
$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
File: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft (raw, json)
Hash identifier: wX3OJrKbdkukSS6EfMnjpXzX4p+bwpkc07KUjIY8VQo=
Subject key identifier: 25:97:6E:E3:6F:91:78:51:8D:60:82:AE:0E:54:35:EE:84:B7:58:A5
Authority key identifier: D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Certificate issuer: /CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Certificate serial: 574366FECB68623FCC1E87C3E131CD58C6BBBEBD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
Manifest number: DE
Signing time: Fri 24 Jul 2026 15:16:05 +0000
Manifest this update: Fri 24 Jul 2026 15:11:05 +0000
Manifest next update: Sat 25 Jul 2026 17:08:05 +0000
Files and hashes: 1: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: X1mFsLI4Qx5oGKiy8k7VNSxBc0vv6a0K1FRl2fNhhiQ=)
2: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: R3uhZoJSvdBAFSKZLP45MaoIVASbthNAoqzbBhFGlmI=)
3: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl (hash: jgrmY3bVvyVTehH5+lB5yY3DTxMii+kR2UPJlP6YxII=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 17:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:43:66:fe:cb:68:62:3f:cc:1e:87:c3:e1:31:cd:58:c6:bb:be:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Validity
Not Before: Jul 24 15:11:05 2026 GMT
Not After : Jul 25 17:08:05 2026 GMT
Subject: CN=25976EE36F9178518D6082AE0E5435EE84B758A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:0a:53:06:78:66:f1:5f:f9:94:62:a4:c2:
20:16:c0:f3:15:80:40:35:93:b3:f9:f8:19:60:c3:
25:31:56:d7:c9:d6:3f:45:0f:43:8a:31:55:69:46:
9f:4a:54:a4:1b:5c:b2:bf:58:4b:6c:a2:11:58:82:
9f:c6:b7:eb:48:1a:64:bd:ba:f6:0b:34:fd:3b:a8:
e8:bd:f9:c9:f6:b9:49:e4:7e:3c:92:4c:b3:6c:88:
13:9d:2b:3a:71:cb:c0:65:9c:d5:b6:e9:02:ce:67:
1a:94:4f:42:73:04:34:d0:39:62:65:e0:a9:c8:61:
98:df:6b:fe:1a:7a:a1:7a:66:5b:ba:16:28:48:21:
f4:b1:a9:79:cf:84:a4:54:17:6f:77:10:1f:72:e4:
3c:24:2a:88:67:ad:1a:b6:af:28:8f:4f:99:44:23:
7d:05:34:ed:90:10:a1:63:af:52:ae:0d:23:f3:4b:
3c:81:1f:94:5d:74:f3:c5:7a:ad:92:ba:fd:42:7b:
a4:62:eb:64:12:41:c6:fb:b3:3e:4b:a5:5b:2a:dc:
06:3d:00:c1:68:24:2f:8c:81:be:ca:4f:00:4c:75:
6b:da:c7:d3:20:c7:e0:21:c5:79:5d:f1:e9:1f:0f:
64:28:a9:02:f2:ac:d1:cf:02:ac:52:7a:d9:95:27:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:6E:E3:6F:91:78:51:8D:60:82:AE:0E:54:35:EE:84:B7:58:A5
X509v3 Authority Key Identifier:
keyid:D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fb:a9:19:89:cd:af:ea:40:70:cd:e4:df:d9:df:42:5b:52:
0e:e0:92:8d:ce:0c:62:ec:eb:0d:64:df:07:58:58:79:a8:e0:
19:a4:19:ab:08:ed:63:7e:fe:1b:11:9a:cc:45:9e:d1:15:09:
95:76:c1:66:5f:b7:dc:cd:6e:cc:f9:b5:0c:2b:66:7d:c3:32:
ff:c8:ba:f7:27:4e:ad:35:1f:97:bb:18:27:f2:e5:f2:10:66:
b3:9d:f9:f0:92:b4:ad:ce:89:a2:a0:b6:bd:1b:b5:87:ab:5b:
bc:8a:3c:a2:0c:d1:6e:ab:3c:98:bd:e7:fc:18:bb:2f:d5:ef:
da:2f:6b:3a:af:eb:af:7e:0e:4c:34:fd:db:89:09:58:b9:01:
95:8e:70:da:f2:bd:22:15:be:b7:65:42:9c:b4:ff:63:b9:cf:
76:6d:82:20:a5:cf:5c:4d:7e:df:42:3c:08:58:8a:a7:51:41:
8c:8d:f8:14:c9:e6:cf:8d:26:47:de:17:18:a8:4c:6d:e5:9d:
53:f6:6d:fb:bd:ac:50:0c:c1:59:f7:17:fd:f3:a8:6f:62:85:
0b:72:37:c7:af:56:bf:84:43:f3:c0:31:c1:07:05:a1:db:7e:
6c:32:11:ff:4f:61:35:94:c5:58:a8:fe:56:e8:6c:96:27:47:
3f:8d:cb:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV0Nm/stoYj/MHofD4THNWMa7vr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBRjQ1N0NDQjRCRDEwOTlCQjExMURERDc5QzdBNTI1
MzE0OEMzRjAeFw0yNjA3MjQxNTExMDVaFw0yNjA3MjUxNzA4MDVaMDMxMTAvBgNV
BAMTKDI1OTc2RUUzNkY5MTc4NTE4RDYwODJBRTBFNTQzNUVFODRCNzU4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRbwpTBnhm8V/5lGKkwiAWwPMV
gEA1k7P5+BlgwyUxVtfJ1j9FD0OKMVVpRp9KVKQbXLK/WEtsohFYgp/Gt+tIGmS9
uvYLNP07qOi9+cn2uUnkfjySTLNsiBOdKzpxy8BlnNW26QLOZxqUT0JzBDTQOWJl
4KnIYZjfa/4aeqF6Zlu6FihIIfSxqXnPhKRUF293EB9y5DwkKohnrRq2ryiPT5lE
I30FNO2QEKFjr1KuDSPzSzyBH5RddPPFeq2Suv1Ce6Ri62QSQcb7sz5LpVsq3AY9
AMFoJC+Mgb7KTwBMdWvax9Mgx+AhxXld8ekfD2QoqQLyrNHPAqxSetmVJypbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJZdu42+ReFGNYIKuDlQ17oS3WKUwHwYDVR0j
BBgwFoAU0a9FfMtL0QmbsRHd15x6UlMUjD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ29ZNjhHV2loU3I4SHJnOGdtWXRqUzRtMkxmd0NGQ01TZkJuZTY1aUd1
RG0vMC9EMUFGNDU3Q0NCNEJEMTA5OUJCMTExRERENzlDN0E1MjUzMTQ4QzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQUY0NTdDQ0I0QkQxMDk5
QkIxMTFEREQ3OUM3QTUyNTMxNDhDM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q29ZNjhHV2loU3I4SHJnOGdtWXRqUzRtMkxmd0NGQ01TZkJuZTY1aUd1RG0vMC9E
MUFGNDU3Q0NCNEJEMTA5OUJCMTExRERENzlDN0E1MjUzMTQ4QzNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApPupGYnNr+pAcM3k39nfQltSDuCSjc4MYuzrDWTfB1hYeajgGaQZqwjtY37+
GxGazEWe0RUJlXbBZl+33M1uzPm1DCtmfcMy/8i69ydOrTUfl7sYJ/Ll8hBms535
8JK0rc6JoqC2vRu1h6tbvIo8ogzRbqs8mL3n/Bi7L9Xv2i9rOq/rr34OTDT924kJ
WLkBlY5w2vK9IhW+t2VCnLT/Y7nPdm2CIKXPXE1+30I8CFiKp1FBjI34FMnmz40m
R94XGKhMbeWdU/Zt+72sUAzBWfcX/fOob2KFC3I3x69Wv4RD88AxwQcFodt+bDIR
/09hNZTFWKj+VuhslidHP43L9Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:52:56 2026 by rpki-client