
$ rpki-client -vvvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft
File: DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft (raw, json)
Hash identifier: gCe8qEmjeKV3oN4mSW8a+Y1ZDxPeKzSoJR4ry8uHJsc=
Subject key identifier: B5:23:28:29:13:25:ED:7C:F0:DD:E1:7F:77:4C:69:29:24:69:FD:0A
Authority key identifier: DE:33:24:6D:72:DC:BF:EE:14:D1:C5:8A:16:F3:FB:24:25:22:69:23
Certificate issuer: /CN=DE33246D72DCBFEE14D1C58A16F3FB2425226923
Certificate serial: 321FC3E84CAD8BEEFDFBFEF27DD1D2AD91678773
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE33246D72DCBFEE14D1C58A16F3FB2425226923.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft
Manifest number: 25
Signing time: Sun 11 Oct 2026 06:58:15 +0000
Manifest this update: Sun 11 Oct 2026 06:53:15 +0000
Manifest next update: Mon 12 Oct 2026 10:27:15 +0000
Files and hashes: 1: 34352e3136352e302e302f32322d3234203d3e20323638363635.roa (hash: cEY/Tc5PaF9cEKRxUf8BfpFuy2iIFdHb0pPA0gjACh8=)
2: 323830343a353462303a3a2f33322d3438203d3e20323638363635.roa (hash: wTSCgqbZV2qQQmjeq3ejftOzNWAq+C8kE9qQZNqyRWs=)
3: DE33246D72DCBFEE14D1C58A16F3FB2425226923.crl (hash: 8ImWTlE/A0pME8ZsuJpzu/PrRX1aQ5HEBnutyd2Hyp8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.crl
rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE33246D72DCBFEE14D1C58A16F3FB2425226923.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 10:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1f:c3:e8:4c:ad:8b:ee:fd:fb:fe:f2:7d:d1:d2:ad:91:67:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE33246D72DCBFEE14D1C58A16F3FB2425226923
Validity
Not Before: Oct 11 06:53:15 2026 GMT
Not After : Oct 12 10:27:15 2026 GMT
Subject: CN=B52328291325ED7CF0DDE17F774C69292469FD0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:99:a9:9b:46:25:3c:69:b2:38:cd:27:e1:
c9:7f:d0:8c:8c:50:27:7d:f4:99:10:83:d4:02:8f:
b5:e7:b7:ce:45:ca:4a:ca:72:9e:7b:5e:cc:ce:53:
e3:b7:29:4f:c9:4f:c4:71:e0:98:8d:16:76:11:0a:
c5:3e:62:c2:81:fc:c9:7b:4b:4e:d0:5f:68:06:5d:
af:1d:73:3c:b3:fe:a9:9b:11:4d:98:f1:3d:36:2d:
e1:03:91:7c:f3:d9:b9:8b:e1:4a:94:ed:a6:81:c5:
26:56:39:68:fb:b7:7a:f6:78:54:29:ef:db:04:b3:
91:14:d1:36:33:15:43:8f:97:7e:3f:73:90:c8:8d:
fa:21:46:4c:ea:c3:a8:04:e0:ea:01:5b:dc:e4:63:
8a:bd:de:87:fc:18:4b:44:7a:c6:a1:6c:d0:c4:f1:
9a:4c:c6:52:77:0e:76:bb:e2:13:0c:81:e9:16:ef:
58:26:02:93:41:9c:09:9a:26:8e:5c:6f:8c:2b:28:
01:10:09:31:da:70:3d:8f:35:9e:2a:47:f9:18:24:
9f:fe:9a:88:dd:fa:96:cb:89:12:3a:e0:8e:a5:e1:
2c:5f:2d:3d:50:2e:78:f8:c5:65:aa:38:f9:90:79:
3e:45:af:4f:d8:56:36:b1:6b:80:fe:4e:9a:c8:bd:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:23:28:29:13:25:ED:7C:F0:DD:E1:7F:77:4C:69:29:24:69:FD:0A
X509v3 Authority Key Identifier:
keyid:DE:33:24:6D:72:DC:BF:EE:14:D1:C5:8A:16:F3:FB:24:25:22:69:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE33246D72DCBFEE14D1C58A16F3FB2425226923.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/DE33246D72DCBFEE14D1C58A16F3FB2425226923.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:55:36:e0:0e:8a:7a:a0:15:21:e5:8b:5e:f9:43:77:5e:
ee:a4:07:93:fb:8a:c4:82:aa:be:91:4d:f0:72:73:10:21:80:
84:76:9e:7d:4d:31:7a:a6:d8:e9:75:b4:a1:39:a5:1f:a7:19:
88:1b:17:a3:db:f0:c6:de:87:69:c4:c8:1f:b2:6c:64:ab:5b:
6e:d2:f3:77:ae:2f:c2:ed:4c:f3:40:91:17:d6:47:07:47:d3:
25:4d:ba:a2:13:9c:6b:97:fe:62:04:c9:e0:53:21:01:0b:be:
5a:39:b1:8f:13:2e:58:ac:0e:ff:40:45:de:17:2a:31:7b:2a:
bb:67:37:d2:93:d1:ac:2b:5d:23:44:23:a8:45:b9:73:a6:88:
dd:1c:34:18:97:1b:5b:13:bb:a7:1d:0a:a8:26:4b:a3:4c:de:
df:10:69:5f:e7:e2:5f:14:5e:93:84:8c:80:50:8f:b4:c6:ee:
cb:69:84:5a:f0:82:00:23:e8:b2:04:d9:40:c0:f4:0a:e6:0a:
ef:49:aa:bc:c8:b8:19:ae:7e:3d:8e:92:25:86:5c:2c:7a:85:
48:ad:c5:71:31:0c:c1:98:c7:98:6b:0c:4f:25:fd:bf:64:0f:
a2:b2:6d:16:b1:e9:3d:78:c7:44:cc:d7:61:c9:27:a8:76:4f:
f3:c3:3e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:49:43 2026 by rpki-client