
$ rpki-client -vvf rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft
File: 90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft (raw, json)
Hash identifier: 7yb4ftm6AEH7csl63kKtqAbI0UNgwOhahhlz2uPLg28=
Subject key identifier: 56:5E:3D:5E:A3:2E:A1:67:78:1E:E4:D7:3C:94:7C:17:36:A7:FD:57
Authority key identifier: 90:D9:C2:5B:F8:28:A5:A4:05:B5:D4:CF:A7:D1:C0:0B:13:12:29:EA
Certificate issuer: /CN=90D9C25BF828A5A405B5D4CFA7D1C00B131229EA
Certificate serial: 048AD21118FAB98FE37EBCBC897DA49E2AF54C26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft
Manifest number: 14
Signing time: Thu 09 Apr 2026 05:57:21 +0000
Manifest this update: Thu 09 Apr 2026 05:52:21 +0000
Manifest next update: Fri 10 Apr 2026 06:34:21 +0000
Files and hashes: 1: 90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.crl (hash: ac7T7sl2IybGKJYdkUsLDZkyCt1ecG0iCh1v31RkJkY=)
2: 323830343a333331383a3a2f33322d313238203d3e20323635313136.roa (hash: 9Dr96I3JXCXhuHRIo+b5aN8lWn+a6JPsxm+ehENJ6ds=)
3: 3137302e3235342e3230382e302f32322d3332203d3e20323635313136.roa (hash: 6oa7qa3UPnygXI9eGdPEnJgP3eGGEzRYgMnRVAA1S/w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.crl
rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 06:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8a:d2:11:18:fa:b9:8f:e3:7e:bc:bc:89:7d:a4:9e:2a:f5:4c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90D9C25BF828A5A405B5D4CFA7D1C00B131229EA
Validity
Not Before: Apr 9 05:52:21 2026 GMT
Not After : Apr 10 06:34:21 2026 GMT
Subject: CN=565E3D5EA32EA167781EE4D73C947C1736A7FD57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:c0:53:bd:88:a8:11:94:40:94:fc:5d:04:
ff:a3:86:84:05:9a:97:b4:5d:4c:c8:5a:3d:8c:59:
4b:62:88:e8:f3:31:6d:2d:11:78:fd:9a:bf:64:5d:
2f:ca:42:d6:98:67:50:1b:89:5c:d1:4c:72:4d:22:
3b:a8:25:ec:e1:df:55:b7:07:6b:51:83:ee:26:14:
53:88:1e:3d:47:6c:36:9f:5f:31:e6:60:68:16:03:
5d:46:a0:8d:d3:e2:f9:32:93:fb:4c:91:05:0f:ca:
39:e5:cd:cd:70:4c:bd:a5:b9:e2:3b:5e:bb:27:a8:
9b:da:8b:c7:79:c2:b8:c6:4d:af:6b:be:d5:68:b7:
ec:f7:88:ad:83:b8:43:a6:74:0a:d8:51:cf:02:71:
d6:ae:24:f5:7e:c0:31:f3:80:c5:9b:2d:42:11:fc:
a1:2f:d9:ea:c7:9a:96:e9:84:8b:fc:cc:29:d2:90:
05:13:3f:20:82:2f:64:c9:28:1b:d3:a6:58:b1:05:
88:e6:76:8d:d0:b1:28:eb:1f:01:89:9d:95:e8:03:
d5:9d:0a:e4:55:6b:43:1b:ce:da:57:88:d3:6a:15:
99:7a:c0:2f:f3:4f:85:b9:1d:98:fe:09:5c:75:8b:
e4:58:ae:f5:f9:06:84:91:1a:3d:de:c7:6e:cc:36:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:3D:5E:A3:2E:A1:67:78:1E:E4:D7:3C:94:7C:17:36:A7:FD:57
X509v3 Authority Key Identifier:
keyid:90:D9:C2:5B:F8:28:A5:A4:05:B5:D4:CF:A7:D1:C0:0B:13:12:29:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:2c:11:87:d6:ea:1e:e4:90:2d:52:0f:3d:ef:3c:45:97:
73:2b:d8:f1:a2:30:dc:9b:e0:5f:37:d1:aa:b2:a1:40:e0:d3:
e4:dd:9a:94:50:fd:a7:e5:83:d7:ce:f0:60:24:80:3d:dd:8b:
8b:9b:8f:64:2c:d9:53:6b:f9:a1:4c:77:b4:be:f9:e7:3a:f1:
8c:43:cc:42:49:d4:08:30:28:d2:f5:e2:6b:ce:fd:fa:12:13:
52:96:eb:82:a0:38:c1:7b:53:97:1a:76:f8:f0:62:61:d6:a0:
ff:c1:65:6b:d5:91:b0:bf:a9:b1:8d:84:ee:0f:33:ee:b4:a3:
53:51:23:64:9f:63:30:15:d2:ae:d5:aa:e3:18:d5:a5:ad:9d:
14:2c:d5:2f:1b:e6:68:6c:eb:b8:eb:77:20:5f:91:26:2c:62:
e3:29:f4:51:af:17:6a:b8:62:5b:d5:d6:1f:24:59:8d:ed:73:
d9:89:57:1f:b6:0b:3c:e7:fa:e0:10:f7:dc:90:7e:4f:ef:32:
7c:6f:56:c4:73:cc:e0:8e:4e:e4:a3:df:15:d7:0a:38:74:89:
c9:7b:b3:09:aa:08:45:94:a0:64:8c:9c:b7:9f:a2:88:3d:81:
90:39:1d:43:c3:dd:55:ff:62:ce:aa:f5:f8:f8:29:5f:d1:4e:
ed:d3:8f:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBIrSERj6uY/jfry8iX2knir1TCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEOUMyNUJGODI4QTVBNDA1QjVENENGQTdEMUMwMEIx
MzEyMjlFQTAeFw0yNjA0MDkwNTUyMjFaFw0yNjA0MTAwNjM0MjFaMDMxMTAvBgNV
BAMTKDU2NUUzRDVFQTMyRUExNjc3ODFFRTRENzNDOTQ3QzE3MzZBN0ZENTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBcBTvYioEZRAlPxdBP+jhoQF
mpe0XUzIWj2MWUtiiOjzMW0tEXj9mr9kXS/KQtaYZ1AbiVzRTHJNIjuoJezh31W3
B2tRg+4mFFOIHj1HbDafXzHmYGgWA11GoI3T4vkyk/tMkQUPyjnlzc1wTL2lueI7
XrsnqJvai8d5wrjGTa9rvtVot+z3iK2DuEOmdArYUc8CcdauJPV+wDHzgMWbLUIR
/KEv2erHmpbphIv8zCnSkAUTPyCCL2TJKBvTplixBYjmdo3QsSjrHwGJnZXoA9Wd
CuRVa0MbztpXiNNqFZl6wC/zT4W5HZj+CVx1i+RYrvX5BoSRGj3ex27MNnUJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVl49XqMuoWd4HuTXPJR8Fzan/VcwHwYDVR0j
BBgwFoAUkNnCW/gopaQFtdTPp9HACxMSKeowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29BNG5LeGVRU0U3OE5yVTJXb3J0SFZFeFJBRnlpUWFjaDhjM3NlUEY5
QlYvMC85MEQ5QzI1QkY4MjhBNUE0MDVCNUQ0Q0ZBN0QxQzAwQjEzMTIyOUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwRDlDMjVCRjgyOEE1QTQw
NUI1RDRDRkE3RDFDMDBCMTMxMjI5RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N29BNG5LeGVRU0U3OE5yVTJXb3J0SFZFeFJBRnlpUWFjaDhjM3NlUEY5QlYvMC85
MEQ5QzI1QkY4MjhBNUE0MDVCNUQ0Q0ZBN0QxQzAwQjEzMTIyOUVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGyAsEYfW6h7kkC1SDz3vPEWXcyvY8aIw3JvgXzfRqrKhQODT5N2alFD9p+WD
187wYCSAPd2Li5uPZCzZU2v5oUx3tL755zrxjEPMQknUCDAo0vXia879+hITUpbr
gqA4wXtTlxp2+PBiYdag/8Fla9WRsL+psY2E7g8z7rSjU1EjZJ9jMBXSrtWq4xjV
pa2dFCzVLxvmaGzruOt3IF+RJixi4yn0Ua8XarhiW9XWHyRZje1z2YlXH7YLPOf6
4BD33JB+T+8yfG9WxHPM4I5O5KPfFdcKOHSJyXuzCaoIRZSgZIyct5+iiD2BkDkd
Q8PdVf9izqr1+PgpX9FO7dOPCg==
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:38:42 2026 by rpki-client