
$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
File: CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json)
Hash identifier: zoFRcbvV/aw/oTmNFiAUXtMI6eIuXPkva0r+ctJBu3s=
Subject key identifier: 49:8B:A3:56:99:F8:12:07:21:E8:D4:E3:F3:1F:F0:60:C3:F4:41:DA
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Certificate issuer: /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial: 5B1CA051FFC6A8FF994483BE4E0F69C4D5E90003
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
Manifest number: 0251
Signing time: Sun 01 Mar 2026 08:26:58 +0000
Manifest this update: Sun 01 Mar 2026 08:21:58 +0000
Manifest next update: Mon 02 Mar 2026 08:43:58 +0000
Files and hashes: 1: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: G28Szm1Y8cwfr9wpmu5v7EZ/QxSHLuUrGNxhsN6J2Dc=)
2: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: kumICfQm3lKzccvXKKN6/U04OECFspM9YZuLvViEwn4=)
3: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: AZm0gSmjKDMMbQ/Lcc959pL+yCGBA0NcroEbrfe0M78=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 08:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1c:a0:51:ff:c6:a8:ff:99:44:83:be:4e:0f:69:c4:d5:e9:00:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Validity
Not Before: Mar 1 08:21:58 2026 GMT
Not After : Mar 2 08:43:58 2026 GMT
Subject: CN=498BA35699F8120721E8D4E3F31FF060C3F441DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:61:d1:c1:42:c7:eb:5d:83:9d:50:62:36:
fc:08:34:ba:c9:a9:e9:89:7c:4f:fa:fd:33:88:3b:
16:e5:42:6f:12:a4:97:84:aa:ac:ef:25:59:af:ad:
10:07:eb:b8:3c:11:44:d9:95:38:bc:33:73:2a:11:
e9:b2:aa:8d:1e:32:10:9e:9c:aa:4d:66:7f:1f:4c:
5d:fb:00:98:87:df:fc:ef:cb:9c:9f:45:1d:b1:c9:
d6:2b:49:97:f4:c8:40:70:ee:9a:cf:98:97:93:ed:
f4:96:ea:25:9a:00:00:df:71:2b:58:81:df:29:55:
92:1b:42:8e:9f:a3:77:b9:bb:0c:fa:7b:a7:8c:24:
52:5a:64:8b:60:bb:c1:83:9d:87:19:99:ab:ff:4c:
88:7c:3c:e4:8f:da:eb:2c:c7:38:79:12:54:75:f8:
96:fb:b3:f0:6d:98:e5:86:c3:43:2a:43:1e:8c:0a:
ea:c9:e6:71:92:f0:2c:a5:a6:a4:cb:50:0f:aa:f6:
73:44:74:e4:1a:8f:7b:d1:94:93:1b:7e:bd:8a:06:
c2:36:8e:6a:9f:27:79:ea:3b:68:96:ed:7d:5a:9e:
4e:2d:29:dd:2d:26:74:8a:69:41:c2:2f:51:d3:a2:
61:76:81:1b:dd:94:81:46:36:ef:61:42:85:c9:29:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:A3:56:99:F8:12:07:21:E8:D4:E3:F3:1F:F0:60:C3:F4:41:DA
X509v3 Authority Key Identifier:
keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:17:6a:82:4a:4e:6d:be:9c:0b:1c:bd:58:5c:c7:4e:66:a0:
63:fc:36:ea:e4:8d:ea:18:93:5f:86:e6:e6:66:24:f2:bc:df:
38:82:65:26:f8:8e:15:b7:9a:25:5b:71:c8:2a:cb:80:79:43:
74:74:0f:28:49:77:cc:40:78:c5:91:82:b4:dd:30:7e:7b:72:
d8:52:ed:46:f7:53:ba:ad:92:47:aa:ca:9f:81:90:a1:a7:1b:
08:23:b3:95:8f:bf:16:20:cd:d3:03:7e:72:77:d4:c9:2e:22:
9e:a5:de:16:8b:c6:72:77:35:cb:b2:d7:22:2d:f0:a5:56:0d:
0b:67:68:5f:76:a0:49:bb:28:18:b1:93:71:4d:3e:0f:a7:81:
0f:62:76:f9:6d:42:82:16:af:dc:7d:2b:d7:73:e3:7b:98:e5:
d7:a8:58:48:fe:d9:ef:73:92:de:15:24:38:e6:a5:19:ac:e3:
e5:d8:ef:18:e1:c5:73:66:71:6e:06:ab:12:36:47:2f:a0:e0:
2d:cd:cc:43:fe:7c:0a:2a:f3:86:ad:ef:79:d5:fb:d2:78:84:
1d:75:a9:94:57:84:ae:66:e3:d2:04:66:d4:ef:0b:1d:0a:3d:
cb:d7:48:53:aa:a6:ee:27:76:6d:ad:22:42:66:bb:e7:09:00:
7b:70:41:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWxygUf/GqP+ZRIO+Tg9pxNXpAAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EwOUNFODdENzk2MjcyMjQ1MUY5QkIxQjBCQUJFQjY0
MTAyNDUyNjAeFw0yNjAzMDEwODIxNThaFw0yNjAzMDIwODQzNThaMDMxMTAvBgNV
BAMTKDQ5OEJBMzU2OTlGODEyMDcyMUU4RDRFM0YzMUZGMDYwQzNGNDQxREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/mHRwULH612DnVBiNvwINLrJ
qemJfE/6/TOIOxblQm8SpJeEqqzvJVmvrRAH67g8EUTZlTi8M3MqEemyqo0eMhCe
nKpNZn8fTF37AJiH3/zvy5yfRR2xydYrSZf0yEBw7prPmJeT7fSW6iWaAADfcStY
gd8pVZIbQo6fo3e5uwz6e6eMJFJaZItgu8GDnYcZmav/TIh8POSP2ussxzh5ElR1
+Jb7s/BtmOWGw0MqQx6MCurJ5nGS8CylpqTLUA+q9nNEdOQaj3vRlJMbfr2KBsI2
jmqfJ3nqO2iW7X1ank4tKd0tJnSKaUHCL1HTomF2gRvdlIFGNu9hQoXJKaZDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSYujVpn4Egch6NTj8x/wYMP0QdowHwYDVR0j
BBgwFoAUygnOh9eWJyJFH5uxsLq+tkECRSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0ho
ZVkvMS9DQTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMDlDRTg3RDc5NjI3MjI0
NTFGOUJCMUIwQkFCRUI2NDEwMjQ1MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0hoZVkvMS9D
QTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUhdqgkpObb6cCxy9WFzHTmagY/w26uSN6hiTX4bm5mYk8rzfOIJlJviOFbea
JVtxyCrLgHlDdHQPKEl3zEB4xZGCtN0wfnty2FLtRvdTuq2SR6rKn4GQoacbCCOz
lY+/FiDN0wN+cnfUyS4inqXeFovGcnc1y7LXIi3wpVYNC2doX3agSbsoGLGTcU0+
D6eBD2J2+W1Cghav3H0r13Pje5jl16hYSP7Z73OS3hUkOOalGazj5djvGOHFc2Zx
bgarEjZHL6DgLc3MQ/58Cirzhq3vedX70niEHXWplFeErmbj0gRm1O8LHQo9y9dI
U6qm7id2ba0iQma75wkAe3BBGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:49 2026 by rpki-client