
$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
File: 84398976322691988CABA640BBB2854AECDF6B87.mft (raw, json)
Hash identifier: 5WKMybEO8pVUJAeXnoDR9ZPTQKKPcREo8e9dXgE736Q=
Subject key identifier: 0A:60:09:37:E2:3E:E9:1D:54:C4:8E:5D:75:17:67:A5:C0:26:24:F9
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Certificate issuer: /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial: 2D7A88440109648F4D13BCAF18E4C2F7B09E78D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
Manifest number: 03CA
Signing time: Thu 26 Mar 2026 13:36:01 +0000
Manifest this update: Thu 26 Mar 2026 13:31:01 +0000
Manifest next update: Fri 27 Mar 2026 14:27:01 +0000
Files and hashes: 1: 34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa (hash: ut8i0jZpnlCMPCB3CJfpQb73ZvU4CADMgCaGjWV1rME=)
2: 34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (hash: 7zUiEVtaD8KQJ/F6pDQVWpW/FDKnkwVeoJp+AkQ6e6k=)
3: 84398976322691988CABA640BBB2854AECDF6B87.crl (hash: l45l37WZpfLf1KSbif/YZD95TwbaAVMptxQCur7VBsY=)
4: 34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa (hash: GlLGPZ6hufSBquPkt/mRs0jxgDabJwabomTu0QzL8pY=)
5: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: xm6QS2tykS0HNopH4b1bku6DcYmJ8RbOFMzSXulztVI=)
6: 34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (hash: 8Ie1Q9KbCiZ9I8Q6+5cFYoSMow4J4E4PUTbUT9Ag/+0=)
7: 34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa (hash: PqXMdIlxskw70ZI51b+M1vaG9j21mjHarNRG/EWSBCg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:7a:88:44:01:09:64:8f:4d:13:bc:af:18:e4:c2:f7:b0:9e:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
Validity
Not Before: Mar 26 13:31:01 2026 GMT
Not After : Mar 27 14:27:01 2026 GMT
Subject: CN=0A600937E23EE91D54C48E5D751767A5C02624F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:ca:36:d6:a6:ad:ba:b2:a1:99:45:61:f0:
04:f3:cd:2e:47:ee:b9:79:07:ed:99:f8:04:a3:a0:
af:b8:17:ca:16:ac:a0:77:a2:fd:ad:fe:ac:83:70:
eb:a9:04:58:37:2c:ca:38:32:4e:28:a8:7c:b4:6d:
db:61:5c:b5:aa:98:a2:a3:fe:95:83:26:4f:27:e2:
94:66:49:f2:29:98:37:24:d1:be:19:0e:0c:2f:ab:
c4:dc:0d:b9:7e:86:46:ae:cc:f2:b4:ea:34:19:05:
29:ca:19:eb:5d:70:09:29:b9:d8:7a:7e:b2:3f:c8:
9d:43:0a:9e:51:ff:44:03:39:57:84:72:4b:56:63:
5e:e2:61:97:4c:e2:1d:2f:b8:80:c5:6e:81:82:d1:
83:05:f8:eb:5b:04:f0:a5:34:34:13:21:75:66:15:
5b:43:b6:bd:ee:d5:33:65:33:41:5a:2b:92:c5:dd:
5b:2f:b8:47:cd:3a:22:b6:73:47:0a:73:ad:0c:e1:
37:e9:76:69:19:50:eb:60:19:b7:9b:22:78:48:5d:
0d:54:5f:83:7f:a4:92:bd:a7:53:a1:5e:08:7c:34:
26:53:5a:e1:12:a1:ca:cd:86:2d:fd:26:ec:f2:fd:
