
$ rpki-client -vvf rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft
File: 9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft (raw, json)
Hash identifier: zoesgEFlcS2XTJcKFcAwctF8P/6YM/UZwbtzk4GC+5Y=
Subject key identifier: 32:81:7F:0D:BE:E1:6F:96:C6:EE:28:1C:BF:7C:23:F6:3E:3D:DF:0D
Authority key identifier: 9C:AA:8B:C4:75:F6:A2:B9:40:5F:6E:94:4A:BE:6A:A1:3A:AB:39:FD
Certificate issuer: /CN=9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD
Certificate serial: 2F5FDF2EEAEC66AFD6919B326449B6CF24CA1CCC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft
Manifest number: 29
Signing time: Wed 13 May 2026 02:16:52 +0000
Manifest this update: Wed 13 May 2026 02:11:52 +0000
Manifest next update: Thu 14 May 2026 04:15:52 +0000
Files and hashes: 1: 323830343a363937343a3a2f33322d3334203d3e20323730323731.roa (hash: 2qRnafsGX8rSpIK6/MykydIRObuv3/rG8nw41tggKaw=)
2: 9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.crl (hash: 4pDW8Ic32ZC4x1OMOsBw5E4obGzItVdYR++fIyIcE/I=)
3: 3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa (hash: ftqyFuQ/xW3kV3ZKdDNnsL90fUaBtZSdB0AxYr6n/jU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.crl
rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 04:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5f:df:2e:ea:ec:66:af:d6:91:9b:32:64:49:b6:cf:24:ca:1c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD
Validity
Not Before: May 13 02:11:52 2026 GMT
Not After : May 14 04:15:52 2026 GMT
Subject: CN=32817F0DBEE16F96C6EE281CBF7C23F63E3DDF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:79:91:76:48:ac:ea:8b:a5:ea:f2:d8:b9:
4e:5e:ba:79:f2:06:9b:d5:69:66:83:2c:93:c3:15:
29:74:14:86:81:de:aa:0f:0e:47:a7:4e:2b:c4:b4:
86:d2:72:f0:eb:56:97:12:97:d3:58:85:b5:5a:17:
6a:0d:3d:da:45:6c:0c:1b:60:1f:81:ca:a8:38:ac:
54:7a:1b:3f:ea:8e:0f:48:99:02:ae:55:01:7a:27:
9e:30:86:02:07:69:05:7d:a5:c8:27:75:a2:14:26:
a9:9f:62:8c:33:1c:c4:41:77:e4:09:4d:f5:92:d8:
fb:dd:ea:f5:60:f4:7a:6b:fd:71:7b:a9:5f:f0:43:
74:6f:e6:e7:5b:29:40:f7:03:fe:ee:0a:ee:7c:12:
36:ae:29:9e:5a:5f:89:a6:6c:13:7a:3f:af:c7:98:
ca:7d:d3:77:06:3d:8e:14:18:49:8c:29:1f:31:37:
30:95:aa:8d:97:0e:37:ff:c4:8e:86:23:62:41:29:
a4:8c:98:24:e1:f3:dc:e4:1e:07:62:48:e3:ff:bf:
86:88:9d:b5:51:97:ce:9b:ff:ed:4b:df:68:28:57:
4f:1d:03:bb:a9:77:42:39:ab:d5:98:6b:25:63:30:
dd:26:08:de:df:ed:d5:74:00:03:79:7f:3b:0b:9a:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:7F:0D:BE:E1:6F:96:C6:EE:28:1C:BF:7C:23:F6:3E:3D:DF:0D
X509v3 Authority Key Identifier:
keyid:9C:AA:8B:C4:75:F6:A2:B9:40:5F:6E:94:4A:BE:6A:A1:3A:AB:39:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:5b:af:bf:90:6b:34:b4:ca:0f:fe:fe:71:b5:60:12:52:
f7:a7:ca:e5:56:9b:f1:b6:62:f3:9f:a7:82:22:60:ad:fb:7c:
bc:3a:ac:60:9c:f7:ec:24:e0:7d:34:12:bc:98:c5:5a:c7:50:
69:59:ca:99:86:1a:52:8e:7f:e3:74:b6:65:35:8a:04:c9:fc:
67:85:48:c6:9c:1e:fc:b1:35:eb:ef:6d:c3:ed:b7:93:68:fb:
33:e5:56:e2:a8:b4:24:04:8a:c5:c7:40:72:f6:b3:0d:02:b6:
a2:81:9d:fc:90:e9:ca:0c:92:0c:de:4a:19:5b:88:eb:3e:d1:
5d:7e:3e:27:8f:73:92:1d:ca:b4:9f:36:83:3a:67:fd:48:b4:
07:c8:ce:70:d3:fc:25:bb:86:e7:89:48:d3:05:0f:eb:b2:6d:
fe:05:7a:e6:99:7d:41:fd:7b:67:45:b6:ad:ce:5b:fb:bd:6e:
8b:92:cc:a4:b0:d4:e1:3c:38:94:44:7c:73:bb:02:6e:07:ac:
01:ac:09:cc:10:61:72:15:6e:00:40:c7:51:71:65:ed:97:61:
26:14:14:df:15:63:f5:b4:3d:0c:0a:57:71:68:fd:1c:37:d7:
92:51:14:6a:82:b4:c0:fd:cd:25:87:59:8d:ff:96:50:8d:0c:
b3:69:98:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL1/fLursZq/WkZsyZEm2zyTKHMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNBQThCQzQ3NUY2QTJCOTQwNUY2RTk0NEFCRTZBQTEz
QUFCMzlGRDAeFw0yNjA1MTMwMjExNTJaFw0yNjA1MTQwNDE1NTJaMDMxMTAvBgNV
BAMTKDMyODE3RjBEQkVFMTZGOTZDNkVFMjgxQ0JGN0MyM0Y2M0UzRERGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcHmRdkis6oul6vLYuU5eunny
BpvVaWaDLJPDFSl0FIaB3qoPDkenTivEtIbScvDrVpcSl9NYhbVaF2oNPdpFbAwb
YB+Byqg4rFR6Gz/qjg9ImQKuVQF6J54whgIHaQV9pcgndaIUJqmfYowzHMRBd+QJ
TfWS2Pvd6vVg9Hpr/XF7qV/wQ3Rv5udbKUD3A/7uCu58EjauKZ5aX4mmbBN6P6/H
mMp903cGPY4UGEmMKR8xNzCVqo2XDjf/xI6GI2JBKaSMmCTh89zkHgdiSOP/v4aI
nbVRl86b/+1L32goV08dA7upd0I5q9WYayVjMN0mCN7f7dV0AAN5fzsLmgLVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMoF/Db7hb5bG7igcv3wj9j493w0wHwYDVR0j
BBgwFoAUnKqLxHX2orlAX26USr5qoTqrOf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmkzcE5ka1FyUFlINGNUNFZwbjQ2WXZwYXo0dHNiaGRRNm96cnVBRk5R
eHEvMC85Q0FBOEJDNDc1RjZBMkI5NDA1RjZFOTQ0QUJFNkFBMTNBQUIzOUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQUE4QkM0NzVGNkEyQjk0
MDVGNkU5NDRBQkU2QUExM0FBQjM5RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmkzcE5ka1FyUFlINGNUNFZwbjQ2WXZwYXo0dHNiaGRRNm96cnVBRk5ReHEvMC85
Q0FBOEJDNDc1RjZBMkI5NDA1RjZFOTQ0QUJFNkFBMTNBQUIzOUZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEmRbr7+QazS0yg/+/nG1YBJS96fK5Vab8bZi85+ngiJgrft8vDqsYJz37CTg
fTQSvJjFWsdQaVnKmYYaUo5/43S2ZTWKBMn8Z4VIxpwe/LE16+9tw+23k2j7M+VW
4qi0JASKxcdAcvazDQK2ooGd/JDpygySDN5KGVuI6z7RXX4+J49zkh3KtJ82gzpn
/Ui0B8jOcNP8JbuG54lI0wUP67Jt/gV65pl9Qf17Z0W2rc5b+71ui5LMpLDU4Tw4
lER8c7sCbgesAawJzBBhchVuAEDHUXFl7ZdhJhQU3xVj9bQ9DApXcWj9HDfXklEU
aoK0wP3NJYdZjf+WUI0Ms2mYiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 19:01:51 2026 by rpki-client