
$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
File: D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft (raw, json)
Hash identifier: TPlTuME5tiDqY12eCxOYj0PP2dP+eKeBdmi6nj/ot8c=
Subject key identifier: C8:F7:03:66:17:3D:D0:45:8B:50:0E:64:87:D8:C7:EB:6C:85:3C:58
Authority key identifier: D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B
Certificate issuer: /CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
Certificate serial: 24FB5BE8419EBDEDFDEC3F8D38EB92EEA4497BFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
Manifest number: 35
Signing time: Fri 17 Apr 2026 10:39:37 +0000
Manifest this update: Fri 17 Apr 2026 10:34:37 +0000
Manifest next update: Sat 18 Apr 2026 11:56:37 +0000
Files and hashes: 1: D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl (hash: UgmPZZmHs1ZYzTmLyH+YU9f3yECGWSWP+LlD8mBswHk=)
2: 34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa (hash: MhCZsK/qFboRps/9bWWgwEuEZuqpIW8pZCmtMIt/4PY=)
3: 323830343a346434633a3a2f33322d313238203d3e20323637343232.roa (hash: b2zwvRk6CLJXeep0vRY9NQiaidnBTToB/MBRW8j7PoI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl
rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 11:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fb:5b:e8:41:9e:bd:ed:fd:ec:3f:8d:38:eb:92:ee:a4:49:7b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
Validity
Not Before: Apr 17 10:34:37 2026 GMT
Not After : Apr 18 11:56:37 2026 GMT
Subject: CN=C8F70366173DD0458B500E6487D8C7EB6C853C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:be:fb:bb:78:24:84:a0:90:ae:9e:81:09:
b7:25:16:64:e7:26:9a:22:e2:6e:6d:87:67:6d:94:
77:7e:36:d6:20:8b:63:ce:c4:e0:1e:5e:14:1e:3a:
f6:3d:8f:4a:32:2b:3b:60:73:e5:6a:b7:6f:99:c5:
8b:df:4b:6c:49:c0:05:ec:f4:87:26:84:6f:3a:34:
06:af:f5:15:b3:d6:58:39:43:8d:f5:3c:78:ba:6c:
2d:90:6e:c9:88:4d:90:b2:77:36:bd:e1:4a:01:81:
d0:d4:69:62:1d:41:09:bd:5c:19:19:eb:cb:55:9a:
43:31:2e:60:46:8e:cf:94:eb:e4:a0:90:71:a2:ec:
6b:fc:62:e1:6c:4b:a2:f5:7c:17:a7:78:54:a8:a3:
50:76:e1:08:48:da:2d:8d:eb:b7:79:48:24:c2:3d:
55:34:51:32:26:a1:35:44:8a:af:ca:c9:b2:8a:96:
46:fe:d0:09:59:81:1e:0b:f5:a7:b1:ae:e6:f3:ee:
0d:c1:0b:0a:69:66:3c:4e:57:03:c6:16:d1:76:d6:
99:79:ca:14:ad:e0:e5:57:e5:26:b6:ad:b9:54:3a:
19:48:ea:ab:cb:6b:2d:82:70:84:17:57:43:c8:c8:
63:06:6d:95:af:cc:8f:7c:8d:4f:e3:81:57:90:ee:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:03:66:17:3D:D0:45:8B:50:0E:64:87:D8:C7:EB:6C:85:3C:58
X509v3 Authority Key Identifier:
keyid:D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7c:cd:84:ed:9f:b5:e8:32:c6:e9:86:21:b7:0f:07:89:2f:
b3:a7:34:36:d7:4d:48:b7:39:60:a3:57:85:63:2c:c1:65:3c:
90:ee:3b:5a:fc:25:27:72:8d:7f:0a:cb:a1:a9:8b:80:57:e4:
7a:97:bc:0d:ec:ea:72:3c:b9:3b:ed:d0:34:b3:12:16:9e:d1:
9d:90:71:af:d7:3a:c9:f9:99:c5:b0:90:81:c5:42:21:e3:49:
a3:0e:c7:9a:d5:e0:54:1a:0e:5e:27:fb:88:f8:55:67:24:1b:
91:38:4e:a7:c9:62:cb:fd:b6:b7:1c:95:ab:68:08:9a:eb:48:
18:8c:0d:0b:35:a6:60:06:e3:18:31:96:22:78:8a:54:7b:59:
ab:39:ab:d6:76:de:7b:1b:77:73:45:d9:e0:b7:e0:76:58:b0:
17:b8:d8:d2:b3:d8:67:ca:22:9f:54:d0:9c:f5:49:53:e2:2e:
7d:a8:c1:7d:fd:4e:86:26:57:c3:02:8b:3c:1b:7f:3b:f7:c8:
46:0f:41:58:9d:47:a2:da:03:0f:8c:a8:08:07:23:14:f1:96:
38:6d:68:e0:d0:1d:29:ba:10:8a:70:71:0b:e5:d4:a0:f8:16:
cc:fc:fb:0b:0a:c3:4b:17:ed:fd:32:ac:63:3c:bd:c5:2c:2f:
f3:b8:ab:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJPtb6EGeve397D+NOOuS7qRJe/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBRTRFMTYwMzU0MkYwQ0VBQzNCNUExREZDRkZDOTIy
ODA4REUxQjAeFw0yNjA0MTcxMDM0MzdaFw0yNjA0MTgxMTU2MzdaMDMxMTAvBgNV
BAMTKEM4RjcwMzY2MTczREQwNDU4QjUwMEU2NDg3RDhDN0VCNkM4NTNDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8777u3gkhKCQrp6BCbclFmTn
Jpoi4m5th2dtlHd+NtYgi2POxOAeXhQeOvY9j0oyKztgc+Vqt2+ZxYvfS2xJwAXs
9IcmhG86NAav9RWz1lg5Q431PHi6bC2QbsmITZCydza94UoBgdDUaWIdQQm9XBkZ
68tVmkMxLmBGjs+U6+SgkHGi7Gv8YuFsS6L1fBeneFSoo1B24QhI2i2N67d5SCTC
PVU0UTImoTVEiq/KybKKlkb+0AlZgR4L9aexrubz7g3BCwppZjxOVwPGFtF21pl5
yhSt4OVX5Sa2rblUOhlI6qvLay2CcIQXV0PIyGMGbZWvzI98jU/jgVeQ7n3FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyPcDZhc90EWLUA5kh9jH62yFPFgwHwYDVR0j
BBgwFoAU0q5OFgNULwzqw7Wh38/8kigI3hswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdm
TDEvMC9EMkFFNEUxNjAzNTQyRjBDRUFDM0I1QTFERkNGRkM5MjI4MDhERTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQUU0RTE2MDM1NDJGMENF
QUMzQjVBMURGQ0ZGQzkyMjgwOERFMUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdmTDEvMC9E
MkFFNEUxNjAzNTQyRjBDRUFDM0I1QTFERkNGRkM5MjI4MDhERTFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqXzNhO2ftegyxumGIbcPB4kvs6c0NtdNSLc5YKNXhWMswWU8kO47WvwlJ3KN
fwrLoamLgFfkepe8Dezqcjy5O+3QNLMSFp7RnZBxr9c6yfmZxbCQgcVCIeNJow7H
mtXgVBoOXif7iPhVZyQbkThOp8liy/22txyVq2gImutIGIwNCzWmYAbjGDGWIniK
VHtZqzmr1nbeext3c0XZ4LfgdliwF7jY0rPYZ8oin1TQnPVJU+IufajBff1OhiZX
wwKLPBt/O/fIRg9BWJ1HotoDD4yoCAcjFPGWOG1o4NAdKboQinBxC+XUoPgWzPz7
CwrDSxft/TKsYzy9xSwv87irOg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:37 2026 by rpki-client