
$ rpki-client -vvf rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/432B5090DC2529F66D86D1C8944FDEFA748E9570.mft
File: 432B5090DC2529F66D86D1C8944FDEFA748E9570.mft (raw, json)
Hash identifier: xMWW73UWXiEdxXWCfQQBlbrjJxkFkWVRdV+FDOCquM4=
Subject key identifier: FF:4F:BA:0F:A9:5F:51:90:C5:64:B0:66:06:EC:19:3B:73:8F:A6:29
Authority key identifier: 43:2B:50:90:DC:25:29:F6:6D:86:D1:C8:94:4F:DE:FA:74:8E:95:70
Certificate issuer: /CN=432B5090DC2529F66D86D1C8944FDEFA748E9570
Certificate serial: 5DF4C51715F7D7E379FABA982660B9C54CB2025D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/432B5090DC2529F66D86D1C8944FDEFA748E9570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/432B5090DC2529F66D86D1C8944FDEFA748E9570.mft
Manifest number: 06
Signing time: Thu 09 Apr 2026 00:04:11 +0000
Manifest this update: Wed 08 Apr 2026 23:59:11 +0000
Manifest next update: Fri 10 Apr 2026 01:38:11 +0000
Files and hashes: 1: 323830313a38303a323565303a3a2f34382d3438203d3e20323638313738.roa (hash: +mmXmmpzim+pKlfesN0OyVK/2trorfBGfJrXO/mG6+s=)
2: 34352e3136392e3136322e302f32342d3234203d3e20323638313738.roa (hash: VCVVnscBSSYLlGQNS1HwlxC5QYBVD6I59UKlEy6cFhM=)
3: 432B5090DC2529F66D86D1C8944FDEFA748E9570.crl (hash: xx6xM5SyoIuRwB70QXV4EHrQ9JV8xWe2AHa7gHGPtgQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/432B5090DC2529F66D86D1C8944FDEFA748E9570.crl
rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/432B5090DC2529F66D86D1C8944FDEFA748E9570.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/432B5090DC2529F66D86D1C8944FDEFA748E9570.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 01:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f4:c5:17:15:f7:d7:e3:79:fa:ba:98:26:60:b9:c5:4c:b2:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432B5090DC2529F66D86D1C8944FDEFA748E9570
Validity
Not Before: Apr 8 23:59:11 2026 GMT
Not After : Apr 10 01:38:11 2026 GMT
Subject: CN=FF4FBA0FA95F5190C564B06606EC193B738FA629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:52:b4:61:59:28:54:26:08:39:4b:7b:ee:
ad:a9:d1:61:1f:c5:43:c7:34:6c:15:b8:5c:5b:65:
5d:49:32:17:bb:2c:54:6b:cf:09:4c:b0:cf:c2:7c:
cb:f4:c5:fe:bc:55:e4:30:db:05:a8:5b:0e:c5:75:
5e:23:9a:64:63:e3:84:2d:00:f3:50:2a:76:c2:e2:
a1:e4:2f:9b:98:1f:09:74:2e:9d:d7:93:27:1e:3f:
e8:ad:c6:d4:b5:da:a2:68:87:37:ab:de:20:57:32:
75:ee:33:a2:d5:c3:0a:4d:25:4d:b6:54:87:b0:a5:
bc:53:4c:dc:23:75:1f:19:91:4d:06:91:d1:ce:fe:
84:05:a8:e3:92:51:c5:8c:f4:81:bb:c8:e7:d5:02:
71:c0:d1:78:43:c7:e4:cd:a3:69:eb:e7:2f:0a:60:
a7:3d:df:d5:07:60:23:5f:94:36:17:6c:f0:b5:b2:
88:0f:d9:e3:f3:22:a5:11:24:97:73:32:58:33:64:
a1:17:1b:05:5f:15:67:3d:8c:00:1d:f9:58:f3:88:
21:e7:ba:d6:bf:ce:f3:bd:84:d0:f9:b3:18:1e:22:
20:9b:22:ff:3a:6a:25:67:7a:8c:2f:67:29:96:5e:
64:90:41:f4:e2:e7:14:39:b1:d4:4e:90:e5:b0:02:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:BA:0F:A9:5F:51:90:C5:64:B0:66:06:EC:19:3B:73:8F:A6:29
X509v3 Authority Key Identifier:
keyid:43:2B:50:90:DC:25:29:F6:6D:86:D1:C8:94:4F:DE:FA:74:8E:95:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/432B5090DC2529F66D86D1C8944FDEFA748E9570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/432B5090DC2529F66D86D1C8944FDEFA748E9570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Zp1nAbzKGfDUwHH3pVdmu8LcSZV6HKxh5Lu1JiwBfAB/0/432B5090DC2529F66D86D1C8944FDEFA748E9570.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f6:cc:98:e6:c3:06:c7:4e:e4:aa:ed:dd:ff:2f:3e:46:59:
41:89:c1:55:a6:b8:08:c8:bf:23:52:3d:94:85:5f:c4:53:78:
74:de:56:a1:de:71:17:e1:b8:ba:72:38:c6:7b:6b:59:a4:03:
f7:d3:b9:c8:33:f9:b5:e5:2f:f4:0d:5a:cd:ae:3b:64:4a:e8:
7e:2b:34:7c:a5:6c:97:93:51:f1:c4:ab:2e:a8:24:7e:0d:9f:
50:c4:e5:08:74:ff:b7:47:e2:c1:41:45:cb:5d:44:1f:0c:41:
af:5d:0e:eb:02:ee:b1:92:0e:25:ed:b4:20:ff:c4:8c:25:bf:
6b:9e:ec:a4:eb:5c:c4:0e:5c:88:7b:79:74:68:59:f2:f1:78:
a4:8e:88:d0:81:4b:6d:c7:dc:f3:ec:a0:b1:7d:84:54:56:59:
37:17:80:98:12:0d:e0:5d:04:98:e7:ed:d3:c1:6a:9f:05:6c:
b5:a8:76:91:93:40:4f:ea:e5:e6:48:63:df:fc:9d:04:24:d1:
26:f8:b3:09:3a:b3:65:46:f6:d8:16:a2:8a:f0:93:c7:9c:dd:
ab:c1:6e:70:91:32:43:c7:a8:19:18:71:77:ac:59:57:e0:2e:
70:7f:fb:ca:dc:e6:bd:eb:cf:c2:b2:ec:4d:30:8f:78:19:2c:
8b:73:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:39:06 2026 by rpki-client