
$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.mft
File: 4DEBE74EF874E44F597E991EC22031DD6645D0E5.mft (raw, json)
Hash identifier: ng+Jgra2iDWInnVlvbgvzwn4NenmC/o30bG6PL1TE+E=
Subject key identifier: 68:E1:DA:87:7D:61:36:DD:D1:83:44:1A:E9:35:5C:13:E9:21:65:13
Authority key identifier: 4D:EB:E7:4E:F8:74:E4:4F:59:7E:99:1E:C2:20:31:DD:66:45:D0:E5
Certificate issuer: /CN=4DEBE74EF874E44F597E991EC22031DD6645D0E5
Certificate serial: 7A5818A097E6B232C48231275557B3D0FCC5DC75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DEBE74EF874E44F597E991EC22031DD6645D0E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.mft
Manifest number: 24
Signing time: Fri 17 Apr 2026 18:53:53 +0000
Manifest this update: Fri 17 Apr 2026 18:48:53 +0000
Manifest next update: Sat 18 Apr 2026 20:41:53 +0000
Files and hashes: 1: 323830343a316533343a3a2f33322d313238203d3e20323634343134.roa (hash: ODSxY+WJuadwdnhuoQhgLVgPIYnsJVsPqcUOE8A06co=)
2: 3133312e3232312e36302e302f32322d3332203d3e20323634343134.roa (hash: 84mVDZj4jK3hdKAZVolYIElzpCs3yK4mbmLL8i4H128=)
3: 4DEBE74EF874E44F597E991EC22031DD6645D0E5.crl (hash: boUG+r4j2Wdn550ODaKyPkd/y96x7nsVt/2pbroHzK8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.crl
rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DEBE74EF874E44F597E991EC22031DD6645D0E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 20:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:58:18:a0:97:e6:b2:32:c4:82:31:27:55:57:b3:d0:fc:c5:dc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DEBE74EF874E44F597E991EC22031DD6645D0E5
Validity
Not Before: Apr 17 18:48:53 2026 GMT
Not After : Apr 18 20:41:53 2026 GMT
Subject: CN=68E1DA877D6136DDD183441AE9355C13E9216513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:20:70:f1:3e:58:fe:9f:d8:4d:df:54:e1:
4d:56:8d:3f:01:10:59:6d:65:af:96:6f:01:d5:ff:
86:fd:28:ad:1d:a2:1d:e6:f3:53:d5:75:4a:fd:e4:
09:06:7b:20:8d:e0:8a:8a:6f:b2:b7:55:ab:f5:3c:
c6:d0:f1:44:57:73:6e:c5:66:33:5f:d4:7d:d1:6e:
6e:4a:a0:fa:4d:9b:73:54:82:1a:5e:3d:d7:92:7f:
36:5a:05:96:26:bd:fb:94:0e:9d:a7:50:7f:88:ca:
20:c5:08:91:db:e1:08:cb:c8:4c:b0:53:b2:b0:63:
80:4e:fe:a6:4d:dc:b1:f8:51:f6:2b:81:cd:ee:64:
84:d9:83:3f:99:77:bc:62:be:b9:4c:ce:a5:57:01:
63:af:39:58:9e:48:e6:50:f3:fd:07:b8:d7:2d:f9:
89:48:5c:03:a2:65:e8:37:56:f4:24:a8:cc:02:bf:
fc:da:f6:86:0a:80:30:55:f6:86:54:3f:be:0d:0f:
55:1d:65:ef:ca:de:98:c6:a0:0a:01:80:ff:a7:5b:
b6:23:27:9d:f0:2d:f6:a3:71:4a:36:6c:d1:9e:82:
fa:6f:89:33:cb:e3:4a:bd:1a:d0:c0:00:90:7b:0e:
28:a6:7c:9c:e4:99:5e:0d:fd:82:5a:5e:da:dd:df:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:DA:87:7D:61:36:DD:D1:83:44:1A:E9:35:5C:13:E9:21:65:13
