
$ rpki-client -vvf rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
File: DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft (raw, json)
Hash identifier: Jk3aylRWGigEU5MgEdk0VZnQj7VJAn1/qTwGg9EUaTg=
Subject key identifier: 56:64:8A:B1:CA:D8:5C:9B:6F:EC:54:48:EA:1B:4E:A6:27:AE:60:F9
Authority key identifier: DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
Certificate issuer: /CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Certificate serial: 413041EED38428B57A06077519B09D31F9B23534
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
Manifest number: 039C
Signing time: Mon 02 Mar 2026 17:35:06 +0000
Manifest this update: Mon 02 Mar 2026 17:30:06 +0000
Manifest next update: Tue 03 Mar 2026 19:16:06 +0000
Files and hashes: 1: 323830343a363461383a3a2f33322d3438203d3e20323639343338.roa (hash: K9eFGyq49aTli1jKsfUWWr9msK2VXvGiP4Vkn+ZnYP4=)
2: 34352e3138342e342e302f32322d3234203d3e20323639343338.roa (hash: Mg4p5eDeRffvmYut+28pkCRqZgEX55qtsgfKGIPC/VY=)
3: DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl (hash: 4HFb63+pKyfopIPfMEnHUbxja9cLwU1DBch47MhyS8g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl
rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 19:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:30:41:ee:d3:84:28:b5:7a:06:07:75:19:b0:9d:31:f9:b2:35:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Validity
Not Before: Mar 2 17:30:06 2026 GMT
Not After : Mar 3 19:16:06 2026 GMT
Subject: CN=56648AB1CAD85C9B6FEC5448EA1B4EA627AE60F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:53:13:5d:99:a9:08:66:e8:54:fb:fb:7d:
a5:db:82:70:e6:9e:f0:c2:1d:ce:4b:85:2f:08:3f:
75:ea:3a:68:47:d3:af:d5:83:e2:40:9e:ee:cf:d7:
25:2e:e8:51:78:1f:41:14:56:44:5c:a3:d3:6e:9b:
f9:65:41:33:cd:b6:d1:7d:48:01:56:98:8e:eb:3b:
71:f7:6d:70:40:26:84:07:78:95:4f:30:21:48:f8:
95:d6:85:f1:44:1e:43:d5:72:e4:78:11:2e:87:bc:
19:11:be:57:73:7e:32:8c:1d:28:cb:a5:54:e0:41:
10:3f:04:89:ee:4e:31:6b:77:7b:e2:e1:54:e6:df:
e8:05:8f:12:f8:d2:14:96:1a:db:d7:4d:fc:d4:e6:
ba:16:34:e5:3a:7e:67:81:5a:62:a8:28:bc:e0:97:
e1:49:3a:ea:1b:58:a9:cc:fe:71:7c:2f:ee:13:c4:
72:ad:04:66:32:4c:10:07:f2:72:3a:2d:9b:ba:9c:
f4:ba:5f:de:99:7a:41:6c:41:6f:23:60:ae:f0:5b:
0b:93:6d:58:15:b2:69:15:fb:b3:df:5e:26:90:72:
c6:e5:77:4a:c6:83:d9:a0:0a:d5:dc:e9:5d:c9:a5:
80:eb:3e:b7:f4:c6:05:e9:8f:bd:78:df:17:3c:9d:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:64:8A:B1:CA:D8:5C:9B:6F:EC:54:48:EA:1B:4E:A6:27:AE:60:F9
X509v3 Authority Key Identifier:
keyid:DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:99:23:9b:64:76:e2:53:13:31:14:57:45:b3:33:b4:c1:d1:
c7:04:4d:be:36:d6:e4:18:eb:ed:0a:0b:b3:10:15:e3:63:9a:
d3:49:38:f3:68:ef:25:29:7a:97:7b:c9:ae:12:40:af:cf:1a:
d9:89:bc:64:cc:46:7d:2e:ba:74:6a:d0:55:1b:3f:5a:a2:86:
df:70:72:e2:10:5d:a2:fd:88:71:0a:0b:35:31:32:d5:fd:bf:
30:a8:38:f9:23:fd:20:9f:24:88:bb:db:8e:1e:ae:4a:e6:d2:
0c:57:96:08:36:01:df:85:fe:7a:73:10:f4:cb:24:81:88:b2:
f4:0c:19:43:3a:56:95:18:e6:29:6c:3b:65:10:d3:70:e0:72:
8a:07:d8:5a:ee:17:3f:49:b9:14:a5:21:c7:f3:b0:2c:97:e0:
80:f4:2a:9e:be:d5:42:22:9d:51:ab:bf:93:e5:69:bd:ac:56:
97:fb:eb:7b:6a:36:4a:6d:b2:39:b4:7e:db:6c:2c:64:a0:34:
17:08:a5:09:8a:86:4b:0a:e7:4c:fd:a6:76:0e:74:ff:1d:22:
7d:ba:83:65:6b:01:b7:8e:d3:4b:79:ab:49:d5:ce:05:df:7f:
a8:53:a1:fc:59:2f:bc:f2:cd:67:b1:89:c8:8a:77:10:45:ec:
5b:6f:d3:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQTBB7tOEKLV6Bgd1GbCdMfmyNTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBRDQ0MzBFMTAzRjU4NEI0RjM4RUE0QzJFMTc4OEM0
MzZBOTAyMTAeFw0yNjAzMDIxNzMwMDZaFw0yNjAzMDMxOTE2MDZaMDMxMTAvBgNV
BAMTKDU2NjQ4QUIxQ0FEODVDOUI2RkVDNTQ0OEVBMUI0RUE2MjdBRTYwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqlMTXZmpCGboVPv7faXbgnDm
nvDCHc5LhS8IP3XqOmhH06/Vg+JAnu7P1yUu6FF4H0EUVkRco9Num/llQTPNttF9
SAFWmI7rO3H3bXBAJoQHeJVPMCFI+JXWhfFEHkPVcuR4ES6HvBkRvldzfjKMHSjL
pVTgQRA/BInuTjFrd3vi4VTm3+gFjxL40hSWGtvXTfzU5roWNOU6fmeBWmKoKLzg
l+FJOuobWKnM/nF8L+4TxHKtBGYyTBAH8nI6LZu6nPS6X96ZekFsQW8jYK7wWwuT
bVgVsmkV+7PfXiaQcsbld0rGg9mgCtXc6V3JpYDrPrf0xgXpj7143xc8nT7hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVmSKscrYXJtv7FRI6htOpieuYPkwHwYDVR0j
BBgwFoAU361EMOED9YS0846kwuF4jENqkCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVxRGhuYTd5ZXNXSGFBaUJrVkVaWm1xeWpGQWNjY3JZU2piUkdmS3B5
Y0UvMS9ERkFENDQzMEUxMDNGNTg0QjRGMzhFQTRDMkUxNzg4QzQzNkE5MDIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQUQ0NDMwRTEwM0Y1ODRC
NEYzOEVBNEMyRTE3ODhDNDM2QTkwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODVxRGhuYTd5ZXNXSGFBaUJrVkVaWm1xeWpGQWNjY3JZU2piUkdmS3B5Y0UvMS9E
RkFENDQzMEUxMDNGNTg0QjRGMzhFQTRDMkUxNzg4QzQzNkE5MDIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGJkjm2R24lMTMRRXRbMztMHRxwRNvjbW5Bjr7QoLsxAV42Oa00k482jvJSl6
l3vJrhJAr88a2Ym8ZMxGfS66dGrQVRs/WqKG33By4hBdov2IcQoLNTEy1f2/MKg4
+SP9IJ8kiLvbjh6uSubSDFeWCDYB34X+enMQ9MskgYiy9AwZQzpWlRjmKWw7ZRDT
cOByigfYWu4XP0m5FKUhx/OwLJfggPQqnr7VQiKdUau/k+VpvaxWl/vre2o2Sm2y
ObR+22wsZKA0FwilCYqGSwrnTP2mdg50/x0ifbqDZWsBt47TS3mrSdXOBd9/qFOh
/FkvvPLNZ7GJyIp3EEXsW2/T+w==
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:17:05 2026 by rpki-client