:59:f7:7d:b3:02:0b:77:a1:e3:fd:56:79:
b8:ae:d1:a2:ce:2c:85:fd:d3:83:82:dd:af:2a:fc:
a2:62:0d:51:66:00:f6:87:43:29:10:2c:12:9f:13:
e4:14:5d:74:f6:bc:ac:33:f3:fe:c5:88:8b:8c:c0:
94:c9:32:eb:d0:3e:b6:78:f6:c1:84:af:d6:71:ec:
97:80:27:06:6f:88:88:4a:df:bf:7a:08:0d:6b:da:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:B9:07:A0:76:1F:23:AD:1A:CD:4D:70:14:F1:00:48:12:D7:18
X509v3 Authority Key Identifier:
keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:05:2d:7c:98:c0:a3:9a:50:f4:30:6a:69:21:53:4d:a3:
3f:53:58:6d:c8:94:54:c2:18:fb:0f:72:1a:10:df:e0:07:90:
d2:b1:21:69:4c:30:5a:e5:18:9e:88:54:36:dc:d8:89:c1:e2:
eb:f4:3f:31:7c:98:d3:fd:29:65:95:f9:1a:da:32:a9:08:7c:
5c:33:54:be:c9:b9:07:92:6f:01:ed:89:c7:e6:ec:44:66:df:
97:e6:37:be:0b:03:12:01:ed:8f:cd:73:ee:70:50:51:4a:93:
95:8d:be:3e:41:fd:6c:6d:c3:58:91:62:7c:ba:d4:fb:4a:81:
85:fe:e6:a5:5b:a0:58:65:e4:f2:d2:ca:00:09:d2:73:cf:ba:
27:1c:64:9e:8a:0c:25:cc:20:75:03:6e:79:c6:6c:2a:84:01:
77:11:90:b7:54:0c:c5:76:0d:6e:88:6d:bd:a3:4f:4b:55:eb:
5c:a6:1a:f7:ae:c0:71:06:79:d7:78:74:6f:49:18:69:59:76:
92:de:03:fe:f2:27:51:52:f4:21:49:dd:6b:87:01:60:85:28:
03:45:8b:6b:5c:f6:f5:e4:46:2d:23:9b:70:31:cf:0b:36:2d:
0c:c9:22:bd:04:5b:e0:44:be:20:a7:3f:55:23:8e:28:b6:47:
a5:55:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:02 2026 by rpki-client