
$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.mft
File: 85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.mft (raw, json)
Hash identifier: ZCo0+qRa4lNYo1TnH+gq5mKEML6Sut/34H5WJuJCpAk=
Subject key identifier: 7C:3C:D2:50:64:74:62:57:8A:A8:20:4D:2D:4C:0E:7F:92:72:8D:4D
Authority key identifier: 85:AD:90:0E:6B:9C:4A:7F:B3:FB:3B:2B:F3:E7:B9:38:96:0F:0B:59
Certificate issuer: /CN=85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59
Certificate serial: 77EF8DA9F9F3C360AEE26DDBFE762929E2CE6069
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.mft
Manifest number: A2
Signing time: Mon 02 Mar 2026 13:47:16 +0000
Manifest this update: Mon 02 Mar 2026 13:42:16 +0000
Manifest next update: Tue 03 Mar 2026 16:17:16 +0000
Files and hashes: 1: 3138362e32362e39362e302f32322d3234203d3e20323730393239.roa (hash: NIEat/u04PvYHoRKXbeS4meR03ofGrn1EI7KZEyR/Ow=)
2: 85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.crl (hash: crNHrO4RI1a7FxFcSn9+vN7joSFsvamxMlvvrdwBjMo=)
3: 323830343a373361383a3a2f33322d313238203d3e20323730393239.roa (hash: FHY3JxeBOZ3MSBaR1m/vyqcLnRjqy/dCeCqwy12FB8c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.crl
rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 16:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ef:8d:a9:f9:f3:c3:60:ae:e2:6d:db:fe:76:29:29:e2:ce:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59
Validity
Not Before: Mar 2 13:42:16 2026 GMT
Not After : Mar 3 16:17:16 2026 GMT
Subject: CN=7C3CD250647462578AA8204D2D4C0E7F92728D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:5a:e9:f5:d5:9e:71:5c:9b:3b:c3:65:34:
b2:0c:93:6e:30:16:77:fa:8a:a3:7f:3d:ba:ca:53:
89:10:ff:2a:39:6b:6e:e5:78:65:59:95:42:df:5f:
2f:42:9e:75:ea:23:0d:01:eb:a8:63:e6:93:0e:50:
d3:28:b2:9a:78:6c:04:70:f3:55:00:c7:f1:bb:22:
8b:8f:51:9b:f6:03:9e:b9:12:62:dc:48:88:e3:14:
33:44:3a:d2:88:7c:42:f9:84:63:51:94:33:30:5b:
c1:3d:31:c4:5e:e5:70:a1:9a:eb:c6:a6:ba:a5:d8:
e1:c1:e3:5b:f3:7a:8f:fc:e5:f8:ce:6c:1d:b3:a6:
2d:eb:2a:86:a7:55:7e:61:99:4d:5a:64:06:98:ef:
8c:80:78:f3:46:7e:c6:d8:de:ce:18:6d:1e:07:89:
e2:09:fe:da:9e:77:f7:fb:ce:74:2a:4d:92:18:cc:
61:85:81:0c:cd:fa:27:fd:94:e8:8c:67:bc:85:a2:
bd:ba:e6:3e:b9:97:5b:9f:eb:ee:8b:95:a3:24:e9:
60:76:a9:b6:cc:7b:c0:04:7b:5d:35:2a:64:7b:cf:
11:8e:70:a5:b6:30:75:0b:5d:b4:96:8a:d0:63:5a:
a5:32:25:ec:d0:79:d2:30:05:e7:51:ff:4a:ca:49:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3C:D2:50:64:74:62:57:8A:A8:20:4D:2D:4C:0E:7F:92:72:8D:4D
X509v3 Authority Key Identifier:
keyid:85:AD:90:0E:6B:9C:4A:7F:B3:FB:3B:2B:F3:E7:B9:38:96:0F:0B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/85AD900E6B9C4A7FB3FB3B2BF3E7B938960F0B59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:0e:87:5e:ad:bc:5a:c3:14:94:33:3a:03:f2:47:b7:5b:
29:4f:9a:f8:6f:73:b0:88:d4:10:2c:8f:f1:c6:09:3d:3e:1a:
ea:f8:9d:38:1f:9f:78:35:40:ba:81:9e:00:16:d1:bd:13:be:
e2:9e:2b:79:18:e1:cd:9e:77:18:01:42:65:ab:81:bd:fa:82:
45:31:81:2b:c8:5d:41:6e:47:8b:c7:7d:29:3e:e7:44:3f:ca:
b7:56:14:ea:8e:b2:a6:82:16:ef:3a:81:ec:f5:d8:47:3f:55:
30:07:25:ab:23:15:e5:87:0c:e0:37:10:36:15:8a:20:11:aa:
e3:e6:0e:80:da:91:2a:71:87:45:b1:d7:c2:cf:5e:0b:67:a3:
38:76:9c:fe:97:c6:02:ae:93:46:db:cd:20:55:57:f1:af:54:
b6:9b:83:c8:9f:8f:68:94:56:ff:3d:9d:11:8b:59:65:0f:25:
ce:cd:59:44:16:3d:81:91:49:77:32:62:e2:97:b0:97:1b:d8:
f6:d2:f8:34:aa:24:52:f5:ac:19:3b:9d:b3:0e:fb:45:09:4a:
39:dc:4d:6c:da:d1:e3:88:c9:b6:d1:87:c0:8e:cd:62:c0:05:
55:d4:ab:d2:5a:b7:a3:1c:25:b3:cc:1c:ca:05:e6:1c:16:bd:
8b:06:cb:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd++Nqfnzw2Cu4m3b/nYpKeLOYGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVBRDkwMEU2QjlDNEE3RkIzRkIzQjJCRjNFN0I5Mzg5
NjBGMEI1OTAeFw0yNjAzMDIxMzQyMTZaFw0yNjAzMDMxNjE3MTZaMDMxMTAvBgNV
BAMTKDdDM0NEMjUwNjQ3NDYyNTc4QUE4MjA0RDJENEMwRTdGOTI3MjhENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo1rp9dWecVybO8NlNLIMk24w
Fnf6iqN/PbrKU4kQ/yo5a27leGVZlULfXy9CnnXqIw0B66hj5pMOUNMospp4bARw
81UAx/G7IouPUZv2A565EmLcSIjjFDNEOtKIfEL5hGNRlDMwW8E9McRe5XChmuvG
prql2OHB41vzeo/85fjObB2zpi3rKoanVX5hmU1aZAaY74yAePNGfsbY3s4YbR4H
ieIJ/tqed/f7znQqTZIYzGGFgQzN+if9lOiMZ7yFor265j65l1uf6+6LlaMk6WB2
qbbMe8AEe101KmR7zxGOcKW2MHULXbSWitBjWqUyJezQedIwBedR/0rKSavHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfDzSUGR0YleKqCBNLUwOf5JyjU0wHwYDVR0j
BBgwFoAUha2QDmucSn+z+zsr8+e5OJYPC1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2lKM3gxcTd3SjEyYVg1eTNCWFd3a2R2Z2doZlFKTnljMnZ4dVlWalFY
OUovMC84NUFEOTAwRTZCOUM0QTdGQjNGQjNCMkJGM0U3QjkzODk2MEYwQjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUQ5MDBFNkI5QzRBN0ZC
M0ZCM0IyQkYzRTdCOTM4OTYwRjBCNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2lKM3gxcTd3SjEyYVg1eTNCWFd3a2R2Z2doZlFKTnljMnZ4dVlWalFYOUovMC84
NUFEOTAwRTZCOUM0QTdGQjNGQjNCMkJGM0U3QjkzODk2MEYwQjU5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWCUOh16tvFrDFJQzOgPyR7dbKU+a+G9zsIjUECyP8cYJPT4a6vidOB+feDVA
uoGeABbRvRO+4p4reRjhzZ53GAFCZauBvfqCRTGBK8hdQW5Hi8d9KT7nRD/Kt1YU
6o6ypoIW7zqB7PXYRz9VMAclqyMV5YcM4DcQNhWKIBGq4+YOgNqRKnGHRbHXws9e
C2ejOHac/pfGAq6TRtvNIFVX8a9UtpuDyJ+PaJRW/z2dEYtZZQ8lzs1ZRBY9gZFJ
dzJi4pewlxvY9tL4NKokUvWsGTudsw77RQlKOdxNbNrR44jJttGHwI7NYsAFVdSr
0lq3oxwls8wcygXmHBa9iwbLPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:35:34 2026 by rpki-client