
$ rpki-client -vvvf rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.mft
File: 452B5E1098D9EA6B24A0A770468191397C53ADBC.mft (raw, json)
Hash identifier: 9KCxziIX4GK/m2Fq2/gsmB+ILLnXtVfWLjJsaazL02o=
Subject key identifier: 11:7B:7B:70:2B:E2:C3:80:8C:82:18:53:7C:F6:94:72:B5:82:C0:8B
Authority key identifier: 45:2B:5E:10:98:D9:EA:6B:24:A0:A7:70:46:81:91:39:7C:53:AD:BC
Certificate issuer: /CN=452B5E1098D9EA6B24A0A770468191397C53ADBC
Certificate serial: 49055585351828B53BADE05A28057F1DC97C90BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/452B5E1098D9EA6B24A0A770468191397C53ADBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.mft
Manifest number: 42
Signing time: Tue 27 Oct 2026 19:42:08 +0000
Manifest this update: Tue 27 Oct 2026 19:37:08 +0000
Manifest next update: Wed 28 Oct 2026 21:51:08 +0000
Files and hashes: 1: 323830343a336537383a3a2f33322d3332203d3e20323636353938.roa (hash: QmQq6195Eef0wT2us28/9TIwymu14SBdFplTKLRPokk=)
2: 452B5E1098D9EA6B24A0A770468191397C53ADBC.crl (hash: A5VzbZrspyhjPXIjhmJooEv+cZPp+RRWbPwW0CVHkys=)
3: 34352e372e3232302e302f32322d3234203d3e20323636353938.roa (hash: cdsT3culDQ369WWOGL5RVBmfhCNdNmUgKtLUvctU9ac=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.crl
rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/452B5E1098D9EA6B24A0A770468191397C53ADBC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 21:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:05:55:85:35:18:28:b5:3b:ad:e0:5a:28:05:7f:1d:c9:7c:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452B5E1098D9EA6B24A0A770468191397C53ADBC
Validity
Not Before: Oct 27 19:37:08 2026 GMT
Not After : Oct 28 21:51:08 2026 GMT
Subject: CN=117B7B702BE2C3808C8218537CF69472B582C08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:ff:0a:87:78:cb:3a:c5:6e:fe:58:f2:87:
11:90:0e:40:b3:d3:05:18:6d:c9:c8:e5:63:02:b9:
cc:5f:d4:b3:8c:e2:fa:ec:54:2d:a0:e7:ba:a5:7f:
8f:46:92:e1:90:0c:ad:b7:53:05:e1:0b:37:30:7d:
28:8f:e1:17:04:a7:6e:60:62:cb:7f:92:6a:d1:df:
f0:40:4c:2d:6c:50:65:d8:a6:9d:79:b4:0b:dd:42:
3b:0c:5c:c4:77:9c:9d:8b:a3:8f:e3:96:25:e1:32:
96:bb:00:05:8c:86:b4:0a:98:67:7c:ef:8f:e5:70:
92:f7:2b:62:ad:b7:c4:61:43:ec:57:38:4a:71:fe:
c5:81:6f:7c:0a:74:ce:6c:cf:fc:3f:0c:9f:55:c6:
d4:06:0c:42:9a:44:ba:dc:43:a7:81:4f:8f:3b:09:
2b:3f:18:dd:e1:c6:e9:b1:98:70:be:47:82:8e:6b:
27:b8:14:37:12:36:10:e6:0b:07:50:3e:9f:51:83:
e2:de:1e:aa:63:35:6b:5a:37:f9:2a:8f:3e:7a:80:
6e:fa:89:1d:94:8b:1e:72:9b:52:23:00:3a:b0:e5:
41:8f:fe:be:5f:1b:64:c2:80:4d:b5:4f:73:3b:85:
d0:5a:10:e0:11:df:fe:b2:e0:ca:ae:e7:7f:49:74:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7B:7B:70:2B:E2:C3:80:8C:82:18:53:7C:F6:94:72:B5:82:C0:8B
X509v3 Authority Key Identifier:
keyid:45:2B:5E:10:98:D9:EA:6B:24:A0:A7:70:46:81:91:39:7C:53:AD:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/452B5E1098D9EA6B24A0A770468191397C53ADBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:76:b5:a9:33:9c:9e:74:d6:3c:d9:3f:41:6b:05:b8:9e:c6:
09:e2:b1:36:49:74:62:1a:3a:2d:ee:2d:e5:e7:0c:c9:0d:8f:
d5:d3:d0:b7:94:ab:52:2a:a2:41:77:d5:02:9c:a1:06:be:9c:
57:99:fd:23:a4:78:90:e0:c2:76:27:db:31:21:b9:82:b0:b9:
d6:3a:09:47:37:5f:2e:7e:0a:b5:bf:c8:ec:4c:ec:92:ed:fb:
36:48:35:72:b1:b4:f2:b8:39:dc:dc:c8:a8:8d:f5:a1:96:e3:
91:89:dd:c2:c7:7f:3f:e1:cf:3f:b9:1f:c1:cf:2c:b7:ff:dd:
71:fd:62:5f:31:57:1e:56:1c:f5:2c:eb:13:2e:b9:f7:79:df:
cb:94:ee:10:0e:cc:01:08:1d:6b:fb:1d:6e:77:08:33:ac:c8:
81:5a:15:72:4a:a0:3a:c3:bc:62:75:f4:e3:1c:19:a4:71:cf:
e5:e0:61:7b:be:0a:92:96:e1:e2:51:0c:7c:47:a4:4d:3c:b6:
3b:3f:5a:4d:22:04:cc:71:69:af:18:4a:be:57:5a:17:72:a4:
be:68:b1:97:c1:b6:64:e2:3e:54:f2:f2:5a:00:bb:f3:ba:c0:
69:42:74:a8:dd:61:ac:b8:9a:4b:6a:2d:43:94:e4:33:35:5f:
32:8b:5b:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSQVVhTUYKLU7reBaKAV/Hcl8kL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUyQjVFMTA5OEQ5RUE2QjI0QTBBNzcwNDY4MTkxMzk3
QzUzQURCQzAeFw0yNjEwMjcxOTM3MDhaFw0yNjEwMjgyMTUxMDhaMDMxMTAvBgNV
BAMTKDExN0I3QjcwMkJFMkMzODA4QzgyMTg1MzdDRjY5NDcyQjU4MkMwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDv8Kh3jLOsVu/ljyhxGQDkCz
0wUYbcnI5WMCucxf1LOM4vrsVC2g57qlf49GkuGQDK23UwXhCzcwfSiP4RcEp25g
Yst/kmrR3/BATC1sUGXYpp15tAvdQjsMXMR3nJ2Lo4/jliXhMpa7AAWMhrQKmGd8
74/lcJL3K2Ktt8RhQ+xXOEpx/sWBb3wKdM5sz/w/DJ9VxtQGDEKaRLrcQ6eBT487
CSs/GN3hxumxmHC+R4KOaye4FDcSNhDmCwdQPp9Rg+LeHqpjNWtaN/kqjz56gG76
iR2Uix5ym1IjADqw5UGP/r5fG2TCgE21T3M7hdBaEOAR3/6y4Mqu539JdMYjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEXt7cCviw4CMghhTfPaUcrWCwIswHwYDVR0j
BBgwFoAURSteEJjZ6mskoKdwRoGROXxTrbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnZTRUFpM1VxTmFqU0hHaU5heW1GVXhWY001MWtGWnpYYTFkVmp5cUFI
emUvMC80NTJCNUUxMDk4RDlFQTZCMjRBMEE3NzA0NjgxOTEzOTdDNTNBREJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MkI1RTEwOThEOUVBNkIy
NEEwQTc3MDQ2ODE5MTM5N0M1M0FEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnZTRUFpM1VxTmFqU0hHaU5heW1GVXhWY001MWtGWnpYYTFkVmp5cUFIemUvMC80
NTJCNUUxMDk4RDlFQTZCMjRBMEE3NzA0NjgxOTEzOTdDNTNBREJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX3a1qTOcnnTWPNk/QWsFuJ7GCeKxNkl0Yho6Le4t5ecMyQ2P1dPQt5SrUiqi
QXfVApyhBr6cV5n9I6R4kODCdifbMSG5grC51joJRzdfLn4Ktb/I7Ezsku37Nkg1
crG08rg53NzIqI31oZbjkYndwsd/P+HPP7kfwc8st//dcf1iXzFXHlYc9SzrEy65
93nfy5TuEA7MAQgda/sdbncIM6zIgVoVckqgOsO8YnX04xwZpHHP5eBhe74Kkpbh
4lEMfEekTTy2Oz9aTSIEzHFprxhKvldaF3Kkvmixl8G2ZOI+VPLyWgC787rAaUJ0
qN1hrLiaS2otQ5TkMzVfMotb8w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:20:48 2026 by rpki-client