
$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
File: 98980CEC2611F43F690D06E91CE7253FC1396E1D.mft (raw, json)
Hash identifier: 8WqKUNOSeQZ9/bYGomphjXEcHXY+QSrl3j3dX9sOD8U=
Subject key identifier: 37:47:53:94:73:AD:09:85:EA:29:FD:BB:87:88:6E:FF:5B:FC:DA:D3
Authority key identifier: 98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
Certificate issuer: /CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Certificate serial: 09CEC6E181CD25E154F450C82D2786477CF27F7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
Manifest number: 01FA
Signing time: Thu 26 Mar 2026 07:25:00 +0000
Manifest this update: Thu 26 Mar 2026 07:20:00 +0000
Manifest next update: Fri 27 Mar 2026 08:21:00 +0000
Files and hashes: 1: 323830343a376135383a3a2f33322d3438203d3e20323731333631.roa (hash: eUiSd/RQ2n1WRM2MegJ7b5pWGtFQ1197zYRcNxZ5zRU=)
2: 98980CEC2611F43F690D06E91CE7253FC1396E1D.crl (hash: NslEU5fYpSxFa+jCk/DHQMz4voUtmucqrwKHZRvoiq0=)
3: 3137392e302e37362e302f32322d3234203d3e20323731333631.roa (hash: 0PDUb8oC94UI9szdMwyLEFgKNPNpatzFqk9qZFmiuww=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl
rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 08:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ce:c6:e1:81:cd:25:e1:54:f4:50:c8:2d:27:86:47:7c:f2:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Validity
Not Before: Mar 26 07:20:00 2026 GMT
Not After : Mar 27 08:21:00 2026 GMT
Subject: CN=3747539473AD0985EA29FDBB87886EFF5BFCDAD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:8e:31:18:43:ad:9b:32:92:75:71:0d:fc:
f6:02:ad:66:9f:10:ec:c6:eb:c3:01:33:9d:77:27:
3d:ef:f6:07:17:8e:fc:c3:6e:60:e2:45:e3:66:5d:
b8:17:38:73:78:ea:b1:fb:fe:e4:2b:d6:2a:34:e2:
66:59:41:7e:99:1d:f0:90:f3:fa:c5:62:75:28:91:
eb:33:75:67:8d:91:d7:bb:3a:d2:32:e8:5a:40:44:
89:d7:07:56:57:e4:bb:c9:73:f1:45:37:e8:ce:16:
70:84:1a:da:f5:c8:ca:3a:00:de:eb:7b:c3:f0:6f:
45:c1:25:52:49:bf:b9:29:a2:c0:47:fc:47:52:f9:
e8:63:4d:ba:02:b3:13:59:b5:ec:8d:63:c3:41:5d:
65:18:7a:bd:48:54:5e:02:58:ba:1e:de:16:cd:4f:
7c:9b:8e:23:a2:1c:98:8c:67:f0:0e:e3:96:63:00:
6c:62:08:f6:ee:42:ed:0c:f0:1b:f6:b6:87:c3:91:
a5:4a:3b:dd:90:0d:f9:48:b5:76:fd:53:53:d5:e5:
1c:b5:0f:88:8f:f8:15:81:2b:91:2e:15:8c:ad:46:
bd:c8:88:a0:ba:d8:ca:76:47:10:8b:89:95:d4:8f:
9d:a2:fe:1d:05:30:3a:38:5b:96:81:a0:47:8d:99:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:53:94:73:AD:09:85:EA:29:FD:BB:87:88:6E:FF:5B:FC:DA:D3
X509v3 Authority Key Identifier:
