
$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft
File: BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft (raw, json)
Hash identifier: NOvIm9lCbx8uzDUC8Q2WJIUHyby1Bt+WAvk9nvbAD6w=
Subject key identifier: 40:48:75:FF:06:6C:51:8D:08:98:2F:69:1C:1C:C8:5E:34:E6:2A:FE
Authority key identifier: BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E
Certificate issuer: /CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E
Certificate serial: 4804D03E1A642F58C65B93BAF4AC854C4475CF5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft
Manifest number: 02B0
Signing time: Thu 26 Mar 2026 09:53:54 +0000
Manifest this update: Thu 26 Mar 2026 09:48:54 +0000
Manifest next update: Fri 27 Mar 2026 09:56:54 +0000
Files and hashes: 1: 3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa (hash: lyptdHgc5LAwz7D5PHQXeUW+ibpMYXQ5YinRPWpT63I=)
2: 323830343a323431343a3a2f33322d3332203d3e20323634323030.roa (hash: l1bxXWpQalCMNnNo8et6dLA39vN6VrXExxi00CE4CMs=)
3: BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl (hash: KyIukxanff7w/BlY7UVqXcz24j/+TO/5CXcz/1WCK5A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl
rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 09:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:04:d0:3e:1a:64:2f:58:c6:5b:93:ba:f4:ac:85:4c:44:75:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E
Validity
Not Before: Mar 26 09:48:54 2026 GMT
Not After : Mar 27 09:56:54 2026 GMT
Subject: CN=404875FF066C518D08982F691C1CC85E34E62AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:37:5c:d7:41:20:35:77:19:42:43:d4:b5:
fb:ea:21:96:48:d4:e3:cd:5f:b4:2f:7a:91:95:35:
7e:36:37:23:6b:4f:1a:35:1b:31:d9:23:fc:8f:24:
30:12:7e:62:c6:73:92:8a:ea:10:af:a7:e2:5d:43:
7d:67:64:0b:94:fa:c0:2d:ba:42:a5:57:59:1e:7c:
bd:ad:7d:d6:9d:e7:03:0f:2a:68:02:f6:8b:cd:b6:
89:de:2d:3c:09:d8:37:9f:1a:01:c1:ff:54:ab:8d:
43:ee:54:79:57:e1:c7:f2:ba:cf:a3:b4:db:6c:ca:
54:9a:70:6c:18:aa:73:33:bc:07:d3:fb:e5:37:fd:
fe:bf:ea:74:85:e0:b7:c4:b9:66:30:56:7d:1e:ae:
4c:a2:df:16:ae:6d:2e:b3:8c:07:92:bd:60:f2:ad:
ec:2d:b0:c3:a6:8e:64:d5:b4:b5:1f:c4:96:bf:f1:
90:a5:d0:2e:0e:73:38:c4:31:77:8e:27:90:d0:d2:
1e:aa:ac:53:9f:c1:c5:bb:aa:50:2c:27:e5:80:5f:
73:55:c0:91:cf:8e:9c:44:68:c3:f9:48:cf:bc:68:
d3:8f:44:30:b2:9d:18:80:fd:47:b9:4a:4d:c9:e4:
0a:68:d2:4d:b0:02:c3:ad:3c:97:ec:7a:80:6b:4f:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:75:FF:06:6C:51:8D:08:98:2F:69:1C:1C:C8:5E:34:E6:2A:FE
X509v3 Authority Key Identifier:
keyid:BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:4c:1b:33:2c:3e:9e:f7:64:17:cb:56:fa:a0:36:5c:f6:
