
$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier: HaRtx8FGbAado08/rZ/Pqv6SHUijVhugPSoTkW+taWg=
Subject key identifier: 68:55:C8:4E:E5:8F:13:C6:27:30:72:9A:6D:00:5D:00:EB:2B:6E:29
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial: 17B8BFE2ED98BFA8C148C130E78DC120F06F60A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number: 0288
Signing time: Fri 17 Apr 2026 17:47:17 +0000
Manifest this update: Fri 17 Apr 2026 17:42:17 +0000
Manifest next update: Sat 18 Apr 2026 19:29:17 +0000
Files and hashes: 1: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: p3YGnOkUMJ0l/rXJM7Dhpi1aUTdktQX5lOyHIy0nWlk=)
2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=)
3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 19:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b8:bf:e2:ed:98:bf:a8:c1:48:c1:30:e7:8d:c1:20:f0:6f:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Validity
Not Before: Apr 17 17:42:17 2026 GMT
Not After : Apr 18 19:29:17 2026 GMT
Subject: CN=6855C84EE58F13C62730729A6D005D00EB2B6E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:5d:69:84:c4:4f:2e:a4:dd:98:1e:88:31:
e8:00:a5:9c:1b:4f:a3:a3:21:cb:60:39:ad:58:54:
39:64:da:c9:43:4e:9d:48:a9:c6:2c:20:2c:84:a1:
50:b0:cb:07:2c:e2:66:11:14:fd:ff:af:0e:82:98:
0a:a5:b6:8c:91:4f:c5:1d:2c:dc:e0:53:11:70:a3:
c9:c2:36:08:0b:01:20:27:ef:cb:41:6b:54:0a:b5:
f1:2e:bd:92:9d:7d:3f:56:8f:0e:e4:9c:2f:be:2d:
57:10:92:7f:24:d7:10:c4:5c:23:74:8b:45:9c:6f:
1c:ee:a0:fd:27:7d:a6:e6:0c:af:e5:35:9f:04:c8:
4c:f4:40:e9:8d:3f:d3:99:6f:46:57:d5:61:7f:ff:
75:d9:6a:d8:8d:e4:a9:70:b0:d0:2c:c7:e4:73:88:
fb:5a:9a:b6:f7:2a:38:5d:25:4c:1d:fc:3a:d7:17:
cb:2a:91:a1:59:99:f7:74:a8:ee:28:5b:72:13:df:
3a:e0:85:08:54:c8:42:bb:fe:3d:22:08:f8:56:ad:
4d:54:4d:59:24:57:04:1c:25:3d:15:e5:23:97:f7:
f1:f6:ed:61:3f:e4:76:9f:2c:6b:34:e6:18:e2:4c:
78:cd:36:23:2b:51:b7:16:33:3b:d8:fa:6e:4f:9e:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:C8:4E:E5:8F:13:C6:27:30:72:9A:6D:00:5D:00:EB:2B:6E:29
X509v3 Authority Key Identifier:
keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:30:8c:ab:68:e5:9e:c1:93:a3:6c:9b:06:86:74:0a:4e:73:
f9:99:d0:49:ce:af:dd:79:4c:cd:2c:d9:42:ab:aa:cf:b4:83:
b8:c9:f5:4f:5f:64:b5:e9:48:e9:95:65:ff:f7:62:00:28:58:
ee:70:d6:b6:31:dd:72:7a:bc:de:10:11:93:54:09:6b:97:de:
95:47:dc:ba:57:a3:21:cf:68:4a:4f:92:e0:0d:d0:a0:60:a6:
5a:a1:91:fb:cb:f2:5f:ff:ba:92:df:5a:42:b9:83:ae:2a:32:
98:16:69:bc:94:78:db:e7:9f:43:ce:d4:ce:cd:de:00:ba:49:
69:b0:11:91:29:78:0a:a8:80:5d:27:d1:24:1b:03:87:2e:83:
7a:3a:1c:1f:72:b1:be:d4:29:e0:92:42:5b:6a:fb:03:f8:62:
2a:f0:89:ee:d3:b9:0f:23:94:a7:7f:8b:8d:39:9a:c4:28:6a:
50:0f:c3:82:cf:6b:d1:fe:1f:ae:44:44:62:18:77:1b:be:77:
9d:b9:6e:66:06:1d:59:c0:29:8c:94:b6:2f:fb:f6:5f:87:0b:
99:28:ae:73:7c:2b:d9:56:7d:58:d2:5f:52:e9:ae:1d:49:05:
c9:be:d6:68:ff:20:7f:2e:29:47:e2:52:b7:6e:1a:82:e9:26:
09:30:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:07 2026 by rpki-client