
$ rpki-client -vvvf rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
File: D3E07C6B391140EBC8F71CEC48A013C375254585.mft (raw, json)
Hash identifier: Aq2Ff/d4/IisGPssot3tZs9S8Wez7kc8r/yc8w1Kk6Q=
Subject key identifier: D4:AF:35:3D:30:50:9C:8C:81:F8:10:61:69:3D:B6:0C:BB:75:64:C1
Authority key identifier: D3:E0:7C:6B:39:11:40:EB:C8:F7:1C:EC:48:A0:13:C3:75:25:45:85
Certificate issuer: /CN=D3E07C6B391140EBC8F71CEC48A013C375254585
Certificate serial: 39D819AA04E2FB2E1109FD8D8D02078BBC724C2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
Manifest number: 0133
Signing time: Sat 31 Oct 2026 22:28:57 +0000
Manifest this update: Sat 31 Oct 2026 22:23:57 +0000
Manifest next update: Mon 02 Nov 2026 00:18:57 +0000
Files and hashes: 1: 34352e3233322e3232382e302f32322d3332203d3e20323637323830.roa (hash: FB2a5bNZf4VYp7efoY9WF9gpJ7XSFvpfl6fnvIkU9DM=)
2: 323830343a346230633a3a2f33322d313238203d3e20323637323830.roa (hash: 1gF5mTmQJBy/BDWQwMFWqeIUpDG3Nx41jJVO9T48DpU=)
3: D3E07C6B391140EBC8F71CEC48A013C375254585.crl (hash: KWnFkBXXepP3bMl4Yx5v5oAM5GJWd0WFj3qgOQJgLi0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.crl
rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 00:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d8:19:aa:04:e2:fb:2e:11:09:fd:8d:8d:02:07:8b:bc:72:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3E07C6B391140EBC8F71CEC48A013C375254585
Validity
Not Before: Oct 31 22:23:57 2026 GMT
Not After : Nov 2 00:18:57 2026 GMT
Subject: CN=D4AF353D30509C8C81F81061693DB60CBB7564C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:90:31:51:62:24:70:b7:1b:07:04:7a:32:
67:14:3c:6c:4d:82:a0:19:9b:3d:6f:40:d2:3b:38:
00:db:09:6a:6c:fe:12:0b:22:46:a2:91:6a:87:7e:
5e:b1:c0:bf:00:13:8e:52:bc:6f:49:5d:66:ec:80:
6b:aa:7c:2a:55:ed:7b:f5:62:84:d3:7b:b3:c2:11:
ed:9c:84:48:c6:ab:04:fd:97:77:57:bb:20:e2:a1:
63:80:3f:5d:d9:54:54:ec:01:49:f1:23:f6:9a:ad:
8e:2a:45:a0:fd:76:62:8e:5c:99:bf:db:e3:d6:9d:
de:fd:9b:92:a4:fb:4a:f1:cf:35:75:74:ab:73:c2:
2b:36:f7:a9:5e:79:22:c1:92:25:a6:fb:e7:69:8f:
b0:4e:98:13:ab:95:86:15:ad:b6:c5:05:1b:b4:92:
03:e3:c6:d3:ab:8b:89:4c:6b:5f:80:f9:a5:f0:91:
9b:28:5d:d0:50:23:1b:94:5e:36:63:ae:51:7f:9c:
85:7a:e6:4b:79:4f:42:cf:de:51:d0:30:09:a4:85:
9c:80:51:b8:9b:b6:1f:44:ee:0b:19:a8:67:7d:15:
a7:e9:04:66:96:fa:40:6d:5f:4c:cf:b1:75:07:40:
bc:ae:51:de:ba:d6:08:6f:f2:67:41:61:32:1a:ac:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:35:3D:30:50:9C:8C:81:F8:10:61:69:3D:B6:0C:BB:75:64:C1
X509v3 Authority Key Identifier:
keyid:D3:E0:7C:6B:39:11:40:EB:C8:F7:1C:EC:48:A0:13:C3:75:25:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:09:d5:8c:27:5e:90:68:dd:20:24:79:c1:38:00:a4:68:d0:
be:1d:ff:46:0e:64:80:5d:9c:5e:c7:3e:3d:50:73:59:77:f6:
76:bc:0f:a3:ec:36:0f:05:5d:b8:41:66:34:d3:4a:79:59:fb:
43:ec:e3:30:4c:08:cf:4d:be:5e:d0:e8:70:c9:37:88:d5:4d:
10:20:5a:ff:0b:48:5c:4d:46:84:c5:96:22:83:84:8e:76:27:
e7:71:42:50:e9:1c:d9:3e:cf:13:ac:44:0a:06:31:a7:6e:5b:
6d:4a:a6:81:d6:c8:ee:7f:cd:13:b3:f9:6b:b3:17:17:8f:c0:
9d:33:32:ff:d8:53:65:fe:75:dc:8e:91:2c:1a:e1:41:90:85:
56:30:e0:df:c1:ae:81:9b:af:00:d1:9e:97:7c:fa:cd:06:d4:
9f:19:f0:9f:b4:6d:19:d3:57:b3:23:94:77:77:59:bf:4a:e3:
48:57:d0:ed:7c:bf:45:a9:08:4a:8c:3d:a9:d5:fa:85:da:0c:
b3:1f:79:70:a4:c1:c9:18:85:1e:8f:39:88:4a:de:9d:d7:0e:
25:b9:7a:01:b7:77:41:87:a4:57:bc:a9:57:b8:4a:c1:8f:0e:
23:ff:32:d1:9a:b3:c9:02:3f:65:2a:27:ad:ef:58:22:6e:ee:
9d:ef:15:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOdgZqgTi+y4RCf2NjQIHi7xyTC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNFMDdDNkIzOTExNDBFQkM4RjcxQ0VDNDhBMDEzQzM3
NTI1NDU4NTAeFw0yNjEwMzEyMjIzNTdaFw0yNjExMDIwMDE4NTdaMDMxMTAvBgNV
BAMTKEQ0QUYzNTNEMzA1MDlDOEM4MUY4MTA2MTY5M0RCNjBDQkI3NTY0QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaZAxUWIkcLcbBwR6MmcUPGxN
gqAZmz1vQNI7OADbCWps/hILIkaikWqHfl6xwL8AE45SvG9JXWbsgGuqfCpV7Xv1
YoTTe7PCEe2chEjGqwT9l3dXuyDioWOAP13ZVFTsAUnxI/aarY4qRaD9dmKOXJm/
2+PWnd79m5Kk+0rxzzV1dKtzwis296leeSLBkiWm++dpj7BOmBOrlYYVrbbFBRu0
kgPjxtOri4lMa1+A+aXwkZsoXdBQIxuUXjZjrlF/nIV65kt5T0LP3lHQMAmkhZyA
Ubibth9E7gsZqGd9FafpBGaW+kBtX0zPsXUHQLyuUd661ghv8mdBYTIarNN3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1K81PTBQnIyB+BBhaT22DLt1ZMEwHwYDVR0j
BBgwFoAU0+B8azkRQOvI9xzsSKATw3UlRYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFhQXZFUXNXWW02eGhKZ2hEN0E5RWF0SzR5VGpjV3c3c1BodWNkcWlQ
b00vMC9EM0UwN0M2QjM5MTE0MEVCQzhGNzFDRUM0OEEwMTNDMzc1MjU0NTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRTA3QzZCMzkxMTQwRUJD
OEY3MUNFQzQ4QTAxM0MzNzUyNTQ1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnFhQXZFUXNXWW02eGhKZ2hEN0E5RWF0SzR5VGpjV3c3c1BodWNkcWlQb00vMC9E
M0UwN0M2QjM5MTE0MEVCQzhGNzFDRUM0OEEwMTNDMzc1MjU0NTg1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKwnVjCdekGjdICR5wTgApGjQvh3/Rg5kgF2cXsc+PVBzWXf2drwPo+w2DwVd
uEFmNNNKeVn7Q+zjMEwIz02+XtDocMk3iNVNECBa/wtIXE1GhMWWIoOEjnYn53FC
UOkc2T7PE6xECgYxp25bbUqmgdbI7n/NE7P5a7MXF4/AnTMy/9hTZf513I6RLBrh
QZCFVjDg38GugZuvANGel3z6zQbUnxnwn7RtGdNXsyOUd3dZv0rjSFfQ7Xy/RakI
Sow9qdX6hdoMsx95cKTByRiFHo85iErendcOJbl6Abd3QYekV7ypV7hKwY8OI/8y
0ZqzyQI/ZSonre9YIm7une8VYQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:09:04 2026 by rpki-client