f7:ca:d0:e3:a6:21:be:bf:30:6a:ee:94:1a:81:7d:81:ba:40:
17:54:30:95:57:e5:70:e0:82:40:1b:84:e2:e5:1c:56:7a:9a:
1f:7f:b7:59:d6:ba:7c:89:2e:92:26:d7:87:48:ae:9e:74:0e:
83:42:91:5e:47:b0:98:b7:25:41:21:b6:fb:38:f1:3b:ce:8e:
40:34:cc:a8:a9:78:b4:4a:19:9d:67:ee:96:f4:85:b0:c1:ed:
08:70:f3:d5:a0:be:8e:4e:39:b0:9c:e0:c6:ea:38:ba:a5:6e:
3d:a0:be:9c:0a:b3:49:63:36:6f:a0:df:91:62:2c:f7:6b:d5:
4b:5a:85:35:ac:4f:73:77:8e:f5:48:14:24:71:8f:5e:13:22:
70:82:4c:13:56:66:74:ee:7a:90:76:ab:f2:85:44:82:c5:dd:
ae:c7:c9:db:3b:09:88:d3:bf:ae:b2:44:98:04:39:ca:f2:af:
09:db:18:19:3e:49:42:e1:bf:cf:41:cf:f2:c6:4c:e0:d0:d0:
60:22:53:59:69:96:ad:b7:fa:36:90:44:91:20:c8:1e:e0:bd:
8d:62:70:f3:83:a7:f9:64:eb:bc:69:bb:6f:80:9a:50:09:8e:
1d:e8:f3:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSATQPhpkL1jGW5O69KyFTER1z10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkExOUNFMTJFOTY1RTIwRDE2OUE5Rjk0ODFBQzZDOEYz
MTY0NEQzRTAeFw0yNjAzMjYwOTQ4NTRaFw0yNjAzMjcwOTU2NTRaMDMxMTAvBgNV
BAMTKDQwNDg3NUZGMDY2QzUxOEQwODk4MkY2OTFDMUNDODVFMzRFNjJBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZjdc10EgNXcZQkPUtfvqIZZI
1OPNX7QvepGVNX42NyNrTxo1GzHZI/yPJDASfmLGc5KK6hCvp+JdQ31nZAuU+sAt
ukKlV1kefL2tfdad5wMPKmgC9ovNtoneLTwJ2DefGgHB/1SrjUPuVHlX4cfyus+j
tNtsylSacGwYqnMzvAfT++U3/f6/6nSF4LfEuWYwVn0erkyi3xaubS6zjAeSvWDy
rewtsMOmjmTVtLUfxJa/8ZCl0C4OczjEMXeOJ5DQ0h6qrFOfwcW7qlAsJ+WAX3NV
wJHPjpxEaMP5SM+8aNOPRDCynRiA/Ue5Sk3J5Apo0k2wAsOtPJfseoBrT3Z9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQEh1/wZsUY0ImC9pHBzIXjTmKv4wHwYDVR0j
BBgwFoAUuhnOEull4g0Wmp+UgaxsjzFkTT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1BNTlRTYVlHWWlzelVqcldQb2Z4ZXM4N0ZxYmNlNlhLNEVkYWFISHNO
SmEvMS9CQTE5Q0UxMkU5NjVFMjBEMTY5QTlGOTQ4MUFDNkM4RjMxNjQ0RDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBMTlDRTEyRTk2NUUyMEQx
NjlBOUY5NDgxQUM2QzhGMzE2NDREM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1BNTlRTYVlHWWlzelVqcldQb2Z4ZXM4N0ZxYmNlNlhLNEVkYWFISHNOSmEvMS9C
QTE5Q0UxMkU5NjVFMjBEMTY5QTlGOTQ4MUFDNkM4RjMxNjQ0RDNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXPlMGzMsPp73ZBfLVvqgNlz298rQ46Yhvr8wau6UGoF9gbpAF1QwlVflcOCC
QBuE4uUcVnqaH3+3Wda6fIkukibXh0iunnQOg0KRXkewmLclQSG2+zjxO86OQDTM
qKl4tEoZnWfulvSFsMHtCHDz1aC+jk45sJzgxuo4uqVuPaC+nAqzSWM2b6DfkWIs
92vVS1qFNaxPc3eO9UgUJHGPXhMicIJME1ZmdO56kHar8oVEgsXdrsfJ2zsJiNO/
rrJEmAQ5yvKvCdsYGT5JQuG/z0HP8sZM4NDQYCJTWWmWrbf6NpBEkSDIHuC9jWJw
84On+WTrvGm7b4CaUAmOHejzLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:11 2026 by rpki-client