
$ rpki-client -vvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.mft
File: 152C509A4EDF035E8B7A18EF1CC0D01554A21430.mft (raw, json)
Hash identifier: ltt/zGEOZDqOqXkfK97FRvkdMa/j0c+AaQT4yWt4Jp0=
Subject key identifier: 2D:87:22:E4:D7:03:D4:43:E3:57:B7:19:CC:CF:E0:DA:74:36:86:AE
Authority key identifier: 15:2C:50:9A:4E:DF:03:5E:8B:7A:18:EF:1C:C0:D0:15:54:A2:14:30
Certificate issuer: /CN=152C509A4EDF035E8B7A18EF1CC0D01554A21430
Certificate serial: 188EECEF78A3EBCB4773B31148903BA95AD8D490
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152C509A4EDF035E8B7A18EF1CC0D01554A21430.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.mft
Manifest number: 41
Signing time: Wed 25 Mar 2026 13:49:39 +0000
Manifest this update: Wed 25 Mar 2026 13:44:39 +0000
Manifest next update: Thu 26 Mar 2026 14:19:39 +0000
Files and hashes: 1: 152C509A4EDF035E8B7A18EF1CC0D01554A21430.crl (hash: tvbDY0CYl5htz2dbyn1w0cLTHM3d0ZgYqZdnnkmGHDo=)
2: 3139312e33372e38302e302f32322d3332203d3e20323730393732.roa (hash: yD3Qtss7aWqegcjgCGbj3EMNmg9htGR1F7HMhM3bgAE=)
3: 323830343a373434633a3a2f33322d313238203d3e20323730393732.roa (hash: TOE35bhhA3lu6GYD7hsFYxmlK+j4GH4gLKgh6rLAOhI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.crl
rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152C509A4EDF035E8B7A18EF1CC0D01554A21430.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 14:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8e:ec:ef:78:a3:eb:cb:47:73:b3:11:48:90:3b:a9:5a:d8:d4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152C509A4EDF035E8B7A18EF1CC0D01554A21430
Validity
Not Before: Mar 25 13:44:39 2026 GMT
Not After : Mar 26 14:19:39 2026 GMT
Subject: CN=2D8722E4D703D443E357B719CCCFE0DA743686AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:e4:7c:db:88:0f:f4:82:41:bc:f4:96:e7:
d2:17:fa:11:f0:b0:5c:04:01:53:df:bc:aa:8a:6f:
31:6a:f3:10:af:94:64:ca:0f:b6:e4:97:8c:07:46:
12:9f:f2:35:f7:e7:00:25:c7:be:1c:8c:bf:4c:a8:
34:3e:a7:27:93:55:d3:f1:f0:b8:1e:69:7f:18:8e:
f5:e1:f3:c7:2f:3d:13:08:a2:d8:db:98:07:f2:fe:
de:36:5f:77:eb:16:99:c4:c1:4e:64:66:16:f2:1e:
ae:87:97:f9:98:47:df:3b:33:0b:64:7d:f1:bf:37:
5a:17:cc:ce:74:5f:c6:bd:e6:7c:5e:a9:2b:17:66:
1b:e8:fd:67:7c:f3:60:5a:a8:6a:10:63:03:ab:9b:
e5:4c:da:29:cd:ce:f2:91:31:12:43:5a:d6:78:83:
f1:3f:22:a1:cd:c1:a1:cd:43:a6:3d:9b:df:6f:91:
f6:de:21:ca:19:3f:c7:0c:f9:38:80:63:54:61:3f:
73:db:0b:25:3c:10:b0:96:f4:a1:a8:06:82:cf:ee:
75:e8:db:e4:8c:dc:70:13:56:53:d0:37:31:43:16:
28:bb:87:64:c4:8f:eb:54:48:3d:27:56:6d:61:4e:
59:6e:e6:7f:45:29:3f:f4:24:1a:8a:3a:3b:41:6d:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:87:22:E4:D7:03:D4:43:E3:57:B7:19:CC:CF:E0:DA:74:36:86:AE
X509v3 Authority Key Identifier:
keyid:15:2C:50:9A:4E:DF:03:5E:8B:7A:18:EF:1C:C0:D0:15:54:A2:14:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152C509A4EDF035E8B7A18EF1CC0D01554A21430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f2:34:5e:d6:77:4a:72:12:0c:3a:9f:c3:a3:02:17:e8:b2:
52:0b:18:7a:54:c1:60:c8:17:9a:39:3f:9f:5c:eb:4a:bd:18:
95:7c:df:00:57:53:47:43:a2:34:d6:ad:c4:b2:3d:51:48:9b:
e2:5b:26:10:bd:05:64:64:86:c5:f5:34:64:1b:fd:69:1c:3f:
4b:16:6d:08:d7:66:60:eb:a5:0c:ee:82:5d:47:fe:c1:a4:c9:
65:45:ac:c7:58:e8:d1:4d:98:db:1e:15:69:b6:80:33:cb:f8:
b6:5f:5c:38:80:16:c5:32:c7:f7:d4:84:bb:9e:5d:ef:52:4e:
dd:1a:bd:e3:18:f0:51:29:d0:72:cc:6e:a1:7f:84:29:00:ba:
5e:f7:33:5f:52:41:b1:4e:a9:db:2a:55:72:8f:77:d1:02:74:
93:bd:d0:8f:5e:fa:26:87:9b:cb:bd:9b:d2:d5:15:f6:a8:b8:
c5:87:91:d6:c6:1c:15:21:fd:b3:cc:50:2c:41:80:0f:48:db:
20:4f:59:ea:07:45:07:21:c7:9d:4c:97:4f:0f:18:af:b9:84:
ee:95:30:1d:ad:d2:16:76:10:bf:fd:ba:31:13:f7:f9:87:aa:
9d:00:48:69:9d:91:48:4a:b6:f0:76:00:58:ce:46:b7:9c:6f:
8a:3c:23:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGI7s73ij68tHc7MRSJA7qVrY1JAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyQzUwOUE0RURGMDM1RThCN0ExOEVGMUNDMEQwMTU1
NEEyMTQzMDAeFw0yNjAzMjUxMzQ0MzlaFw0yNjAzMjYxNDE5MzlaMDMxMTAvBgNV
BAMTKDJEODcyMkU0RDcwM0Q0NDNFMzU3QjcxOUNDQ0ZFMERBNzQzNjg2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDY+R824gP9IJBvPSW59IX+hHw
sFwEAVPfvKqKbzFq8xCvlGTKD7bkl4wHRhKf8jX35wAlx74cjL9MqDQ+pyeTVdPx
8LgeaX8YjvXh88cvPRMIotjbmAfy/t42X3frFpnEwU5kZhbyHq6Hl/mYR987Mwtk
ffG/N1oXzM50X8a95nxeqSsXZhvo/Wd882BaqGoQYwOrm+VM2inNzvKRMRJDWtZ4
g/E/IqHNwaHNQ6Y9m99vkfbeIcoZP8cM+TiAY1RhP3PbCyU8ELCW9KGoBoLP7nXo
2+SM3HATVlPQNzFDFii7h2TEj+tUSD0nVm1hTllu5n9FKT/0JBqKOjtBbU2HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULYci5NcD1EPjV7cZzM/g2nQ2hq4wHwYDVR0j
BBgwFoAUFSxQmk7fA16LehjvHMDQFVSiFDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFVudFBlaThYVktHdmRjbm8yU2NyUTFvRWRRN3ZOamV0Y2cyUTNUdFhF
ankvMC8xNTJDNTA5QTRFREYwMzVFOEI3QTE4RUYxQ0MwRDAxNTU0QTIxNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MkM1MDlBNEVERjAzNUU4
QjdBMThFRjFDQzBEMDE1NTRBMjE0MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFVudFBlaThYVktHdmRjbm8yU2NyUTFvRWRRN3ZOamV0Y2cyUTNUdFhFankvMC8x
NTJDNTA5QTRFREYwMzVFOEI3QTE4RUYxQ0MwRDAxNTU0QTIxNDMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc/I0XtZ3SnISDDqfw6MCF+iyUgsYelTBYMgXmjk/n1zrSr0YlXzfAFdTR0Oi
NNatxLI9UUib4lsmEL0FZGSGxfU0ZBv9aRw/SxZtCNdmYOulDO6CXUf+waTJZUWs
x1jo0U2Y2x4VabaAM8v4tl9cOIAWxTLH99SEu55d71JO3Rq94xjwUSnQcsxuoX+E
KQC6XvczX1JBsU6p2ypVco930QJ0k73Qj176Joeby72b0tUV9qi4xYeR1sYcFSH9
s8xQLEGAD0jbIE9Z6gdFByHHnUyXTw8Yr7mE7pUwHa3SFnYQv/26MRP3+YeqnQBI
aZ2RSEq28HYAWM5Gt5xvijwjVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:45 2026 by rpki-client