
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
File: 99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft (raw, json)
Hash identifier: sSV4wTRnqhY1FGSibLVLzJ5cfwqjXqcUvxVf//nlA18=
Subject key identifier: 89:59:A5:F0:07:A1:B5:07:1F:58:EE:F4:83:2E:E7:47:AF:3D:C5:D7
Authority key identifier: 99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
Certificate issuer: /CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
Certificate serial: 2F6F3D0F49035D79028BA262F00E075E4435D88A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
Manifest number: AD
Signing time: Wed 08 Apr 2026 02:06:20 +0000
Manifest this update: Wed 08 Apr 2026 02:01:20 +0000
Manifest next update: Thu 09 Apr 2026 02:37:20 +0000
Files and hashes: 1: 3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa (hash: w5KF48LzSxj1SU9RmOZxJF6shrtOckACqZh0qTPx15s=)
2: 323830343a333239303a3a2f33322d3336203d3e20323635303835.roa (hash: KJyfgod/ZleOhEaweWjlo8twk6C7fqY8aR2Fia737G0=)
3: 99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl (hash: DgKJImblh+UqV0frUMcRxzoT8ee4+grKkR4Jvzlxt/g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl
rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 02:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6f:3d:0f:49:03:5d:79:02:8b:a2:62:f0:0e:07:5e:44:35:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
Validity
Not Before: Apr 8 02:01:20 2026 GMT
Not After : Apr 9 02:37:20 2026 GMT
Subject: CN=8959A5F007A1B5071F58EEF4832EE747AF3DC5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:45:1a:3e:65:01:85:9d:30:bc:f4:c2:2f:
29:cc:d2:ce:af:06:73:48:d8:8c:df:08:34:08:2e:
f0:e8:22:ac:98:b4:67:71:c9:ee:e0:51:f0:d4:2b:
8a:04:55:88:23:6e:c3:77:d2:30:57:2d:8f:41:56:
ee:de:a8:29:f0:8a:0a:81:5e:00:e1:29:fe:09:79:
4f:c7:33:42:66:c6:2f:b0:1c:74:e8:ca:39:f3:a0:
c2:f4:2f:52:8a:f7:75:b3:f5:07:2f:14:d1:ad:33:
1e:e7:0f:8e:ae:c1:f9:79:01:1d:24:6d:0d:02:3f:
18:71:46:1d:8d:28:5f:f7:0e:b4:f0:1d:a6:17:77:
28:ab:92:30:de:c3:2c:c8:03:b7:db:45:9c:84:0d:
15:43:8f:ec:3a:12:14:36:2d:cb:f6:37:71:50:b8:
f3:3c:6e:67:ff:81:5f:87:38:47:6c:bd:be:b5:8a:
02:cf:76:52:2f:87:19:3b:fa:5c:99:e4:1c:dc:2b:
6d:8b:05:6a:04:be:10:fb:5f:bf:df:ff:78:fc:ae:
cb:c9:8b:88:6b:c2:68:f0:81:9d:ef:ca:c5:5c:77:
79:d1:30:26:51:02:da:a5:22:d1:ce:60:79:7a:e1:
a3:54:36:6d:d7:00:05:37:f0:4f:8e:05:11:86:cc:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:A5:F0:07:A1:B5:07:1F:58:EE:F4:83:2E:E7:47:AF:3D:C5:D7
X509v3 Authority Key Identifier:
keyid:99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:8a:95:52:bb:32:7e:5a:11:4e:b1:b6:54:15:5c:af:5d:
06:53:75:8d:88:e6:aa:26:95:44:54:93:19:a2:f7:99:b9:ce:
ea:d1:68:35:31:a9:74:8f:e4:e7:b9:f8:97:3f:4b:2c:c8:01:
ea:53:da:cf:be:17:63:41:4f:8b:b9:72:bf:09:a4:4c:01:66:
73:d8:94:18:bb:9b:3b:c5:e3:e3:eb:25:2b:01:0a:a6:6a:95:
81:a1:6f:67:2d:77:de:3e:0c:ef:ca:95:0f:dd:79:62:b9:78:
60:72:37:5f:07:d6:2b:b9:ea:f8:60:f7:21:de:a5:ff:ad:ca:
1d:9b:48:ac:21:29:ef:18:e0:92:49:d6:3f:a8:3b:25:29:37:
ec:05:fb:ed:ef:80:5b:fc:ae:90:b4:b6:ed:bc:9a:2f:b2:a1:
8b:78:b6:65:1c:e6:41:f4:5b:26:50:4e:e4:c4:70:ae:5c:9b:
a1:b5:96:df:9b:8e:d6:8d:57:f9:d4:e6:c9:85:b2:65:41:31:
a6:a7:f9:6e:60:f0:ef:da:cc:13:81:94:a7:16:73:eb:ac:54:
51:bc:4d:74:d1:1f:ba:d8:dc:0c:7c:20:41:a1:f2:a7:24:16:
60:d8:8c:6f:eb:fa:82:b7:63:72:49:ca:1a:fd:b1:c2:0b:05:
d3:b0:39:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL289D0kDXXkCi6Ji8A4HXkQ12IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0MjhDNTM3QjBFRTlGNjhGRkNBMTVEQUIxRjlERkMy
NjVEQThENDAeFw0yNjA0MDgwMjAxMjBaFw0yNjA0MDkwMjM3MjBaMDMxMTAvBgNV
BAMTKDg5NTlBNUYwMDdBMUI1MDcxRjU4RUVGNDgzMkVFNzQ3QUYzREM1RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qkUaPmUBhZ0wvPTCLynM0s6v
BnNI2IzfCDQILvDoIqyYtGdxye7gUfDUK4oEVYgjbsN30jBXLY9BVu7eqCnwigqB
XgDhKf4JeU/HM0Jmxi+wHHToyjnzoML0L1KK93Wz9QcvFNGtMx7nD46uwfl5AR0k
bQ0CPxhxRh2NKF/3DrTwHaYXdyirkjDewyzIA7fbRZyEDRVDj+w6EhQ2Lcv2N3FQ
uPM8bmf/gV+HOEdsvb61igLPdlIvhxk7+lyZ5BzcK22LBWoEvhD7X7/f/3j8rsvJ
i4hrwmjwgZ3vysVcd3nRMCZRAtqlItHOYHl64aNUNm3XAAU38E+OBRGGzNT5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiVml8AehtQcfWO70gy7nR689xdcwHwYDVR0j
BBgwFoAUmUKMU3sO6faP/KFdqx+d/CZdqNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr
QlIvMC85OTQyOEM1MzdCMEVFOUY2OEZGQ0ExNURBQjFGOURGQzI2NURBOEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDI4QzUzN0IwRUU5RjY4
RkZDQTE1REFCMUY5REZDMjY1REE4RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXprQlIvMC85
OTQyOEM1MzdCMEVFOUY2OEZGQ0ExNURBQjFGOURGQzI2NURBOEQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHOOKlVK7Mn5aEU6xtlQVXK9dBlN1jYjmqiaVRFSTGaL3mbnO6tFoNTGpdI/k
57n4lz9LLMgB6lPaz74XY0FPi7lyvwmkTAFmc9iUGLubO8Xj4+slKwEKpmqVgaFv
Zy133j4M78qVD915Yrl4YHI3XwfWK7nq+GD3Id6l/63KHZtIrCEp7xjgkknWP6g7
JSk37AX77e+AW/yukLS27byaL7Khi3i2ZRzmQfRbJlBO5MRwrlybobWW35uO1o1X
+dTmyYWyZUExpqf5bmDw79rME4GUpxZz66xUUbxNdNEfutjcDHwgQaHypyQWYNiM
b+v6grdjcknKGv2xwgsF07A5Eg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:24:43 2026 by rpki-client