
$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
File: CA46B42FB0BBF428F33303D970954360F960AD2B.mft (raw, json)
Hash identifier: hg1dXg7jbP5EdJBrSiu97MduGxSn3+4iSDXf1dXTpJo=
Subject key identifier: 22:88:44:BF:8E:1C:6F:E6:2B:AF:D9:20:56:6D:00:F7:11:A1:DE:62
Authority key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
Certificate issuer: /CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Certificate serial: 169FD7CB4702AC8475D44FF616B5357126ACDADE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
Manifest number: D9
Signing time: Thu 26 Mar 2026 12:02:29 +0000
Manifest this update: Thu 26 Mar 2026 11:57:29 +0000
Manifest next update: Fri 27 Mar 2026 13:20:29 +0000
Files and hashes: 1: CA46B42FB0BBF428F33303D970954360F960AD2B.crl (hash: HeJnp98eQ3lDKxI/bKpYz//B8IzwsQdnL4H+IyTLfAg=)
2: 34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa (hash: 6NV71V0AYxrnpGbnAP43kbdLvtfm5e/BEdmGARmJlT0=)
3: 323830343a353936633a3a2f33322d313238203d3e20323638373031.roa (hash: b7CXIsbZNr28fAIIDRDKKYTvdSl4ceaJ4DVvhRxvTsI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 13:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9f:d7:cb:47:02:ac:84:75:d4:4f:f6:16:b5:35:71:26:ac:da:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Validity
Not Before: Mar 26 11:57:29 2026 GMT
Not After : Mar 27 13:20:29 2026 GMT
Subject: CN=228844BF8E1C6FE62BAFD920566D00F711A1DE62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:96:95:87:b1:9b:dc:a3:7e:e0:02:35:c4:
7b:5d:30:00:a6:5b:9f:04:33:8a:3c:26:63:b1:6a:
01:5f:de:4f:aa:a1:07:2f:ae:57:af:be:91:3a:56:
c9:e5:9d:90:b5:ec:92:3d:2f:a1:68:76:bd:77:15:
a8:7c:6c:60:4c:b7:f5:81:44:ec:d7:e6:c7:d9:d0:
b0:c4:b4:d4:53:75:8f:15:76:50:fa:c3:5e:98:42:
a5:54:67:01:dc:58:69:02:db:49:72:a7:df:e3:0d:
5d:aa:72:83:60:cf:47:6e:24:49:64:ee:42:e3:e8:
34:91:5d:7f:8a:60:28:7d:29:ec:e4:87:36:c6:b9:
d1:c0:b7:c3:17:f0:88:f6:76:7a:1b:0c:8d:38:52:
a2:ba:ed:bd:43:1d:68:56:28:ae:12:1e:c0:82:16:
7e:c2:00:b6:d9:84:d2:be:72:26:42:fc:45:77:a4:
42:e5:d5:c8:4f:cc:3f:21:9b:c8:5f:c6:56:04:3b:
d2:64:9c:7a:d0:7a:37:2e:14:47:01:3a:84:77:e5:
df:0b:5e:50:2b:2f:54:e6:5e:e9:bd:2d:6b:48:4c:
39:40:a7:8a:21:ba:65:2f:96:c5:00:47:48:8b:21:
ce:a9:8b:cf:99:0f:ed:ce:43:ec:78:15:e4:3f:dd:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:44:BF:8E:1C:6F:E6:2B:AF:D9:20:56:6D:00:F7:11:A1:DE:62
X509v3 Authority Key Identifier:
keyid:CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:55:67:0b:dd:0b:8b:6a:0d:6d:7a:27:9c:66:76:a6:2a:
