
$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json)
Hash identifier: X5wyLZ/IkKE3m6zGeFhJn+I9Ln/MSuRPh2wqzTDWNik=
Subject key identifier: BB:9D:FC:28:4F:7E:8D:A5:94:4D:90:D6:A2:DF:8D:44:61:61:91:5E
Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Certificate serial: 4CC5364ECFE27C44AFC983556D00FEF6287A158D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
Manifest number: 0387
Signing time: Mon 02 Mar 2026 02:02:39 +0000
Manifest this update: Mon 02 Mar 2026 01:57:39 +0000
Manifest next update: Tue 03 Mar 2026 05:11:39 +0000
Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: HhuJluM4nYK24Tc4tYGLjGkrvHzMKI7PN1TuD9//pC4=)
2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: POgViPfinI570x9SP5bV1JJsDiei7TuYlQ2lNGkM4h8=)
3: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: n1WfTF/69k+pEm38xUTBsvz2MS47ihd3zEekd1/O7ZY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 05:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c5:36:4e:cf:e2:7c:44:af:c9:83:55:6d:00:fe:f6:28:7a:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Validity
Not Before: Mar 2 01:57:39 2026 GMT
Not After : Mar 3 05:11:39 2026 GMT
Subject: CN=BB9DFC284F7E8DA5944D90D6A2DF8D446161915E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:b8:10:58:49:19:10:81:53:5d:c3:ad:a9:
f2:29:6a:35:c1:c9:a4:a8:08:03:0d:fb:44:0a:25:
dd:9b:5d:5b:65:49:41:b1:2d:00:0e:68:09:12:b5:
a8:f7:e0:34:51:62:87:b5:cf:1a:79:a2:a8:58:4a:
1b:44:05:7d:aa:7c:94:c0:11:97:50:6a:80:3c:50:
51:f4:a6:e2:63:2f:19:f3:d5:e3:c7:9f:b6:bd:8c:
ff:77:1f:4c:46:d9:cd:69:f5:cd:7a:11:fe:2d:ac:
c5:b2:9f:c9:be:2a:2f:16:2d:6c:6d:c5:17:db:bd:
9e:89:ce:cf:bd:cf:a0:d8:13:13:51:ee:08:e3:c5:
1c:e4:a0:7d:df:fd:f1:42:7d:33:a2:4e:10:68:2a:
5d:49:0b:1e:11:ea:32:a0:8d:47:19:a9:64:af:18:
24:13:eb:2e:6e:58:ec:e0:fd:fe:14:4e:7b:80:ad:
38:c2:15:d7:84:8c:e6:db:75:0f:70:e0:60:8f:e4:
2a:30:65:cc:7f:55:d0:a4:ac:34:af:84:3c:26:c9:
b6:5a:62:26:90:84:19:fc:41:5d:e9:e3:b8:99:b9:
a4:62:2e:85:3f:2c:6b:e9:7c:d3:13:56:8d:54:3c:
55:15:c8:09:cd:f1:3a:4a:5e:65:bb:d1:ee:96:e5:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:FC:28:4F:7E:8D:A5:94:4D:90:D6:A2:DF:8D:44:61:61:91:5E
X509v3 Authority Key Identifier:
keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:df:b1:46:88:d0:cd:a7:60:53:d2:6e:33:6b:08:2f:ca:ae:
df:43:8b:0a:26:a9:68:c1:57:90:21:43:89:b3:c9:32:8a:0d:
97:18:9a:25:dd:02:a8:40:c8:eb:db:8c:fc:c5:d2:1c:30:9c:
85:9a:4b:cf:8f:0c:86:2c:d9:5d:27:6e:72:0e:59:9a:63:62:
38:3f:cb:35:06:e0:97:fa:92:5e:47:40:01:be:de:7a:d2:74:
c2:a9:38:a6:fc:c6:6a:13:05:da:c8:1b:1b:2c:d6:a0:40:a0:
a1:f9:68:df:59:6e:4e:d1:e8:66:2d:ef:58:e6:89:ee:79:1f:
ea:dd:34:08:a2:0c:66:00:29:39:b4:94:33:9c:fb:2d:85:75:
ac:df:2f:ec:19:f0:05:ef:a3:0f:6e:12:19:2c:d6:a9:18:85:
f8:20:8b:ed:2d:10:54:85:e4:ec:49:1c:05:3d:f3:65:6e:d8:
e4:8b:aa:0c:25:f3:d4:52:24:5a:3d:7f:c6:fd:61:00:be:20:
14:02:43:10:34:ba:d6:eb:24:4f:19:43:3a:7e:96:93:55:01:
a7:d4:30:03:dc:92:8d:f4:1a:5a:fa:e3:f5:6c:e1:36:11:a4:
b2:41:f3:68:fd:e7:b9:58:17:3f:b9:45:ae:6c:85:fa:79:9f:
33:d7:55:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTMU2Ts/ifESvyYNVbQD+9ih6FY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw
OEI3MjkwRDAeFw0yNjAzMDIwMTU3MzlaFw0yNjAzMDMwNTExMzlaMDMxMTAvBgNV
BAMTKEJCOURGQzI4NEY3RThEQTU5NDREOTBENkEyREY4RDQ0NjE2MTkxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3rgQWEkZEIFTXcOtqfIpajXB
yaSoCAMN+0QKJd2bXVtlSUGxLQAOaAkStaj34DRRYoe1zxp5oqhYShtEBX2qfJTA
EZdQaoA8UFH0puJjLxnz1ePHn7a9jP93H0xG2c1p9c16Ef4trMWyn8m+Ki8WLWxt
xRfbvZ6Jzs+9z6DYExNR7gjjxRzkoH3f/fFCfTOiThBoKl1JCx4R6jKgjUcZqWSv
GCQT6y5uWOzg/f4UTnuArTjCFdeEjObbdQ9w4GCP5CowZcx/VdCkrDSvhDwmybZa
YiaQhBn8QV3p47iZuaRiLoU/LGvpfNMTVo1UPFUVyAnN8TpKXmW70e6W5dBHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUu538KE9+jaWUTZDWot+NRGFhkV4wHwYDVR0j
BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y
R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC
NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D
QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAd+xRojQzadgU9JuM2sIL8qu30OLCiapaMFXkCFDibPJMooNlxiaJd0CqEDI
69uM/MXSHDCchZpLz48MhizZXSducg5ZmmNiOD/LNQbgl/qSXkdAAb7eetJ0wqk4
pvzGahMF2sgbGyzWoECgoflo31luTtHoZi3vWOaJ7nkf6t00CKIMZgApObSUM5z7
LYV1rN8v7BnwBe+jD24SGSzWqRiF+CCL7S0QVIXk7EkcBT3zZW7Y5IuqDCXz1FIk
Wj1/xv1hAL4gFAJDEDS61uskTxlDOn6Wk1UBp9QwA9ySjfQaWvrj9WzhNhGkskHz
aP3nuVgXP7lFrmyF+nmfM9dVYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:14:24 2026 by rpki-client