
$ rpki-client -vvf rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft
File: 64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft (raw, json)
Hash identifier: yK7chHZTTwLogSbmivNfIFCFTE2ybHNZ2135oGPOatI=
Subject key identifier: 5A:37:40:17:AF:7D:5F:F3:4B:5C:DE:73:56:C2:44:C2:A9:4F:1F:D5
Authority key identifier: 64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8
Certificate issuer: /CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8
Certificate serial: 28800138CA9B797ECD24DFCD1204832613F1C379
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft
Manifest number: AD
Signing time: Sun 01 Mar 2026 10:23:59 +0000
Manifest this update: Sun 01 Mar 2026 10:18:59 +0000
Manifest next update: Mon 02 Mar 2026 12:50:59 +0000
Files and hashes: 1: 3137372e3135342e38342e302f32322d3332203d3e20323632393439.roa (hash: 1d3tUWLajSTTOvZLqwd5mEbvDy4l89GnNAeXH9kRVmA=)
2: 3137372e3135342e38302e302f32322d3332203d3e20323632393439.roa (hash: obVLbFBlD1kxbpny0GXq8wk0hN/KhjWe7WeqtCHWKwc=)
3: 323830343a6534383a3a2f33322d313238203d3e20323632393439.roa (hash: ZP7LxRSY9e7An77Rzk9cRX4tKzfidV+jAXvMsYBInSM=)
4: 64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl (hash: wBnNEoQbkLap15FlZl9z2fuvUtd8dwWx/iedcV3ZlH8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl
rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 12:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:80:01:38:ca:9b:79:7e:cd:24:df:cd:12:04:83:26:13:f1:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8
Validity
Not Before: Mar 1 10:18:59 2026 GMT
Not After : Mar 2 12:50:59 2026 GMT
Subject: CN=5A374017AF7D5FF34B5CDE7356C244C2A94F1FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:4d:56:01:61:d8:7a:a4:57:21:5f:0f:2f:
a5:d9:37:cd:6a:e9:a3:4a:d5:61:30:b4:a6:94:de:
a7:79:5f:79:f3:7a:b7:31:7e:e2:52:ba:e3:2e:fe:
41:ca:38:7a:b0:35:d9:5f:d6:1e:41:86:a1:e9:f2:
7a:e5:1b:1e:63:9e:66:80:be:8f:79:bd:e0:bf:46:
fc:65:cf:48:ec:c9:72:6e:06:1f:41:14:d8:79:2f:
cd:fa:1f:62:8f:e4:27:a6:ba:b4:cb:cf:e6:30:db:
75:cb:e9:01:97:1f:0b:80:22:43:70:9d:0d:d9:a8:
c7:78:2d:9a:9d:ff:de:00:5f:4f:45:6e:7f:1b:bf:
19:2b:9b:0f:6b:4c:c6:47:83:2c:81:0e:fa:45:61:
32:d6:fe:c2:03:16:53:a0:d2:8d:28:6f:90:a1:c5:
7c:44:b8:c7:23:91:be:1e:8b:e1:31:2a:85:1c:0f:
42:3c:ec:89:a1:8a:3b:3d:4c:88:55:2e:54:05:02:
ac:b0:45:5a:f0:27:c1:89:3c:e7:38:d1:9c:06:ad:
1e:ef:16:bf:94:26:6a:d8:92:f6:41:0a:66:da:82:
85:a7:bc:4a:8b:6d:f3:b1:34:74:7c:a1:cd:4c:0f:
7d:1f:5e:93:57:06:e4:15:bd:0f:b6:cf:d2:ad:f6:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:40:17:AF:7D:5F:F3:4B:5C:DE:73:56:C2:44:C2:A9:4F:1F:D5
X509v3 Authority Key Identifier:
keyid:64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9f:d9:4a:21:b0:92:f5:a3:98:bf:38:20:ae:b4:1f:37:ac:
5d:f3:bf:c8:7c:3b:e9:15:fc:91:8a:48:1e:32:95:68:86:c7:
d3:05:04:28:8c:b9:6f:54:16:8b:5e:66:3c:08:d4:d0:53:63:
b5:56:2a:00:5e:c4:a6:cc:7b:ac:75:15:0f:38:b8:37:29:8c:
4e:f6:0b:e4:1e:89:cb:e3:6c:6b:ff:ff:92:c7:51:20:2e:6c:
07:e2:64:fd:51:72:82:6f:2c:bf:e2:76:53:f0:18:e3:9c:5d:
eb:0b:43:7c:f7:8b:f6:71:05:a3:29:63:a9:1d:5d:97:c8:fb:
e8:09:ad:f8:6d:87:46:39:06:99:c3:42:eb:34:00:3b:c0:d7:
89:ee:7a:88:97:93:9a:9a:6e:ad:50:7d:34:ca:5a:12:8c:48:
4e:f7:be:8b:bb:20:a5:49:9f:61:53:17:fb:9f:48:ad:43:2c:
e4:73:aa:a1:d3:ec:02:0d:a3:b3:c6:c9:26:e1:dd:ad:4e:4b:
ee:59:5f:0a:85:c3:78:d3:c4:85:a5:22:01:d5:04:d4:42:15:
1c:00:0c:5d:6a:99:ac:53:9e:bd:e8:b2:35:cb:84:59:3e:03:
4c:b7:97:f3:af:a2:19:81:2d:4f:73:ae:58:72:49:80:34:18:
f8:cb:62:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKIABOMqbeX7NJN/NEgSDJhPxw3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFRTQ1RkY0RTczQkNCN0ZFRTM3NzMxREUxMDg4NjYw
QjU4NTFGODAeFw0yNjAzMDExMDE4NTlaFw0yNjAzMDIxMjUwNTlaMDMxMTAvBgNV
BAMTKDVBMzc0MDE3QUY3RDVGRjM0QjVDREU3MzU2QzI0NEMyQTk0RjFGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N01WAWHYeqRXIV8PL6XZN81q
6aNK1WEwtKaU3qd5X3nzercxfuJSuuMu/kHKOHqwNdlf1h5BhqHp8nrlGx5jnmaA
vo95veC/Rvxlz0jsyXJuBh9BFNh5L836H2KP5CemurTLz+Yw23XL6QGXHwuAIkNw
nQ3ZqMd4LZqd/94AX09Fbn8bvxkrmw9rTMZHgyyBDvpFYTLW/sIDFlOg0o0ob5Ch
xXxEuMcjkb4ei+ExKoUcD0I87Imhijs9TIhVLlQFAqywRVrwJ8GJPOc40ZwGrR7v
Fr+UJmrYkvZBCmbagoWnvEqLbfOxNHR8oc1MD30fXpNXBuQVvQ+2z9Kt9r6/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWjdAF699X/NLXN5zVsJEwqlPH9UwHwYDVR0j
BBgwFoAUZO5F/05zvLf+43cx3hCIZgtYUfgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVA1Q1Y5QjZOOHozUFVXc0NzU0VqTTdGVjlvUm92RmN5cndtYUJqbXNV
SkgvMC82NEVFNDVGRjRFNzNCQ0I3RkVFMzc3MzFERTEwODg2NjBCNTg1MUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUU0NUZGNEU3M0JDQjdG
RUUzNzczMURFMTA4ODY2MEI1ODUxRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVA1Q1Y5QjZOOHozUFVXc0NzU0VqTTdGVjlvUm92RmN5cndtYUJqbXNVSkgvMC82
NEVFNDVGRjRFNzNCQ0I3RkVFMzc3MzFERTEwODg2NjBCNTg1MUY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf5/ZSiGwkvWjmL84IK60HzesXfO/yHw76RX8kYpIHjKVaIbH0wUEKIy5b1QW
i15mPAjU0FNjtVYqAF7Epsx7rHUVDzi4NymMTvYL5B6Jy+Nsa///ksdRIC5sB+Jk
/VFygm8sv+J2U/AY45xd6wtDfPeL9nEFoyljqR1dl8j76Amt+G2HRjkGmcNC6zQA
O8DXie56iJeTmppurVB9NMpaEoxITve+i7sgpUmfYVMX+59IrUMs5HOqodPsAg2j
s8bJJuHdrU5L7llfCoXDeNPEhaUiAdUE1EIVHAAMXWqZrFOeveiyNcuEWT4DTLeX
86+iGYEtT3OuWHJJgDQY+MtiWg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:54 2026 by rpki-client