
$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
File: 8F43BF9E79677F282BF953C8E1F71757E25A9063.mft (raw, json)
Hash identifier: NFkrQ6fHFz3HB7AG6WahWtE4OgVMlSfrM62lB1BJOGY=
Subject key identifier: CE:AF:27:38:C3:39:6C:D3:86:3A:F8:2C:E5:D5:D5:23:51:01:75:B7
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Certificate issuer: /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial: 638DAC8B9CF58D03B15B1FB80D4C8AA3AB963150
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
Manifest number: 03AE
Signing time: Tue 07 Apr 2026 16:17:05 +0000
Manifest this update: Tue 07 Apr 2026 16:12:05 +0000
Manifest next update: Wed 08 Apr 2026 18:51:05 +0000
Files and hashes: 1: 3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (hash: bIY73R+OeJNIFgA3uG7K2iPUaYv8FpclnU1l2KIux94=)
2: 3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (hash: Wjx5i+cZIylBJo6AdYJ21cMuzZIam3nXl9aWEHqeHeI=)
3: 3137392e39372e3132302e302f32312d3234203d3e203238363336.roa (hash: pxw/l+03cqSVmE0xgHdMdOaLwYj9iHqxCffKn+8iEn8=)
4: 323830343a6463383a3a2f33322d3438203d3e203238363336.roa (hash: 9v5wOZl0IzbYFvHPBiRxF5GdEJlzmPBW7m+WlQZMa7Q=)
5: 8F43BF9E79677F282BF953C8E1F71757E25A9063.crl (hash: LPSJ7NoYMiNq2eZVD940S/SazN7oaEcW0LjKt8cbfgs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 18:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8d:ac:8b:9c:f5:8d:03:b1:5b:1f:b8:0d:4c:8a:a3:ab:96:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Validity
Not Before: Apr 7 16:12:05 2026 GMT
Not After : Apr 8 18:51:05 2026 GMT
Subject: CN=CEAF2738C3396CD3863AF82CE5D5D523510175B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:fc:4e:db:f3:a0:03:3b:b9:0c:fa:6a:11:
44:82:3e:ad:47:3d:2b:33:41:10:c4:61:0e:af:49:
0a:57:dd:82:79:7a:7f:a4:5c:db:db:f2:02:a6:a1:
d8:f8:4f:ca:f2:e9:8b:9d:ef:6c:d6:c5:8a:f1:05:
93:cf:7f:11:85:9d:1b:7e:12:fa:c2:6b:e2:ed:a2:
ec:f5:ed:da:e6:e2:35:22:27:19:30:e8:15:13:7d:
0f:19:d2:dc:2e:c6:10:ac:78:62:44:01:52:69:0f:
c2:da:26:a2:4f:f0:20:85:c1:13:9c:24:37:3f:34:
11:1a:15:a6:ce:a8:28:a3:bc:0c:f5:17:5f:30:20:
4b:fa:05:a4:34:c2:b5:c7:5e:cd:44:b0:18:85:9d:
c5:24:42:79:2c:47:28:5c:5e:f0:b8:44:5b:b9:f9:
80:24:f8:a2:62:63:1a:c7:85:d3:eb:3b:0c:d9:13:
c3:2a:05:fb:00:31:b3:1e:7e:75:5a:bd:56:9c:0a:
f0:dc:b4:6f:69:77:20:ea:6b:32:24:1b:65:43:06:
42:2a:45:11:cd:e1:3a:23:59:de:a1:1c:7c:75:83:
13:21:b0:fb:06:56:8d:fb:a6:9d:a5:98:4f:c6:93:
d7:b4:8e:bd:88:39:e4:4d:71:a5:12:ce:7c:6b:d0:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:27:38:C3:39:6C:D3:86:3A:F8:2C:E5:D5:D5:23:51:01:75:B7
