
$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File: CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier: Iz/dAXj6yM19ZuvE3zmCNP1VYv/QqJ5ZyEnxEo3oh9Q=
Subject key identifier: 24:6B:FA:11:9E:DE:DA:34:90:95:ED:B6:C4:C3:65:DC:D3:70:25:64
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer: /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial: 48EE3F42008E884B39B67F42BD10453C04C3124B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number: 03D1
Signing time: Wed 08 Apr 2026 01:37:05 +0000
Manifest this update: Wed 08 Apr 2026 01:32:05 +0000
Manifest next update: Thu 09 Apr 2026 03:43:05 +0000
Files and hashes: 1: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: paJ2NQ9DRq4kCrP3orNXj7GgnFYcC+nsR7wMP3Z9Wj8=)
2: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: 99bHMfFp0K0Nkwkx8VPCxwgSrOCjJ03nEIGUyyfeEzQ=)
3: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: /nXIP4z7stQqUbA4CtzR/0RQ1Bfe0cFNMuYXsa2oqtA=)
4: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: JOM2RK2HIV3sZi+0HaFOEuSlTllD9yuwgdkYR/MQ8Kk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 03:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ee:3f:42:00:8e:88:4b:39:b6:7f:42:bd:10:45:3c:04:c3:12:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Validity
Not Before: Apr 8 01:32:05 2026 GMT
Not After : Apr 9 03:43:05 2026 GMT
Subject: CN=246BFA119EDEDA349095EDB6C4C365DCD3702564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:ce:6c:76:50:46:fe:1d:a2:14:16:b6:fe:
63:ac:83:b9:24:c8:4e:b0:dd:7f:df:36:ce:7d:68:
05:d5:a9:14:e1:c6:f8:95:d3:d9:11:a6:db:d1:d9:
ca:14:9e:00:7c:56:7d:c5:a1:ca:5b:d7:b0:46:43:
0e:df:c4:54:97:56:90:75:da:4a:f1:0c:ca:1b:1b:
89:04:51:06:83:79:bf:39:11:78:d3:9b:94:f8:c9:
7b:dd:90:b8:57:f8:eb:90:c2:21:9c:9c:44:e9:af:
8f:e5:21:41:0d:8c:70:41:29:a5:bf:a7:d2:9c:7a:
d9:92:dc:65:13:16:33:76:aa:9f:07:ed:cb:b2:0c:
d1:53:89:ca:ec:4f:3b:92:4a:0a:8a:c1:bf:2d:bb:
3d:f1:dc:fd:70:a6:ac:c1:62:f3:2c:31:c7:00:2d:
bf:77:d5:81:92:63:15:f8:44:4e:ac:96:c6:c3:d8:
7c:d3:bd:59:c0:9c:38:b9:26:69:cb:2b:b0:f2:e9:
14:39:b7:92:50:ff:3b:44:2c:65:d9:4f:1a:19:aa:
33:ff:31:71:fc:78:14:f7:fc:4b:1c:6f:91:37:1c:
1c:95:5c:a0:63:be:8c:2b:05:60:f4:9b:91:e7:ba:
4a:93:3a:a2:36:5a:77:8b:45:70:86:f5:fa:74:7f:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6B:FA:11:9E:DE:DA:34:90:95:ED:B6:C4:C3:65:DC:D3:70:25:64
X509v3 Authority Key Identifier:
keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:ff:9f:98:a4:ac:f6:8e:e9:dc:46:d3:0a:90:75:db:dd:
1b:6b:e5:71:71:e3:3a:70:7d:d3:2e:9a:af:b8:f0:ee:e9:0f:
bb:d6:03:5b:ca:67:09:30:58:9e:9f:81:bc:b8:3f:64:e8:82:
f9:56:61:5a:c3:06:9d:48:c2:ee:a3:0b:cf:58:ed:07:6e:21:
24:ef:01:b5:7f:7c:ed:ce:5c:ff:c9:41:32:af:aa:0e:ec:e6:
e1:79:b8:b9:e9:26:09:1a:5c:ee:51:20:1b:5e:07:03:da:c6:
46:2e:82:57:28:2a:11:1d:66:1d:8f:69:72:cc:0d:07:6d:02:
e5:14:4f:92:70:12:84:49:ec:5b:f6:c7:1d:6f:db:57:88:52:
15:b6:26:8c:2a:be:3a:34:a6:8a:ea:36:82:f2:3c:a4:03:f1:
12:e6:b3:d9:bd:ad:c6:75:16:83:3e:4d:08:93:e3:06:4e:d2:
e2:82:09:d2:4d:ec:61:b5:b2:70:9b:5f:79:31:43:d4:42:9a:
06:a1:cf:97:da:5f:da:d1:d9:e8:37:8a:df:a6:39:ab:81:12:
fe:34:77:2e:7a:76:19:8a:9c:47:27:11:0f:f9:00:76:16:c1:
5a:e9:f9:c3:f4:70:e8:db:ca:af:44:5c:50:ec:a7:96:7e:d9:
fe:0b:6c:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSO4/QgCOiEs5tn9CvRBFPATDEkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U0NDQzMjUwMDlEQzg1QkU3MTJCQ0QwMTE1NjUxMEYy
QjZGNEFCOTAeFw0yNjA0MDgwMTMyMDVaFw0yNjA0MDkwMzQzMDVaMDMxMTAvBgNV
BAMTKDI0NkJGQTExOUVERURBMzQ5MDk1RURCNkM0QzM2NURDRDM3MDI1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZS85sdlBG/h2iFBa2/mOsg7kk
yE6w3X/fNs59aAXVqRThxviV09kRptvR2coUngB8Vn3Focpb17BGQw7fxFSXVpB1
2krxDMobG4kEUQaDeb85EXjTm5T4yXvdkLhX+OuQwiGcnETpr4/lIUENjHBBKaW/
p9KcetmS3GUTFjN2qp8H7cuyDNFTicrsTzuSSgqKwb8tuz3x3P1wpqzBYvMsMccA
Lb931YGSYxX4RE6slsbD2HzTvVnAnDi5JmnLK7Dy6RQ5t5JQ/ztELGXZTxoZqjP/
MXH8eBT3/Escb5E3HByVXKBjvowrBWD0m5HnukqTOqI2WneLRXCG9fp0f4JzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJGv6EZ7e2jSQle22xMNl3NNwJWQwHwYDVR0j
BBgwFoAUzkRDJQCdyFvnErzQEVZRDytvSrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJS
V00vMS9DRTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDQ0MzI1MDA5REM4NUJF
NzEyQkNEMDExNTY1MTBGMkI2RjRBQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJSV00vMS9D
RTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEK3/n5ikrPaO6dxG0wqQddvdG2vlcXHjOnB90y6ar7jw7ukPu9YDW8pnCTBY
np+BvLg/ZOiC+VZhWsMGnUjC7qMLz1jtB24hJO8BtX987c5c/8lBMq+qDuzm4Xm4
uekmCRpc7lEgG14HA9rGRi6CVygqER1mHY9pcswNB20C5RRPknAShEnsW/bHHW/b
V4hSFbYmjCq+OjSmiuo2gvI8pAPxEuaz2b2txnUWgz5NCJPjBk7S4oIJ0k3sYbWy
cJtfeTFD1EKaBqHPl9pf2tHZ6DeK36Y5q4ES/jR3Lnp2GYqcRycRD/kAdhbBWun5
w/Rw6NvKr0RcUOynln7Z/gtsdQ==
-----END CERTIFICATE-----
Generated at Wed Apr 8 15:59:38 2026 by rpki-client