
$ rpki-client -vvf rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
File: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft (raw, json)
Hash identifier: Cw9PF7CxiPvTUsomzIUAgLJm2XrYRgQXwGb6xK9q9l8=
Subject key identifier: 90:CA:0B:76:1C:7F:48:2F:6A:5E:8D:23:80:9A:09:0B:1C:06:D6:24
Authority key identifier: CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
Certificate issuer: /CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Certificate serial: 06D49B8FAD8F13EF405F88A01EC138282F083369
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
Manifest number: A0
Signing time: Thu 09 Apr 2026 06:52:42 +0000
Manifest this update: Thu 09 Apr 2026 06:47:42 +0000
Manifest next update: Fri 10 Apr 2026 07:05:42 +0000
Files and hashes: 1: 323830343a373034303a3a2f33322d313238203d3e20323730373135.roa (hash: sNgEF06hBcueOscjyGonLqPiAr/nqxGOmW+2KVDrBsY=)
2: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl (hash: e7843BXDtOJLdwfqdmbH2foZhW04Du7HXYi6JNUUuBc=)
3: 3138392e3132372e3138302e302f32322d3234203d3e20323730373135.roa (hash: RhjZm2uSbdJQigxky7M1jCcFaL9XEEChqLcnVSTm+sM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 07:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d4:9b:8f:ad:8f:13:ef:40:5f:88:a0:1e:c1:38:28:2f:08:33:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Validity
Not Before: Apr 9 06:47:42 2026 GMT
Not After : Apr 10 07:05:42 2026 GMT
Subject: CN=90CA0B761C7F482F6A5E8D23809A090B1C06D624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:76:f2:03:c9:5a:7e:f1:6c:2b:87:59:5e:
f8:d0:a0:66:d3:aa:80:8f:1f:70:b0:97:a4:66:62:
3a:76:df:a1:43:12:bf:d3:40:fb:dd:ca:bd:25:c4:
63:c6:91:0e:ab:e3:4f:fe:e8:0b:8f:ce:fb:04:08:
ea:19:5b:82:bc:39:5a:b0:a7:c3:cf:43:9d:08:08:
23:09:88:53:5b:34:f3:5e:34:5b:e3:b1:be:6c:8e:
e4:46:da:53:4c:7e:0c:d6:07:26:6e:53:0e:73:76:
c2:6e:ce:c7:ce:a3:28:01:9a:4f:b1:be:18:0f:7a:
22:0c:94:61:c8:d7:83:7b:d4:27:11:83:f2:e4:38:
3f:16:03:76:11:48:db:75:ed:a7:05:5c:8a:b4:7e:
c7:12:00:e5:cf:86:5f:a9:63:52:db:8a:f5:47:ce:
fd:ea:8a:60:6a:bf:ad:27:c0:e6:6d:e2:9b:99:5d:
86:0e:3f:1f:41:50:65:16:5f:43:9b:26:66:78:4b:
86:71:a0:4e:87:38:ed:b2:0a:71:2f:98:00:85:a4:
9c:ae:7d:7e:38:59:24:88:5a:78:3e:5d:77:71:97:
d5:da:ef:60:1d:25:69:40:5f:cf:5f:6c:af:1a:4b:
95:3f:d9:3c:76:01:5e:29:f1:f7:5e:ff:97:53:c5:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:0B:76:1C:7F:48:2F:6A:5E:8D:23:80:9A:09:0B:1C:06:D6:24
X509v3 Authority Key Identifier:
keyid:CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7b:7a:c4:09:b3:01:e1:fa:a1:27:0f:a2:6f:b9:20:cf:50:
c7:d9:4c:70:06:d4:42:01:52:c7:4a:f4:73:23:45:c8:08:1f:
e6:21:39:73:be:1b:34:41:21:36:2e:45:e9:9c:70:e2:74:47:
39:5a:0b:bb:d4:6c:4c:4d:ce:6a:1e:64:e6:87:b2:56:12:37:
1b:17:45:92:a8:24:54:a8:96:63:76:8c:14:35:27:47:7f:18:
b2:e7:64:d5:6f:3a:b4:72:5a:04:24:a4:a4:fb:f1:2d:f7:8e:
45:5c:53:ce:99:d1:d6:88:f4:b5:6e:4d:2b:1f:c1:8b:19:04:
a1:c0:6d:93:5d:e8:d3:d0:09:bb:88:b0:33:23:bf:1b:51:ba:
d0:91:e7:96:ff:9e:de:e3:d0:58:03:c5:f1:ff:55:95:14:b9:
0b:38:f6:a8:55:27:f8:61:0f:da:d7:bd:0e:5b:d0:45:d0:67:
ad:a4:cd:11:31:77:9b:cd:c5:be:26:c3:9b:7d:cf:ae:fd:12:
92:ae:7a:3b:c2:d1:44:92:10:c9:b2:06:0e:77:af:08:c2:93:
c1:1a:ce:9a:a6:46:ed:55:32:0e:96:2d:b9:fb:97:3c:90:40:
02:35:74:33:34:1e:3e:c4:48:ac:f4:32:3d:54:91:ec:b7:47:
7d:9b:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 13:20:48 2026 by rpki-client