
$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
File: 18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft (raw, json)
Hash identifier: 7ATiiPPAne5jUstZCJnGwyBlC8jRpGMuCv/0CFomO2c=
Subject key identifier: 84:00:AE:90:A5:02:05:07:C1:06:B2:5E:17:69:5F:12:85:DE:F6:4A
Authority key identifier: 18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F
Certificate issuer: /CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
Certificate serial: 6D1A6CE5839CF3729F25B9708D3FF0F73068B523
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
Manifest number: D2
Signing time: Mon 02 Mar 2026 03:14:23 +0000
Manifest this update: Mon 02 Mar 2026 03:09:23 +0000
Manifest next update: Tue 03 Mar 2026 04:23:23 +0000
Files and hashes: 1: 3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (hash: aVYZixEJOQPS3q3LNRf1+bi9wIOEct5Sgq5Pj4n1J2c=)
2: 3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (hash: rh97MAAWm3VkCmx9gUk9tJuUFAvZ6BW0aCVqK93ohx8=)
3: 3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (hash: np+an034q6da9/NJZqksyQdEHZlPOnhDi8N/bPfxYT4=)
4: 3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (hash: d+F/MoZB9dIyvh9ZfCYZnxIIMgbORW/1yn8Ti89220g=)
5: 3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (hash: y3i+tL32Gt1MzIbujXnfGHhx+RPfsm1jXKbGTm4P450=)
6: 3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (hash: 1EPafl6/j4xS5Z9rsZ4zDN5lPIhIVttNgxoQkt7bNl4=)
7: 18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl (hash: 0zrMA3RXx+c/wYH3yuE1bnhdURvfyH3D2isABQBGRHI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl
rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 04:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1a:6c:e5:83:9c:f3:72:9f:25:b9:70:8d:3f:f0:f7:30:68:b5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
Validity
Not Before: Mar 2 03:09:23 2026 GMT
Not After : Mar 3 04:23:23 2026 GMT
Subject: CN=8400AE90A5020507C106B25E17695F1285DEF64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:f0:dc:55:89:96:48:c3:82:f7:7f:3a:de:
3c:0d:05:a6:8c:c2:0c:60:65:11:f3:c9:64:56:46:
ab:42:0d:c5:c7:94:58:45:57:08:a4:23:cf:2f:4a:
e3:d1:77:b2:a1:48:89:e9:f4:bf:d8:18:77:99:05:
6a:03:66:d7:78:62:9f:82:ba:6b:6d:18:e5:04:cf:
32:67:8b:67:34:02:3e:df:e0:01:da:8a:d8:f4:05:
6b:6b:d9:4f:c1:fe:28:d7:6d:31:43:a8:42:c1:fd:
a7:af:1c:f5:a5:1c:04:78:0d:de:2e:fd:47:f2:6e:
fb:c0:7b:85:16:35:01:ec:aa:44:f1:2a:22:b1:8e:
05:84:e9:dc:c7:6d:af:bf:2a:55:89:9e:4a:78:8e:
21:57:2f:69:37:fd:97:b3:e9:51:b1:07:93:b5:07:
0f:6d:42:1a:c6:1e:c5:93:7a:7a:64:69:a8:26:63:
2c:82:18:13:f9:c3:06:f6:99:d7:fe:b9:4c:c5:ab:
26:8b:38:4e:b7:64:f5:1a:95:b8:33:bf:26:00:df:
81:a1:c5:04:f8:38:43:90:33:5e:43:b9:84:72:6d:
