
$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
File: 24433D21977FD690D9A22FE9B7A0D866F38A662D.mft (raw, json)
Hash identifier: oyyg6duowaoS5+Ew6OwixfWunaYfWE2N4BiS2VcgHpc=
Subject key identifier: 20:B4:9A:D2:68:64:6B:8C:C0:5F:41:4F:51:B1:3F:5A:D2:9C:08:F5
Authority key identifier: 24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
Certificate issuer: /CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
Certificate serial: 0472B03D26665D4566BDF31B3737BE51CBF6FF15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
Manifest number: 21
Signing time: Fri 17 Apr 2026 23:07:01 +0000
Manifest this update: Fri 17 Apr 2026 23:02:01 +0000
Manifest next update: Sun 19 Apr 2026 00:52:01 +0000
Files and hashes: 1: 323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (hash: jZYoQdTQfom+0sI79xqowlSObfE7p/Ep3Qqy1pznBtU=)
2: 3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (hash: neLDLxoA7Qh2iy+WwgpFav7BGrCV/fuOmrMo/OfWIKw=)
3: 24433D21977FD690D9A22FE9B7A0D866F38A662D.crl (hash: YSpSugoMwYvrbdlvhNoyYNoNWnUBnpyLg1ORM/+Bhfw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl
rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 00:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:72:b0:3d:26:66:5d:45:66:bd:f3:1b:37:37:be:51:cb:f6:ff:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
Validity
Not Before: Apr 17 23:02:01 2026 GMT
Not After : Apr 19 00:52:01 2026 GMT
Subject: CN=20B49AD268646B8CC05F414F51B13F5AD29C08F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:e5:d2:d3:f4:bc:ad:cf:bb:9a:4a:90:05:
28:66:56:f2:a3:fb:56:78:d6:fc:e3:bd:a5:67:81:
ef:4d:19:02:4c:5e:01:73:31:24:a0:1f:34:4e:38:
ea:02:76:08:4c:c9:90:00:a0:0a:41:29:3b:e7:de:
6e:fa:30:b2:eb:aa:3b:4f:9b:36:9c:12:43:2c:e7:
ae:d7:70:60:82:00:9e:92:62:9a:d9:e4:eb:c3:d6:
fb:9a:a8:4f:0a:fb:24:07:e6:0b:8b:97:a6:6e:b2:
c6:31:72:72:1f:b8:37:c6:7d:cd:9f:57:7c:cf:d7:
1f:c5:bd:0f:29:b1:3a:2d:59:75:fa:cf:85:2f:7a:
9e:02:ed:0e:2b:42:0a:04:4c:67:ce:6d:58:f4:2a:
88:50:98:ac:0e:65:d3:b2:6a:f3:dc:94:6e:60:6a:
0a:81:d9:80:df:f9:9e:1c:7b:93:76:fe:2c:70:09:
e0:ec:70:29:dc:63:1c:85:e6:6e:26:90:fa:5d:71:
e0:ea:38:d6:e6:a5:bd:3c:42:3b:87:3f:08:b5:0d:
53:0a:39:ca:75:14:6e:94:09:5e:b3:43:59:17:f3:
72:7f:e3:4c:49:53:0c:3a:72:be:29:9e:25:66:7d:
01:8e:60:d4:e8:e2:fb:c6:9f:27:53:1c:cb:ed:60:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:9A:D2:68:64:6B:8C:C0:5F:41:4F:51:B1:3F:5A:D2:9C:08:F5
X509v3 Authority Key Identifier:
keyid:24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0f:69:91:35:2d:f1:b3:1d:9a:0f:51:a4:c2:8f:44:25:e9:
a2:56:e4:c4:f8:50:a7:e6:f5:6e:74:a5:90:15:cf:f3:bd:cb:
8f:0c:4e:b8:35:ae:6f:6e:fd:bd:19:7a:00:93:11:60:60:f5:
fe:15:7c:67:6d:09:b5:5e:e0:4b:92:ba:80:a1:c8:cc:ad:98:
62:09:2f:46:f9:77:1d:36:ba:5a:b1:2f:8a:d1:cf:6c:66:b3:
fd:5b:3e:2c:af:6a:76:8e:d2:bc:ee:93:cc:f7:5a:f1:ec:e1:
bf:e7:9d:29:08:21:b3:95:02:3d:11:ec:d2:6f:e8:cf:82:2a:
00:50:f3:91:da:4f:3d:e3:3f:99:7d:e9:71:b8:1b:2c:ea:d6:
76:d6:f6:9f:d2:62:15:db:be:bc:eb:44:7f:c4:85:9b:06:e8:
8b:77:7a:1a:40:38:ea:c8:2e:d9:72:35:18:3c:65:8a:ab:7a:
ac:eb:0c:c4:eb:4a:c0:d6:40:88:e8:06:fb:c1:8c:57:ef:7e:
86:08:5f:34:15:c1:0f:45:b2:2f:45:d9:36:0e:ca:ba:5c:78:
79:3f:93:3a:bb:92:9d:d6:1c:5e:21:33:a4:73:b0:09:f1:a6:
e3:ac:30:9f:48:91:5f:9f:53:47:5f:22:b5:4f:6d:35:04:3f:
4e:ea:dd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:27 2026 by rpki-client