
$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json)
Hash identifier: a86SzgaTWOxbsLR9wluN83aV5K28eCMz3+dii2eue+Q=
Subject key identifier: 15:FD:49:60:DC:16:4A:F4:E4:BC:A9:D7:5E:29:22:1A:5C:F0:E9:7E
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial: 29DD05D5A02C3EC314F08998860ED712E64970DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
Manifest number: 03BF
Signing time: Thu 26 Mar 2026 05:53:07 +0000
Manifest this update: Thu 26 Mar 2026 05:48:07 +0000
Manifest next update: Fri 27 Mar 2026 09:44:07 +0000
Files and hashes: 1: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: JzxUpWi/uhYvHUKB4rtnq+PaovYr48hkwnR6suPS/CQ=)
2: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: PYfMglksFxC5v+xgeAyjBUbMpusTFmLcGTEjqubwJ10=)
3: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: c7GGQKi6ec2DB29yrMDCE13X+Wm8vYKolg76A+4gtHA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 09:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:dd:05:d5:a0:2c:3e:c3:14:f0:89:98:86:0e:d7:12:e6:49:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Validity
Not Before: Mar 26 05:48:07 2026 GMT
Not After : Mar 27 09:44:07 2026 GMT
Subject: CN=15FD4960DC164AF4E4BCA9D75E29221A5CF0E97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:30:fe:5e:84:ce:93:bb:aa:53:37:86:94:
72:e5:6e:24:09:79:a4:4e:ab:6f:bc:8f:7b:80:41:
08:56:d9:87:c1:bd:39:67:b7:09:bf:a2:f7:cf:c4:
28:ae:b9:1c:ee:53:04:66:8a:97:c2:19:34:b8:91:
99:f1:7d:aa:62:f8:8c:8f:68:7f:09:bc:c6:cb:8b:
75:1f:21:7d:ac:07:20:27:38:30:32:94:f8:2e:03:
f5:d3:04:db:8d:99:76:96:1e:21:25:25:0a:71:4e:
24:1d:da:86:3b:f3:77:24:5a:94:21:b0:37:47:be:
46:2f:7a:d5:74:30:74:53:3e:db:8f:eb:cd:2e:70:
df:b1:18:a7:b6:3b:fc:cd:1c:d1:b7:3c:80:24:12:
2c:6b:66:08:56:c2:3b:d2:39:2a:05:c4:01:94:a6:
3d:3a:5d:75:56:97:fc:56:7b:c5:55:55:eb:b3:29:
4d:b8:4b:8e:e6:db:2e:58:f4:73:1d:67:f3:12:0b:
8c:a6:ee:c4:59:70:0a:45:07:57:a5:fd:e7:97:4b:
3e:c7:d1:51:06:5c:b8:33:28:34:1d:44:d2:80:fe:
26:96:2b:98:fc:a9:09:95:6c:d6:22:5b:19:07:7c:
72:43:b3:1c:20:d2:f7:5e:8a:43:44:16:3b:74:bf:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:49:60:DC:16:4A:F4:E4:BC:A9:D7:5E:29:22:1A:5C:F0:E9:7E
X509v3 Authority Key Identifier:
keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:65:1f:c2:aa:51:ae:63:71:96:06:72:04:3b:67:54:48:
03:04:8c:a4:47:e7:c5:74:37:99:8d:76:0a:b1:4a:b5:b6:85:
e6:c0:b7:10:cd:34:6e:05:63:24:07:48:7c:f4:41:87:a8:51:
ab:9b:11:09:58:40:c8:65:94:61:63:bc:66:c6:a7:7f:94:b8:
2f:34:b9:5b:39:30:19:38:b9:2d:80:34:ec:1a:cb:25:31:df:
e9:e7:f1:c3:d4:75:98:e1:a4:2a:e1:aa:39:2b:c3:b0:52:77:
1c:fd:d8:00:b5:56:e5:65:ed:54:0c:35:c0:d5:60:16:82:62:
c7:39:12:68:4b:ca:af:80:12:97:5e:f1:1f:5e:46:11:26:a4:
d1:e1:c7:8f:ec:10:06:ab:d5:45:a8:69:72:27:a7:7c:06:19:
3d:92:db:94:da:5d:f8:2d:e6:e0:f1:7a:0e:4b:cd:da:0d:fb:
fb:26:d6:5e:83:98:2c:3b:9b:ea:ff:2e:23:88:16:6d:26:7d:
79:ae:80:1a:5a:9b:95:26:c3:77:81:d9:5b:f5:f7:e6:5e:07:
7e:9a:e1:25:36:53:35:c3:4e:bd:09:32:b1:26:f4:1a:00:bb:
45:3b:de:57:3d:f1:94:bd:90:a8:4d:8d:30:9b:af:b1:74:46:
77:6c:83:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKd0F1aAsPsMU8ImYhg7XEuZJcN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1
QjBGNTlEMzAeFw0yNjAzMjYwNTQ4MDdaFw0yNjAzMjcwOTQ0MDdaMDMxMTAvBgNV
BAMTKDE1RkQ0OTYwREMxNjRBRjRFNEJDQTlENzVFMjkyMjFBNUNGMEU5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIjD+XoTOk7uqUzeGlHLlbiQJ
eaROq2+8j3uAQQhW2YfBvTlntwm/ovfPxCiuuRzuUwRmipfCGTS4kZnxfapi+IyP
aH8JvMbLi3UfIX2sByAnODAylPguA/XTBNuNmXaWHiElJQpxTiQd2oY783ckWpQh
sDdHvkYvetV0MHRTPtuP680ucN+xGKe2O/zNHNG3PIAkEixrZghWwjvSOSoFxAGU
pj06XXVWl/xWe8VVVeuzKU24S47m2y5Y9HMdZ/MSC4ym7sRZcApFB1el/eeXSz7H
0VEGXLgzKDQdRNKA/iaWK5j8qQmVbNYiWxkHfHJDsxwg0vdeikNEFjt0vzNTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFf1JYNwWSvTkvKnXXikiGlzw6X4wHwYDVR0j
BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na
dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy
ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E
RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT/llH8KqUa5jcZYGcgQ7Z1RIAwSMpEfnxXQ3mY12CrFKtbaF5sC3EM00bgVj
JAdIfPRBh6hRq5sRCVhAyGWUYWO8Zsanf5S4LzS5WzkwGTi5LYA07BrLJTHf6efx
w9R1mOGkKuGqOSvDsFJ3HP3YALVW5WXtVAw1wNVgFoJixzkSaEvKr4ASl17xH15G
ESak0eHHj+wQBqvVRahpcienfAYZPZLblNpd+C3m4PF6DkvN2g37+ybWXoOYLDub
6v8uI4gWbSZ9ea6AGlqblSbDd4HZW/X35l4HfprhJTZTNcNOvQkysSb0GgC7RTve
Vz3xlL2QqE2NMJuvsXRGd2yDlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:13:18 2026 by rpki-client