
$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
File: CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft (raw, json)
Hash identifier: vjWZUA5BLAvIfKLYNupMzxPIaFSwQrVOIBTgsesoRuM=
Subject key identifier: BA:CB:0A:40:59:95:D1:18:A0:E9:B1:A9:4F:02:A9:48:3C:F8:C3:71
Authority key identifier: CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF
Certificate issuer: /CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF
Certificate serial: 4FC990AAFE2B3545586FC293ED002DB424A60D78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
Manifest number: 12
Signing time: Sun 12 Apr 2026 04:34:08 +0000
Manifest this update: Sun 12 Apr 2026 04:29:08 +0000
Manifest next update: Mon 13 Apr 2026 07:56:08 +0000
Files and hashes: 1: 3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa (hash: xz6DsVEuqM9pTOuVhswZzVRnjy0nzplVOcgfUWt64lI=)
2: CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl (hash: c+TzLu0kCH2wrxcDeFm2+dRVtqgdEVHOnz74VyouQms=)
3: 323830343a366432303a3a2f33322d3438203d3e20323730353134.roa (hash: qf5QNhPzKrw8/RZQZNr8z6Ue32Ms3xSNTdvui6JgW80=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl
rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 13 Apr 2026 07:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c9:90:aa:fe:2b:35:45:58:6f:c2:93:ed:00:2d:b4:24:a6:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF
Validity
Not Before: Apr 12 04:29:08 2026 GMT
Not After : Apr 13 07:56:08 2026 GMT
Subject: CN=BACB0A405995D118A0E9B1A94F02A9483CF8C371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:fd:d7:43:ec:48:7f:72:8b:a5:ae:34:8d:
5e:1f:0c:26:2e:52:be:91:cb:88:e8:dd:15:e5:68:
12:0b:c1:8e:d4:b7:dd:01:ba:fa:d3:22:de:6e:07:
bf:91:88:d6:e3:c4:e9:7a:ed:cc:84:26:6b:38:c5:
0e:7c:55:b6:1e:92:b7:1d:e3:e2:c1:27:69:1a:16:
d7:63:c5:29:4f:d2:a4:14:a1:42:74:cb:44:8a:64:
74:98:a4:5e:5b:65:52:f8:20:26:b3:76:23:ff:55:
6a:52:51:7f:33:f1:47:8a:d0:0b:b1:dc:46:6b:be:
33:f8:20:27:92:37:45:a3:7a:96:7a:81:6c:48:61:
86:67:b1:f6:fc:d0:56:30:63:30:0c:2c:b1:48:a5:
1a:b6:38:43:a3:dc:06:c3:a8:e0:8f:44:8e:94:9e:
cd:89:25:e1:f9:36:e5:9e:91:27:2e:4c:8d:6b:13:
20:b6:16:69:ea:c6:4c:1e:ab:0a:45:95:b8:6c:0f:
68:38:6b:47:de:20:cd:40:79:5c:39:97:28:0a:45:
e1:9e:39:3e:e6:6d:79:43:97:ad:f1:8e:d7:fa:9f:
5c:11:0f:90:cf:c3:89:da:0c:43:00:b9:7d:31:67:
69:3a:b5:4f:a8:4b:2c:0c:af:24:d2:bd:5b:eb:e9:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:0A:40:59:95:D1:18:A0:E9:B1:A9:4F:02:A9:48:3C:F8:C3:71
X509v3 Authority Key Identifier:
keyid:CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:27:ca:fa:cd:ba:80:f1:13:ff:f9:3e:5c:cc:a6:89:65:
02:b0:ec:12:13:f3:62:84:46:6a:26:44:f9:13:53:d9:3b:ce:
a4:ba:31:d1:9a:25:5e:51:74:0e:43:58:96:e4:9a:f9:4d:2d:
b0:5f:7a:1c:d4:b3:94:b2:f9:42:16:1a:e5:a7:dd:3c:94:ab:
4b:d0:af:60:fc:0f:ea:1a:73:cd:78:ac:50:54:4e:3c:81:6d:
91:70:e4:f6:2e:1a:b9:05:e0:09:2f:5c:3b:d0:ef:31:52:0b:
49:10:e7:a2:7a:19:37:5f:57:58:42:30:3b:58:36:66:67:12:
49:5a:1d:69:e8:85:7d:13:1e:bb:e7:cf:98:86:bb:43:3f:1b:
72:fa:7a:ef:15:fa:63:1e:43:3b:71:58:60:ea:2f:43:82:35:
53:f4:fa:b9:1b:52:79:51:ec:c7:ee:f0:d2:bd:f3:9a:0b:40:
ae:3e:ec:8b:a4:4e:df:ce:7c:a3:c7:3d:e4:91:ae:99:dd:d3:
b6:40:c9:26:e8:ba:23:3d:eb:78:98:e0:4f:67:13:0e:3e:58:
52:39:9e:e1:1f:47:22:72:ef:ce:a1:41:bc:9a:a5:27:3d:e0:
1e:8f:a5:89:10:7a:6a:9d:8e:8f:e1:21:63:7d:bd:47:1c:4e:
eb:0f:3b:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT8mQqv4rNUVYb8KT7QAttCSmDXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E1QjQyRjk5OEVBRTJFNzdCM0NBMzg3RTlCNkQ0ODRF
QjM5NTJERjAeFw0yNjA0MTIwNDI5MDhaFw0yNjA0MTMwNzU2MDhaMDMxMTAvBgNV
BAMTKEJBQ0IwQTQwNTk5NUQxMThBMEU5QjFBOTRGMDJBOTQ4M0NGOEMzNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH8f3XQ+xIf3KLpa40jV4fDCYu
Ur6Ry4jo3RXlaBILwY7Ut90BuvrTIt5uB7+RiNbjxOl67cyEJms4xQ58VbYekrcd
4+LBJ2kaFtdjxSlP0qQUoUJ0y0SKZHSYpF5bZVL4ICazdiP/VWpSUX8z8UeK0Aux
3EZrvjP4ICeSN0WjepZ6gWxIYYZnsfb80FYwYzAMLLFIpRq2OEOj3AbDqOCPRI6U
ns2JJeH5NuWekScuTI1rEyC2FmnqxkweqwpFlbhsD2g4a0feIM1AeVw5lygKReGe
OT7mbXlDl63xjtf6n1wRD5DPw4naDEMAuX0xZ2k6tU+oSywMryTSvVvr6Q/VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUussKQFmV0Rig6bGpTwKpSDz4w3EwHwYDVR0j
BBgwFoAUyltC+Zjq4ud7PKOH6bbUhOs5Ut8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFSc2VITVQ3Ykh0TlBpYVB2OFJGYUN3NWtSRTFXRzl5c2pDR0tORWJ3
dHAvMC9DQTVCNDJGOTk4RUFFMkU3N0IzQ0EzODdFOUI2RDQ4NEVCMzk1MkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUI0MkY5OThFQUUyRTc3
QjNDQTM4N0U5QjZENDg0RUIzOTUyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWFSc2VITVQ3Ykh0TlBpYVB2OFJGYUN3NWtSRTFXRzl5c2pDR0tORWJ3dHAvMC9D
QTVCNDJGOTk4RUFFMkU3N0IzQ0EzODdFOUI2RDQ4NEVCMzk1MkRGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdAknyvrNuoDxE//5PlzMpollArDsEhPzYoRGaiZE+RNT2TvOpLox0ZolXlF0
DkNYluSa+U0tsF96HNSzlLL5QhYa5afdPJSrS9CvYPwP6hpzzXisUFROPIFtkXDk
9i4auQXgCS9cO9DvMVILSRDnonoZN19XWEIwO1g2ZmcSSVodaeiFfRMeu+fPmIa7
Qz8bcvp67xX6Yx5DO3FYYOovQ4I1U/T6uRtSeVHsx+7w0r3zmgtArj7si6RO3858
o8c95JGumd3TtkDJJui6Iz3reJjgT2cTDj5YUjme4R9HInLvzqFBvJqlJz3gHo+l
iRB6ap2Oj+EhY329RxxO6w877g==
-----END CERTIFICATE-----
Generated at Mon Apr 13 01:33:49 2026 by rpki-client