
$ rpki-client -vvvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File: 421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier: RvgkFmw8B/DIekh3CT2GBxjxLSfGLtNfG6AUfBCvnYE=
Subject key identifier: 9D:96:61:65:AC:79:FD:9C:05:0A:2E:85:F1:0E:E8:6A:A7:0B:E5:E7
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer: /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial: 34CF6CF9F1162E1C8048CF7D779DBCBFD9909AD0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number: 0303
Signing time: Sat 17 Oct 2026 02:27:15 +0000
Manifest this update: Sat 17 Oct 2026 02:22:15 +0000
Manifest next update: Sun 18 Oct 2026 03:58:15 +0000
Files and hashes: 1: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: 69dIjnqsz207Wt7Nwj1DKh8N/sW+QPf9JMKxI4Z3uxw=)
2: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: aKCaU9YEZ0GXk3ibA6Ux8CHXyt0tEGPf+PaG645hzmA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cf:6c:f9:f1:16:2e:1c:80:48:cf:7d:77:9d:bc:bf:d9:90:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Validity
Not Before: Oct 17 02:22:15 2026 GMT
Not After : Oct 18 03:58:15 2026 GMT
Subject: CN=9D966165AC79FD9C050A2E85F10EE86AA70BE5E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:71:74:4c:86:97:51:14:a7:11:dd:61:80:
26:b8:b5:7c:71:cf:ea:35:c7:df:35:57:b8:91:c2:
36:ef:e1:00:a5:c3:24:f2:8d:09:27:1f:40:7f:53:
82:d1:e3:00:79:35:66:9e:05:bf:70:22:72:9a:a5:
c0:4a:77:43:51:b9:3b:f7:39:ba:5d:45:e9:7c:12:
f4:7d:57:f6:c5:e6:26:cf:45:38:af:31:78:1e:6b:
bd:58:cb:40:dd:85:b9:68:af:fd:29:46:aa:89:9f:
f2:0f:40:50:d8:cc:20:24:a0:57:1b:ce:93:16:cb:
4a:da:e7:60:35:33:3c:4a:ec:6a:79:11:6c:d3:8f:
e9:6c:96:51:80:5a:c1:99:87:54:f6:ae:a5:f7:51:
64:60:6c:71:b9:46:79:85:e9:d5:56:c1:10:e8:16:
d0:1f:a5:78:41:e2:50:5c:da:5a:14:16:a7:3a:f3:
d6:5b:37:15:0d:6c:62:15:e8:9c:63:73:38:57:17:
1d:3d:48:93:96:52:d0:19:80:d7:c2:b0:5d:75:a8:
73:69:02:74:69:94:9b:a7:74:3b:7a:1a:11:c7:12:
9c:94:33:9f:e2:c5:68:37:72:b3:91:85:a6:6c:32:
a4:f3:60:7a:dc:7f:88:ce:ec:7a:4b:e4:63:dd:d5:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:61:65:AC:79:FD:9C:05:0A:2E:85:F1:0E:E8:6A:A7:0B:E5:E7
X509v3 Authority Key Identifier:
keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7d:77:b8:cb:c7:d6:25:03:02:af:fc:05:9d:dc:c4:dd:ef:
ae:80:03:33:b7:f9:0f:38:45:da:4d:af:af:90:a5:76:71:de:
f4:a3:f5:e9:35:f1:e8:44:92:1f:cc:34:87:c9:2a:28:38:7f:
92:3e:95:f7:4f:49:8c:44:4d:11:78:27:3c:18:8a:7e:a4:bb:
f9:fc:3b:3b:ea:ec:2c:39:63:9c:a3:a1:39:a6:f9:96:8c:b8:
5c:ef:48:55:98:87:97:54:a0:98:3e:7c:f4:ae:6d:79:2b:e3:
86:34:e0:53:74:87:bd:4d:ea:57:03:98:01:d9:28:35:88:be:
81:c4:24:64:71:4c:ba:62:12:05:f6:74:2d:b1:fa:95:aa:8c:
68:78:a2:ba:24:43:c3:be:92:02:dd:32:05:3b:b0:0e:47:a2:
1a:c3:93:9f:b3:76:cf:f6:31:c5:80:86:3c:01:fd:ad:ec:ab:
13:c5:52:ed:95:65:47:5e:91:44:da:9b:75:45:62:b4:e3:ec:
01:54:ae:8e:bd:1f:ea:c5:9d:12:1c:c9:ca:e3:5a:14:4b:57:
95:80:77:05:d0:a1:ce:8e:85:b5:d6:20:97:4b:05:71:dc:a8:
09:3a:d3:fc:68:11:80:e5:35:7d:aa:c8:c8:c7:30:e4:3c:91:
7b:b9:0e:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNM9s+fEWLhyASM99d528v9mQmtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNTA5RUUwQjMzM0ZGN0Q1NzZCRjQ3OUVEMDE1NUJB
REZCMkE5MDAeFw0yNjEwMTcwMjIyMTVaFw0yNjEwMTgwMzU4MTVaMDMxMTAvBgNV
BAMTKDlEOTY2MTY1QUM3OUZEOUMwNTBBMkU4NUYxMEVFODZBQTcwQkU1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcHF0TIaXURSnEd1hgCa4tXxx
z+o1x981V7iRwjbv4QClwyTyjQknH0B/U4LR4wB5NWaeBb9wInKapcBKd0NRuTv3
ObpdRel8EvR9V/bF5ibPRTivMXgea71Yy0Ddhblor/0pRqqJn/IPQFDYzCAkoFcb
zpMWy0ra52A1MzxK7Gp5EWzTj+lsllGAWsGZh1T2rqX3UWRgbHG5RnmF6dVWwRDo
FtAfpXhB4lBc2loUFqc689ZbNxUNbGIV6JxjczhXFx09SJOWUtAZgNfCsF11qHNp
AnRplJundDt6GhHHEpyUM5/ixWg3crORhaZsMqTzYHrcf4jO7HpL5GPd1Z7pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnZZhZax5/ZwFCi6F8Q7oaqcL5ecwHwYDVR0j
BBgwFoAUQhUJ7gszP/fVdr9HntAVW637KpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxL
NVovMC80MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMTUwOUVFMEIzMzNGRjdE
NTc2QkY0NzlFRDAxNTVCQURGQjJBOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxLNVovMC80
MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG313uMvH1iUDAq/8BZ3cxN3vroADM7f5DzhF2k2vr5CldnHe9KP16TXx6ESS
H8w0h8kqKDh/kj6V909JjERNEXgnPBiKfqS7+fw7O+rsLDljnKOhOab5loy4XO9I
VZiHl1SgmD589K5teSvjhjTgU3SHvU3qVwOYAdkoNYi+gcQkZHFMumISBfZ0LbH6
laqMaHiiuiRDw76SAt0yBTuwDkeiGsOTn7N2z/YxxYCGPAH9reyrE8VS7ZVlR16R
RNqbdUVitOPsAVSujr0f6sWdEhzJyuNaFEtXlYB3BdChzo6FtdYgl0sFcdyoCTrT
/GgRgOU1farIyMcw5DyRe7kOoQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:23:03 2026 by rpki-client