
$ rpki-client -vvf rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
File: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft (raw, json)
Hash identifier: g+mGU3asvFIvDK9UM1sGLYrtNCfJwAZTotZIG3Gjk5M=
Subject key identifier: 4E:E3:C3:D7:0E:64:C7:A2:CD:D3:59:01:7E:A1:10:AF:82:88:CE:AF
Authority key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
Certificate issuer: /CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
Certificate serial: 71203C468A45614B016FC9D2EA2BD15A49B3D5F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
Manifest number: 011D
Signing time: Fri 17 Apr 2026 06:32:44 +0000
Manifest this update: Fri 17 Apr 2026 06:27:44 +0000
Manifest next update: Sat 18 Apr 2026 10:08:44 +0000
Files and hashes: 1: 323830343a313463383a3a2f33322d313238203d3e20323633333530.roa (hash: X710oqaMA3JanrSPP1LTWK7F3nOBbtVEfY+7eFVHbpo=)
2: 3139312e33372e31322e302f32322d3332203d3e20313938393439.roa (hash: dUvPNyH+1sT9JEddjsNec3pJF/CutLJpkDRRP2ljdAI=)
3: 3139312e33372e31322e302f32322d3332203d3e20323633333530.roa (hash: K17H+8R3bf4Ik/EEIIS2q9ds9+VT0iYutYHN78cPwsM=)
4: 658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl (hash: fpUFagd6QF01QusjJrqKwvXuoDn6qUQ0nkNWFrjDdi8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl
rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 10:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:20:3c:46:8a:45:61:4b:01:6f:c9:d2:ea:2b:d1:5a:49:b3:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
Validity
Not Before: Apr 17 06:27:44 2026 GMT
Not After : Apr 18 10:08:44 2026 GMT
Subject: CN=4EE3C3D70E64C7A2CDD359017EA110AF8288CEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:ea:34:69:34:55:fb:a2:f1:dc:31:94:fa:
c8:ab:29:db:b4:be:fd:28:64:61:8f:97:08:f7:69:
11:5a:31:53:60:d9:de:4d:53:51:f9:eb:74:3b:f3:
41:1c:b1:c6:98:12:18:fe:49:58:c5:3a:18:ab:a8:
5e:cd:bb:cd:9b:23:b6:0e:bd:e2:d5:cc:a2:36:95:
2c:5d:1c:b1:87:07:58:ef:23:b9:4f:2b:d2:38:b0:
bb:1e:cb:f6:eb:0a:a1:4a:3e:f5:f3:45:af:32:5c:
24:f0:ff:a8:83:ee:21:cd:65:ab:52:92:c5:c4:0a:
7d:e8:04:33:f4:88:14:cf:1a:65:13:52:d3:d6:96:
65:b1:df:e6:4c:62:88:ba:de:ae:dd:87:a6:52:d7:
e2:97:cc:30:5a:14:96:24:3a:d1:e4:27:e5:5d:11:
c8:17:f3:bc:73:b5:4e:98:2d:b9:2e:11:0c:6f:10:
d5:dc:6d:de:ef:da:3c:28:7a:3b:50:f1:c3:75:24:
e0:36:d6:9f:62:b3:e2:de:8d:cd:3b:0c:4a:81:0b:
99:a6:6b:82:0c:50:0a:15:77:ac:83:70:b7:ca:eb:
24:b3:40:a8:69:3f:27:3c:8a:f6:33:00:9d:6d:6e:
35:4e:57:b3:c6:f2:4b:4e:8a:ed:98:0c:9e:52:b1:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:C3:D7:0E:64:C7:A2:CD:D3:59:01:7E:A1:10:AF:82:88:CE:AF
