
$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft
File: 85990FF5D49C5109F060F455F3B6EBC79F362861.mft (raw, json)
Hash identifier: 3/vWROUNH0u70hbN0vo8yvgkYm6OqD3Vufvdd2NWE+E=
Subject key identifier: 14:43:A8:AE:35:CB:6F:1A:50:86:2A:C6:C3:5E:32:02:5E:62:5D:21
Authority key identifier: 85:99:0F:F5:D4:9C:51:09:F0:60:F4:55:F3:B6:EB:C7:9F:36:28:61
Certificate issuer: /CN=85990FF5D49C5109F060F455F3B6EBC79F362861
Certificate serial: 7C78A3C801D0E68DAB33CD94935ED3D6AC009CFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft
Manifest number: 20
Signing time: Fri 17 Apr 2026 16:43:53 +0000
Manifest this update: Fri 17 Apr 2026 16:38:53 +0000
Manifest next update: Sat 18 Apr 2026 19:57:53 +0000
Files and hashes: 1: 85990FF5D49C5109F060F455F3B6EBC79F362861.crl (hash: KJMV41LXQ/snmzOs1j7RfG85qcmLgnyVKA9qw9N6RvE=)
2: 3134332e302e32382e302f32322d3332203d3e20323633393931.roa (hash: CQPRU2klTxagMlqe+Wd1LwDUIG2Xgyy9gk+5YP2oprQ=)
3: 323830343a323866633a3a2f33322d313238203d3e20323633393931.roa (hash: EbSencphf8XTzxtrcGRXvigFAY6/CuWh98pDRnV8z2o=)
4: 3137302e3234352e31362e302f32322d3332203d3e20323633393931.roa (hash: cYZwoNAj+UT9yfNqLyouC++T3PfnKeDLsRAM2RXBPHA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.crl
rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:78:a3:c8:01:d0:e6:8d:ab:33:cd:94:93:5e:d3:d6:ac:00:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85990FF5D49C5109F060F455F3B6EBC79F362861
Validity
Not Before: Apr 17 16:38:53 2026 GMT
Not After : Apr 18 19:57:53 2026 GMT
Subject: CN=1443A8AE35CB6F1A50862AC6C35E32025E625D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:57:14:e9:53:e4:a0:fb:bf:23:2e:e3:a4:
62:8b:33:25:c4:8c:34:84:44:27:56:bc:58:6e:79:
65:b2:7f:ca:16:01:df:37:96:93:0e:f3:46:61:50:
7d:28:9f:c6:d8:92:cb:69:f1:18:96:3c:2a:7a:54:
1c:5a:c2:6a:e9:d9:98:58:37:2b:f5:b0:81:a7:cb:
96:74:3e:84:f9:81:a8:3a:bc:bc:da:60:aa:72:47:
75:4f:71:fe:49:24:9f:42:d3:97:ce:97:39:61:d8:
c8:a0:33:01:cf:9b:b7:4b:43:6d:b8:17:5a:40:a8:
4d:93:f8:aa:3a:a9:b7:a5:99:2f:91:6e:b2:57:37:
40:db:6d:c4:13:ab:4a:de:97:2b:f2:d7:7b:26:f0:
8e:6c:b4:9f:01:33:3e:32:8b:ce:d7:4b:87:99:95:
39:c7:f2:f4:e2:3f:24:2a:d1:a5:78:a4:c7:cd:de:
90:2e:83:5f:41:d2:01:69:f8:a2:84:5b:05:8a:16:
d3:04:f9:98:88:b7:b8:72:89:9e:6b:6f:d1:f6:23:
54:31:32:9c:56:15:22:53:f0:36:a1:16:5b:bf:23:
e4:10:8d:9b:61:34:53:a0:d6:86:d7:d8:e4:22:95:
26:07:c9:fb:a7:ce:88:c8:44:10:c6:98:0d:43:ba:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:A8:AE:35:CB:6F:1A:50:86:2A:C6:C3:5E:32:02:5E:62:5D:21
X509v3 Authority Key Identifier:
