
$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json)
Hash identifier: ehUjBaXbVr4bftoeRn/g8+nIfXOV3agrmW0A7sSOZD0=
Subject key identifier: 52:C4:F1:85:1B:FA:53:C3:81:68:2B:B3:C1:6E:5C:6D:C8:73:DB:44
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial: 72E8C8DFCF321F4D02DD201170AFD9F0D0613234
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
Manifest number: 03D3
Signing time: Wed 08 Apr 2026 05:05:44 +0000
Manifest this update: Wed 08 Apr 2026 05:00:44 +0000
Manifest next update: Thu 09 Apr 2026 05:08:44 +0000
Files and hashes: 1: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: DiixBoz3Ai9FWUrrsPVznHCW6xZUyI/fxuBFiIJjAlo=)
2: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: L4YdALv0buebwbtDyJ9u+Hh7QdaO57qThZQtk9Rt4RQ=)
3: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: sUc9FSgggdoLcOcMTld7TYMgrTtgGNY3qjOibBet8RA=)
4: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: 9jpx1YK1iqOvUb4TWxrHqS++TcWhKZH+05KH20MC4f0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 05:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e8:c8:df:cf:32:1f:4d:02:dd:20:11:70:af:d9:f0:d0:61:32:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Validity
Not Before: Apr 8 05:00:44 2026 GMT
Not After : Apr 9 05:08:44 2026 GMT
Subject: CN=52C4F1851BFA53C381682BB3C16E5C6DC873DB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:75:27:3d:72:60:64:32:55:5d:9a:21:40:
0f:e5:63:98:84:68:6e:15:8a:c9:6e:07:3f:42:4d:
6c:57:88:a2:1f:16:d7:78:0b:c6:29:9a:b8:3c:7d:
f4:c5:1c:a5:d1:02:74:6b:42:df:a7:34:f2:67:31:
4f:0f:e3:44:e9:c0:43:56:dd:11:fd:73:57:e1:06:
7a:a3:da:f0:9d:2a:45:3a:01:27:ce:70:98:70:ec:
77:ba:75:42:c5:26:b9:c0:50:8f:3c:bc:45:55:38:
3d:4b:12:e0:47:1b:9b:f8:c6:fb:8e:2c:0c:3c:21:
a7:fa:8e:a3:30:24:44:30:a3:97:9d:e7:bc:79:90:
21:d2:a8:eb:ad:34:b3:c8:e5:9c:df:7e:eb:4a:33:
2f:a9:1b:ea:68:32:6f:63:0b:64:ce:55:9b:42:28:
38:cd:50:ac:0b:ec:77:59:66:25:fb:3c:5a:28:50:
79:07:22:72:6f:38:99:f9:c8:72:b9:1e:9c:32:23:
f5:fc:32:d1:0c:c5:a7:48:6e:7b:64:9f:8f:4d:6c:
c2:d2:15:78:bd:f9:ea:a5:e7:22:d5:30:ff:85:f0:
22:ef:a6:27:67:0e:8f:67:79:43:91:ce:72:e0:b9:
2c:92:a8:a8:1b:d3:52:02:e4:ff:26:1a:6b:a8:69:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:F1:85:1B:FA:53:C3:81:68:2B:B3:C1:6E:5C:6D:C8:73:DB:44
X509v3 Authority Key Identifier:
keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:53:a6:f6:ab:5c:78:f1:52:2e:21:22:ad:d1:72:d4:7e:d0:
d5:e9:08:2c:39:64:ca:0c:68:ab:05:c5:ca:33:e5:dc:a3:cc:
9f:74:47:a2:f7:56:d5:0b:40:13:44:8f:d7:0c:4c:0d:2b:a5:
0e:c2:77:cd:18:4e:f1:fe:90:2a:dd:ae:75:ce:47:69:03:1e:
0f:9d:bb:93:91:d7:71:89:da:43:5a:5a:44:f0:37:6d:66:03:
71:92:b9:4b:80:b6:7c:61:14:29:fb:fb:c1:fb:8f:af:b1:45:
80:7d:4e:93:aa:9d:97:ac:75:ee:b7:35:3f:39:b6:2d:1e:f2:
1c:d6:c3:08:f3:f5:81:3b:2e:7d:ba:c8:6c:fa:ff:cc:b7:1c:
06:b7:59:47:38:13:1f:29:46:a9:49:89:13:84:e1:c4:6b:9b:
26:c7:1e:4a:61:03:21:1a:05:1e:ad:8b:8c:0f:83:91:4e:be:
9a:c8:e6:16:5c:ad:bd:1d:bd:d3:13:69:34:fc:a0:bd:d5:e0:
84:ba:45:8e:37:f1:70:7c:a8:8a:fe:e6:f4:95:1e:a6:06:ba:
93:66:b3:fc:a8:30:b4:f8:a8:39:5d:52:b7:ef:e6:ae:7e:bb:
94:f5:d5:6d:73:3b:03:c5:db:04:2e:87:d5:b6:3d:a8:21:48:
a8:84:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:53:43 2026 by rpki-client