X509v3 Authority Key Identifier:
keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:db:94:17:11:e3:0c:45:c4:12:8a:24:48:90:d1:62:bf:d0:
a5:d6:3c:76:cd:76:dc:dc:52:25:e8:90:56:3a:9e:16:fc:d6:
42:a9:77:f5:57:f9:2f:7a:31:77:d2:f2:f4:73:6f:8a:ff:8a:
17:c0:9b:e7:44:3e:89:7c:61:99:27:04:fb:f1:ac:c2:b6:1e:
b2:66:31:05:c8:33:a4:1e:00:63:06:d8:d1:ea:30:f9:5b:31:
53:2a:e1:1a:0b:bc:38:40:da:21:90:26:7b:5f:19:38:f5:89:
db:43:59:42:b1:43:57:48:8f:95:a1:34:f1:39:bd:9d:02:0d:
37:a9:a5:3c:24:39:49:70:eb:6d:98:40:18:52:e6:83:6a:20:
76:3e:20:2d:3f:8e:1c:cb:bd:63:80:20:d4:5d:c4:81:7c:f2:
e6:85:e9:3d:f5:0f:5e:62:06:27:ff:cb:37:c7:8c:a6:03:ab:
75:bc:b9:30:0b:49:e5:16:be:06:d6:2a:3e:9e:f4:9a:7c:89:
b8:4e:59:29:92:48:4a:dd:a6:64:1c:8f:5b:5a:91:b5:8b:5c:
ff:59:fd:a5:db:f9:93:45:a4:8a:4d:69:bb:48:e7:22:36:16:
a9:93:f1:37:db:9d:89:04:0c:52:3d:4f:47:f7:a8:5b:a9:e0:
33:96:2a:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUY42si5z1jQOxWx+4DUyKo6uWMVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0M0JGOUU3OTY3N0YyODJCRjk1M0M4RTFGNzE3NTdF
MjVBOTA2MzAeFw0yNjA0MDcxNjEyMDVaFw0yNjA0MDgxODUxMDVaMDMxMTAvBgNV
BAMTKENFQUYyNzM4QzMzOTZDRDM4NjNBRjgyQ0U1RDVENTIzNTEwMTc1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSP/xO2/OgAzu5DPpqEUSCPq1H
PSszQRDEYQ6vSQpX3YJ5en+kXNvb8gKmodj4T8ry6Yud72zWxYrxBZPPfxGFnRt+
EvrCa+Ltouz17drm4jUiJxkw6BUTfQ8Z0twuxhCseGJEAVJpD8LaJqJP8CCFwROc
JDc/NBEaFabOqCijvAz1F18wIEv6BaQ0wrXHXs1EsBiFncUkQnksRyhcXvC4RFu5
+YAk+KJiYxrHhdPrOwzZE8MqBfsAMbMefnVavVacCvDctG9pdyDqazIkG2VDBkIq
RRHN4TojWd6hHHx1gxMhsPsGVo37pp2lmE/Gk9e0jr2IOeRNcaUSznxr0CQBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzq8nOMM5bNOGOvgs5dXVI1EBdbcwHwYDVR0j
BBgwFoAUj0O/nnlnfygr+VPI4fcXV+JakGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1E
NW4vMC84RjQzQkY5RTc5Njc3RjI4MkJGOTUzQzhFMUY3MTc1N0UyNUE5MDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNDNCRjlFNzk2NzdGMjgy
QkY5NTNDOEUxRjcxNzU3RTI1QTkwNjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1ENW4vMC84
RjQzQkY5RTc5Njc3RjI4MkJGOTUzQzhFMUY3MTc1N0UyNUE5MDYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl9uUFxHjDEXEEookSJDRYr/QpdY8ds123NxSJeiQVjqeFvzWQql39Vf5L3ox
d9Ly9HNviv+KF8Cb50Q+iXxhmScE+/GswrYesmYxBcgzpB4AYwbY0eow+VsxUyrh
Ggu8OEDaIZAme18ZOPWJ20NZQrFDV0iPlaE08Tm9nQINN6mlPCQ5SXDrbZhAGFLm
g2ogdj4gLT+OHMu9Y4Ag1F3EgXzy5oXpPfUPXmIGJ//LN8eMpgOrdby5MAtJ5Ra+
BtYqPp70mnyJuE5ZKZJISt2mZByPW1qRtYtc/1n9pdv5k0Wkik1pu0jnIjYWqZPx
N9udiQQMUj1PR/eoW6ngM5Yqfg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:33:49 2026 by rpki-client