
$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json)
Hash identifier: m60GpZXIhzvfMaq7VB+s5Za8bvJ7oZQ2j9EsnQP4Qq8=
Subject key identifier: DE:38:C2:56:1C:A6:03:46:08:C0:8E:7D:C2:90:F5:9F:D6:80:5B:77
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial: 2CE7751C3110B182EE2F05D61CB79ACC9E2EA4FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
Manifest number: 03A0
Signing time: Fri 24 Jul 2026 15:56:10 +0000
Manifest this update: Fri 24 Jul 2026 15:51:10 +0000
Manifest next update: Sat 25 Jul 2026 19:19:10 +0000
Files and hashes: 1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: j2+UhTaS4HDwHBXgeW6kbh+pUk8J9gBzzMeJXZp2pYQ=)
2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: CdPYwUu7fVvOkXjvhbDpdhmwiaHnZvqvWSgEG/PmFHE=)
3: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: MRmyX3ksimrIbOPpGdMaclAFGVpYZQEupOjnpl+uHcc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 18:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:75:1c:31:10:b1:82:ee:2f:05:d6:1c:b7:9a:cc:9e:2e:a4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Validity
Not Before: Jul 24 15:51:10 2026 GMT
Not After : Jul 25 19:19:10 2026 GMT
Subject: CN=DE38C2561CA6034608C08E7DC290F59FD6805B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:c8:f4:fc:aa:95:c7:2f:c8:74:e4:fe:76:
24:5b:7c:60:31:c0:12:7c:a5:cd:3c:55:c2:b0:41:
35:7b:df:0d:3d:c8:f6:b2:9d:99:5e:7f:c5:9d:3c:
dc:ca:59:f0:3b:5e:7f:b3:c2:ef:b3:14:56:d3:25:
fa:9b:9d:60:d8:d1:a4:4b:93:68:38:a0:86:2f:29:
db:9f:24:84:81:f7:94:07:46:af:2a:23:49:ce:ac:
af:c4:c9:79:af:a8:bb:d1:bf:b5:ae:df:6e:c5:0f:
c1:e5:1f:76:76:84:2f:6e:a1:4f:24:88:b2:d7:ff:
3d:c7:d3:e4:cb:2d:93:51:5e:7a:da:9a:a0:94:5b:
d7:05:cf:f1:28:3b:1a:b7:fb:99:e2:9c:41:14:6e:
cd:ed:23:89:76:de:04:0f:05:b9:07:19:5f:0d:9a:
81:8b:8b:b0:fe:c3:ed:1e:d9:db:54:93:97:7d:ac:
67:0d:49:19:cc:df:20:0d:fd:a0:de:4f:69:07:e7:
3c:f8:46:14:ff:3b:2c:f5:af:9d:02:cc:d5:fa:d8:
08:0e:9b:6b:5c:c9:22:a7:61:c5:6e:46:a0:23:4c:
bc:df:fd:ec:17:7a:2e:54:1f:ec:5c:30:ca:be:0b:
78:a7:c9:ea:73:56:52:64:69:77:7d:52:d8:b8:70:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:C2:56:1C:A6:03:46:08:C0:8E:7D:C2:90:F5:9F:D6:80:5B:77
X509v3 Authority Key Identifier:
keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2d:85:7e:14:a6:c5:5a:18:aa:f5:b3:6a:84:a9:8e:3c:7c:
61:a4:d1:f5:fe:aa:16:63:62:dc:e2:d1:f8:69:a7:23:8e:43:
16:2c:b7:98:46:a7:94:71:4d:bd:3e:6d:b7:da:c9:b0:69:fd:
77:ba:de:74:d3:97:0d:25:8c:03:5b:bb:b3:e7:d2:ea:56:15:
ad:d0:4c:5f:80:57:a4:65:20:c9:60:63:ce:3a:e5:0e:7e:7d:
76:d3:c1:e7:2d:c9:cc:78:6b:93:56:be:e1:ef:6f:22:80:9f:
75:ed:5b:ca:be:ec:77:a2:9a:89:a3:2f:6c:32:15:fc:53:20:
bd:ce:02:bf:37:a0:91:45:b2:3b:3b:25:d1:6d:07:59:f9:d4:
a3:53:40:b0:36:63:be:b3:ab:78:d1:f8:7a:69:49:c8:e2:a1:
2b:56:b3:00:96:3b:c0:79:d6:76:ce:40:8b:55:01:ce:05:b5:
b3:a8:1b:13:76:83:74:c6:00:fe:a2:e0:d8:26:6b:01:19:14:
37:a1:e4:ad:57:44:76:05:46:b1:9c:39:55:27:8d:5d:ea:11:
76:6b:29:8e:97:22:c5:9c:52:c2:93:87:26:a6:47:76:58:d5:
50:18:42:1a:b6:aa:43:48:9b:85:20:fa:72:08:54:01:81:e9:
7d:c0:c5:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULOd1HDEQsYLuLwXWHLeazJ4upPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB
MDhENEZGMDAeFw0yNjA3MjQxNTUxMTBaFw0yNjA3MjUxOTE5MTBaMDMxMTAvBgNV
BAMTKERFMzhDMjU2MUNBNjAzNDYwOEMwOEU3REMyOTBGNTlGRDY4MDVCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsn8j0/KqVxy/IdOT+diRbfGAx
wBJ8pc08VcKwQTV73w09yPaynZlef8WdPNzKWfA7Xn+zwu+zFFbTJfqbnWDY0aRL
k2g4oIYvKdufJISB95QHRq8qI0nOrK/EyXmvqLvRv7Wu327FD8HlH3Z2hC9uoU8k
iLLX/z3H0+TLLZNRXnramqCUW9cFz/EoOxq3+5ninEEUbs3tI4l23gQPBbkHGV8N
moGLi7D+w+0e2dtUk5d9rGcNSRnM3yAN/aDeT2kH5zz4RhT/Oyz1r50CzNX62AgO
m2tcySKnYcVuRqAjTLzf/ewXei5UH+xcMMq+C3inyepzVlJkaXd9Uti4cK2fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3jjCVhymA0YIwI59wpD1n9aAW3cwHwYDVR0j
BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D
UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz
NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w
OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIi2FfhSmxVoYqvWzaoSpjjx8YaTR9f6qFmNi3OLR+GmnI45DFiy3mEanlHFN
vT5tt9rJsGn9d7redNOXDSWMA1u7s+fS6lYVrdBMX4BXpGUgyWBjzjrlDn59dtPB
5y3JzHhrk1a+4e9vIoCfde1byr7sd6KaiaMvbDIV/FMgvc4CvzegkUWyOzsl0W0H
WfnUo1NAsDZjvrOreNH4emlJyOKhK1azAJY7wHnWds5Ai1UBzgW1s6gbE3aDdMYA
/qLg2CZrARkUN6HkrVdEdgVGsZw5VSeNXeoRdmspjpcixZxSwpOHJqZHdljVUBhC
GraqQ0ibhSD6cghUAYHpfcDFrQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:26 2026 by rpki-client