c6:4f:33:0e:2f:6a:8c:ab:76:0f:01:b7:fe:4e:7b:f8:17:d1:
89:a7:ba:cd:4e:3f:07:1c:cc:10:a7:a6:16:4e:6b:3e:37:3f:
ce:bf:4b:25:5f:f6:83:7d:7e:37:51:7f:17:ba:02:77:fe:74:
74:76:eb:92:bb:da:95:fc:27:a8:01:17:bd:b0:c1:2d:24:ca:
67:94:ff:e1:af:2a:6d:e5:55:89:8c:a3:0d:f2:87:58:a9:ba:
fe:69:75:84:16:92:63:e3:9b:00:87:c7:9d:f5:fe:6b:da:98:
03:9d:97:07:77:61:e4:ac:67:73:da:84:2f:66:82:c3:04:dc:
4b:3a:bb:ce:36:34:96:a4:33:18:8e:5e:d3:11:f8:d1:a5:01:
e0:b1:ee:ed:01:3b:dc:2d:3e:f7:35:8b:40:57:e5:9a:6a:74:
61:3b:8c:f7:6d:26:1f:ec:d0:34:da:d3:d5:ee:8f:43:8b:c1:
25:1f:8e:de:bf:69:ed:ee:0e:b3:47:94:fe:3a:69:df:4f:16:
b9:95:22:3e:2c:89:d2:0f:b4:4f:3c:f8:63:fd:75:8d:0f:06:
cd:0d:53:d0:07:f4:aa:3a:1d:ef:bb:65:5e:0f:06:2b:ee:b8:
03:07:ab:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFp/Xy0cCrIR11E/2FrU1cSas2t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E0NkI0MkZCMEJCRjQyOEYzMzMwM0Q5NzA5NTQzNjBG
OTYwQUQyQjAeFw0yNjAzMjYxMTU3MjlaFw0yNjAzMjcxMzIwMjlaMDMxMTAvBgNV
BAMTKDIyODg0NEJGOEUxQzZGRTYyQkFGRDkyMDU2NkQwMEY3MTFBMURFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0apaVh7Gb3KN+4AI1xHtdMACm
W58EM4o8JmOxagFf3k+qoQcvrlevvpE6VsnlnZC17JI9L6Fodr13Fah8bGBMt/WB
ROzX5sfZ0LDEtNRTdY8VdlD6w16YQqVUZwHcWGkC20lyp9/jDV2qcoNgz0duJElk
7kLj6DSRXX+KYCh9KezkhzbGudHAt8MX8Ij2dnobDI04UqK67b1DHWhWKK4SHsCC
Fn7CALbZhNK+ciZC/EV3pELl1chPzD8hm8hfxlYEO9JknHrQejcuFEcBOoR35d8L
XlArL1TmXum9LWtITDlAp4ohumUvlsUAR0iLIc6pi8+ZD+3OQ+x4FeQ/3bVHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIohEv44cb+Yrr9kgVm0A9xGh3mIwHwYDVR0j
BBgwFoAUyka0L7C79CjzMwPZcJVDYPlgrSswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHB2YTR0UXpIMzZiTFFtYXVzYmd2dk1vVm5rS1FHc2R0QlB4dVBnVWFk
R0YvMC9DQTQ2QjQyRkIwQkJGNDI4RjMzMzAzRDk3MDk1NDM2MEY5NjBBRDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNDZCNDJGQjBCQkY0MjhG
MzMzMDNEOTcwOTU0MzYwRjk2MEFEMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHB2YTR0UXpIMzZiTFFtYXVzYmd2dk1vVm5rS1FHc2R0QlB4dVBnVWFkR0YvMC9D
QTQ2QjQyRkIwQkJGNDI4RjMzMzAzRDk3MDk1NDM2MEY5NjBBRDJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgk5VZwvdC4tqDW16J5xmdqYqxk8zDi9qjKt2DwG3/k57+BfRiae6zU4/BxzM
EKemFk5rPjc/zr9LJV/2g31+N1F/F7oCd/50dHbrkrvalfwnqAEXvbDBLSTKZ5T/
4a8qbeVViYyjDfKHWKm6/ml1hBaSY+ObAIfHnfX+a9qYA52XB3dh5Kxnc9qEL2aC
wwTcSzq7zjY0lqQzGI5e0xH40aUB4LHu7QE73C0+9zWLQFflmmp0YTuM920mH+zQ
NNrT1e6PQ4vBJR+O3r9p7e4Os0eU/jpp308WuZUiPiyJ0g+0Tzz4Y/11jQ8GzQ1T
0Af0qjod77tlXg8GK+64Awerzg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:38 2026 by rpki-client