
$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier: g5YZMglZ1C6R3osm7uMrwzk7Dn9mYwBtJU5dMkAIA6s=
Subject key identifier: DC:66:4A:62:A1:80:9A:28:C2:1F:A6:E9:E9:B7:93:D2:BF:83:82:BE
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial: 0D1043B06734B4EF788DBC8D8116E22E4FE95565
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number: 0468
Signing time: Fri 17 Apr 2026 15:40:00 +0000
Manifest this update: Fri 17 Apr 2026 15:35:00 +0000
Manifest next update: Sat 18 Apr 2026 15:40:00 +0000
Files and hashes: 1: 323830343a336438303a3a2f33332d3333203d3e20323636353335.roa (hash: z9igj7MGsmtf/1Sy9zcE0T7tcBaO8/e+SL2nDBel2m8=)
2: 323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (hash: Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=)
3: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: TxlG0812plpjPhvcX/d0Olltq3zIPufdkiSuAoXprqk=)
4: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: ZciEocyNThB8Dt9USSnp55XhUpsQwG4rnTD6Z4ERIeo=)
5: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: bECPbuRuBrIOnjdoBKScCAXjGsCP8o1jcCme3zamF0s=)
6: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: DqP5mf5U6YxJGBly2hzV6Uavn9AYJNW8SE/1OzFbx28=)
7: 323830343a336438303a383030303a3a2f33332d3333203d3e20323636353335.roa (hash: h97iUgEEBkr3O+lUMEj/QD+0mK6bNS7G42zz0AhsaHM=)
8: 323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (hash: qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=)
9: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: wHbI+HZw0d0+VVKI2O6UiIL7xxlmxDe0dzs6WnffOtM=)
10: CA2ED340034D0368230850867C30E245990118A2.crl (hash: EcSIIpahbrKDUcZDDt8a0pYUK47nBGZnfIJnwRxM+mM=)
11: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: mnXKGK0Sb3JfSD9qwtiqL+zB6Uxf7pRYFU72tIF3RgE=)
12: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: Mpe5/idJmRp1cNXJYCyARrtABVfhbdPKne04ORvkzmY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 15:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:10:43:b0:67:34:b4:ef:78:8d:bc:8d:81:16:e2:2e:4f:e9:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
Validity
Not Before: Apr 17 15:35:00 2026 GMT
Not After : Apr 18 15:40:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:b4:52:c1:22:08:62:13:e9:cb:d2:82:8e:
89:3d:a8:fb:5a:6f:b8:63:e3:32:b0:cf:03:89:9a:
8e:dc:bb:d5:23:55:2e:4a:e2:69:70:d6:26:5d:b2:
02:f4:57:46:a8:0a:46:95:6f:9e:0d:64:67:10:83:
78:50:01:8c:22:cc:96:01:81:89:0f:19:ab:31:2e:
d0:38:bb:c7:d8:ed:57:fa:bb:d4:1c:77:55:bf:eb:
7e:81:fd:69:7d:5f:fc:85:d5:1b:66:18:95:ca:c7:
2d:cf:5f:45:ee:73:a0:87:d1:fc:b8:9e:b7:73:65:
87:1b:24:f1:21:0a:4d:ca:86:0c:a3:74:69:f3:df:
a4:ae:07:fe:a1:c8:ac:b0:65:b4:d9:8f:b3:46:4a:
27:b4:77:a7:e5:d2:12:4b:db:6e:c1:f6:d4:50:c9:
fe:19:b7:31:15:0d:36:87:f9:52:68:1e:67:2b:76:
dc:73:50:4f:42:82:35:91:56:6f:06:ce:7f:3d:86:
ce:52:e9:d4:5f:5d:a1:86:56:90:c2:62:70:1a:f8:
a6:53:dd:3b:7e:07:ea:08:6c:cc:1d:93:78:eb:7b:
37:79:21:50:79:23:b3:fe:a9:f3:c6:0c:e9:4f:7e:
89:65:18:f4:22:c5:b1:d0:17:bf:5e:46:79:cf:1c:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:4A:62:A1:80:9A:28:C2:1F:A6:E9:E9:B7:93:D2:BF:83:82:BE
X509v3 Authority Key Identifier:
keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:40:a2:e3:ae:fb:e3:3d:ef:a8:cd:57:c8:35:50:40:fd:d1:
32:70:3a:cc:f9:16:fd:c1:5b:9d:52:64:9a:c3:16:4c:8b:c8:
c6:8d:25:22:b4:a2:88:09:69:6e:94:af:e5:79:06:a9:ac:56:
f3:b6:94:41:a5:94:2b:52:ae:9d:f1:23:48:e5:ad:43:54:f7:
b7:4f:6a:2e:bf:19:6b:97:1f:59:df:ec:6a:61:a8:fb:93:cd:
c8:16:f1:ee:d2:80:26:16:08:2b:b0:f2:02:34:9f:e5:23:e4:
ae:48:75:9b:31:35:6e:57:f0:d4:a1:59:f3:fe:41:38:d3:3e:
a7:7a:44:45:1e:a2:2c:ac:9c:50:c4:80:fd:06:16:bf:2e:ff:
c5:d6:7d:27:d9:99:7d:de:df:ab:ae:cb:f6:ef:f8:5e:65:17:
db:2d:4a:7c:18:ae:b4:69:11:79:42:67:70:1d:f1:37:88:80:
c4:db:36:75:07:b4:7e:78:88:9a:47:4c:43:1a:06:e3:fe:7d:
00:f2:86:9c:04:7e:d2:1c:5c:02:51:b1:05:6d:4b:e5:0f:e6:
8e:e2:97:f9:38:17:6c:14:7a:da:33:8c:fc:e0:53:6f:b7:48:
50:5b:1d:8b:d3:99:d8:8e:fe:48:fb:a8:d4:4e:4b:80:d9:6a:
00:a9:1b:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:53 2026 by rpki-client