
$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
File: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft (raw, json)
Hash identifier: i4eUCaUnJlSm77mm7eZjOgESJlJO5Uv1mWBzQtiE5G0=
Subject key identifier: 46:73:E3:76:A6:F6:31:20:1A:4C:9E:EB:F3:27:33:3B:09:17:5B:41
Authority key identifier: D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Certificate issuer: /CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Certificate serial: 7C8A866DFA14FAD172874AFF2E711AFCF880A888
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
Manifest number: 50
Signing time: Thu 09 Apr 2026 03:15:37 +0000
Manifest this update: Thu 09 Apr 2026 03:10:37 +0000
Manifest next update: Fri 10 Apr 2026 06:50:37 +0000
Files and hashes: 1: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: X1mFsLI4Qx5oGKiy8k7VNSxBc0vv6a0K1FRl2fNhhiQ=)
2: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: R3uhZoJSvdBAFSKZLP45MaoIVASbthNAoqzbBhFGlmI=)
3: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl (hash: LTHZbMsmNcyvYNBetBgyI9ihEqbAhMu3CtU4ER+/fXs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 06:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8a:86:6d:fa:14:fa:d1:72:87:4a:ff:2e:71:1a:fc:f8:80:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Validity
Not Before: Apr 9 03:10:37 2026 GMT
Not After : Apr 10 06:50:37 2026 GMT
Subject: CN=4673E376A6F631201A4C9EEBF327333B09175B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:7f:d8:fd:1c:7c:77:ab:11:80:df:d5:05:
53:cd:03:e2:e3:9a:5a:1d:18:38:ae:26:f9:ec:e6:
9c:07:b3:1d:85:51:fe:64:30:fe:ab:2e:e5:78:f9:
0e:c5:7c:24:51:b5:f4:dc:97:6c:3e:b5:a0:c6:cd:
cc:5c:1c:a0:53:6d:7a:16:f2:1e:af:38:03:57:ae:
b0:93:77:4a:d3:6c:1c:0d:ca:44:a5:3c:fd:e7:ea:
f0:08:9e:58:0f:4c:66:b8:25:cb:75:97:c1:70:d8:
c1:0f:6c:61:46:3e:64:17:49:fc:e7:b4:b6:21:a3:
67:fe:a5:b9:14:3b:e1:af:6c:9e:12:71:38:4e:d0:
17:3f:fb:45:57:34:c5:13:ec:76:71:f4:94:e8:c4:
de:43:6a:00:c1:14:4a:e3:ba:08:b7:80:bd:c1:55:
09:d9:5b:57:de:af:f7:7b:36:77:44:a4:db:ac:a6:
a2:8b:ef:20:9a:f3:83:f6:a5:4f:5e:55:30:6f:b7:
bc:cb:35:6d:ea:39:86:b2:61:d4:57:53:16:9e:16:
ed:ab:a2:14:43:82:c9:53:83:da:c0:41:58:33:ed:
1a:9c:3c:f0:4c:64:50:ba:12:ee:92:af:a2:5a:51:
e1:f7:e8:bc:e4:1d:99:ed:8c:d1:04:0b:d7:bd:3e:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:73:E3:76:A6:F6:31:20:1A:4C:9E:EB:F3:27:33:3B:09:17:5B:41
X509v3 Authority Key Identifier:
keyid:D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:e2:12:3f:47:ad:44:b0:a4:3a:1c:eb:e2:3b:fc:26:57:
e8:62:d5:47:72:3a:9a:f5:96:6f:2a:9b:7d:5d:1b:a9:60:df:
0b:c9:1b:30:ef:17:f9:d2:2b:eb:dd:16:4b:03:15:25:25:2b:
9b:c2:13:7a:56:c6:4a:55:12:9e:0d:9d:6b:70:32:5e:e8:16:
5f:e9:09:f0:2a:66:4c:87:bc:22:83:e8:8d:48:aa:1f:91:70:
f7:b1:57:b1:c2:5c:cb:ef:e2:2f:86:6a:08:85:b9:30:81:6f:
14:34:35:62:70:86:27:a4:46:95:cc:a7:d9:d7:13:59:cd:78:
91:9a:b2:46:71:af:98:b6:0d:f0:a2:04:75:e2:4c:70:b5:f0:
57:0b:33:e5:b9:2b:0a:89:e2:27:85:6d:4a:00:03:07:b5:3c:
48:cd:50:a6:40:0d:5b:33:c3:ef:66:09:17:50:d7:a2:5e:e2:
1b:1e:ad:91:7e:f7:c6:6c:51:6b:84:ec:6f:21:68:0b:ee:39:
81:bc:73:0a:b1:d4:59:ff:5a:37:ad:10:4e:c4:a9:6d:86:cb:
21:6a:c6:e6:10:94:44:8c:d7:63:23:21:f9:bc:9a:09:b2:8b:
f6:48:78:92:6f:bd:d2:ca:98:d8:e3:0a:3e:bd:48:a7:62:85:
3d:23:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:00:14 2026 by rpki-client