
$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File: D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier: Z0sZc2/i+jdCfiWVHQWMEqvsxyPLDBYx3XuJawCvi4w=
Subject key identifier: 5B:4D:8D:2F:1C:DE:FA:3B:56:3E:D5:D6:EF:7C:A8:F2:DF:95:FC:5C
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial: 6EAB75105967BB45A7120A8B2762E676ED389ECB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number: 027B
Signing time: Tue 07 Apr 2026 21:01:55 +0000
Manifest this update: Tue 07 Apr 2026 20:56:55 +0000
Manifest next update: Wed 08 Apr 2026 22:24:55 +0000
Files and hashes: 1: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: iyFn8dmCWg3WyydJEml+Y2v5BY14GrWXyZ7/DRDXmgA=)
2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: ymgJuTMZWv+63/VwPVmOxio8KOfxsIABsf+i4ONWEss=)
3: D1FFDF44055E16082D529730642377D751467152.crl (hash: tq5tlboaLTeC3O4K2l3n85CHADzDK5tDVIDpGGqj6d4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 22:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ab:75:10:59:67:bb:45:a7:12:0a:8b:27:62:e6:76:ed:38:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FFDF44055E16082D529730642377D751467152
Validity
Not Before: Apr 7 20:56:55 2026 GMT
Not After : Apr 8 22:24:55 2026 GMT
Subject: CN=5B4D8D2F1CDEFA3B563ED5D6EF7CA8F2DF95FC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:ec:c6:9d:5a:4a:3a:4b:9b:23:18:e9:b8:
ab:87:87:c4:1f:ca:d5:d5:e1:d1:ff:5a:28:a7:53:
96:c5:cd:23:19:c7:89:2a:e9:72:6c:31:ed:b6:90:
23:bb:a7:26:2d:cf:1a:92:9f:76:14:c8:8b:79:5f:
a6:41:2c:cf:ea:17:ea:81:40:21:ee:17:63:43:d3:
61:9b:27:ce:ba:0b:84:a1:34:2b:a1:01:9e:8c:07:
d4:24:14:a8:e3:0f:f9:c4:28:68:76:fa:40:6d:36:
a9:e6:6a:0b:3b:ab:a4:60:c2:65:ff:45:66:06:6e:
a1:14:af:15:1f:2d:f4:35:ad:86:02:33:64:c7:c8:
a1:39:ee:27:55:00:68:67:9f:3c:c5:44:9c:e6:dc:
58:60:e5:28:2d:99:87:b3:f6:d1:03:59:28:12:07:
04:c5:7f:16:1f:2c:60:e5:36:82:dd:e4:96:12:a3:
0c:f1:71:cc:13:07:92:7d:e1:68:f3:8a:a6:d8:ff:
96:0c:b6:b6:f8:eb:ad:88:d0:b6:60:63:98:07:f8:
7d:e3:9c:3b:cf:60:c9:96:2c:07:58:c1:59:cc:f4:
4d:69:d7:d5:53:d5:cb:1f:ab:12:6b:eb:04:5b:e1:
87:a1:8c:78:03:fc:fc:3e:06:3e:74:36:13:9a:15:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:8D:2F:1C:DE:FA:3B:56:3E:D5:D6:EF:7C:A8:F2:DF:95:FC:5C
X509v3 Authority Key Identifier:
keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:68:03:9a:3c:59:a9:a4:11:a6:8d:dd:a4:36:90:cb:18:
d7:dc:3c:f1:21:bd:97:7a:ab:89:ec:b5:93:fd:2d:f4:dd:02:
f2:1b:f6:4b:ea:27:d0:01:c6:b5:15:d5:19:27:d4:fb:51:e9:
d0:f4:58:71:4e:36:72:74:b1:87:91:16:4b:2a:ef:51:50:1a:
6e:a9:e2:7d:73:79:6a:ea:68:e4:86:5f:4c:0c:5a:08:e7:c9:
0a:32:3b:c0:13:aa:29:4d:7d:ce:c5:74:13:af:c2:8c:41:5d:
9f:c4:ee:f8:14:b4:a9:89:15:77:ea:33:3d:68:36:6a:7d:e0:
34:56:64:02:d0:a0:de:9a:d0:f4:81:ad:b4:c2:47:45:de:fe:
f1:da:9f:f3:30:e8:93:2d:75:ab:67:b5:3a:61:89:c5:15:01:
c2:e5:69:b4:fa:e5:ea:3c:84:78:8e:ea:27:e9:49:99:84:dc:
5b:75:7a:2c:b6:4b:2f:dc:4d:d0:77:f4:e0:b3:b2:9b:f2:92:
47:78:44:05:84:55:ab:d6:cc:eb:b6:51:2d:7f:54:3b:ec:80:
61:b0:4e:27:23:b3:73:4f:6b:b3:01:35:3d:4f:e0:93:23:1d:
b6:81:e8:f2:f2:8f:14:35:e2:5e:17:ba:ba:af:e7:e8:59:c7:
1a:88:61:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbqt1EFlnu0WnEgqLJ2Lmdu04nsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGRkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1
MTQ2NzE1MjAeFw0yNjA0MDcyMDU2NTVaFw0yNjA0MDgyMjI0NTVaMDMxMTAvBgNV
BAMTKDVCNEQ4RDJGMUNERUZBM0I1NjNFRDVENkVGN0NBOEYyREY5NUZDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XezGnVpKOkubIxjpuKuHh8Qf
ytXV4dH/WiinU5bFzSMZx4kq6XJsMe22kCO7pyYtzxqSn3YUyIt5X6ZBLM/qF+qB
QCHuF2ND02GbJ866C4ShNCuhAZ6MB9QkFKjjD/nEKGh2+kBtNqnmags7q6RgwmX/
RWYGbqEUrxUfLfQ1rYYCM2THyKE57idVAGhnnzzFRJzm3Fhg5SgtmYez9tEDWSgS
BwTFfxYfLGDlNoLd5JYSowzxccwTB5J94WjziqbY/5YMtrb4662I0LZgY5gH+H3j
nDvPYMmWLAdYwVnM9E1p19VT1csfqxJr6wRb4YehjHgD/Pw+Bj50NhOaFagjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUW02NLxze+jtWPtXW73yo8t+V/FwwHwYDVR0j
BBgwFoAU0f/fRAVeFggtUpcwZCN311FGcVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlK
Wm4vMC9EMUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkZERjQ0MDU1RTE2MDgy
RDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlKWm4vMC9E
MUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJVNoA5o8WamkEaaN3aQ2kMsY19w88SG9l3qriey1k/0t9N0C8hv2S+on0AHG
tRXVGSfU+1Hp0PRYcU42cnSxh5EWSyrvUVAabqnifXN5aupo5IZfTAxaCOfJCjI7
wBOqKU19zsV0E6/CjEFdn8Tu+BS0qYkVd+ozPWg2an3gNFZkAtCg3prQ9IGttMJH
Rd7+8dqf8zDoky11q2e1OmGJxRUBwuVptPrl6jyEeI7qJ+lJmYTcW3V6LLZLL9xN
0Hf04LOym/KSR3hEBYRVq9bM67ZRLX9UO+yAYbBOJyOzc09rswE1PU/gkyMdtoHo
8vKPFDXiXhe6uq/n6FnHGohh/Q==
-----END CERTIFICATE-----
Generated at Wed Apr 8 09:23:03 2026 by rpki-client