
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json)
Hash identifier: 5NbHsubhS6gh97ajj+kdOnK6RDbJexAsI1O99Kxq5Hg=
Subject key identifier: 98:BC:19:4C:BB:B2:2F:9E:DB:07:BC:1E:42:EB:AC:0E:64:6C:1F:B9
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 11CC35BD0F1727587EC676B46AFAECB77B9C6F61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
Manifest number: 03B7
Signing time: Mon 02 Mar 2026 13:32:50 +0000
Manifest this update: Mon 02 Mar 2026 13:27:50 +0000
Manifest next update: Tue 03 Mar 2026 15:31:50 +0000
Files and hashes: 1: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: mPllKRKV3IA19ztcXHV1p58k2tvSt9HOsh1tvmPZK+Y=)
2: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: xg+01xb+bHDs3Vh7/gYNnOfDlV52jKi9xGItJeFJlMc=)
3: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=)
4: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: aNY4CVp3lvUGIeehKHntmxej/dcIbSb+4GCBHrvnMk8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 15:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cc:35:bd:0f:17:27:58:7e:c6:76:b4:6a:fa:ec:b7:7b:9c:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Mar 2 13:27:50 2026 GMT
Not After : Mar 3 15:31:50 2026 GMT
Subject: CN=98BC194CBBB22F9EDB07BC1E42EBAC0E646C1FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:85:ee:c3:82:5e:44:28:ad:ad:05:54:45:
b3:ee:a3:b7:ac:ee:cd:60:30:ed:21:c2:70:e8:65:
b4:b9:2f:44:d9:7d:b2:5a:91:1e:a8:93:d7:b0:6b:
87:ff:14:cb:a6:39:3b:16:1f:03:9c:f2:b5:f2:2b:
03:15:d2:b0:b5:cd:df:6a:61:1d:bc:be:73:22:86:
c8:2c:8e:24:b5:a8:ce:ed:41:c3:01:a1:08:12:0c:
e5:cd:96:83:36:7e:9a:05:da:bf:4a:f2:fa:a5:62:
1e:c9:79:f8:43:7f:6a:9a:e5:37:ec:cb:8d:17:f2:
ac:7f:e1:87:94:b9:88:c2:fe:da:e5:eb:98:2a:22:
13:96:2e:d3:7a:38:e8:2b:b1:30:97:8f:75:08:55:
47:dd:b1:48:ff:b7:7a:de:4f:b6:f2:87:63:5e:ed:
a4:84:16:01:72:58:48:5e:37:00:bb:c0:17:d8:9c:
52:cf:0a:6e:5c:bd:8d:91:59:30:37:93:57:a3:99:
80:20:57:21:01:49:77:9c:6a:6e:52:84:ea:9c:0f:
2f:2c:bb:ce:1e:78:f6:00:14:7d:e6:e1:28:f6:c3:
f9:b5:13:57:7b:16:fa:df:76:17:5a:8a:ad:7d:9f:
27:ce:6a:97:95:d8:29:5a:0c:5e:0b:05:26:bb:ae:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:19:4C:BB:B2:2F:9E:DB:07:BC:1E:42:EB:AC:0E:64:6C:1F:B9
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:c9:fe:c4:f7:bf:fe:08:58:80:e1:6f:d8:aa:91:8f:f5:
49:e8:d9:78:20:20:a9:72:58:47:0e:70:ae:62:6d:96:5c:de:
26:91:b0:80:80:c4:27:f3:20:90:bb:c9:6e:b1:70:aa:b2:3e:
4c:66:fd:2a:f4:1f:5b:88:fc:bb:10:67:c1:ef:44:28:9a:95:
8c:28:d5:c9:d7:47:8c:2d:27:93:ac:87:f7:58:fc:b0:4a:11:
33:72:5e:bd:85:fa:aa:04:1e:74:30:2e:d2:df:c4:f9:92:09:
0b:fc:cb:5b:5c:bc:ac:8f:ef:cb:6f:e3:82:1f:80:74:0a:65:
9b:25:81:b4:01:c3:51:32:10:42:68:5b:bf:60:7f:29:b2:04:
aa:1f:9c:24:88:b3:58:60:c6:5e:c6:9e:b6:9c:70:c5:0a:45:
93:4d:8a:ce:c3:b5:27:6b:d3:8e:3d:28:b5:18:e1:69:3c:e0:
81:9b:a0:d4:45:c6:ed:27:99:e4:d4:d2:6e:f3:59:c5:77:92:
8d:75:22:a9:5b:f2:50:cf:a1:5c:36:21:cd:36:71:6a:c4:53:
00:09:e2:04:56:72:27:9f:4c:39:11:8f:29:d3:ec:a1:c5:3a:
5f:e3:c0:74:60:32:86:4d:eb:62:eb:66:20:4b:2e:37:0d:0e:
9a:e9:64:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEcw1vQ8XJ1h+xna0avrst3ucb2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNjAzMDIxMzI3NTBaFw0yNjAzMDMxNTMxNTBaMDMxMTAvBgNV
BAMTKDk4QkMxOTRDQkJCMjJGOUVEQjA3QkMxRTQyRUJBQzBFNjQ2QzFGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGIXuw4JeRCitrQVURbPuo7es
7s1gMO0hwnDoZbS5L0TZfbJakR6ok9ewa4f/FMumOTsWHwOc8rXyKwMV0rC1zd9q
YR28vnMihsgsjiS1qM7tQcMBoQgSDOXNloM2fpoF2r9K8vqlYh7JefhDf2qa5Tfs
y40X8qx/4YeUuYjC/trl65gqIhOWLtN6OOgrsTCXj3UIVUfdsUj/t3reT7byh2Ne
7aSEFgFyWEheNwC7wBfYnFLPCm5cvY2RWTA3k1ejmYAgVyEBSXecam5ShOqcDy8s
u84eePYAFH3m4Sj2w/m1E1d7Fvrfdhdaiq19nyfOapeV2ClaDF4LBSa7rgLFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmLwZTLuyL57bB7weQuusDmRsH7kwHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D
QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhTjJ/sT3v/4IWIDhb9iqkY/1SejZeCAgqXJYRw5wrmJtllzeJpGwgIDEJ/Mg
kLvJbrFwqrI+TGb9KvQfW4j8uxBnwe9EKJqVjCjVyddHjC0nk6yH91j8sEoRM3Je
vYX6qgQedDAu0t/E+ZIJC/zLW1y8rI/vy2/jgh+AdAplmyWBtAHDUTIQQmhbv2B/
KbIEqh+cJIizWGDGXsaetpxwxQpFk02KzsO1J2vTjj0otRjhaTzggZug1EXG7SeZ
5NTSbvNZxXeSjXUiqVvyUM+hXDYhzTZxasRTAAniBFZyJ59MORGPKdPsocU6X+PA
dGAyhk3rYutmIEsuNw0OmulkVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:08:55 2026 by rpki-client