
$ rpki-client -vvf rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
File: D3E07C6B391140EBC8F71CEC48A013C375254585.mft (raw, json)
Hash identifier: G2xl3grLtYQXpSarlA2zog/HwZCKp5WcuObArNA1if4=
Subject key identifier: 54:EE:05:8D:B6:27:2C:DD:1A:37:9E:CF:B1:BD:70:39:DC:F0:86:26
Authority key identifier: D3:E0:7C:6B:39:11:40:EB:C8:F7:1C:EC:48:A0:13:C3:75:25:45:85
Certificate issuer: /CN=D3E07C6B391140EBC8F71CEC48A013C375254585
Certificate serial: 4348B60C07A965E08F5C8ECEEA642DFA8740E20E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
Manifest number: 20
Signing time: Tue 07 Apr 2026 19:09:36 +0000
Manifest this update: Tue 07 Apr 2026 19:04:36 +0000
Manifest next update: Wed 08 Apr 2026 23:04:36 +0000
Files and hashes: 1: 34352e3233322e3232382e302f32322d3332203d3e20323637323830.roa (hash: FB2a5bNZf4VYp7efoY9WF9gpJ7XSFvpfl6fnvIkU9DM=)
2: 323830343a346230633a3a2f33322d313238203d3e20323637323830.roa (hash: 1gF5mTmQJBy/BDWQwMFWqeIUpDG3Nx41jJVO9T48DpU=)
3: D3E07C6B391140EBC8F71CEC48A013C375254585.crl (hash: 0O921LuFDy/d/8SWPIh7n83Ldpm1htFgh88M2ISdZMY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.crl
rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 23:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:48:b6:0c:07:a9:65:e0:8f:5c:8e:ce:ea:64:2d:fa:87:40:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3E07C6B391140EBC8F71CEC48A013C375254585
Validity
Not Before: Apr 7 19:04:36 2026 GMT
Not After : Apr 8 23:04:36 2026 GMT
Subject: CN=54EE058DB6272CDD1A379ECFB1BD7039DCF08626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:49:a7:2c:b0:05:80:d9:b3:36:a0:a1:c3:
52:d8:bd:59:67:a0:06:1a:3e:d1:50:0f:cd:f1:96:
ef:02:43:9f:af:ed:03:75:ad:ed:27:00:73:ef:c7:
3e:2c:e6:44:dc:09:b6:29:ca:78:4a:a4:d8:2b:6c:
b3:04:d7:7c:f2:63:e6:dc:4d:26:2c:af:ab:9e:27:
85:7e:cb:34:ce:c3:28:86:9a:7c:d9:7a:7e:a5:26:
c4:a5:11:f9:9c:11:6e:54:6b:55:98:b0:d1:c3:8a:
38:58:99:bb:e9:6d:b5:8f:c2:ad:a3:4a:24:3c:e9:
c5:b4:59:d0:28:58:fa:cb:4d:81:44:b3:c5:27:51:
3e:2e:a0:5f:d5:d4:d0:34:76:f2:55:1d:b9:d7:9d:
4c:16:71:8b:c3:49:d3:6b:a9:d8:11:f4:3b:1f:69:
16:59:52:46:6e:69:a5:3b:50:fd:32:99:9c:7a:58:
d3:70:75:d2:bf:9c:79:2e:a3:94:58:b5:57:24:a4:
1e:a9:dc:33:83:c0:09:bf:fc:b4:61:43:99:b8:25:
a4:f2:8a:88:71:30:e0:72:40:b9:76:f4:ab:21:29:
7d:17:73:4f:82:26:6f:e3:e2:17:23:9d:4b:d7:b9:
04:03:2c:0a:c8:14:ba:51:48:08:f1:b9:ef:1e:64:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:05:8D:B6:27:2C:DD:1A:37:9E:CF:B1:BD:70:39:DC:F0:86:26
X509v3 Authority Key Identifier:
