
$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
File: CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json)
Hash identifier: wRv2pPxo8sCfR+TZlnBbJyjniAiKcB9qkyuuH8kvUXs=
Subject key identifier: DB:79:B0:7E:2E:29:06:F4:C8:00:A5:39:2B:0F:B9:CC:70:4C:3C:DD
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial: 49582D2B7785ED4652F570D75F4A4D4E8FC96B41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
Manifest number: 039D
Signing time: Mon 02 Mar 2026 05:48:50 +0000
Manifest this update: Mon 02 Mar 2026 05:43:50 +0000
Manifest next update: Tue 03 Mar 2026 08:20:50 +0000
Files and hashes: 1: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: z788/teWTAK/kdFraq0+by+vcYOr1ubGKvZE1ivOdjA=)
2: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: lP2dF6eLkAR5W4EKDMYSPnrha/aIhYWGq5RKYXV3V3w=)
3: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: 3n2Tk0TLHKbeyvSR9gueX0c6nwA0R++H9heS7l364Ks=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 08:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:58:2d:2b:77:85:ed:46:52:f5:70:d7:5f:4a:4d:4e:8f:c9:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Validity
Not Before: Mar 2 05:43:50 2026 GMT
Not After : Mar 3 08:20:50 2026 GMT
Subject: CN=DB79B07E2E2906F4C800A5392B0FB9CC704C3CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:c0:49:fb:b2:65:4d:56:af:7b:b6:dd:09:
e3:e7:eb:78:b2:8d:4e:f0:e8:7b:f7:35:67:2b:a2:
46:74:61:f8:9b:b8:bd:bd:16:6b:3d:51:9c:5c:02:
48:47:8d:ef:cd:80:1f:87:c4:e3:37:7b:2d:fe:1b:
4e:d3:8c:d6:87:8c:b7:3f:d6:8d:45:6d:ce:df:b6:
af:a8:73:1d:6e:d2:08:e7:0b:7c:45:e6:69:71:2b:
93:66:57:13:a5:22:8c:91:c4:bb:1d:ee:a1:ed:07:
15:5e:94:57:e5:4e:17:f5:a1:48:1a:59:7e:e3:e1:
f1:b7:57:77:de:84:94:80:87:b3:16:0b:f6:11:1c:
4f:3f:6d:17:6e:13:ab:28:50:96:e2:7e:38:14:b1:
d3:cb:31:c5:48:51:f5:77:13:ec:be:66:60:e7:56:
94:37:20:6a:7c:3c:4c:ff:43:20:90:75:78:71:21:
dc:c5:81:16:78:2b:fb:49:61:67:53:36:39:2b:2a:
ed:6c:43:aa:16:ff:03:f6:fb:31:3d:09:35:08:37:
93:97:4b:aa:f1:79:90:bf:27:14:37:f0:44:a7:1e:
80:eb:35:25:32:4d:cb:a9:2e:06:a4:3a:94:a1:b3:
4d:2d:ba:a6:32:a5:da:dc:6c:83:e0:2e:31:8e:c4:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:B0:7E:2E:29:06:F4:C8:00:A5:39:2B:0F:B9:CC:70:4C:3C:DD
X509v3 Authority Key Identifier:
keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:39:a7:a7:21:2e:a9:26:92:aa:c0:b8:ee:ad:23:8c:66:71:
bb:52:08:93:af:ef:c6:60:1f:fb:64:d9:af:dd:75:aa:49:25:
b9:d4:a2:b2:8a:a0:52:4b:3a:10:ce:38:ee:95:91:7b:af:05:
15:f2:70:8e:19:cc:12:34:b2:9c:38:a5:52:a9:92:eb:ac:e4:
ed:86:5e:7f:b5:bc:19:56:2e:a9:cd:65:2b:9c:c5:28:30:d3:
d3:89:a8:f3:ad:49:79:31:0e:f3:e7:a2:60:f7:ae:76:98:15:
58:ba:4c:bd:99:5f:89:9c:6d:a9:1e:e1:59:1c:16:c5:8a:37:
ca:ad:8d:4b:08:59:5e:97:0c:89:e7:f0:3f:38:85:1c:2d:6a:
c3:b5:58:fd:67:04:0f:27:3c:c5:1e:5f:e7:20:be:6f:f4:56:
d1:03:c2:bc:8f:58:c7:3e:b4:6c:97:d2:0b:a2:5c:14:83:53:
d4:77:cc:0e:49:f5:de:b1:58:a5:e1:71:6e:82:47:7c:3a:b6:
08:fe:84:df:d8:c7:ec:b0:11:b1:82:a5:d1:7e:86:1b:7f:67:
46:9b:ac:de:87:d8:94:41:c1:0c:01:de:63:a5:92:bd:1f:cd:
64:ee:44:6c:79:3c:93:ce:ec:c8:76:45:25:15:d5:fc:6b:f9:
53:03:61:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSVgtK3eF7UZS9XDXX0pNTo/Ja0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2ODE4MjVBNzVGM0RGM0IwMzNEMzU0NEY4ODI2NDg4
RjNGQThBNDAeFw0yNjAzMDIwNTQzNTBaFw0yNjAzMDMwODIwNTBaMDMxMTAvBgNV
BAMTKERCNzlCMDdFMkUyOTA2RjRDODAwQTUzOTJCMEZCOUNDNzA0QzNDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM58BJ+7JlTVave7bdCePn63iy
jU7w6Hv3NWcrokZ0YfibuL29Fms9UZxcAkhHje/NgB+HxOM3ey3+G07TjNaHjLc/
1o1Fbc7ftq+ocx1u0gjnC3xF5mlxK5NmVxOlIoyRxLsd7qHtBxVelFflThf1oUga
WX7j4fG3V3fehJSAh7MWC/YRHE8/bRduE6soUJbifjgUsdPLMcVIUfV3E+y+ZmDn
VpQ3IGp8PEz/QyCQdXhxIdzFgRZ4K/tJYWdTNjkrKu1sQ6oW/wP2+zE9CTUIN5OX
S6rxeZC/JxQ38ESnHoDrNSUyTcupLgakOpShs00tuqYypdrcbIPgLjGOxFCLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU23mwfi4pBvTIAKU5Kw+5zHBMPN0wHwYDVR0j
BBgwFoAUzWgYJadfPfOwM9NUT4gmSI8/qKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5
aW4vMS9DRDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENjgxODI1QTc1RjNERjNC
MDMzRDM1NDRGODgyNjQ4OEYzRkE4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5aW4vMS9D
RDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAijmnpyEuqSaSqsC47q0jjGZxu1IIk6/vxmAf+2TZr911qkkludSisoqgUks6
EM447pWRe68FFfJwjhnMEjSynDilUqmS66zk7YZef7W8GVYuqc1lK5zFKDDT04mo
861JeTEO8+eiYPeudpgVWLpMvZlfiZxtqR7hWRwWxYo3yq2NSwhZXpcMiefwPziF
HC1qw7VY/WcEDyc8xR5f5yC+b/RW0QPCvI9Yxz60bJfSC6JcFINT1HfMDkn13rFY
peFxboJHfDq2CP6E39jH7LARsYKl0X6GG39nRpus3ofYlEHBDAHeY6WSvR/NZO5E
bHk8k87syHZFJRXV/Gv5UwNhog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:25 2026 by rpki-client