
$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
File: AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft (raw, json)
Hash identifier: J+5l065kL0JXMn8F/WzWeAXPFJGOtRIpWN2ChUV+QcY=
Subject key identifier: 50:F3:72:17:2C:53:6E:44:A0:95:F2:C7:D6:E5:F1:60:C0:5B:03:BD
Authority key identifier: AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
Certificate issuer: /CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
Certificate serial: 0B82D7E687CD49D426A348BCA6E4DBDD5F118219
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
Manifest number: 0217
Signing time: Mon 02 Mar 2026 11:55:29 +0000
Manifest this update: Mon 02 Mar 2026 11:50:29 +0000
Manifest next update: Tue 03 Mar 2026 11:58:29 +0000
Files and hashes: 1: 3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa (hash: JUgCe9fJMLFDamkQaJmWXqh4IK7eV3z102yXFggN2Dg=)
2: 3138372e312e3131322e302f32302d3234203d3e203533313633.roa (hash: jJj5HXT9E5TYByV+Ipm31dw1nJ7AvvwtFk15/nuiUKE=)
3: 323830343a313033303a3a2f33322d3634203d3e203533313633.roa (hash: 0htQC3163pF6cz0tfbyyeVCQmnM5++yB4NM3hhCnahk=)
4: AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl (hash: mSVSfRsD2Fu9aCnEu5yHJV9LCu9uLFGwu+At5Vg+qgY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl
rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 11:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:82:d7:e6:87:cd:49:d4:26:a3:48:bc:a6:e4:db:dd:5f:11:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
Validity
Not Before: Mar 2 11:50:29 2026 GMT
Not After : Mar 3 11:58:29 2026 GMT
Subject: CN=50F372172C536E44A095F2C7D6E5F160C05B03BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:94:cf:8e:a8:bf:ef:22:b4:cc:bf:27:2a:
ad:99:b6:8d:89:19:62:57:ce:13:1e:58:84:ba:fc:
eb:43:b4:97:88:3f:fe:24:e2:3d:e0:3a:d3:32:8f:
a5:35:c1:ae:a2:1b:a7:c2:ee:ce:bc:9b:34:b7:7d:
85:fe:53:9b:5f:ce:2d:1d:55:d6:0b:64:45:77:3c:
ac:e2:bd:99:c9:aa:56:98:a4:92:00:17:2f:35:94:
19:ab:75:35:05:26:cd:e4:1b:25:0e:10:ce:b5:a8:
d8:57:78:83:06:2d:37:4b:09:9b:e4:b6:15:e9:97:
62:c6:d7:88:78:ab:22:80:ce:7a:0b:e5:22:c2:e2:
a3:51:dd:72:b9:12:21:dd:33:36:63:a2:49:2d:32:
5c:4c:f1:1c:07:54:a0:e9:d1:6e:85:28:f1:97:d2:
1c:de:5e:fe:f9:6d:0c:f8:59:31:34:d5:03:77:36:
d6:83:06:b6:25:db:12:8f:35:73:29:03:bc:ff:2a:
3a:d7:c6:28:dc:51:50:5e:c4:08:e0:1b:53:b7:f3:
b1:5d:1c:68:c3:ca:40:73:51:db:f6:e2:ab:bf:2e:
3a:a3:8c:0a:25:6c:29:84:a6:b7:ec:fb:4a:e3:d7:
83:2d:59:7d:72:c0:a9:71:91:84:c5:60:ba:fc:b3:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:72:17:2C:53:6E:44:A0:95:F2:C7:D6:E5:F1:60:C0:5B:03:BD
X509v3 Authority Key Identifier:
keyid:AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:8a:00:ad:71:40:51:2c:78:ab:b7:c2:4b:6d:cd:57:a3:
71:b4:98:24:7c:99:d5:57:d3:58:41:54:89:ad:62:66:37:61:
d7:97:63:c8:6c:3d:db:51:87:98:84:4e:43:f1:37:bd:c6:30:
8f:b9:09:60:96:ed:70:5a:3f:f9:f7:e3:10:d1:83:81:33:80:
9c:1b:27:0c:11:b5:58:4f:70:8b:8b:ce:bb:5d:6e:e7:03:b8:
58:62:85:d7:7b:ac:77:01:a5:f8:d8:d3:9a:8f:da:48:0c:0f:
96:a4:b2:7a:c2:39:c5:2d:94:79:cd:d3:14:69:06:16:59:40:
d4:1a:f4:d3:f8:3f:ac:04:56:1c:b4:c4:50:cb:04:ad:6d:fb:
2a:80:7d:e7:89:a5:4e:0d:98:0c:ac:53:ef:f1:60:7e:7d:6c:
10:3b:ee:2d:ee:dd:c5:41:ca:bf:e0:2c:a1:15:cc:81:aa:36:
25:d1:8f:ba:cc:c9:14:cf:98:e1:7a:13:94:16:40:4c:c3:fc:
e7:83:34:53:88:d1:41:6d:52:42:7f:ea:6b:f4:9f:6e:d1:3a:
b5:57:84:62:20:8f:a0:15:04:36:fd:65:74:d3:70:57:7a:81:
4e:f4:da:8f:48:f8:75:06:20:e3:b9:b3:12:af:d4:b8:8f:8c:
3e:9a:93:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC4LX5ofNSdQmo0i8puTb3V8RghkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2QkRCQThBNzk4OEMzOTQ4QUVGMTdBOTUyNDU4NTE5
QTAyNkI4RTAeFw0yNjAzMDIxMTUwMjlaFw0yNjAzMDMxMTU4MjlaMDMxMTAvBgNV
BAMTKDUwRjM3MjE3MkM1MzZFNDRBMDk1RjJDN0Q2RTVGMTYwQzA1QjAzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYpTPjqi/7yK0zL8nKq2Zto2J
GWJXzhMeWIS6/OtDtJeIP/4k4j3gOtMyj6U1wa6iG6fC7s68mzS3fYX+U5tfzi0d
VdYLZEV3PKzivZnJqlaYpJIAFy81lBmrdTUFJs3kGyUOEM61qNhXeIMGLTdLCZvk
thXpl2LG14h4qyKAznoL5SLC4qNR3XK5EiHdMzZjokktMlxM8RwHVKDp0W6FKPGX
0hzeXv75bQz4WTE01QN3NtaDBrYl2xKPNXMpA7z/KjrXxijcUVBexAjgG1O387Fd
HGjDykBzUdv24qu/LjqjjAolbCmEprfs+0rj14MtWX1ywKlxkYTFYLr8s++TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUPNyFyxTbkSglfLH1uXxYMBbA70wHwYDVR0j
BBgwFoAUqmvbqKeYjDlIrvF6lSRYUZoCa44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnA2VG1SQnBXb21pYUxwVmZ3ZTlNUDIxR3hwWEJpc0pNRHc1ZFZaWUU1
aXQvMC9BQTZCREJBOEE3OTg4QzM5NDhBRUYxN0E5NTI0NTg1MTlBMDI2QjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkJEQkE4QTc5ODhDMzk0
OEFFRjE3QTk1MjQ1ODUxOUEwMjZCOEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnA2VG1SQnBXb21pYUxwVmZ3ZTlNUDIxR3hwWEJpc0pNRHc1ZFZaWUU1aXQvMC9B
QTZCREJBOEE3OTg4QzM5NDhBRUYxN0E5NTI0NTg1MTlBMDI2QjhFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB+WKAK1xQFEseKu3wkttzVejcbSYJHyZ1VfTWEFUia1iZjdh15djyGw921GH
mIROQ/E3vcYwj7kJYJbtcFo/+ffjENGDgTOAnBsnDBG1WE9wi4vOu11u5wO4WGKF
13usdwGl+NjTmo/aSAwPlqSyesI5xS2Uec3TFGkGFllA1Br00/g/rARWHLTEUMsE
rW37KoB954mlTg2YDKxT7/Fgfn1sEDvuLe7dxUHKv+AsoRXMgao2JdGPuszJFM+Y
4XoTlBZATMP854M0U4jRQW1SQn/qa/SfbtE6tVeEYiCPoBUENv1ldNNwV3qBTvTa
j0j4dQYg47mzEq/UuI+MPpqTwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:52 2026 by rpki-client