keyid:D3:E0:7C:6B:39:11:40:EB:C8:F7:1C:EC:48:A0:13:C3:75:25:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:44:38:e7:91:47:2c:32:a2:62:54:90:8e:d4:74:75:5f:
33:82:0a:59:66:64:00:4d:14:17:fb:d6:70:4e:bc:dd:53:53:
d6:69:a4:6f:9c:07:5a:76:c1:53:60:dd:a4:ac:d6:dd:f2:fb:
7b:47:83:1d:6b:64:5c:8f:fe:83:14:1d:0a:d0:c1:54:5d:fa:
73:45:3b:e5:d5:f4:6e:6f:07:f8:c1:98:0c:aa:d4:cb:fc:81:
39:ae:ad:8b:0e:b0:a2:da:ba:56:ab:d2:89:c0:2b:fb:1f:a1:
57:e9:4f:9d:72:99:c6:b2:b8:a8:2a:de:c7:33:c6:09:60:6b:
64:31:72:c8:7c:01:4b:fd:b4:98:e8:08:20:2f:0e:24:00:f3:
b4:12:ef:65:ec:ec:bc:8c:e4:6f:b8:c7:70:aa:75:b9:0c:83:
92:8c:a0:11:dd:dc:eb:5d:f7:2a:d4:43:21:0a:fc:f0:36:ff:
84:59:33:fb:5e:be:c2:e4:fc:bb:7f:ff:9b:52:1d:1c:87:0d:
7f:1f:fc:08:1f:76:1e:b5:00:54:62:82:5f:59:15:1c:7e:b3:
76:df:53:03:39:40:30:6d:8a:d0:60:89:4f:41:4c:51:02:5b:
49:d2:b5:eb:02:2f:99:fb:a6:d0:36:6f:8b:ca:cc:ec:62:6d:
e6:66:70:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ0i2DAepZeCPXI7O6mQt+odA4g4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNFMDdDNkIzOTExNDBFQkM4RjcxQ0VDNDhBMDEzQzM3
NTI1NDU4NTAeFw0yNjA0MDcxOTA0MzZaFw0yNjA0MDgyMzA0MzZaMDMxMTAvBgNV
BAMTKDU0RUUwNThEQjYyNzJDREQxQTM3OUVDRkIxQkQ3MDM5RENGMDg2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HUmnLLAFgNmzNqChw1LYvVln
oAYaPtFQD83xlu8CQ5+v7QN1re0nAHPvxz4s5kTcCbYpynhKpNgrbLME13zyY+bc
TSYsr6ueJ4V+yzTOwyiGmnzZen6lJsSlEfmcEW5Ua1WYsNHDijhYmbvpbbWPwq2j
SiQ86cW0WdAoWPrLTYFEs8UnUT4uoF/V1NA0dvJVHbnXnUwWcYvDSdNrqdgR9Dsf
aRZZUkZuaaU7UP0ymZx6WNNwddK/nHkuo5RYtVckpB6p3DODwAm//LRhQ5m4JaTy
iohxMOByQLl29KshKX0Xc0+CJm/j4hcjnUvXuQQDLArIFLpRSAjxue8eZEA/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVO4FjbYnLN0aN57Psb1wOdzwhiYwHwYDVR0j
BBgwFoAU0+B8azkRQOvI9xzsSKATw3UlRYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFhQXZFUXNXWW02eGhKZ2hEN0E5RWF0SzR5VGpjV3c3c1BodWNkcWlQ
b00vMC9EM0UwN0M2QjM5MTE0MEVCQzhGNzFDRUM0OEEwMTNDMzc1MjU0NTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRTA3QzZCMzkxMTQwRUJD
OEY3MUNFQzQ4QTAxM0MzNzUyNTQ1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnFhQXZFUXNXWW02eGhKZ2hEN0E5RWF0SzR5VGpjV3c3c1BodWNkcWlQb00vMC9E
M0UwN0M2QjM5MTE0MEVCQzhGNzFDRUM0OEEwMTNDMzc1MjU0NTg1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVP9EOOeRRywyomJUkI7UdHVfM4IKWWZkAE0UF/vWcE683VNT1mmkb5wHWnbB
U2DdpKzW3fL7e0eDHWtkXI/+gxQdCtDBVF36c0U75dX0bm8H+MGYDKrUy/yBOa6t
iw6wotq6VqvSicAr+x+hV+lPnXKZxrK4qCrexzPGCWBrZDFyyHwBS/20mOgIIC8O
JADztBLvZezsvIzkb7jHcKp1uQyDkoygEd3c6133KtRDIQr88Db/hFkz+16+wuT8
u3//m1IdHIcNfx/8CB92HrUAVGKCX1kVHH6zdt9TAzlAMG2K0GCJT0FMUQJbSdK1
6wIvmfum0DZvi8rM7GJt5mZwPA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:29:21 2026 by rpki-client