keyid:98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:a0:8f:5c:63:3e:ec:6a:83:f8:dc:e7:1a:b8:b2:10:ee:
36:62:05:cd:55:63:41:f3:ee:f3:5e:d0:e2:9f:2d:bf:44:93:
66:a9:b4:5b:45:94:65:a3:f3:36:df:57:91:59:ed:40:42:5a:
35:a5:85:3f:8a:3b:0e:da:33:b2:48:0a:d4:50:1f:89:df:fb:
81:f7:44:01:e8:1f:ef:a7:71:bf:cc:09:6d:1c:75:31:37:85:
72:83:aa:9f:4a:74:40:6d:04:3a:ff:9f:fe:45:d4:ff:7f:3a:
7b:7e:db:02:e7:f6:02:e4:54:c9:7e:ac:44:83:cf:88:7a:73:
da:38:e6:55:11:24:36:9a:ce:79:a2:5b:90:56:84:a6:b4:d2:
94:94:9c:d7:da:e8:d9:d9:37:6c:19:f0:a9:d9:bd:b0:22:a6:
cd:ec:81:ea:5a:48:b6:83:f9:d6:37:14:cb:8f:1c:99:52:31:
92:ff:42:11:a6:5b:8b:fa:1b:52:58:d3:97:e0:a0:90:f3:f9:
8a:30:15:ce:36:4a:7d:c9:bf:c7:a5:db:a2:ea:a2:b7:d2:a5:
31:27:c9:fa:dc:f3:02:5b:5f:0b:e0:80:4a:d9:0f:f9:79:26:
ec:86:05:4e:34:19:a5:84:d4:2b:83:3a:67:6a:4d:03:68:aa:
63:50:63:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCc7G4YHNJeFU9FDILSeGR3zyf3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg5ODBDRUMyNjExRjQzRjY5MEQwNkU5MUNFNzI1M0ZD
MTM5NkUxRDAeFw0yNjAzMjYwNzIwMDBaFw0yNjAzMjcwODIxMDBaMDMxMTAvBgNV
BAMTKDM3NDc1Mzk0NzNBRDA5ODVFQTI5RkRCQjg3ODg2RUZGNUJGQ0RBRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOAY4xGEOtmzKSdXEN/PYCrWaf
EOzG68MBM513Jz3v9gcXjvzDbmDiReNmXbgXOHN46rH7/uQr1io04mZZQX6ZHfCQ
8/rFYnUokeszdWeNkde7OtIy6FpARInXB1ZX5LvJc/FFN+jOFnCEGtr1yMo6AN7r
e8Pwb0XBJVJJv7kposBH/EdS+ehjTboCsxNZteyNY8NBXWUYer1IVF4CWLoe3hbN
T3ybjiOiHJiMZ/AO45ZjAGxiCPbuQu0M8Bv2tofDkaVKO92QDflItXb9U1PV5Ry1
D4iP+BWBK5EuFYytRr3IiKC62Mp2RxCLiZXUj52i/h0FMDo4W5aBoEeNmchLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUN0dTlHOtCYXqKf27h4hu/1v82tMwHwYDVR0j
BBgwFoAUmJgM7CYR9D9pDQbpHOclP8E5bh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMC85ODk4MENFQzI2MTFGNDNGNjkwRDA2RTkxQ0U3MjUzRkMxMzk2RTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OTgwQ0VDMjYxMUY0M0Y2
OTBEMDZFOTFDRTcyNTNGQzEzOTZFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3MnYvMC85
ODk4MENFQzI2MTFGNDNGNjkwRDA2RTkxQ0U3MjUzRkMxMzk2RTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANoagj1xjPuxqg/jc5xq4shDuNmIFzVVjQfPu817Q4p8tv0STZqm0W0WUZaPz
Nt9XkVntQEJaNaWFP4o7DtozskgK1FAfid/7gfdEAegf76dxv8wJbRx1MTeFcoOq
n0p0QG0EOv+f/kXU/386e37bAuf2AuRUyX6sRIPPiHpz2jjmVREkNprOeaJbkFaE
prTSlJSc19ro2dk3bBnwqdm9sCKmzeyB6lpItoP51jcUy48cmVIxkv9CEaZbi/ob
UljTl+CgkPP5ijAVzjZKfcm/x6Xbouqit9KlMSfJ+tzzAltfC+CAStkP+Xkm7IYF
TjQZpYTUK4M6Z2pNA2iqY1Bjiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:45 2026 by rpki-client