X509v3 Authority Key Identifier:
keyid:65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3b:7e:05:aa:47:05:ae:c0:2e:fe:4b:a0:b5:90:e5:ee:8d:
80:2d:9d:87:2d:61:ac:27:7a:d5:48:a7:ac:ae:c3:70:33:7f:
2b:0e:98:4b:ad:5f:64:51:ae:fd:5b:b8:06:02:04:12:b9:2f:
36:69:d9:d8:f3:b8:6f:70:be:45:0f:60:11:15:2f:a5:de:c1:
c0:5f:0c:51:33:22:e8:b2:f2:f1:f8:18:d7:49:a3:11:70:1a:
4c:6c:3a:b1:d4:b3:e6:af:ab:4b:db:f6:40:1f:65:b5:55:62:
d6:41:64:88:84:10:02:57:b3:e5:a1:f2:51:07:d1:58:99:e3:
e1:87:5e:17:89:40:79:65:64:12:ba:3d:43:1c:32:6d:d0:b0:
41:46:fd:b7:75:15:e4:bb:67:8d:dd:ac:7f:36:51:3b:73:c2:
ba:54:d8:80:1f:a1:e0:7f:c2:67:db:a7:77:e1:d1:99:b3:46:
19:62:1b:6c:c8:3b:f1:db:06:2f:0b:22:6b:49:11:00:f2:37:
87:1a:96:f4:bc:ff:f3:0d:2b:8c:12:81:8e:95:0b:d3:e9:37:
76:86:b2:ab:91:c5:4a:35:28:b8:cc:40:39:43:ac:b8:03:6a:
35:56:2a:1b:6e:eb:42:6f:73:79:33:8d:2f:91:a3:85:5e:05:
d0:ae:dc:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcSA8RopFYUsBb8nS6ivRWkmz1fAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4RkQyQzRDOEE1REEwNzlBQzEzMDdENTMxNTEyQjdD
NTcyNDBBQTAeFw0yNjA0MTcwNjI3NDRaFw0yNjA0MTgxMDA4NDRaMDMxMTAvBgNV
BAMTKDRFRTNDM0Q3MEU2NEM3QTJDREQzNTkwMTdFQTExMEFGODI4OENFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGeo0aTRV+6Lx3DGU+sirKdu0
vv0oZGGPlwj3aRFaMVNg2d5NU1H563Q780EcscaYEhj+SVjFOhirqF7Nu82bI7YO
veLVzKI2lSxdHLGHB1jvI7lPK9I4sLsey/brCqFKPvXzRa8yXCTw/6iD7iHNZatS
ksXECn3oBDP0iBTPGmUTUtPWlmWx3+ZMYoi63q7dh6ZS1+KXzDBaFJYkOtHkJ+Vd
EcgX87xztU6YLbkuEQxvENXcbd7v2jwoejtQ8cN1JOA21p9is+Lejc07DEqBC5mm
a4IMUAoVd6yDcLfK6ySzQKhpPyc8ivYzAJ1tbjVOV7PG8ktOiu2YDJ5SsSQdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTuPD1w5kx6LN01kBfqEQr4KIzq8wHwYDVR0j
BBgwFoAUZY/SxMil2geawTB9UxUSt8VyQKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFS
S2YvMC82NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OEZEMkM0QzhBNURBMDc5
QUMxMzA3RDUzMTUxMkI3QzU3MjQwQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFSS2YvMC82
NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnDt+BapHBa7ALv5LoLWQ5e6NgC2dhy1hrCd61UinrK7DcDN/Kw6YS61fZFGu
/Vu4BgIEErkvNmnZ2PO4b3C+RQ9gERUvpd7BwF8MUTMi6LLy8fgY10mjEXAaTGw6
sdSz5q+rS9v2QB9ltVVi1kFkiIQQAlez5aHyUQfRWJnj4YdeF4lAeWVkEro9Qxwy
bdCwQUb9t3UV5Ltnjd2sfzZRO3PCulTYgB+h4H/CZ9und+HRmbNGGWIbbMg78dsG
Lwsia0kRAPI3hxqW9Lz/8w0rjBKBjpUL0+k3doayq5HFSjUouMxAOUOsuANqNVYq
G27rQm9zeTONL5GjhV4F0K7cKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:47:49 2026 by rpki-client