
$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
File: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json)
Hash identifier: HGs7s06/eswS7EB07NqqcifLYoMnaRlEFQ1XFF6i8mk=
Subject key identifier: D9:38:47:B4:F2:73:0C:4F:9B:16:2B:E8:F9:5D:C7:6E:6A:6A:07:4F
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Certificate issuer: /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial: 64B57BD2FD69E0D26B06A43210E2891412EDB2EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
Manifest number: D4
Signing time: Sun 01 Mar 2026 15:55:35 +0000
Manifest this update: Sun 01 Mar 2026 15:50:35 +0000
Manifest next update: Mon 02 Mar 2026 16:53:35 +0000
Files and hashes: 1: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=)
2: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: qRoC2fubkwbUwkH0ccCcVfYZ1n8OcSqg2qC9g98FO3I=)
3: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 16:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b5:7b:d2:fd:69:e0:d2:6b:06:a4:32:10:e2:89:14:12:ed:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Validity
Not Before: Mar 1 15:50:35 2026 GMT
Not After : Mar 2 16:53:35 2026 GMT
Subject: CN=D93847B4F2730C4F9B162BE8F95DC76E6A6A074F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:15:1d:6e:6b:95:88:73:2b:34:25:c9:e6:
01:24:a2:57:67:ce:d0:72:db:e4:fe:d1:a5:82:a3:
8c:a5:ea:a0:2a:ad:bc:ad:eb:95:aa:12:38:b0:87:
4c:91:c6:6e:ef:99:ae:4d:a5:79:80:7f:56:2b:f5:
83:ca:1b:73:6c:ea:dc:7e:c3:32:b9:4a:05:21:67:
b1:56:ca:16:e3:f0:89:26:e1:99:22:f5:fd:16:8a:
be:f1:44:32:9b:ae:50:4f:f3:96:09:85:13:5b:f8:
2d:6b:d3:3e:84:76:ca:fa:be:aa:ae:db:cc:78:03:
e6:15:09:b6:2c:fd:eb:c0:b6:eb:4a:21:3c:ce:1d:
2a:8e:ec:31:70:58:35:4c:23:13:cb:f3:63:f9:e1:
26:e2:b3:1e:42:c0:92:3b:8e:1e:16:03:01:fc:b2:
7f:f7:a5:3f:d2:47:2d:31:a0:c1:fe:2c:1b:88:28:
46:92:c0:52:5e:4d:e3:76:d4:58:e1:9b:32:24:af:
76:6d:95:71:ae:43:13:4d:e8:68:dc:64:42:4a:b2:
5c:b1:3c:8d:e6:ec:2e:ca:12:8b:d1:6a:18:6a:26:
42:77:80:10:f3:5d:e3:f9:6a:16:61:46:f3:86:46:
8f:74:99:cc:7f:f0:41:0c:1a:e1:06:a8:ba:84:c4:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:38:47:B4:F2:73:0C:4F:9B:16:2B:E8:F9:5D:C7:6E:6A:6A:07:4F
X509v3 Authority Key Identifier:
keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:20:fe:79:66:b6:a2:81:4a:18:73:c1:8f:22:b6:52:9a:1f:
78:83:55:05:c1:49:90:84:a0:a5:76:72:ae:97:67:d9:70:79:
b7:bc:c6:1e:ba:5e:32:8a:5a:ac:74:1e:6a:e1:1a:64:77:b6:
71:ba:e4:b3:70:26:74:9c:f2:1d:31:ea:42:a5:48:4d:7e:eb:
1f:e8:a3:cc:53:9f:56:87:9d:01:6b:eb:41:25:00:88:f2:0b:
a2:94:a8:7e:fb:f6:f0:9c:34:04:35:b0:2f:e9:27:ae:79:52:
08:a0:64:2f:79:cf:ce:b3:16:23:2f:af:37:21:78:89:5a:50:
7c:0b:78:e4:b2:60:11:f1:dd:94:99:9b:b2:32:d2:3e:28:80:
9c:c9:c2:81:ef:68:c2:45:b1:32:f4:3e:ee:c1:58:1f:19:40:
d5:5f:49:a3:62:9c:e8:77:18:86:8f:33:97:95:84:17:62:e4:
bc:2e:38:31:36:fb:87:5d:7c:0d:b0:25:5b:cb:68:36:46:03:
60:05:c1:cd:23:bb:99:0f:ab:f7:51:6b:e5:f2:04:66:30:28:
92:80:5c:1b:b9:55:6b:37:83:76:aa:72:56:db:17:67:b2:19:
81:18:f2:86:7f:51:e2:fa:58:44:0b:40:76:0c:5b:7f:41:98:
f1:47:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:53 2026 by rpki-client