
$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json)
Hash identifier: Rxv07x5gZ1cE0/3g1jeYXZ01aZfQ2L3ZrKr9e7uvWb8=
Subject key identifier: 0C:A0:D8:8B:E1:C8:E0:03:18:E4:00:33:64:37:24:DC:4C:5C:6E:37
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial: 0A4C1A39BB2A456C8BCCC56799AAF9BE63483C03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
Manifest number: 031D
Signing time: Fri 17 Apr 2026 14:07:26 +0000
Manifest this update: Fri 17 Apr 2026 14:02:26 +0000
Manifest next update: Sat 18 Apr 2026 16:08:26 +0000
Files and hashes: 1: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=)
2: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=)
3: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: KieYFlG/2Sa2tX18bx3zq7ufOskxW9Vm/vEfAth+G50=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 16:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4c:1a:39:bb:2a:45:6c:8b:cc:c5:67:99:aa:f9:be:63:48:3c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Validity
Not Before: Apr 17 14:02:26 2026 GMT
Not After : Apr 18 16:08:26 2026 GMT
Subject: CN=0CA0D88BE1C8E00318E40033643724DC4C5C6E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:a7:ce:64:3c:b2:c1:1c:e6:01:84:b4:b1:
36:05:74:45:ec:15:90:49:05:63:55:7a:44:39:5c:
0a:e6:11:64:ad:01:2c:c5:ea:da:3d:2f:85:fb:c6:
0a:01:a1:12:aa:e7:82:0d:1a:38:48:31:6f:f9:a5:
a4:91:98:73:b0:b0:df:cd:cb:0d:08:99:df:be:3f:
42:74:12:97:b2:41:ab:c5:8d:35:93:53:a9:d7:27:
f6:bc:03:41:72:c0:a8:7e:fe:04:df:50:b0:cc:6f:
ae:66:9a:62:f2:9a:bd:3d:d6:18:62:04:46:11:94:
1a:de:01:7c:0e:10:5e:33:a3:d6:a2:e8:c4:8c:48:
8d:d0:a8:e1:5e:00:9d:44:6a:cf:f0:b5:84:b5:88:
b6:13:0a:87:98:b7:ba:94:57:ec:3c:57:c9:e7:fc:
c9:94:d1:be:f5:c0:d5:c1:3e:d1:68:14:25:7e:dc:
2e:e6:14:de:a1:2b:d4:1e:69:4b:d3:7b:d9:75:5b:
17:c6:92:06:8c:d9:75:3e:a0:3b:71:38:cc:cd:13:
62:5f:f6:69:67:6d:1a:75:ea:bb:ed:34:cf:8d:a8:
9c:d9:95:18:e9:95:e5:41:81:37:9e:12:be:59:4e:
64:5f:a4:e3:30:e5:44:3a:e9:71:69:d0:a1:c0:38:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A0:D8:8B:E1:C8:E0:03:18:E4:00:33:64:37:24:DC:4C:5C:6E:37
X509v3 Authority Key Identifier:
keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5e:a6:a9:4f:7e:ce:4d:b8:2d:b7:88:ee:c7:16:4d:07:01:
62:8e:bc:8a:a0:2c:fe:52:e2:53:5e:a2:df:57:29:5c:4a:4c:
d2:7f:b4:c6:f6:f7:da:6e:b3:64:bc:c1:87:6d:1e:8f:0a:a3:
f8:d2:6b:d5:7b:a9:b3:eb:a0:2c:a5:98:3b:e0:d9:d3:90:fa:
08:91:df:7c:7e:ca:e1:9d:67:ff:09:ea:19:61:ba:84:b5:c9:
c2:3b:78:88:ba:3f:7a:3b:d7:4e:1d:c6:a0:f5:66:16:9c:fb:
7b:d1:0e:fc:7f:ce:31:ad:31:9d:4b:0b:f7:70:18:3c:43:36:
0d:0f:1a:04:51:aa:99:3d:97:60:9a:e2:c4:c9:43:aa:22:e8:
be:1a:9a:a8:d2:63:9e:a9:de:24:46:e2:29:57:9a:7b:de:47:
c2:6c:ff:90:7d:3d:ef:e9:b7:6e:01:8d:a7:6f:03:0b:c9:c3:
0a:c0:8c:88:e6:ae:05:da:f7:cd:c5:98:3b:ed:16:10:ce:7c:
c4:45:f7:ac:a3:a8:96:60:dc:76:fb:97:fe:32:0f:34:fd:bf:
07:f0:86:87:75:e7:b6:42:64:e2:06:d9:fc:1d:67:24:2c:ea:
b4:07:30:41:d0:b3:6e:3f:2f:d0:68:18:f4:af:1b:82:95:c5:
e2:17:53:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCkwaObsqRWyLzMVnmar5vmNIPAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB
MDhENEZGMDAeFw0yNjA0MTcxNDAyMjZaFw0yNjA0MTgxNjA4MjZaMDMxMTAvBgNV
BAMTKDBDQTBEODhCRTFDOEUwMDMxOEU0MDAzMzY0MzcyNERDNEM1QzZFMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPafOZDyywRzmAYS0sTYFdEXs
FZBJBWNVekQ5XArmEWStASzF6to9L4X7xgoBoRKq54INGjhIMW/5paSRmHOwsN/N
yw0Imd++P0J0EpeyQavFjTWTU6nXJ/a8A0FywKh+/gTfULDMb65mmmLymr091hhi
BEYRlBreAXwOEF4zo9ai6MSMSI3QqOFeAJ1Eas/wtYS1iLYTCoeYt7qUV+w8V8nn
/MmU0b71wNXBPtFoFCV+3C7mFN6hK9QeaUvTe9l1WxfGkgaM2XU+oDtxOMzNE2Jf
9mlnbRp16rvtNM+NqJzZlRjpleVBgTeeEr5ZTmRfpOMw5UQ66XFp0KHAOC3lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDKDYi+HI4AMY5AAzZDck3ExcbjcwHwYDVR0j
BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D
UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz
NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w
OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA16mqU9+zk24LbeI7scWTQcBYo68iqAs/lLiU16i31cpXEpM0n+0xvb32m6z
ZLzBh20ejwqj+NJr1Xups+ugLKWYO+DZ05D6CJHffH7K4Z1n/wnqGWG6hLXJwjt4
iLo/ejvXTh3GoPVmFpz7e9EO/H/OMa0xnUsL93AYPEM2DQ8aBFGqmT2XYJrixMlD
qiLovhqaqNJjnqneJEbiKVeae95Hwmz/kH097+m3bgGNp28DC8nDCsCMiOauBdr3
zcWYO+0WEM58xEX3rKOolmDcdvuX/jIPNP2/B/CGh3XntkJk4gbZ/B1nJCzqtAcw
QdCzbj8v0GgY9K8bgpXF4hdTRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:09:23 2026 by rpki-client