
$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json)
Hash identifier: kumrLNrV/EyLMIurSEw2R8Vr4RSydTmQVKdvc3lRUqg=
Subject key identifier: CD:0F:B5:F5:03:C0:B3:A8:09:3F:7A:0F:58:37:77:69:0A:6C:9E:4F
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Certificate issuer: /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial: 379FC08453B7F1DF9259D534F7FA6327C6868CDC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
Manifest number: D5
Signing time: Sun 01 Mar 2026 06:45:55 +0000
Manifest this update: Sun 01 Mar 2026 06:40:55 +0000
Manifest next update: Mon 02 Mar 2026 07:44:55 +0000
Files and hashes: 1: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: UF9jzyH2tvV6cdTFaxr+lkHi3N7GBFEqsccuLlnBFb4=)
2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=)
3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 07:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9f:c0:84:53:b7:f1:df:92:59:d5:34:f7:fa:63:27:c6:86:8c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Validity
Not Before: Mar 1 06:40:55 2026 GMT
Not After : Mar 2 07:44:55 2026 GMT
Subject: CN=CD0FB5F503C0B3A8093F7A0F583777690A6C9E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:88:09:cb:f7:3f:a4:14:28:ac:b8:9b:c7:
55:0d:63:8d:05:d3:68:4a:8a:e0:59:32:69:ad:6a:
70:ac:c1:61:22:bf:71:0a:cd:45:f7:5e:e9:fa:72:
4a:01:b7:77:fb:fb:fa:d1:36:a7:8b:75:69:96:70:
ec:8f:ae:3b:7d:93:5c:e0:d9:64:a7:09:6e:ec:5b:
1b:9e:a0:43:bd:0c:7f:20:cf:ea:2f:44:15:ed:9e:
7b:07:21:91:22:9d:6d:5b:30:31:dd:7d:f2:ad:8f:
0b:93:45:2f:2f:bb:5c:78:02:3e:17:1a:d3:ec:de:
7a:be:fc:7e:a5:c6:76:2e:f8:b0:62:97:1f:42:4e:
89:6d:45:61:8c:a0:54:6d:7d:12:4b:5b:7d:54:6e:
67:eb:14:ca:3c:a6:2e:67:49:86:ec:43:7b:39:31:
e1:7e:ad:db:e7:b7:18:01:ca:7a:4b:dd:fc:e0:1d:
c2:72:eb:94:eb:ec:b7:51:32:df:21:58:ae:3e:ef:
be:33:59:bb:60:44:c8:f6:fb:3b:6e:e2:fd:f5:2f:
a3:ca:99:e5:0a:c2:81:1d:16:42:73:f2:7e:89:de:
1a:c7:48:b8:54:de:ae:26:6b:47:a1:75:0c:aa:b9:
a2:3a:55:91:7b:89:75:0b:b7:6a:b3:9d:69:95:7e:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:B5:F5:03:C0:B3:A8:09:3F:7A:0F:58:37:77:69:0A:6C:9E:4F
X509v3 Authority Key Identifier:
keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0e:79:e7:59:79:10:dc:a7:51:ae:72:ae:9f:f3:95:dc:f4:
ac:b9:63:2d:9e:7f:17:72:aa:f9:3f:19:49:3b:39:23:55:36:
19:e5:4c:d6:7b:06:36:9d:ea:4d:19:b6:3b:d6:ea:d4:e7:a5:
40:39:3e:73:67:2e:53:3a:8d:01:85:a6:9c:0c:56:fa:ce:38:
31:6b:a8:b0:16:32:98:7f:99:56:c0:3c:64:15:a4:db:e3:42:
63:cd:a7:64:05:d0:d3:44:23:46:3f:02:4a:96:0b:a2:3e:b4:
b3:6a:a2:98:90:94:7c:7a:be:e6:4c:e1:fa:61:d0:05:53:fc:
87:ae:f7:0f:b7:7c:08:8a:b1:c3:9b:b2:ff:c5:90:2b:c3:70:
11:94:bf:6a:8f:d7:74:06:20:af:5a:46:1b:2b:81:e3:0f:33:
8f:c5:ac:e3:e2:8f:ef:c3:99:ab:2f:85:bb:81:0d:c9:83:4e:
9a:3e:97:51:82:42:98:a3:de:55:61:5f:82:eb:6d:0a:a8:2d:
9f:25:90:d5:45:45:8b:9a:db:3d:74:b7:bb:dd:31:f6:bc:8e:
80:12:6e:e0:fa:02:31:6e:ed:85:49:74:4e:6c:15:51:a1:ed:
e4:43:d4:17:a1:50:fb:00:7c:e8:7c:fd:4e:dc:6d:03:ab:7b:
b6:4d:83:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN5/AhFO38d+SWdU09/pjJ8aGjNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG
REUwMEJFMzAeFw0yNjAzMDEwNjQwNTVaFw0yNjAzMDIwNzQ0NTVaMDMxMTAvBgNV
BAMTKENEMEZCNUY1MDNDMEIzQTgwOTNGN0EwRjU4Mzc3NzY5MEE2QzlFNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCYgJy/c/pBQorLibx1UNY40F
02hKiuBZMmmtanCswWEiv3EKzUX3Xun6ckoBt3f7+/rRNqeLdWmWcOyPrjt9k1zg
2WSnCW7sWxueoEO9DH8gz+ovRBXtnnsHIZEinW1bMDHdffKtjwuTRS8vu1x4Aj4X
GtPs3nq+/H6lxnYu+LBilx9CToltRWGMoFRtfRJLW31UbmfrFMo8pi5nSYbsQ3s5
MeF+rdvntxgBynpL3fzgHcJy65Tr7LdRMt8hWK4+774zWbtgRMj2+ztu4v31L6PK
meUKwoEdFkJz8n6J3hrHSLhU3q4ma0ehdQyquaI6VZF7iXULt2qznWmVfjMdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzQ+19QPAs6gJP3oPWDd3aQpsnk8wHwYDVR0j
BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz
ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w
NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALw5551l5ENynUa5yrp/zldz0rLljLZ5/F3Kq+T8ZSTs5I1U2GeVM1nsGNp3q
TRm2O9bq1OelQDk+c2cuUzqNAYWmnAxW+s44MWuosBYymH+ZVsA8ZBWk2+NCY82n
ZAXQ00QjRj8CSpYLoj60s2qimJCUfHq+5kzh+mHQBVP8h673D7d8CIqxw5uy/8WQ
K8NwEZS/ao/XdAYgr1pGGyuB4w8zj8Ws4+KP78OZqy+Fu4ENyYNOmj6XUYJCmKPe
VWFfguttCqgtnyWQ1UVFi5rbPXS3u90x9ryOgBJu4PoCMW7thUl0TmwVUaHt5EPU
F6FQ+wB86Hz9TtxtA6t7tk2DJw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:21 2026 by rpki-client