
$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
File: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft (raw, json)
Hash identifier: ISjFUkiviCVfFlcvDlLZKxipI76WFA9JJgEzYXgSuK8=
Subject key identifier: 76:25:CC:8E:FD:00:EC:14:BD:AB:36:D0:43:8C:DE:E7:04:3E:63:48
Authority key identifier: CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7
Certificate issuer: /CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7
Certificate serial: 39E6FFCE0009B37E2D28DAD0E0023FD987815D4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
Manifest number: 5D
Signing time: Fri 17 Apr 2026 18:18:57 +0000
Manifest this update: Fri 17 Apr 2026 18:13:57 +0000
Manifest next update: Sat 18 Apr 2026 19:06:57 +0000
Files and hashes: 1: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: sHP2ygrqTYTY15dtbi0gTVuddZSIHRSH0IyS1EMxOo4=)
2: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: rqFpRbi2nHQnPx4E/BliB9kjTJF3Fdr2CbPUaChmPDo=)
3: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl (hash: ml3UqzARnxXdAtVBpSOGNCEHST5BE5RjTfNdJKENPS4=)
4: 3230302e3139322e3135322e302f32322d3234203d3e203631363133.roa (hash: u/gXstXvaoXswmUY2weSiF3XDVA5+Rjw0+u0Ea1eciY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl
rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 19:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e6:ff:ce:00:09:b3:7e:2d:28:da:d0:e0:02:3f:d9:87:81:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7
Validity
Not Before: Apr 17 18:13:57 2026 GMT
Not After : Apr 18 19:06:57 2026 GMT
Subject: CN=7625CC8EFD00EC14BDAB36D0438CDEE7043E6348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:65:d1:cf:b9:92:88:00:1d:1e:e3:3e:ef:
69:14:1c:06:e6:00:b5:b2:bf:9c:67:03:f2:bd:62:
b3:87:10:ed:1f:28:d3:0b:1f:46:a4:87:35:51:a4:
2d:20:7f:52:1c:ea:2b:34:27:69:6a:c1:b5:aa:1e:
1c:dc:94:81:af:2c:c1:6e:d0:b1:08:96:2f:6a:da:
7b:ff:16:db:ef:7d:3c:a0:5d:9d:b7:12:64:b4:08:
34:ef:eb:4b:44:9d:77:d8:ef:db:66:db:d3:16:cf:
4e:61:bf:2d:59:d1:25:cd:79:b0:9a:c6:c5:67:2b:
10:47:55:43:03:3e:d2:eb:1d:db:a1:50:74:b4:fe:
ea:6a:12:d2:74:f6:1f:d6:c8:44:c6:4c:7d:1f:31:
18:d5:6a:64:fe:7b:14:fe:15:e4:0c:51:3b:ce:08:
42:f3:bd:25:15:18:b3:ac:ef:86:20:f4:8b:f9:9a:
c3:f4:78:d5:60:b7:9f:16:43:3f:d4:7e:fe:16:d7:
b8:3e:7a:fd:1a:0a:fc:a1:f4:fa:33:47:44:38:af:
1e:9d:1c:e7:f2:11:2f:95:26:2d:84:da:35:27:58:
01:f3:03:31:f0:9e:d2:a3:7e:7c:a2:fd:05:dd:8d:
21:fd:01:17:ea:48:48:ec:41:35:d5:08:a9:34:df:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:25:CC:8E:FD:00:EC:14:BD:AB:36:D0:43:8C:DE:E7:04:3E:63:48
