
$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json)
Hash identifier: PlkAP1o2ZCoeoubEfLfbTRJrPxU++mgn1GkJohdtI1U=
Subject key identifier: AA:66:60:D9:30:6C:B3:26:00:90:B4:FF:40:BF:D8:BF:CF:74:C7:58
Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8
Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
Certificate serial: 699A74967B3007B61F3D2A01D926BA7548452226
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
Manifest number: 01A7
Signing time: Mon 20 Jul 2026 17:40:04 +0000
Manifest this update: Mon 20 Jul 2026 17:35:04 +0000
Manifest next update: Tue 21 Jul 2026 18:17:04 +0000
Files and hashes: 1: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: /gSJyTF2uJcH+WnrRfXDQBr79Amf5e8aGwhneHKDsk0=)
2: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: cJEyc9GyTP/W9tTA5SfKcOBqQXJyoAW8IVefVuwCDF0=)
3: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl
rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Jul 2026 18:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9a:74:96:7b:30:07:b6:1f:3d:2a:01:d9:26:ba:75:48:45:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
Validity
Not Before: Jul 20 17:35:04 2026 GMT
Not After : Jul 21 18:17:04 2026 GMT
Subject: CN=AA6660D9306CB3260090B4FF40BFD8BFCF74C758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:da:37:13:4f:23:2e:d6:87:80:66:ac:b7:
a8:06:90:f8:a5:b8:13:ad:d1:d0:54:c2:14:3d:06:
1c:cb:07:e3:87:ca:30:aa:87:0f:ae:0f:75:a6:5b:
1e:51:bb:57:a8:0d:9b:ce:fb:ce:ab:6c:f7:f0:f7:
66:fd:39:47:a9:77:3a:e7:19:b2:7c:f3:d6:25:cd:
f3:7c:eb:f2:a7:a2:80:99:7f:80:e8:ef:0c:b6:01:
70:39:f4:5e:3b:5c:d8:12:00:39:3a:9d:c3:de:93:
66:0c:1e:ce:d2:d9:f9:8c:9a:a4:7f:a9:77:12:34:
dc:0e:3e:fe:71:ab:38:99:29:12:04:32:61:52:55:
2f:5c:30:55:e2:e1:6f:9d:b3:2b:2a:9c:55:89:a2:
7b:7e:cd:84:46:cb:ec:49:a8:48:25:62:43:cb:cc:
9c:fe:86:f1:b8:a9:f3:31:f5:53:84:b5:4b:ec:bf:
1a:b1:1c:9b:05:cd:68:37:ac:73:62:0f:fa:e6:cb:
31:24:2e:77:f8:87:85:c2:2b:2d:32:aa:c3:56:b0:
91:74:a8:28:b9:2b:24:d5:2c:1f:91:ee:40:e0:2f:
52:63:eb:eb:03:77:c1:ff:37:f8:bd:29:15:b2:3f:
08:a5:3d:4b:a9:90:4f:14:bb:aa:77:40:f6:54:cf:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:60:D9:30:6C:B3:26:00:90:B4:FF:40:BF:D8:BF:CF:74:C7:58
X509v3 Authority Key Identifier:
keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8c:78:14:90:75:63:f8:17:ed:8f:a7:f1:05:b9:91:a6:cb:
36:b4:be:b8:c0:ce:c3:c4:01:b7:39:c7:c1:1b:d0:26:c0:16:
34:62:4f:9a:1e:ed:11:21:ea:e0:49:1c:51:e8:bd:7b:2e:45:
15:9c:b5:e6:d3:53:52:44:d1:05:63:ba:8e:61:56:b5:57:1b:
3f:7d:c4:a8:86:01:b9:41:81:11:63:3c:23:4e:1f:82:02:c4:
ec:01:26:99:64:21:f1:8e:c6:a5:fe:ab:9b:d2:c1:2f:b6:88:
a0:50:42:32:ac:31:70:7d:a1:df:92:9e:65:6b:bf:3f:7f:a4:
03:73:26:f3:8c:3e:fa:9f:9b:1f:71:0b:20:17:8d:f9:17:64:
88:5a:6e:f6:9c:0e:8a:f5:76:da:2f:c2:0d:13:24:40:ee:9f:
a8:58:ac:30:e7:9b:bb:dc:e0:01:fe:32:a0:e1:d1:24:8f:f8:
bd:e1:67:2c:6b:98:d1:56:8f:03:c9:9b:57:34:0d:12:2c:70:
b1:c6:84:9f:82:d3:6e:d4:74:df:29:93:de:45:04:89:d0:8a:
26:f5:3b:47:1e:07:7b:74:cf:14:33:20:46:2d:e2:ad:ab:ba:
91:c5:bc:b1:57:b7:c9:40:fb:a5:fc:08:2c:2a:86:a8:25:43:
30:1f:0b:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaZp0lnswB7YfPSoB2Sa6dUhFIiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3MkVEODVBOTNCNUFBQkU2QzdERjg0NEFEOTlEMTZB
OTBFMTRDODAeFw0yNjA3MjAxNzM1MDRaFw0yNjA3MjExODE3MDRaMDMxMTAvBgNV
BAMTKEFBNjY2MEQ5MzA2Q0IzMjYwMDkwQjRGRjQwQkZEOEJGQ0Y3NEM3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8to3E08jLtaHgGast6gGkPil
uBOt0dBUwhQ9BhzLB+OHyjCqhw+uD3WmWx5Ru1eoDZvO+86rbPfw92b9OUepdzrn
GbJ889YlzfN86/KnooCZf4Do7wy2AXA59F47XNgSADk6ncPek2YMHs7S2fmMmqR/
qXcSNNwOPv5xqziZKRIEMmFSVS9cMFXi4W+dsysqnFWJont+zYRGy+xJqEglYkPL
zJz+hvG4qfMx9VOEtUvsvxqxHJsFzWg3rHNiD/rmyzEkLnf4h4XCKy0yqsNWsJF0
qCi5KyTVLB+R7kDgL1Jj6+sDd8H/N/i9KRWyPwilPUupkE8Uu6p3QPZUz3BpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqmZg2TBssyYAkLT/QL/Yv890x1gwHwYDVR0j
BBgwFoAUqnLthak7Wqvmx9+EStmdFqkOFMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZl
Y2cvMC9BQTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzJFRDg1QTkzQjVBQUJF
NkM3REY4NDRBRDk5RDE2QTkwRTE0QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZlY2cvMC9B
QTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZIx4FJB1Y/gX7Y+n8QW5kabLNrS+uMDOw8QBtznHwRvQJsAWNGJPmh7tESHq
4EkcUei9ey5FFZy15tNTUkTRBWO6jmFWtVcbP33EqIYBuUGBEWM8I04fggLE7AEm
mWQh8Y7Gpf6rm9LBL7aIoFBCMqwxcH2h35KeZWu/P3+kA3Mm84w++p+bH3ELIBeN
+RdkiFpu9pwOivV22i/CDRMkQO6fqFisMOebu9zgAf4yoOHRJI/4veFnLGuY0VaP
A8mbVzQNEixwscaEn4LTbtR03ymT3kUEidCKJvU7Rx4He3TPFDMgRi3irau6kcW8
sVe3yUD7pfwILCqGqCVDMB8LKg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:24:09 2026 by rpki-client