63:50:3d:bf:9c:f2:e3:bd:b6:c0:61:28:72:fd:94:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:09:37:E2:3E:E9:1D:54:C4:8E:5D:75:17:67:A5:C0:26:24:F9
X509v3 Authority Key Identifier:
keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7b:c3:21:d4:a9:67:ec:33:14:59:4d:e8:f9:4a:16:80:b7:
50:b7:b8:66:2f:68:50:cc:f4:7c:d2:e7:92:22:0f:0f:8f:16:
c0:97:04:36:30:80:91:a4:3d:b5:2b:ac:6f:33:62:0e:1e:23:
55:08:1a:cd:13:2a:1d:bd:2d:6f:05:b0:a5:59:d4:a1:13:12:
2e:20:59:9e:b0:a7:fc:24:80:33:16:28:a5:c1:3d:ac:17:2e:
6f:a1:a9:58:8b:fb:26:17:30:d1:30:de:79:46:b5:59:49:99:
ff:f8:fc:7d:ea:55:b5:2d:f9:de:9c:72:69:85:bb:25:f1:31:
4c:3c:a9:20:d0:b7:a6:ce:f1:c5:fe:91:70:14:31:3a:6d:57:
1e:b0:34:ac:92:1a:81:a5:16:5a:29:eb:af:1c:be:93:88:c8:
9d:9a:c1:c1:06:4a:e8:91:2c:0f:99:c7:ba:fe:79:1a:11:b5:
2b:f1:10:b3:88:63:d1:9e:f4:80:72:b5:a2:9a:90:04:c4:9d:
dd:a0:01:69:5b:60:69:43:43:0c:a8:d6:aa:c8:96:1b:b0:d5:
ff:b8:b1:c0:e3:2b:75:aa:9f:ea:39:98:c2:a8:66:14:7a:4e:
2c:ec:5a:be:73:d1:ca:f6:69:7e:0d:91:c5:b5:0c:39:5a:74:
05:0a:73:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULXqIRAEJZI9NE7yvGOTC97CeeNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzOTg5NzYzMjI2OTE5ODhDQUJBNjQwQkJCMjg1NEFF
Q0RGNkI4NzAeFw0yNjAzMjYxMzMxMDFaFw0yNjAzMjcxNDI3MDFaMDMxMTAvBgNV
BAMTKDBBNjAwOTM3RTIzRUU5MUQ1NEM0OEU1RDc1MTc2N0E1QzAyNjI0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIco21qaturKhmUVh8ATzzS5H
7rl5B+2Z+ASjoK+4F8oWrKB3ov2t/qyDcOupBFg3LMo4Mk4oqHy0bdthXLWqmKKj
/pWDJk8n4pRmSfIpmDck0b4ZDgwvq8TcDbl+hkauzPK06jQZBSnKGetdcAkpudh6
frI/yJ1DCp5R/0QDOVeEcktWY17iYZdM4h0vuIDFboGC0YMF+OtbBPClNDQTIXVm
FVtDtr3u1TNlM0FaK5LF3VsvuEfNOiK2c0cKc60M4TfpdmkZUOtgGbebInhIXQ1U
X4N/pJK9p1OhXgh8NCZTWuESocrNhi39Juzy/WNQPb+c8uO9tsBhKHL9lNV3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCmAJN+I+6R1UxI5ddRdnpcAmJPkwHwYDVR0j
BBgwFoAUhDmJdjImkZiMq6ZAu7KFSuzfa4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpm
MzUvMS84NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0Mzk4OTc2MzIyNjkxOTg4
Q0FCQTY0MEJCQjI4NTRBRUNERjZCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpmMzUvMS84
NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiXvDIdSpZ+wzFFlN6PlKFoC3ULe4Zi9oUMz0fNLnkiIPD48WwJcENjCAkaQ9
tSusbzNiDh4jVQgazRMqHb0tbwWwpVnUoRMSLiBZnrCn/CSAMxYopcE9rBcub6Gp
WIv7Jhcw0TDeeUa1WUmZ//j8fepVtS353pxyaYW7JfExTDypINC3ps7xxf6RcBQx
Om1XHrA0rJIagaUWWinrrxy+k4jInZrBwQZK6JEsD5nHuv55GhG1K/EQs4hj0Z70
gHK1opqQBMSd3aABaVtgaUNDDKjWqsiWG7DV/7ixwOMrdaqf6jmYwqhmFHpOLOxa
vnPRyvZpfg2RxbUMOVp0BQpz7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:20 2026 by rpki-client