ad:e8:a6:2f:29:95:e0:cd:df:da:ce:f7:25:71:aa:
1a:59:de:18:07:77:7e:b3:07:8c:6a:1a:75:ba:e5:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:00:AE:90:A5:02:05:07:C1:06:B2:5E:17:69:5F:12:85:DE:F6:4A
X509v3 Authority Key Identifier:
keyid:18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d3:00:07:11:52:1d:84:44:c6:d7:2a:c9:56:84:e4:53:e2:
d2:24:f2:e6:ec:5c:0d:46:25:df:64:da:cf:75:04:cf:a7:4e:
4d:a5:fa:e3:80:46:f6:0c:58:b1:ce:c7:ae:4c:39:c7:13:32:
41:8d:8e:1f:85:e2:55:08:71:c9:68:4b:8e:41:42:00:d6:a2:
a0:84:85:3a:8e:4e:a9:e9:27:de:11:c1:d5:23:07:09:53:bb:
d5:a3:da:5f:b8:4b:6c:08:c5:1a:c8:b5:16:9e:f7:3c:a4:f0:
6b:61:53:bc:14:5d:3d:3e:3f:09:8d:8c:2c:06:20:11:c0:e0:
88:a4:c7:70:31:35:32:8e:aa:6a:6e:6b:81:d3:67:34:49:6c:
2d:ea:95:b1:29:50:f6:20:0b:e6:5d:aa:e6:d7:90:5d:64:9b:
68:ad:1d:6d:c0:75:36:c7:50:90:c1:5a:12:70:81:e9:b6:66:
42:f0:59:dc:15:90:1f:92:52:6f:18:d6:fb:da:39:fa:f3:4d:
8d:46:88:5a:c9:64:01:82:b0:36:5a:a6:4c:c3:9c:2b:53:e4:
8a:3b:bd:9c:b2:9a:84:7c:dc:e0:19:55:8b:2a:1d:a9:41:d2:
85:9b:c6:ba:32:01:3a:1d:c6:c5:b0:10:db:bc:1d:da:52:2c:
9a:e4:14:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbRps5YOc83KfJblwjT/w9zBotSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThEMkI5RDZFNTRFRDc5NUU5Qjc4MjhFMDQyRTM4RTc1
RTkwMUU5RjAeFw0yNjAzMDIwMzA5MjNaFw0yNjAzMDMwNDIzMjNaMDMxMTAvBgNV
BAMTKDg0MDBBRTkwQTUwMjA1MDdDMTA2QjI1RTE3Njk1RjEyODVERUY2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqPDcVYmWSMOC93863jwNBaaM
wgxgZRHzyWRWRqtCDcXHlFhFVwikI88vSuPRd7KhSInp9L/YGHeZBWoDZtd4Yp+C
umttGOUEzzJni2c0Aj7f4AHaitj0BWtr2U/B/ijXbTFDqELB/aevHPWlHAR4Dd4u
/UfybvvAe4UWNQHsqkTxKiKxjgWE6dzHba+/KlWJnkp4jiFXL2k3/Zez6VGxB5O1
Bw9tQhrGHsWTenpkaagmYyyCGBP5wwb2mdf+uUzFqyaLOE63ZPUalbgzvyYA34Gh
xQT4OEOQM15DuYRyba3opi8pleDN39rO9yVxqhpZ3hgHd36zB4xqGnW65TSRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhACukKUCBQfBBrJeF2lfEoXe9kowHwYDVR0j
BBgwFoAUGNK51uVO15Xpt4KOBC44516QHp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMC8xOEQyQjlENkU1NEVENzk1RTlCNzgyOEUwNDJFMzhFNzVFOTAxRTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RDJCOUQ2RTU0RUQ3OTVF
OUI3ODI4RTA0MkUzOEU3NUU5MDFFOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThxZ28vMC8x
OEQyQjlENkU1NEVENzk1RTlCNzgyOEUwNDJFMzhFNzVFOTAxRTlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkdMABxFSHYRExtcqyVaE5FPi0iTy5uxcDUYl32Taz3UEz6dOTaX644BG9gxY
sc7Hrkw5xxMyQY2OH4XiVQhxyWhLjkFCANaioISFOo5Oqekn3hHB1SMHCVO71aPa
X7hLbAjFGsi1Fp73PKTwa2FTvBRdPT4/CY2MLAYgEcDgiKTHcDE1Mo6qam5rgdNn
NElsLeqVsSlQ9iAL5l2q5teQXWSbaK0dbcB1NsdQkMFaEnCB6bZmQvBZ3BWQH5JS
bxjW+9o5+vNNjUaIWslkAYKwNlqmTMOcK1Pkiju9nLKahHzc4BlViyodqUHShZvG
ujIBOh3GxbAQ27wd2lIsmuQU0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:15:06 2026 by rpki-client