
$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json)
Hash identifier: Z5ZV+qlFP2iODGg3CrY0P1UufF75dW3vA+EmmYLPvWA=
Subject key identifier: 53:D5:93:80:53:78:4E:99:47:AE:52:6D:A6:1D:B2:58:A2:96:DE:D7
Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD
Certificate serial: 55716D5067E584C5BA75FC3F4E7EBC7AEE03E34A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
Manifest number: 01D2
Signing time: Wed 25 Mar 2026 09:55:03 +0000
Manifest this update: Wed 25 Mar 2026 09:50:03 +0000
Manifest next update: Thu 26 Mar 2026 11:14:03 +0000
Files and hashes: 1: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: u2gvIQVKsTfv3oAMvc6FoTsDmgy9hAeiNgaRyyctnUY=)
2: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: LuRWXYu4+imd4rIU9dzokAO0Dpz9LyF5XRRntkfCGpw=)
3: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: YP8oj4Ldn62fe1HczGrX55WW8njWVQW92kDPNCowXts=)
4: AS61696.asa (hash: stsmp/XCRcHXqo2lURf2hX1pg3qRqsXtv07mM1pjwvM=)
5: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: qum4hDnIJOav81jguvdfK8A6pH3/MefG/Rnxcv+BRpE=)
6: 323830343a316165303a383030303a3a2f33332d3634203d3e203631363936.roa (hash: yiTmys+DN+V/3P2JuJjcBbj2/WsR/+Tzc5Siu15etqg=)
7: 323830343a316165303a3a2f33332d3634203d3e203631363936.roa (hash: hkhkMo5McuXxDb02PG2+GNvBy8ImC7Oa3hVorjwfXqc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl
rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 11:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:71:6d:50:67:e5:84:c5:ba:75:fc:3f:4e:7e:bc:7a:ee:03:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD
Validity
Not Before: Mar 25 09:50:03 2026 GMT
Not After : Mar 26 11:14:03 2026 GMT
Subject: CN=53D5938053784E9947AE526DA61DB258A296DED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:bf:f8:f2:23:f6:94:a1:b2:42:bf:a5:53:
89:e4:c8:f0:7d:5b:57:c8:05:51:18:9e:67:6b:19:
b5:5f:20:70:50:ca:0d:7a:1f:83:02:67:f5:f0:65:
5c:73:eb:a4:47:2a:c4:9c:a5:93:24:d6:33:7b:4d:
76:91:94:3c:95:07:24:7b:2a:c0:30:84:1e:ba:50:
5e:3e:76:41:c5:07:81:25:3e:ea:dd:79:66:12:ee:
d0:8a:01:07:79:f7:fd:a6:9e:63:e4:3f:8f:23:ff:
6a:04:e5:90:6f:86:6a:3a:dd:87:1c:ac:05:46:26:
58:f3:cf:f6:20:5c:96:a3:fa:a8:6b:74:21:b2:ae:
67:27:9b:19:bb:d3:11:8f:e1:c3:a3:d7:c0:5e:7d:
b4:60:61:7a:90:02:b4:7c:61:82:9f:63:1a:8a:30:
a0:3a:70:49:f3:c4:fb:b0:4f:99:4a:e5:71:5c:aa:
c7:1b:51:96:70:28:ca:9a:70:9e:2f:7b:13:01:9f:
91:55:6f:c9:47:3c:51:e0:71:68:1e:ce:27:69:b7:
29:8d:eb:6b:d7:26:36:bc:1f:74:ae:c1:7e:a7:d2:
e5:91:1d:06:02:0e:fe:9f:ba:65:0f:26:cf:48:79:
6a:a6:e9:62:24:5c:27:38:a0:ed:dc:5d:4a:e5:a8:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:93:80:53:78:4E:99:47:AE:52:6D:A6:1D:B2:58:A2:96:DE:D7
X509v3 Authority Key Identifier:
keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f7:b9:e5:73:bd:0a:06:32:ba:d8:ae:be:26:15:6e:f5:2f:
17:ae:ca:0d:61:63:29:3b:f1:01:be:5d:85:45:db:21:ce:5f:
8b:62:fb:e7:7f:5e:e9:72:12:4e:35:d8:f6:5d:b9:9f:2b:5b:
c4:52:d6:50:cc:8e:82:37:38:bc:47:35:b4:f9:4a:9b:5d:17:
4f:92:12:1a:c1:8e:87:d1:8d:47:b6:d8:ed:29:19:3e:21:af:
b4:d5:9d:97:4e:e3:a0:d6:4f:e4:ad:fc:60:32:27:a1:23:0c:
04:bd:bd:97:61:a9:20:cf:4b:94:d1:15:05:90:20:8e:b3:b0:
01:74:29:82:66:fa:9b:b2:0e:88:1a:6b:4a:fd:34:cc:a1:0b:
60:fa:0f:84:c8:68:9c:8e:81:59:31:e1:d3:37:19:ef:b2:a3:
48:32:2b:a9:e5:67:62:85:03:c6:a9:aa:c3:a0:00:7e:2d:a8:
b6:f2:93:25:df:e4:58:d1:ef:9f:16:97:a0:5f:e1:07:8b:76:
91:ab:12:17:df:17:81:7d:3f:3a:b5:3d:a5:e8:9f:76:df:18:
89:8f:56:8a:1e:be:09:ab:c5:2c:68:ef:7d:3e:1c:01:58:57:
6d:b5:76:fb:7b:f6:28:db:f4:8a:f5:d6:62:4a:93:e2:9e:66:
0e:92:66:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVXFtUGflhMW6dfw/Tn68eu4D40owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3
OTZCNzhCRDAeFw0yNjAzMjUwOTUwMDNaFw0yNjAzMjYxMTE0MDNaMDMxMTAvBgNV
BAMTKDUzRDU5MzgwNTM3ODRFOTk0N0FFNTI2REE2MURCMjU4QTI5NkRFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3b/48iP2lKGyQr+lU4nkyPB9
W1fIBVEYnmdrGbVfIHBQyg16H4MCZ/XwZVxz66RHKsScpZMk1jN7TXaRlDyVByR7
KsAwhB66UF4+dkHFB4ElPurdeWYS7tCKAQd59/2mnmPkP48j/2oE5ZBvhmo63Ycc
rAVGJljzz/YgXJaj+qhrdCGyrmcnmxm70xGP4cOj18BefbRgYXqQArR8YYKfYxqK
MKA6cEnzxPuwT5lK5XFcqscbUZZwKMqacJ4vexMBn5FVb8lHPFHgcWgezidptymN
62vXJja8H3SuwX6n0uWRHQYCDv6fumUPJs9IeWqm6WIkXCc4oO3cXUrlqKIZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU9WTgFN4TplHrlJtph2yWKKW3tcwHwYDVR0j
BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX
c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw
NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w
Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcPe55XO9CgYyutiuviYVbvUvF67KDWFjKTvxAb5dhUXbIc5fi2L7539e6XIS
TjXY9l25nytbxFLWUMyOgjc4vEc1tPlKm10XT5ISGsGOh9GNR7bY7SkZPiGvtNWd
l07joNZP5K38YDInoSMMBL29l2GpIM9LlNEVBZAgjrOwAXQpgmb6m7IOiBprSv00
zKELYPoPhMhonI6BWTHh0zcZ77KjSDIrqeVnYoUDxqmqw6AAfi2otvKTJd/kWNHv
nxaXoF/hB4t2kasSF98XgX0/OrU9peifdt8YiY9Wih6+CavFLGjvfT4cAVhXbbV2
+3v2KNv0ivXWYkqT4p5mDpJmcA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:50 2026 by rpki-client