
$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json)
Hash identifier: mVfXsfr1NB6qJRmZCJwpLvAJN4UzuKtMydmA1pg/zwA=
Subject key identifier: 65:6D:EA:BC:69:FE:3F:7F:27:8F:C3:A8:A7:24:1E:3F:54:EA:A0:2E
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial: 225AB5DA100E818D2E031C04FE2358005DF83315
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
Manifest number: 03D5
Signing time: Wed 08 Apr 2026 08:10:44 +0000
Manifest this update: Wed 08 Apr 2026 08:05:44 +0000
Manifest next update: Thu 09 Apr 2026 11:17:44 +0000
Files and hashes: 1: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: Y3NDMjIUF9HCqpgQ02qbX63g2kp3bwxWFFvyNGmlnns=)
2: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: ZcXSvFzjcKdlhbF/D0LSaAI/xEyYHSj7XWyEf2G+oig=)
3: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: +aQEhl+Yhm769zAGE8u+JymLqJl9fe9ufeDO8EZlQp0=)
4: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: DwIT/oWsb5A+NZbd8E9xwGN8upMg4I8VAL0gz3ICWe8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 11:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5a:b5:da:10:0e:81:8d:2e:03:1c:04:fe:23:58:00:5d:f8:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Validity
Not Before: Apr 8 08:05:44 2026 GMT
Not After : Apr 9 11:17:44 2026 GMT
Subject: CN=656DEABC69FE3F7F278FC3A8A7241E3F54EAA02E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:6b:9a:9f:a3:17:a6:62:00:5a:b8:b4:4f:
b1:48:30:23:33:ac:54:48:1e:83:f0:08:11:7c:77:
26:07:97:17:1c:b8:af:df:be:a4:3a:42:11:b3:d6:
15:79:c6:f7:11:37:be:20:d9:90:1a:bf:c8:b3:d2:
99:e0:3a:76:88:0b:e1:c6:77:82:d9:18:b7:fd:88:
c8:3e:dc:2c:00:f6:61:30:ba:df:66:5c:4c:5f:bf:
21:55:9a:03:29:a0:91:5f:9f:50:b7:31:24:b6:fc:
35:2c:df:26:d1:32:6f:7d:65:ef:1b:c8:4d:a0:17:
53:79:e1:73:ec:f5:a8:e0:57:72:df:77:17:80:a5:
fc:0e:54:3f:50:ad:4f:3e:ff:b3:3b:d5:7d:d2:38:
2c:09:10:52:aa:57:23:b6:6e:2e:c9:02:e2:fa:40:
2a:cd:e2:5c:29:03:78:6d:ff:53:6e:74:94:4d:f5:
2a:3d:47:67:f7:23:f7:74:52:5e:83:ee:23:be:5a:
3d:ca:13:47:ad:ea:3f:3e:c5:6b:ad:f8:84:cf:88:
11:a6:eb:ce:7b:f8:ec:b4:b3:e7:7b:b7:e3:57:9b:
4f:0a:d8:74:0b:e1:68:44:40:d9:33:42:7e:aa:60:
eb:94:e8:f8:ea:83:f0:e6:70:94:14:60:16:70:73:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:EA:BC:69:FE:3F:7F:27:8F:C3:A8:A7:24:1E:3F:54:EA:A0:2E
X509v3 Authority Key Identifier:
keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:df:e6:71:4e:c8:81:8c:a4:a2:3e:70:b1:1d:ae:1a:9e:d9:
36:ec:f9:f3:9b:94:3f:1e:ae:9c:e5:a1:5e:e7:79:37:50:cd:
0b:c6:0b:de:09:dc:03:97:d8:97:37:88:e5:18:0e:6a:11:5b:
85:dd:8d:8c:bf:e8:52:4f:5e:1f:45:27:9c:7e:77:55:c9:1a:
0d:7d:3f:a6:1e:57:97:52:8b:ce:44:31:9e:44:32:d4:bc:a1:
66:3a:16:5f:5e:bd:db:a7:35:a3:f3:d8:cd:ba:b0:4c:e7:cb:
93:41:53:9d:02:43:92:33:3e:0e:df:7e:bb:5c:f1:80:8b:39:
38:62:c5:98:fd:c4:f2:e9:a1:aa:21:0d:c6:52:1c:af:33:b2:
1d:0e:2f:56:cb:82:cc:58:ff:49:2b:32:d5:f3:42:59:eb:b7:
ac:a9:0d:0b:d0:e6:f5:e6:cd:af:06:fb:6a:86:ec:c6:a4:7b:
4b:e1:89:6f:1a:ca:00:c7:e5:46:91:16:4f:98:20:fe:29:36:
89:6c:77:39:ee:04:e5:69:5d:c6:34:0b:0f:f3:42:9b:01:43:
f1:05:48:41:0b:4a:b4:26:87:40:c8:78:13:ba:ca:7c:31:d6:
3b:e6:ef:c7:ff:be:56:64:30:24:a7:ad:de:ee:3e:cd:41:50:
d8:10:b2:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIlq12hAOgY0uAxwE/iNYAF34MxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0
QjUwRjI5OTAeFw0yNjA0MDgwODA1NDRaFw0yNjA0MDkxMTE3NDRaMDMxMTAvBgNV
BAMTKDY1NkRFQUJDNjlGRTNGN0YyNzhGQzNBOEE3MjQxRTNGNTRFQUEwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhmuan6MXpmIAWri0T7FIMCMz
rFRIHoPwCBF8dyYHlxccuK/fvqQ6QhGz1hV5xvcRN74g2ZAav8iz0pngOnaIC+HG
d4LZGLf9iMg+3CwA9mEwut9mXExfvyFVmgMpoJFfn1C3MSS2/DUs3ybRMm99Ze8b
yE2gF1N54XPs9ajgV3LfdxeApfwOVD9QrU8+/7M71X3SOCwJEFKqVyO2bi7JAuL6
QCrN4lwpA3ht/1NudJRN9So9R2f3I/d0Ul6D7iO+Wj3KE0et6j8+xWut+ITPiBGm
6857+Oy0s+d7t+NXm08K2HQL4WhEQNkzQn6qYOuU6Pjqg/DmcJQUYBZwc0d1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZW3qvGn+P38nj8OopyQeP1TqoC4wHwYDVR0j
BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy
YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1
MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84
NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVt/mcU7IgYykoj5wsR2uGp7ZNuz585uUPx6unOWhXud5N1DNC8YL3gncA5fY
lzeI5RgOahFbhd2NjL/oUk9eH0UnnH53VckaDX0/ph5Xl1KLzkQxnkQy1LyhZjoW
X16926c1o/PYzbqwTOfLk0FTnQJDkjM+Dt9+u1zxgIs5OGLFmP3E8umhqiENxlIc
rzOyHQ4vVsuCzFj/SSsy1fNCWeu3rKkNC9Dm9ebNrwb7aobsxqR7S+GJbxrKAMfl
RpEWT5gg/ik2iWx3Oe4E5WldxjQLD/NCmwFD8QVIQQtKtCaHQMh4E7rKfDHWO+bv
x/++VmQwJKet3u4+zUFQ2BCykw==
-----END CERTIFICATE-----
Generated at Wed Apr 8 17:05:27 2026 by rpki-client