
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier: NmR1CFPtju2jtpfdazE9O80ZBkOS5PAXAPWWeGKoWMY=
Subject key identifier: 1C:F0:F0:0F:29:A4:89:1B:EB:56:3A:70:B0:81:64:74:18:58:77:4F
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial: 7792F04681CF6264A169BFB2CFFA0FD1831411EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number: 0268
Signing time: Thu 26 Mar 2026 18:44:26 +0000
Manifest this update: Thu 26 Mar 2026 18:39:26 +0000
Manifest next update: Fri 27 Mar 2026 21:29:26 +0000
Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: qn9cWLA4PUGx7CkRq7Ob1vzhyEJBub7K663X/U64XG4=)
2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=)
3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 21:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:92:f0:46:81:cf:62:64:a1:69:bf:b2:cf:fa:0f:d1:83:14:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Validity
Not Before: Mar 26 18:39:26 2026 GMT
Not After : Mar 27 21:29:26 2026 GMT
Subject: CN=1CF0F00F29A4891BEB563A70B08164741858774F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:7a:f0:bd:b8:4d:0f:fe:cf:29:4c:7e:8a:
84:d7:dc:d2:88:eb:0e:6f:f1:b2:70:f4:a5:8c:04:
2d:37:48:99:95:4a:c9:3d:88:f3:5a:b4:d9:58:ea:
57:bc:3a:09:bf:47:e8:65:85:fd:8a:49:66:a8:72:
55:fe:ea:e3:d7:f9:ea:33:21:9b:fa:27:45:e7:b8:
10:f1:d8:f6:02:ea:30:74:27:6b:7c:69:6c:7c:b0:
99:1c:a6:f4:68:f7:9f:d0:36:3e:fa:a5:d5:6c:d0:
26:5a:9e:51:d8:80:72:25:7c:18:ec:85:a0:98:f4:
84:04:d8:b0:07:d7:fe:bd:c9:9b:2e:3f:49:4f:6f:
07:e9:1b:bd:a4:4f:d2:ff:ea:41:7f:d9:c8:e6:dc:
e3:a0:63:9c:29:7d:3b:c3:18:db:e9:a9:b1:5d:20:
ba:08:5c:0a:9f:04:67:3c:75:ec:20:29:65:6e:fa:
9b:e8:f6:56:4b:d7:b7:11:1f:4b:de:d7:1c:84:20:
51:b7:1f:09:21:b6:61:a4:cd:e6:28:b3:14:78:3f:
41:7c:ca:f4:7e:a4:3d:b5:0e:b9:88:f1:8b:7a:9f:
7e:a5:f5:79:40:40:81:8f:79:75:ea:a9:af:f4:27:
32:24:aa:7c:c9:fa:1e:fa:f4:a3:5b:91:d3:c2:ee:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F0:F0:0F:29:A4:89:1B:EB:56:3A:70:B0:81:64:74:18:58:77:4F
X509v3 Authority Key Identifier:
keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:09:e0:c0:1f:29:b6:78:f2:9c:dc:be:a6:a5:7e:ab:a3:b9:
0e:9d:d5:83:74:ef:f5:51:2e:bc:84:ea:b0:c9:ce:7f:3c:c6:
8f:64:b2:fc:4e:27:2d:88:e9:a0:0f:23:5e:fa:1d:81:88:c9:
93:2e:33:2c:7c:3e:d6:87:68:77:32:74:ea:d8:07:84:b7:3d:
02:0b:c0:83:ef:2b:50:66:99:03:ac:36:1a:00:af:05:c7:49:
f8:7e:db:57:5d:25:77:c6:82:a4:c4:03:b7:78:05:6e:f8:fa:
08:b2:61:83:be:23:c4:af:e2:cf:40:94:51:04:83:bd:59:29:
fd:6b:82:69:e9:53:bf:eb:92:78:75:78:ab:ef:06:fb:8c:49:
ec:06:48:83:f8:ab:2c:a6:ca:c0:9f:27:62:87:8e:74:16:01:
43:71:ab:31:34:99:ea:1a:38:da:0e:a0:f1:8f:c9:0a:5d:f4:
e8:0d:95:c3:9b:9f:a6:7e:7e:af:fc:cb:fb:a7:58:d9:2e:77:
6a:3c:45:69:73:95:f6:d4:6a:06:4b:32:4e:50:df:cb:a8:6f:
30:69:a7:f0:e5:ca:c0:47:8e:af:c9:45:ed:71:02:29:aa:e1:
19:e6:90:91:9d:ec:e9:5a:f6:e3:10:1d:55:d2:27:8b:77:12:
c0:0d:a4:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd5LwRoHPYmShab+yz/oP0YMUEewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2
MDYyNUZGQTAeFw0yNjAzMjYxODM5MjZaFw0yNjAzMjcyMTI5MjZaMDMxMTAvBgNV
BAMTKDFDRjBGMDBGMjlBNDg5MUJFQjU2M0E3MEIwODE2NDc0MTg1ODc3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVnrwvbhND/7PKUx+ioTX3NKI
6w5v8bJw9KWMBC03SJmVSsk9iPNatNlY6le8Ogm/R+hlhf2KSWaoclX+6uPX+eoz
IZv6J0XnuBDx2PYC6jB0J2t8aWx8sJkcpvRo95/QNj76pdVs0CZanlHYgHIlfBjs
haCY9IQE2LAH1/69yZsuP0lPbwfpG72kT9L/6kF/2cjm3OOgY5wpfTvDGNvpqbFd
ILoIXAqfBGc8dewgKWVu+pvo9lZL17cRH0ve1xyEIFG3HwkhtmGkzeYosxR4P0F8
yvR+pD21DrmI8Yt6n36l9XlAQIGPeXXqqa/0JzIkqnzJ+h769KNbkdPC7kQXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHPDwDymkiRvrVjpwsIFkdBhYd08wHwYDVR0j
BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm
VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD
RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B
QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqwngwB8ptnjynNy+pqV+q6O5Dp3Vg3Tv9VEuvITqsMnOfzzGj2Sy/E4nLYjp
oA8jXvodgYjJky4zLHw+1ododzJ06tgHhLc9AgvAg+8rUGaZA6w2GgCvBcdJ+H7b
V10ld8aCpMQDt3gFbvj6CLJhg74jxK/iz0CUUQSDvVkp/WuCaelTv+uSeHV4q+8G
+4xJ7AZIg/irLKbKwJ8nYoeOdBYBQ3GrMTSZ6ho42g6g8Y/JCl306A2Vw5ufpn5+
r/zL+6dY2S53ajxFaXOV9tRqBksyTlDfy6hvMGmn8OXKwEeOr8lF7XECKarhGeaQ
kZ3s6Vr24xAdVdIni3cSwA2k5A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:03:14 2026 by rpki-client