
$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft
File: 7958C661EB8D493DABCAD14C921B052049BB4E87.mft (raw, json)
Hash identifier: xevsZ9MtGVlU2WgPPgBiLRisgf368zFHRctOpVNVevg=
Subject key identifier: 8B:6A:45:D5:EA:F2:01:09:EF:D1:54:E9:62:58:10:31:C4:DB:F5:D1
Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87
Certificate issuer: /CN=7958C661EB8D493DABCAD14C921B052049BB4E87
Certificate serial: 26072A43CB1825551D4CB181227931BF624F39B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft
Manifest number: 29
Signing time: Fri 17 Apr 2026 06:18:53 +0000
Manifest this update: Fri 17 Apr 2026 06:13:53 +0000
Manifest next update: Sat 18 Apr 2026 07:57:53 +0000
Files and hashes: 1: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: FDWZsrswWJMiRi/BlnaWSwQH1z378Oxjb/Q+RbLjMYM=)
2: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: 5liD75jr140pbUO+1Mv7V8ehHnjltZBcNMhknf2Zru8=)
3: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: 5fwxo/xLeZgxGg/to0pXx+X1QYz2KKyEzx6SM8UbjD0=)
4: 7958C661EB8D493DABCAD14C921B052049BB4E87.crl (hash: HPBsSeQFSxvVdSDlKZeJZY8boVodBoyWWAy2qgg1VSY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl
rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 07:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:07:2a:43:cb:18:25:55:1d:4c:b1:81:22:79:31:bf:62:4f:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87
Validity
Not Before: Apr 17 06:13:53 2026 GMT
Not After : Apr 18 07:57:53 2026 GMT
Subject: CN=8B6A45D5EAF20109EFD154E962581031C4DBF5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:c8:fa:ef:d4:1b:70:c5:75:46:20:59:91:
ca:2a:76:7e:48:85:88:6a:53:20:df:3f:59:18:f6:
ee:61:8a:bb:eb:d1:b1:26:59:c6:0b:ea:56:eb:9f:
74:50:ab:37:61:aa:de:d5:dc:d3:8e:a8:d9:f9:76:
be:93:63:6b:ce:ce:69:b8:47:2d:b6:da:ef:93:e0:
4d:e4:4a:af:96:8a:01:8c:23:a4:bb:2c:d3:bd:43:
bb:a5:b9:d3:80:8e:63:99:ae:fe:24:01:e6:e8:df:
96:04:58:64:6f:43:4d:7f:e7:6d:20:30:9c:08:ce:
5a:e8:0d:bb:60:a0:ff:78:a9:a5:39:d4:0f:3f:c2:
a1:af:77:95:fa:18:3d:93:36:6e:2c:98:8d:f2:49:
15:08:1d:b5:3f:1a:13:5f:dd:eb:d2:c7:31:99:8c:
9a:d0:57:ce:d1:99:75:a5:4a:e8:d4:1c:a1:32:5f:
f3:18:5c:3a:d2:43:ae:8a:bc:f6:53:06:ae:25:bc:
1e:aa:ce:52:7f:fa:8d:1f:73:87:b0:f0:94:07:52:
57:c7:d7:0d:a0:ba:5f:de:22:57:fc:67:86:19:68:
41:52:05:df:f9:25:99:28:0e:f2:ff:01:1f:69:6d:
8b:88:94:b7:76:a3:a8:ca:2e:44:8b:3b:31:ba:9d:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:45:D5:EA:F2:01:09:EF:D1:54:E9:62:58:10:31:C4:DB:F5:D1
X509v3 Authority Key Identifier:
keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:23:06:0c:bd:51:4d:36:a7:f3:d7:1e:2e:10:03:86:49:7c:
ee:e6:a0:09:53:aa:f2:e0:7a:e5:0d:14:7a:77:b3:9d:09:04:
eb:06:5b:f5:0a:95:7c:80:6d:3c:b1:b8:6e:a2:33:e6:4f:4b:
86:e8:28:c4:f8:27:df:c1:6d:77:34:be:7e:6f:27:a0:f6:ff:
93:45:01:b3:e0:1e:de:f1:00:de:38:88:bc:8d:d4:67:77:4c:
7c:d9:ed:fa:1d:53:ed:17:4c:37:c6:8f:0c:04:e0:12:59:de:
ab:48:97:41:07:79:ee:0d:1d:ed:3c:9d:ae:c8:89:fa:f6:3c:
11:c4:64:f3:f9:37:fe:22:e8:5a:75:0a:8f:ef:08:f6:34:99:
be:c0:a1:ce:03:70:9f:20:30:8b:ae:52:d2:40:09:c4:22:78:
af:73:27:99:28:b2:f5:f3:44:1e:fd:db:5e:71:19:58:e7:b2:
d4:69:aa:12:6c:d6:2e:b1:09:7a:71:11:ed:9f:6a:b8:e8:38:
d1:85:08:5b:08:55:47:08:7c:91:6a:dd:dc:76:70:1e:c6:dd:
0e:7c:3e:98:2b:1a:b3:f3:f6:04:aa:ae:33:a0:3c:fd:ef:27:
16:fb:7a:5d:8b:37:0b:ec:95:a9:99:13:4b:93:7b:23:95:a8:
9a:62:d1:0c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUJgcqQ8sYJVUdTLGBInkxv2JPObEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0
OUJCNEU4NzAeFw0yNjA0MTcwNjEzNTNaFw0yNjA0MTgwNzU3NTNaMDMxMTAvBgNV
BAMTKDhCNkE0NUQ1RUFGMjAxMDlFRkQxNTRFOTYyNTgxMDMxQzREQkY1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iMj679QbcMV1RiBZkcoqdn5I
hYhqUyDfP1kY9u5hirvr0bEmWcYL6lbrn3RQqzdhqt7V3NOOqNn5dr6TY2vOzmm4
Ry222u+T4E3kSq+WigGMI6S7LNO9Q7uludOAjmOZrv4kAebo35YEWGRvQ01/520g
MJwIzlroDbtgoP94qaU51A8/wqGvd5X6GD2TNm4smI3ySRUIHbU/GhNf3evSxzGZ
jJrQV87RmXWlSujUHKEyX/MYXDrSQ66KvPZTBq4lvB6qzlJ/+o0fc4ew8JQHUlfH
1w2gul/eIlf8Z4YZaEFSBd/5JZkoDvL/AR9pbYuIlLd2o6jKLkSLOzG6na7FAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUi2pF1eryAQnv0VTpYlgQMcTb9dEwHwYDVR0j
BBgwFoAUeVjGYeuNST2rytFMkhsFIEm7TocwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD
LzAvNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0OUJCNEU4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OTU4QzY2MUVCOEQ0OTNEQUJD
QUQxNEM5MjFCMDUyMDQ5QkI0RTg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS
aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC83OTU4
QzY2MUVCOEQ0OTNEQUJDQUQxNEM5MjFCMDUyMDQ5QkI0RTg3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
vSMGDL1RTTan89ceLhADhkl87uagCVOq8uB65Q0UeneznQkE6wZb9QqVfIBtPLG4
bqIz5k9LhugoxPgn38FtdzS+fm8noPb/k0UBs+Ae3vEA3jiIvI3UZ3dMfNnt+h1T
7RdMN8aPDATgElneq0iXQQd57g0d7TydrsiJ+vY8EcRk8/k3/iLoWnUKj+8I9jSZ
vsChzgNwnyAwi65S0kAJxCJ4r3MnmSiy9fNEHv3bXnEZWOey1GmqEmzWLrEJenER
7Z9quOg40YUIWwhVRwh8kWrd3HZwHsbdDnw+mCsas/P2BKquM6A8/e8nFvt6XYs3
C+yVqZkTS5N7I5WommLRDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:17 2026 by rpki-client