
$ rpki-client -vvf rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
File: 4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft (raw, json)
Hash identifier: 4IEcEG4X1RPXXf5Xn7cR+H+SEdp7oZhkMgfM/yDbA10=
Subject key identifier: 13:24:C1:6A:F0:7A:64:48:1B:FB:A4:CA:6F:82:8C:89:68:22:49:FE
Authority key identifier: 49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3
Certificate issuer: /CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3
Certificate serial: 6E66A63A76EF261CB48591C6128898455FEF02E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
Manifest number: 2C
Signing time: Fri 17 Apr 2026 08:28:10 +0000
Manifest this update: Fri 17 Apr 2026 08:23:10 +0000
Manifest next update: Sat 18 Apr 2026 09:41:10 +0000
Files and hashes: 1: 323830343a393365633a3a2f33322d313238203d3e20323734383039.roa (hash: YhpJz8sonIu/hzKMiB2EPpkfdbYwzSA+RMx+5kCoTmQ=)
2: 4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl (hash: 83nVYj8CmRK5OcZuX9MkkEazOfm0dHUoueHAZv5cwEE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl
rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 09:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:66:a6:3a:76:ef:26:1c:b4:85:91:c6:12:88:98:45:5f:ef:02:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3
Validity
Not Before: Apr 17 08:23:10 2026 GMT
Not After : Apr 18 09:41:10 2026 GMT
Subject: CN=1324C16AF07A64481BFBA4CA6F828C89682249FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:19:c0:c8:ca:3a:ac:96:be:ac:e3:48:bb:
f9:f1:56:71:08:19:e1:21:17:d2:3f:5f:4b:27:2b:
3d:cd:fc:39:e2:fc:63:50:75:1a:d3:7b:eb:3a:0f:
45:c9:fc:cc:31:d9:9c:b9:08:a8:c5:40:44:34:ec:
47:87:cd:60:a2:f3:42:b4:4b:2b:23:0d:f1:57:ac:
d4:72:68:8e:27:ec:56:e0:e0:1d:e1:7d:7d:c8:5a:
bc:cf:b0:0b:19:4a:37:01:d7:15:02:b3:5b:31:b2:
6c:4e:c1:4c:da:29:dd:59:d1:0a:ee:18:ea:36:a9:
d6:a9:12:23:30:1d:c0:73:ef:0b:f3:68:ef:98:76:
8d:b9:ce:23:dc:81:b8:15:80:57:9c:ee:32:c9:3b:
c1:f8:7b:93:72:b8:3d:1a:e9:20:fd:d0:9f:36:79:
fe:5c:44:a2:ac:f9:6d:b2:e0:83:0d:23:38:a4:11:
cf:81:85:4a:e6:92:a7:bb:cd:98:4b:f9:10:c5:6c:
f1:18:f7:9d:9a:8a:1c:64:11:a7:89:7b:42:9f:8e:
51:f8:ff:5b:e7:f3:16:2d:9a:bf:2f:22:46:bc:0a:
a1:4e:3e:54:5f:fd:29:d4:d7:a0:ad:30:22:ec:8a:
5d:3a:2f:b1:f6:5a:db:f2:e8:78:1f:9e:25:33:a4:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:C1:6A:F0:7A:64:48:1B:FB:A4:CA:6F:82:8C:89:68:22:49:FE
X509v3 Authority Key Identifier:
keyid:49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:67:2c:af:c0:1a:7e:74:52:77:61:93:66:f6:e6:00:6a:ec:
cb:e8:a7:9b:89:db:d2:36:0f:75:4d:c2:41:63:7a:ac:a0:58:
15:ca:c3:c5:c0:9b:50:54:4f:20:e0:6c:d4:7d:0f:8d:1d:67:
8c:8b:a2:3e:cf:a1:24:c2:3f:13:92:0e:e6:15:a6:84:b3:a2:
a6:c1:87:b7:a3:02:63:03:f0:7d:47:d7:7e:5d:37:c6:87:e4:
2d:f1:1d:77:75:42:08:3c:2d:38:39:56:39:dd:c3:b3:03:e8:
17:cd:10:ef:63:e3:2f:9f:c1:46:6d:1a:8f:50:06:92:1e:ba:
b2:ab:60:68:11:17:af:da:1c:1d:2d:d8:bf:00:e1:e1:2b:b5:
db:3c:d4:99:aa:96:b7:3b:68:4a:dc:07:22:5a:8b:83:7a:7f:
0b:88:23:46:3e:65:50:5b:c3:85:9b:0c:b3:42:04:70:2e:f6:
6c:d8:93:2c:6d:c0:e8:94:82:8f:8f:ef:ee:fa:63:68:2d:db:
c2:49:e9:8b:ed:7b:1d:13:1e:ed:be:23:a6:88:03:6e:60:c6:
aa:9c:89:4f:f5:1b:fa:4c:a5:76:ad:02:eb:b7:ea:13:9b:c9:
ff:b4:48:46:fb:1f:73:86:90:dc:3a:e6:07:9a:ca:c6:71:31:
8c:28:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:48 2026 by rpki-client