
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
File: BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft (raw, json)
Hash identifier: lH6k52HVYWQfSkP07f7qn0iR09pkG2WylH7aLKVC4fs=
Subject key identifier: D4:6D:80:02:BF:C8:2F:0C:2D:BD:57:CE:87:96:12:2A:BF:1B:71:92
Authority key identifier: BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4
Certificate issuer: /CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4
Certificate serial: 155CAD3475BD373D32EF0AE074A70334AC3B2989
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
Manifest number: 9E
Signing time: Fri 17 Apr 2026 11:09:01 +0000
Manifest this update: Fri 17 Apr 2026 11:04:01 +0000
Manifest next update: Sat 18 Apr 2026 14:25:01 +0000
Files and hashes: 1: 323830343a6332633a3a2f33322d313238203d3e203238313931.roa (hash: DOPUXCHzSg+B3KrVTaoa/cCsDyL4h9g88EsNGnUalsc=)
2: 3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (hash: oUZXNFb2GR6UUeRTfeQToLXwsS/pEsCqQogh7JXARIY=)
3: 3138392e39302e33322e302f32302d3332203d3e203238313931.roa (hash: Tnxet1B56KRHDgiPUTdAQYrJWkjqMH/9nPrrsCnQKlQ=)
4: BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl (hash: yjd/Ibq8exT15YdlRlPB6vfGBpDZ6uS9cC1bzOCvBbM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl
rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 14:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5c:ad:34:75:bd:37:3d:32:ef:0a:e0:74:a7:03:34:ac:3b:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4
Validity
Not Before: Apr 17 11:04:01 2026 GMT
Not After : Apr 18 14:25:01 2026 GMT
Subject: CN=D46D8002BFC82F0C2DBD57CE8796122ABF1B7192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:81:df:19:d3:2f:72:6a:8a:05:af:31:83:
27:24:cd:9e:dd:8e:f1:41:1e:a2:e2:48:68:c9:73:
26:c8:f7:a8:6d:36:ca:a2:27:37:dc:7f:eb:6a:c3:
0e:b5:75:04:4c:48:23:e9:98:6e:0d:a3:6e:03:24:
7a:1d:f9:ed:7b:f8:f5:9d:d1:83:df:86:0c:59:08:
c4:0a:37:66:5d:37:61:8b:c7:86:d4:98:bf:84:ba:
3a:1f:e1:c9:7e:04:77:84:d6:38:6d:d8:10:e9:ba:
51:0e:0e:41:37:88:33:16:c4:d3:71:cd:e4:6e:0a:
66:26:8e:6d:b4:84:b8:d0:b5:05:1c:94:3a:6e:2c:
c0:6e:6c:59:09:7f:09:f6:8d:8e:13:4e:05:57:46:
d2:8a:87:74:c5:03:29:7e:e2:c4:50:6e:36:2b:e5:
dd:75:ab:15:5b:98:69:d6:eb:88:df:fd:92:a9:45:
3c:f4:7f:28:66:ef:f7:b4:d1:d2:91:90:d1:73:0b:
4d:66:39:18:5b:1f:b5:fa:42:7b:fd:ee:c6:38:68:
89:b4:82:94:53:0d:ea:fb:f6:4b:d7:64:7e:69:b6:
42:b6:4f:b2:20:6d:3d:7e:a2:0d:76:0c:52:44:4b:
c2:23:42:e6:22:bb:d9:85:43:c3:2d:25:4b:87:b9:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:80:02:BF:C8:2F:0C:2D:BD:57:CE:87:96:12:2A:BF:1B:71:92
X509v3 Authority Key Identifier:
keyid:BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:10:e0:70:79:2d:43:fd:ac:c9:ec:3e:3a:ad:a6:d3:7a:
14:ff:55:bc:21:09:d5:27:c2:71:a6:e3:1a:f0:d7:26:b2:53:
05:6c:50:cd:6d:3a:7d:d7:70:1a:31:9b:f8:7c:28:dc:13:66:
11:d1:dc:80:a5:a7:39:26:4a:c6:3d:d5:47:77:58:45:0a:86:
3a:d9:20:cb:59:e1:7d:bf:16:f1:17:43:9d:28:cc:01:79:28:
ff:da:72:db:eb:99:2d:c6:b4:46:10:75:dc:bb:2f:e8:39:62:
89:d8:60:9b:18:e0:6d:db:c4:fb:34:bf:08:71:35:4a:2a:22:
18:b4:a6:b2:cf:47:a1:70:68:ed:c3:d0:27:91:45:f1:28:80:
21:92:3e:37:a7:b1:ba:dd:d8:96:cc:4c:e4:fd:71:6b:6f:c8:
dd:15:31:e5:79:20:37:1c:2c:80:df:69:d2:54:ba:93:66:d7:
30:40:00:ef:89:54:6e:b5:ba:27:60:c7:7b:36:42:6c:13:54:
a6:97:39:cb:8c:08:54:56:1b:f9:d3:39:a0:fd:cf:f2:d0:eb:
03:6b:31:08:c7:70:37:ea:cf:d5:b1:55:1c:c6:54:dc:74:bf:
ab:6f:10:5c:88:84:2a:0d:8c:3e:e5:bd:30:c2:b2:0c:54:24:
76:d3:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:29:32 2026 by rpki-client