X509v3 Authority Key Identifier:
keyid:4D:EB:E7:4E:F8:74:E4:4F:59:7E:99:1E:C2:20:31:DD:66:45:D0:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DEBE74EF874E44F597E991EC22031DD6645D0E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:51:32:e3:ca:c9:9c:39:7c:17:5f:28:c4:7b:4d:75:2f:8c:
65:b9:f4:0b:c3:0b:de:04:f4:d2:e4:01:e1:67:d7:7d:df:64:
08:58:59:4d:2e:9c:99:45:e1:34:81:18:1c:dd:c6:b5:02:a5:
13:2b:49:88:13:e9:49:80:b1:aa:3f:48:d6:d0:76:3f:4e:16:
1b:ba:9b:85:1e:58:e8:f5:20:f4:17:95:08:1b:49:ce:2e:fb:
89:22:67:23:82:fb:ab:81:80:14:28:e8:43:ad:d6:62:27:6e:
52:f7:a2:ad:a7:37:bc:47:2e:d5:68:f6:9b:6f:d5:9b:99:90:
3e:fc:de:3a:94:e0:f6:2a:aa:f2:b3:02:0c:be:51:ae:40:a0:
f1:11:b4:bc:29:ab:85:d4:41:b6:d7:5a:a0:41:2d:75:69:93:
86:aa:cb:87:74:99:f9:41:1f:b5:7b:c1:99:f9:75:34:b6:8f:
17:33:94:eb:1c:11:3c:f0:f4:02:95:9b:e1:09:56:48:ac:8e:
56:83:10:8f:ed:9d:0c:c3:56:1e:4c:d4:e9:43:13:5d:0b:50:
86:77:1f:40:aa:c7:97:0b:88:f0:eb:1c:17:f8:ad:68:00:a3:
81:fd:e8:e8:4d:57:b1:43:29:17:4d:38:db:62:b0:52:5b:1e:
b0:5d:79:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUelgYoJfmsjLEgjEnVVez0PzF3HUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFQkU3NEVGODc0RTQ0RjU5N0U5OTFFQzIyMDMxREQ2
NjQ1RDBFNTAeFw0yNjA0MTcxODQ4NTNaFw0yNjA0MTgyMDQxNTNaMDMxMTAvBgNV
BAMTKDY4RTFEQTg3N0Q2MTM2REREMTgzNDQxQUU5MzU1QzEzRTkyMTY1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCCBw8T5Y/p/YTd9U4U1WjT8B
EFltZa+WbwHV/4b9KK0doh3m81PVdUr95AkGeyCN4IqKb7K3Vav1PMbQ8URXc27F
ZjNf1H3Rbm5KoPpNm3NUghpePdeSfzZaBZYmvfuUDp2nUH+IyiDFCJHb4QjLyEyw
U7KwY4BO/qZN3LH4UfYrgc3uZITZgz+Zd7xivrlMzqVXAWOvOVieSOZQ8/0HuNct
+YlIXAOiZeg3VvQkqMwCv/za9oYKgDBV9oZUP74ND1UdZe/K3pjGoAoBgP+nW7Yj
J53wLfajcUo2bNGegvpviTPL40q9GtDAAJB7DiimfJzkmV4N/YJaXtrd33AhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaOHah31hNt3Rg0Qa6TVcE+khZRMwHwYDVR0j
BBgwFoAUTevnTvh05E9ZfpkewiAx3WZF0OUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZh
OE0vMC80REVCRTc0RUY4NzRFNDRGNTk3RTk5MUVDMjIwMzFERDY2NDVEMEU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERUJFNzRFRjg3NEU0NEY1
OTdFOTkxRUMyMjAzMURENjY0NUQwRTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZhOE0vMC80
REVCRTc0RUY4NzRFNDRGNTk3RTk5MUVDMjIwMzFERDY2NDVEMEU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnlEy48rJnDl8F18oxHtNdS+MZbn0C8ML3gT00uQB4WfXfd9kCFhZTS6cmUXh
NIEYHN3GtQKlEytJiBPpSYCxqj9I1tB2P04WG7qbhR5Y6PUg9BeVCBtJzi77iSJn
I4L7q4GAFCjoQ63WYiduUveirac3vEcu1Wj2m2/Vm5mQPvzeOpTg9iqq8rMCDL5R
rkCg8RG0vCmrhdRBttdaoEEtdWmThqrLh3SZ+UEftXvBmfl1NLaPFzOU6xwRPPD0
ApWb4QlWSKyOVoMQj+2dDMNWHkzU6UMTXQtQhncfQKrHlwuI8OscF/itaACjgf3o
6E1XsUMpF00422KwUlsesF156Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:32:12 2026 by rpki-client