
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
File: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft (raw, json)
Hash identifier: FN9lBudBbkbcCqbKc8nbnysvbnlWyvYkxvIN6TB/ZbQ=
Subject key identifier: F2:F8:1D:4F:C5:7A:C6:E8:9A:24:EC:B1:A8:DB:73:99:26:43:E9:12
Authority key identifier: D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB
Certificate issuer: /CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
Certificate serial: 5DA2BD12CACCDCAA40773C8DED518584E5AF853A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
Manifest number: 0185
Signing time: Mon 02 Mar 2026 01:43:04 +0000
Manifest this update: Mon 02 Mar 2026 01:38:04 +0000
Manifest next update: Tue 03 Mar 2026 05:34:04 +0000
Files and hashes: 1: AS28343.roa (hash: 38oCwk7agpN74oJb3YDJeiQoYXWYFqwuFuOq7AnXNJI=)
2: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl (hash: te9Oai79/p7CHu7Dvds8WLAPxxOYSZ7Wk6s+DMHtjo8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl
rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 05:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a2:bd:12:ca:cc:dc:aa:40:77:3c:8d:ed:51:85:84:e5:af:85:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
Validity
Not Before: Mar 2 01:38:04 2026 GMT
Not After : Mar 3 05:34:04 2026 GMT
Subject: CN=F2F81D4FC57AC6E89A24ECB1A8DB73992643E912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:d2:09:73:df:01:70:02:b4:2e:02:64:00:
5a:91:1c:b3:0d:a3:cf:07:01:97:46:a1:01:26:16:
e0:b8:3e:d0:e4:2f:62:b7:f8:e1:2c:5e:d4:86:6c:
3d:fc:e3:8f:b9:bd:e2:4f:dc:a1:cc:7e:f5:bc:64:
b7:8d:68:58:a6:7e:ef:78:99:0c:e2:4b:0b:7f:71:
6c:3c:2b:b8:46:0f:41:19:05:98:2a:6a:5e:3f:d5:
c7:e1:88:ea:7c:ae:2b:5b:5a:47:39:0e:6d:f7:7f:
d8:1d:c4:94:b9:70:a8:57:d5:17:1b:fa:c1:14:34:
93:90:06:8f:0e:35:ad:89:02:7a:8c:b3:b9:e3:23:
f3:4e:70:71:61:19:b4:99:93:06:9b:92:8e:4a:a9:
cc:e1:d4:ec:d2:b9:9d:85:f7:31:50:44:6b:e4:50:
38:f1:b5:8f:27:7a:ab:2d:11:2f:31:dd:aa:cf:1c:
f3:4e:fc:15:20:bd:39:03:58:1a:35:f2:86:1c:51:
e7:d4:18:bc:82:61:ad:35:60:32:d5:46:b3:45:00:
30:df:c9:05:93:6e:1f:dc:d7:d9:32:f0:f5:5a:79:
86:f0:be:9f:1b:c4:c2:a4:10:08:a6:40:d6:b3:98:
09:c6:8e:ae:b9:7d:4e:41:cf:63:d0:51:8b:9b:5d:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:1D:4F:C5:7A:C6:E8:9A:24:EC:B1:A8:DB:73:99:26:43:E9:12
X509v3 Authority Key Identifier:
keyid:D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f3:40:61:61:ca:1d:5c:aa:0b:cf:42:30:b4:f6:44:75:41:
d1:9e:19:9d:b0:e9:6c:f4:ee:c9:a0:60:02:2f:9c:28:24:d3:
a4:d3:1e:f7:80:01:01:22:45:e3:1f:10:d5:19:2e:82:0d:ab:
fa:45:94:a2:61:70:b1:d3:0e:57:63:10:ab:0b:22:62:73:c5:
e0:a6:4a:22:e3:b7:48:5a:94:7f:75:7a:3d:dd:9c:b9:df:a3:
55:f7:4b:2a:2b:49:a3:24:44:e6:06:13:ac:10:37:6e:17:6f:
cb:39:a1:30:bc:79:da:bf:f6:87:66:e2:f1:e8:bd:3e:30:fb:
9a:8b:ca:9c:59:c0:7e:26:1d:23:26:2b:22:da:34:51:43:59:
ff:16:cc:8f:53:4a:64:08:15:6a:0e:8f:ef:6d:84:31:0d:bb:
10:a7:77:0b:88:3b:eb:cc:d6:3a:89:4d:57:ea:bb:57:7f:25:
40:0c:95:0e:56:ec:b5:81:6d:0f:1a:35:92:04:6f:c3:a1:25:
46:d2:b7:e2:82:59:85:85:e9:f8:e5:ba:de:dd:3a:df:71:7c:
a4:6a:f0:cc:73:98:72:d5:a0:a8:fa:76:e2:61:c2:e7:ad:b1:
f6:72:a6:cf:eb:a4:2b:24:55:76:d0:20:c9:fc:87:ed:16:f9:
bb:55:a9:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXaK9EsrM3KpAdzyN7VGFhOWvhTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5Njg3OEIzODgwMUUxQkE5QkNGMEZGMkUyOUZCODdB
NUNDNzJBQjAeFw0yNjAzMDIwMTM4MDRaFw0yNjAzMDMwNTM0MDRaMDMxMTAvBgNV
BAMTKEYyRjgxRDRGQzU3QUM2RTg5QTI0RUNCMUE4REI3Mzk5MjY0M0U5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2P9IJc98BcAK0LgJkAFqRHLMN
o88HAZdGoQEmFuC4PtDkL2K3+OEsXtSGbD3844+5veJP3KHMfvW8ZLeNaFimfu94
mQziSwt/cWw8K7hGD0EZBZgqal4/1cfhiOp8ritbWkc5Dm33f9gdxJS5cKhX1Rcb
+sEUNJOQBo8ONa2JAnqMs7njI/NOcHFhGbSZkwabko5Kqczh1OzSuZ2F9zFQRGvk
UDjxtY8neqstES8x3arPHPNO/BUgvTkDWBo18oYcUefUGLyCYa01YDLVRrNFADDf
yQWTbh/c19ky8PVaeYbwvp8bxMKkEAimQNazmAnGjq65fU5Bz2PQUYubXRUpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8vgdT8V6xuiaJOyxqNtzmSZD6RIwHwYDVR0j
BBgwFoAU15aHiziAHhupvPD/Lin7h6XMcqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZ
U3cvMC9ENzk2ODc4QjM4ODAxRTFCQTlCQ0YwRkYyRTI5RkI4N0E1Q0M3MkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OTY4NzhCMzg4MDFFMUJB
OUJDRjBGRjJFMjlGQjg3QTVDQzcyQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZU3cvMC9E
Nzk2ODc4QjM4ODAxRTFCQTlCQ0YwRkYyRTI5RkI4N0E1Q0M3MkFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzPNAYWHKHVyqC89CMLT2RHVB0Z4ZnbDpbPTuyaBgAi+cKCTTpNMe94ABASJF
4x8Q1Rkugg2r+kWUomFwsdMOV2MQqwsiYnPF4KZKIuO3SFqUf3V6Pd2cud+jVfdL
KitJoyRE5gYTrBA3bhdvyzmhMLx52r/2h2bi8ei9PjD7movKnFnAfiYdIyYrIto0
UUNZ/xbMj1NKZAgVag6P722EMQ27EKd3C4g768zWOolNV+q7V38lQAyVDlbstYFt
Dxo1kgRvw6ElRtK34oJZhYXp+OW63t0633F8pGrwzHOYctWgqPp24mHC562x9nKm
z+ukKyRVdtAgyfyH7Rb5u1WpjQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:43 2026 by rpki-client