
$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier: XeMUIJPpM8SWXwvdxmkXX8UIwwMEGu5HMN90ZvmDFaM=
Subject key identifier: 26:95:46:D4:B0:22:05:10:D9:FB:A7:64:A7:A8:F9:9E:03:E7:CA:8F
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial: 3583A238EA1070D5B8BC22364088E0C65A185D68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number: 03A2
Signing time: Mon 02 Mar 2026 11:58:05 +0000
Manifest this update: Mon 02 Mar 2026 11:53:05 +0000
Manifest next update: Tue 03 Mar 2026 12:44:05 +0000
Files and hashes: 1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: 8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=)
2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: n57Ag8V108lgSwDCr/ngXk84AMB+C+S9cEO7kq0UTGk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:83:a2:38:ea:10:70:d5:b8:bc:22:36:40:88:e0:c6:5a:18:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Validity
Not Before: Mar 2 11:53:05 2026 GMT
Not After : Mar 3 12:44:05 2026 GMT
Subject: CN=269546D4B0220510D9FBA764A7A8F99E03E7CA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:ea:38:db:b2:3a:de:14:98:ca:11:bb:c6:
a3:36:59:ec:57:1d:f9:32:fd:e7:46:99:f5:c0:c4:
3d:aa:0c:f0:d4:6c:0c:61:24:22:60:f3:88:13:6e:
07:48:50:23:12:53:f4:0d:8c:05:6c:79:dc:fa:9d:
22:48:25:e0:71:a8:53:e9:72:18:4c:54:9d:df:53:
db:27:01:25:73:a6:0e:7b:cd:70:4f:a7:5e:15:a9:
21:8f:00:37:3f:aa:9c:0c:2f:20:28:4b:f6:49:0e:
48:2a:f9:0b:00:7a:1b:36:b5:8f:30:bf:92:b2:5b:
c5:e8:86:2d:50:b3:21:0b:42:60:32:3a:94:d3:19:
cb:cc:cc:7d:df:a9:7a:94:4f:5b:55:1e:a2:97:ef:
f6:e4:4d:e3:b0:77:cd:79:43:5d:57:0d:ed:e5:34:
14:9b:9a:6c:7b:d9:12:b7:95:1c:0a:09:d8:fe:05:
c7:0b:bf:fd:1a:96:11:e3:7f:4d:78:60:6a:33:9d:
b0:2e:92:ed:b6:47:b0:59:71:27:ae:f9:5e:89:65:
2b:fe:29:8c:f1:99:b6:c3:1f:95:98:d5:1f:d2:dc:
72:b2:28:85:dc:65:20:0f:cb:4a:9b:5a:41:da:e3:
7d:a0:9e:44:e2:9d:d2:e7:60:54:7d:d7:c4:40:ba:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:46:D4:B0:22:05:10:D9:FB:A7:64:A7:A8:F9:9E:03:E7:CA:8F
X509v3 Authority Key Identifier:
keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:23:e8:54:eb:fd:b3:b4:09:b0:35:99:58:51:7f:67:72:12:
4e:13:e9:87:0b:2f:f5:83:40:8b:87:ba:3c:79:28:b1:7c:7e:
0b:1f:c1:4f:cc:f5:33:cc:49:91:a7:fc:f0:dd:ac:1b:62:72:
e5:2c:58:74:af:3a:2c:66:29:21:ef:1e:27:26:90:dd:1c:93:
7f:b7:18:8e:b4:fd:70:51:36:58:5d:ff:e7:80:dd:73:93:b8:
fd:2b:7d:2b:8a:20:36:ff:bb:88:cc:c6:5c:b2:5f:bd:41:5f:
02:94:d8:97:f0:61:12:ec:7a:35:41:e5:8d:00:37:86:c1:c3:
c9:37:cf:de:a0:69:69:55:6e:3e:ab:10:36:3a:4b:d4:ef:f3:
f7:aa:a5:d3:c5:18:68:d6:0d:a9:a4:e7:77:d5:6f:fa:3b:6e:
fa:b5:31:08:83:ba:6e:5a:5f:f5:15:3b:fc:f1:c9:17:29:2c:
15:c1:c6:92:03:e7:e6:ab:d3:5a:70:0b:a1:e3:fa:1e:38:eb:
36:e4:3b:69:9c:b5:16:ad:8b:d6:c2:df:56:41:dd:c3:75:d2:
e2:b0:ec:b5:55:54:6f:23:36:e7:29:f2:a0:64:32:98:1a:72:
9f:40:f7:5a:6f:59:b6:b3:35:c5:9b:41:c9:4c:12:3a:2f:d5:
41:24:1f:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNYOiOOoQcNW4vCI2QIjgxloYXWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB
NTlENEQ1MTAeFw0yNjAzMDIxMTUzMDVaFw0yNjAzMDMxMjQ0MDVaMDMxMTAvBgNV
BAMTKDI2OTU0NkQ0QjAyMjA1MTBEOUZCQTc2NEE3QThGOTlFMDNFN0NBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiJeo427I63hSYyhG7xqM2WexX
Hfky/edGmfXAxD2qDPDUbAxhJCJg84gTbgdIUCMSU/QNjAVsedz6nSJIJeBxqFPp
chhMVJ3fU9snASVzpg57zXBPp14VqSGPADc/qpwMLyAoS/ZJDkgq+QsAehs2tY8w
v5KyW8Xohi1QsyELQmAyOpTTGcvMzH3fqXqUT1tVHqKX7/bkTeOwd815Q11XDe3l
NBSbmmx72RK3lRwKCdj+BccLv/0alhHjf014YGoznbAuku22R7BZcSeu+V6JZSv+
KYzxmbbDH5WY1R/S3HKyKIXcZSAPy0qbWkHa432gnkTindLnYFR918RAuhYFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJpVG1LAiBRDZ+6dkp6j5ngPnyo8wHwYDVR0j
BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn
eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx
RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84
OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFyPoVOv9s7QJsDWZWFF/Z3ISThPphwsv9YNAi4e6PHkosXx+Cx/BT8z1M8xJ
kaf88N2sG2Jy5SxYdK86LGYpIe8eJyaQ3RyTf7cYjrT9cFE2WF3/54Ddc5O4/St9
K4ogNv+7iMzGXLJfvUFfApTYl/BhEux6NUHljQA3hsHDyTfP3qBpaVVuPqsQNjpL
1O/z96ql08UYaNYNqaTnd9Vv+jtu+rUxCIO6blpf9RU7/PHJFyksFcHGkgPn5qvT
WnALoeP6HjjrNuQ7aZy1Fq2L1sLfVkHdw3XS4rDstVVUbyM25ynyoGQymBpyn0D3
Wm9ZtrM1xZtByUwSOi/VQSQfJQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:32 2026 by rpki-client