
$ rpki-client -vvf rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
File: 91D0AECE4CA4B520D30283A943EC3430DE576329.mft (raw, json)
Hash identifier: +Jcbp92NRaFlwlb0gaqvXqbgpa0TNfWgsKx/WmuC4jg=
Subject key identifier: 96:1B:6C:B7:A9:F4:7A:E6:B9:E3:45:84:C1:8D:34:33:F5:70:3B:53
Authority key identifier: 91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29
Certificate issuer: /CN=91D0AECE4CA4B520D30283A943EC3430DE576329
Certificate serial: 3EB84A41B4FC3DE63156C4FB38A6EE55D4561BAA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
Manifest number: 01A2
Signing time: Fri 17 Apr 2026 20:41:52 +0000
Manifest this update: Fri 17 Apr 2026 20:36:52 +0000
Manifest next update: Sat 18 Apr 2026 22:47:52 +0000
Files and hashes: 1: 91D0AECE4CA4B520D30283A943EC3430DE576329.crl (hash: Hc2gJ8F6aRNM4f0mm9qi+kvHfdEozc6t8wbl53EO2vI=)
2: 323830343a323833633a3a2f33322d3438203d3e20323633393439.roa (hash: eGQ/zqYMhIPCAHBylF794YLH60O5X5EgivUlGOCqsH0=)
3: 3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa (hash: 82ryy/IHvTAXm8MtsrYyhO4JsxlKAYeM2P5lM6T+IXE=)
4: 3133382e3235352e342e302f32322d3234203d3e20323633393439.roa (hash: g0ReGUfdrX4elzSrYulUA3f5lncwACSVO0n6z+WxC/Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl
rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 22:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b8:4a:41:b4:fc:3d:e6:31:56:c4:fb:38:a6:ee:55:d4:56:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D0AECE4CA4B520D30283A943EC3430DE576329
Validity
Not Before: Apr 17 20:36:52 2026 GMT
Not After : Apr 18 22:47:52 2026 GMT
Subject: CN=961B6CB7A9F47AE6B9E34584C18D3433F5703B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:a5:ab:06:6d:f1:52:0a:42:97:b4:46:bc:
82:bc:73:9e:45:d6:dc:a0:11:cb:8d:64:80:ae:16:
bf:af:9b:c5:1b:1c:49:e7:f5:d0:38:56:64:2b:3f:
a7:e4:98:43:47:a7:c5:be:0d:ab:4f:65:82:76:22:
bb:34:30:93:b8:3b:6a:73:8f:bf:e7:65:6a:3c:41:
cd:35:7e:34:62:3a:22:6d:11:87:aa:a4:b2:8a:bd:
32:c6:9e:00:37:70:cf:b7:36:ed:55:a0:dc:99:f6:
eb:38:b7:94:0f:56:bc:f9:6f:71:d4:3b:b2:f9:71:
80:9f:6b:ba:0c:76:9f:40:25:1f:d6:7f:2a:f5:32:
3d:a9:57:76:b5:75:fc:fb:67:73:1b:5f:7f:8b:71:
41:41:a3:01:99:ca:60:56:17:eb:90:0f:75:85:fa:
93:dd:c1:8e:14:d1:9f:d7:89:b5:d3:6a:be:24:ab:
9e:a3:73:56:4f:88:84:08:41:ac:46:46:8e:e4:a9:
41:42:8d:e9:77:d1:5f:ec:42:75:52:90:2a:06:88:
0d:82:e0:47:ee:03:bc:ad:05:0b:ba:6a:dd:cb:9a:
04:14:12:d8:fe:55:b3:01:2d:5d:73:6b:2f:98:e8:
96:f8:88:79:27:11:ca:52:81:00:50:ad:04:c6:58:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:6C:B7:A9:F4:7A:E6:B9:E3:45:84:C1:8D:34:33:F5:70:3B:53
X509v3 Authority Key Identifier:
keyid:91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:c4:96:0d:6e:db:f3:b1:91:f0:9e:0d:5b:a1:d0:96:67:
06:72:79:4c:ff:f3:a1:97:df:7f:64:2a:6c:03:1e:47:87:33:
d3:f2:c2:97:d4:eb:d4:d2:49:a5:80:02:5c:9b:4a:70:0d:9e:
5a:fb:0b:9f:4d:16:4c:e3:75:4c:32:0f:af:72:41:00:b2:ae:
95:85:46:ce:aa:df:d0:5a:7e:dd:a9:83:67:7e:fc:97:98:8c:
c3:26:06:cc:5e:46:a3:36:77:85:37:ab:2c:6c:6c:91:35:6e:
c6:d1:0d:5e:17:75:32:ae:0d:06:9b:4a:ba:df:90:61:6a:51:
3c:0b:2f:7e:26:1e:09:0f:ce:bd:a0:73:d4:f9:67:93:e2:f4:
0b:e5:f7:9c:d8:a1:91:2f:bf:a4:fa:7e:84:20:4a:a0:df:3e:
97:f8:21:61:4c:09:46:b6:f5:0d:15:2c:ce:77:37:dd:5d:c1:
fe:16:85:69:81:13:0f:47:c5:d1:73:cf:37:b5:53:f3:32:65:
42:6e:28:56:f8:c1:6c:a5:5f:ca:68:36:e3:d3:96:bf:22:f2:
4c:2f:67:7c:28:95:e7:f6:c8:ff:03:7d:9c:da:ec:2c:0d:72:
ab:f9:2f:e8:d3:72:57:82:8b:2b:d4:bd:91:b1:43:6c:f2:64:
7e:74:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:57:06 2026 by rpki-client