keyid:85:99:0F:F5:D4:9C:51:09:F0:60:F4:55:F3:B6:EB:C7:9F:36:28:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:38:cc:e2:2a:a8:32:b0:87:a4:d7:a4:95:dc:44:02:e9:
ee:8c:fe:62:e9:a0:e4:28:2c:32:ec:3e:af:b2:1a:d8:de:47:
44:5e:93:d6:ea:bd:ec:aa:c8:56:18:43:db:00:a1:e8:a6:08:
52:37:04:c9:4f:ee:43:25:32:d1:3d:d6:d1:9d:07:b7:fa:45:
d9:bf:33:66:d2:ca:ef:06:52:47:d4:92:d1:b6:a2:7a:94:61:
c5:5e:61:72:bd:50:ff:d0:3a:a0:7c:39:ea:90:29:49:6f:93:
40:71:df:2d:2d:97:59:66:69:35:48:93:60:70:e4:58:f8:ea:
ec:a6:f4:e1:80:52:b3:79:ac:8e:bf:b3:73:91:d6:e3:ed:a6:
9b:40:63:c8:2a:26:14:d9:c5:32:4f:5f:b8:c6:f5:4f:3b:a4:
b3:e2:8d:0b:a1:55:a1:f3:35:51:7b:d5:69:49:a2:43:84:68:
5b:68:92:a4:71:4e:0a:4a:66:13:9a:46:47:38:f5:6a:65:38:
99:3e:36:21:b1:d8:23:ea:9d:ec:0f:46:0d:89:62:5d:44:55:
37:32:89:40:9f:5d:94:07:0f:a7:32:ef:69:73:bf:a9:54:5d:
6e:70:34:e4:a5:96:7a:0d:6c:2b:8d:83:23:0a:25:bf:90:9c:
0c:ca:1b:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfHijyAHQ5o2rM82Uk17T1qwAnP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5OTBGRjVENDlDNTEwOUYwNjBGNDU1RjNCNkVCQzc5
RjM2Mjg2MTAeFw0yNjA0MTcxNjM4NTNaFw0yNjA0MTgxOTU3NTNaMDMxMTAvBgNV
BAMTKDE0NDNBOEFFMzVDQjZGMUE1MDg2MkFDNkMzNUUzMjAyNUU2MjVEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQlcU6VPkoPu/Iy7jpGKLMyXE
jDSERCdWvFhueWWyf8oWAd83lpMO80ZhUH0on8bYkstp8RiWPCp6VBxawmrp2ZhY
Nyv1sIGny5Z0PoT5gag6vLzaYKpyR3VPcf5JJJ9C05fOlzlh2MigMwHPm7dLQ224
F1pAqE2T+Ko6qbelmS+RbrJXN0DbbcQTq0relyvy13sm8I5stJ8BMz4yi87XS4eZ
lTnH8vTiPyQq0aV4pMfN3pAug19B0gFp+KKEWwWKFtME+ZiIt7hyiZ5rb9H2I1Qx
MpxWFSJT8DahFlu/I+QQjZthNFOg1obX2OQilSYHyfunzojIRBDGmA1DulmvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFEOorjXLbxpQhirGw14yAl5iXSEwHwYDVR0j
BBgwFoAUhZkP9dScUQnwYPRV87brx582KGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhwYnRBSjdyblBXTENyejJNTUtHSFU3WEdab1VxV0o5cHUxSkdDZkR2
QmYvMC84NTk5MEZGNUQ0OUM1MTA5RjA2MEY0NTVGM0I2RUJDNzlGMzYyODYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1OTkwRkY1RDQ5QzUxMDlG
MDYwRjQ1NUYzQjZFQkM3OUYzNjI4NjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGhwYnRBSjdyblBXTENyejJNTUtHSFU3WEdab1VxV0o5cHUxSkdDZkR2QmYvMC84
NTk5MEZGNUQ0OUM1MTA5RjA2MEY0NTVGM0I2RUJDNzlGMzYyODYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY8Y4zOIqqDKwh6TXpJXcRALp7oz+Yumg5CgsMuw+r7Ia2N5HRF6T1uq97KrI
VhhD2wCh6KYIUjcEyU/uQyUy0T3W0Z0Ht/pF2b8zZtLK7wZSR9SS0baiepRhxV5h
cr1Q/9A6oHw56pApSW+TQHHfLS2XWWZpNUiTYHDkWPjq7Kb04YBSs3msjr+zc5HW
4+2mm0BjyComFNnFMk9fuMb1Tzuks+KNC6FVofM1UXvVaUmiQ4RoW2iSpHFOCkpm
E5pGRzj1amU4mT42IbHYI+qd7A9GDYliXURVNzKJQJ9dlAcPpzLvaXO/qVRdbnA0
5KWWeg1sK42DIwolv5CcDMobqA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:07 2026 by rpki-client