
$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
File: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json)
Hash identifier: gGtYv7mBppFDQN0DpXNyaIAdZXWqpApkXhuvyqKtmTA=
Subject key identifier: DC:23:41:BD:6B:48:D0:E3:88:1D:66:0F:5F:10:90:74:46:4B:7B:C8
Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F
Certificate issuer: /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
Certificate serial: 0F9DD9426B62AEC1094618F170291716BDC39F26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
Manifest number: C5
Signing time: Fri 17 Apr 2026 04:31:47 +0000
Manifest this update: Fri 17 Apr 2026 04:26:47 +0000
Manifest next update: Sat 18 Apr 2026 07:35:47 +0000
Files and hashes: 1: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: S6egxdx0Kp0+nHrV73fWq0yVEyAnhQVws7tL9AH4xiA=)
2: 323830343a393663383a3a2f33322d3438203d3e20323734333539.roa (hash: r9ehMvK9WF6GKjJBopb+wu5KC0PRaqLjucxj5Cw0zkw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl
rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 07:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9d:d9:42:6b:62:ae:c1:09:46:18:f1:70:29:17:16:bd:c3:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
Validity
Not Before: Apr 17 04:26:47 2026 GMT
Not After : Apr 18 07:35:47 2026 GMT
Subject: CN=DC2341BD6B48D0E3881D660F5F109074464B7BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:a5:72:a3:4e:a5:b3:a5:c9:3d:71:71:16:
b6:94:5a:f9:b3:56:57:f8:1c:c9:44:ee:c2:0a:8e:
74:45:6a:6c:23:ab:05:9b:f0:b3:42:e2:f3:3e:54:
2f:1e:8a:2c:99:3e:ab:01:1f:4c:d1:d2:51:92:2c:
5e:14:12:f3:1e:b4:cb:2e:83:10:8c:7b:57:d4:ab:
1f:bb:4f:32:69:c1:96:c0:2d:54:89:f0:35:1b:bf:
27:4d:f9:90:71:a4:f6:a0:75:5b:74:25:f4:8a:56:
22:71:66:3e:75:e9:dc:b8:b2:4c:72:f9:76:a9:aa:
07:e2:92:0a:9c:e9:dc:95:87:40:4d:39:72:cd:3b:
7e:3d:17:28:91:fa:bc:59:c0:04:c1:df:25:df:3f:
2d:02:0e:24:29:01:36:c4:f8:dc:4c:92:87:94:5f:
0d:af:12:ca:81:32:e7:52:3f:e4:73:82:ed:48:20:
9a:fc:67:5f:a5:55:ef:e0:d0:6c:93:93:40:94:06:
16:7d:d7:31:ae:50:a4:cd:a9:6f:91:b1:24:15:03:
31:ea:6f:77:00:2e:ea:a9:5e:f6:96:47:63:67:47:
c1:a7:68:20:ef:f5:0f:84:4a:b9:e4:0d:e6:0a:3e:
73:d0:22:4a:16:b9:d8:50:11:d7:f8:e4:71:4b:c8:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:41:BD:6B:48:D0:E3:88:1D:66:0F:5F:10:90:74:46:4B:7B:C8
X509v3 Authority Key Identifier:
keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fc:ba:73:ed:e0:8c:7e:1a:d3:45:93:89:e1:11:ba:fa:15:
c8:d4:e2:e9:3c:cd:5a:65:03:4f:96:f2:c7:8b:94:25:6b:c4:
d0:3d:fc:bd:e8:9f:46:a4:1b:15:6f:95:0b:db:f8:95:42:f7:
31:2a:03:7a:82:e8:98:c9:de:38:70:b4:c6:fb:da:2e:e5:0c:
93:9a:5f:a7:7f:16:7c:26:c5:f6:5f:d1:bb:93:9b:64:30:aa:
91:26:2f:33:fa:91:01:a1:27:8d:ee:1f:d7:54:94:fb:64:c8:
d2:f4:2b:95:42:f3:82:a9:23:8d:e8:4c:8d:4c:83:72:87:05:
6e:3f:93:29:9f:87:09:0c:40:64:88:2f:3a:e5:52:7c:23:4b:
78:06:fc:59:60:29:8c:09:83:40:96:e2:34:4a:f5:1c:2d:92:
11:bd:a9:ff:40:7f:0b:43:fa:77:01:a6:13:09:7c:06:21:b6:
e8:77:18:29:f6:d5:64:6f:f5:e9:07:57:9f:c9:b9:48:19:4f:
d5:87:00:53:97:6d:29:bb:4c:8c:58:78:e5:d1:57:3c:83:59:
a7:71:c7:ba:c9:52:66:99:5f:39:7d:36:e4:77:d2:2d:5f:d5:
e7:02:fc:db:d7:a6:3a:ac:8e:19:ca:2e:bd:a2:b0:21:f1:dd:
bf:f0:ab:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD53ZQmtirsEJRhjxcCkXFr3DnyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3
OTEwRjgzRjAeFw0yNjA0MTcwNDI2NDdaFw0yNjA0MTgwNzM1NDdaMDMxMTAvBgNV
BAMTKERDMjM0MUJENkI0OEQwRTM4ODFENjYwRjVGMTA5MDc0NDY0QjdCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgKVyo06ls6XJPXFxFraUWvmz
Vlf4HMlE7sIKjnRFamwjqwWb8LNC4vM+VC8eiiyZPqsBH0zR0lGSLF4UEvMetMsu
gxCMe1fUqx+7TzJpwZbALVSJ8DUbvydN+ZBxpPagdVt0JfSKViJxZj516dy4skxy
+Xapqgfikgqc6dyVh0BNOXLNO349FyiR+rxZwATB3yXfPy0CDiQpATbE+NxMkoeU
Xw2vEsqBMudSP+Rzgu1IIJr8Z1+lVe/g0GyTk0CUBhZ91zGuUKTNqW+RsSQVAzHq
b3cALuqpXvaWR2NnR8GnaCDv9Q+ESrnkDeYKPnPQIkoWudhQEdf45HFLyHi3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3CNBvWtI0OOIHWYPXxCQdEZLe8gwHwYDVR0j
BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt
WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4
NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1JtWWEvMC8z
QTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM/y6c+3gjH4a00WTieERuvoVyNTi6TzNWmUDT5byx4uUJWvE0D38veifRqQb
FW+VC9v4lUL3MSoDeoLomMneOHC0xvvaLuUMk5pfp38WfCbF9l/Ru5ObZDCqkSYv
M/qRAaEnje4f11SU+2TI0vQrlULzgqkjjehMjUyDcocFbj+TKZ+HCQxAZIgvOuVS
fCNLeAb8WWApjAmDQJbiNEr1HC2SEb2p/0B/C0P6dwGmEwl8BiG26HcYKfbVZG/1
6QdXn8m5SBlP1YcAU5dtKbtMjFh45dFXPINZp3HHuslSZplfOX025HfSLV/V5wL8
29emOqyOGcouvaKwIfHdv/Cr+Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:46 2026 by rpki-client