X509v3 Authority Key Identifier:
keyid:CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a2:16:02:6b:ec:e5:8c:04:7b:f3:93:25:09:60:81:39:92:
3d:c2:ad:04:8b:5c:63:58:6c:e3:b7:f0:a7:f2:5e:ae:51:db:
64:0b:f8:fc:5f:36:4a:94:ab:d1:ba:be:9e:ff:d4:dc:42:58:
01:f4:20:f0:ae:6c:bd:c1:9a:ec:56:1d:3b:6d:2b:43:83:57:
7d:24:4c:75:36:bb:d9:9c:9d:98:45:6d:21:79:ec:e0:84:30:
30:54:9c:39:a6:28:c5:33:bf:5b:42:ba:5e:7c:5a:73:ce:f3:
ba:0e:ff:93:f8:8a:b9:56:bd:7e:62:9d:b5:38:51:99:a2:13:
41:6d:fd:34:b4:7b:d9:8c:8e:3a:39:ab:c2:bd:ef:5f:79:98:
1f:55:d0:1a:5d:1f:95:fd:11:97:ff:f9:c6:f7:59:5e:12:2f:
9d:47:54:07:b5:60:31:4b:b2:fb:8c:b1:ce:43:8e:18:16:5f:
c8:0d:ee:3c:5b:ee:0a:e6:b9:53:b3:09:c0:ad:f2:5d:4f:56:
75:e5:8b:9b:f0:9d:c3:70:74:70:bb:f1:88:41:a9:8c:47:d6:
0f:8c:dd:ce:f7:df:6b:1b:c1:27:d2:8c:1e:72:f5:e4:cf:e1:
6b:04:8d:a6:1c:76:d0:30:34:22:05:5f:71:02:ee:32:a2:ac:
5b:89:cb:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOeb/zgAJs34tKNrQ4AI/2YeBXU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UzQzIwN0U2Q0VDQjk0QzhCQkNCNjZDMkM1QjMxQjI5
RkEyMjBCNzAeFw0yNjA0MTcxODEzNTdaFw0yNjA0MTgxOTA2NTdaMDMxMTAvBgNV
BAMTKDc2MjVDQzhFRkQwMEVDMTRCREFCMzZEMDQzOENERUU3MDQzRTYzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZWXRz7mSiAAdHuM+72kUHAbm
ALWyv5xnA/K9YrOHEO0fKNMLH0akhzVRpC0gf1Ic6is0J2lqwbWqHhzclIGvLMFu
0LEIli9q2nv/FtvvfTygXZ23EmS0CDTv60tEnXfY79tm29MWz05hvy1Z0SXNebCa
xsVnKxBHVUMDPtLrHduhUHS0/upqEtJ09h/WyETGTH0fMRjVamT+exT+FeQMUTvO
CELzvSUVGLOs74Yg9Iv5msP0eNVgt58WQz/Ufv4W17g+ev0aCvyh9PozR0Q4rx6d
HOfyES+VJi2E2jUnWAHzAzHwntKjfnyi/QXdjSH9ARfqSEjsQTXVCKk03yX3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdiXMjv0A7BS9qzbQQ4ze5wQ+Y0gwHwYDVR0j
BBgwFoAUzjwgfmzsuUyLvLZsLFsxsp+iILcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU
d1QvMC9DRTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFM0MyMDdFNkNFQ0I5NEM4
QkJDQjY2QzJDNUIzMUIyOUZBMjIwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhUd1QvMC9D
RTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmaIWAmvs5YwEe/OTJQlggTmSPcKtBItcY1hs47fwp/JerlHbZAv4/F82SpSr
0bq+nv/U3EJYAfQg8K5svcGa7FYdO20rQ4NXfSRMdTa72ZydmEVtIXns4IQwMFSc
OaYoxTO/W0K6Xnxac87zug7/k/iKuVa9fmKdtThRmaITQW39NLR72YyOOjmrwr3v
X3mYH1XQGl0flf0Rl//5xvdZXhIvnUdUB7VgMUuy+4yxzkOOGBZfyA3uPFvuCua5
U7MJwK3yXU9WdeWLm/Cdw3B0cLvxiEGpjEfWD4zdzvffaxvBJ9KMHnL15M/hawSN
phx20DA0IgVfcQLuMqKsW4nLqQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:12 2026 by rpki-client