
$ rpki-client -vvvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
File: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft (raw, json)
Hash identifier: 96K9Ort+0wetd/U4QOJejq6yzQFYkK4m6EKOytOEqkA=
Subject key identifier: D9:0F:A1:C3:68:C1:6F:D9:7E:4E:A4:48:74:51:8E:DC:82:4B:4C:96
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Certificate issuer: /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial: 62E0DB836BA0767CF1EE7599CC68A57376188824
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
Manifest number: 04AF
Signing time: Sun 18 Oct 2026 19:57:20 +0000
Manifest this update: Sun 18 Oct 2026 19:52:20 +0000
Manifest next update: Mon 19 Oct 2026 22:36:20 +0000
Files and hashes: 1: 34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (hash: Q3dMZW4m0i8ZEtk/e/iL3FIayWVGHMUwvvB2YivyJDc=)
2: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl (hash: mXl0hatmmNNab8bQs9iDqDaocS60efxtkscJgH41vco=)
3: 34352e3138382e38322e302f32332d3233203d3e20323639353837.roa (hash: R6RssLpKWot0a49hOgE0hMKMGpNaG8/pMf4C2QMLYlU=)
4: 34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (hash: r5YW7FnYvvc1jpDgXF0uoaCEs5pkSIJLqsD5iBPxR9E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 22:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e0:db:83:6b:a0:76:7c:f1:ee:75:99:cc:68:a5:73:76:18:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Validity
Not Before: Oct 18 19:52:20 2026 GMT
Not After : Oct 19 22:36:20 2026 GMT
Subject: CN=D90FA1C368C16FD97E4EA44874518EDC824B4C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:90:41:f4:c1:ba:31:0a:05:4e:d8:0b:2d:
4e:09:fe:a2:5c:28:76:f5:53:4b:db:a9:46:15:d8:
b1:10:01:21:84:34:51:63:af:70:e7:31:12:f7:a9:
4f:9b:ad:b8:22:d7:2a:1f:a3:f3:ab:72:55:44:e9:
63:5b:ea:ad:61:84:fe:76:30:99:3b:aa:21:9d:0f:
c7:d2:11:58:86:f5:23:86:97:1d:bb:d9:20:33:bc:
03:9c:22:85:56:fb:23:f5:6a:45:ba:d3:1b:51:91:
6b:6b:cb:a1:70:87:bb:c2:0d:54:38:e0:d8:28:ac:
bf:c7:64:2e:fb:4c:62:81:1a:b1:b1:54:0c:ee:a1:
f9:2c:63:61:5e:32:51:4b:bf:0d:3b:2a:21:57:b1:
c7:79:af:b4:2a:95:4f:bb:cd:82:de:5c:63:47:fe:
54:06:5b:50:d4:7a:1b:e0:49:2f:ca:1c:6f:77:d1:
7d:3a:66:47:8a:fd:af:a0:93:05:5e:88:27:b6:a4:
55:95:76:20:2d:20:83:7d:02:27:ad:a9:70:93:97:
b9:5f:30:90:73:49:a6:65:80:73:c1:cb:13:26:4e:
af:e3:83:8c:17:7d:cc:cb:e7:37:6a:33:db:63:79:
ed:2f:4f:e8:bf:b7:bb:d2:2a:ff:29:6a:68:be:6a:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:A1:C3:68:C1:6F:D9:7E:4E:A4:48:74:51:8E:DC:82:4B:4C:96
X509v3 Authority Key Identifier:
keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f9:51:79:d8:2a:24:4a:f9:b1:e2:e8:56:ac:eb:83:6a:07:
ae:85:8b:77:45:f3:3f:82:bf:18:ef:88:ea:09:0b:6c:ae:71:
4f:df:a4:13:3c:b0:19:ca:a9:8f:b5:30:34:b3:22:fa:d4:77:
e0:3d:28:c1:6f:ff:bc:2d:8a:99:41:0f:f8:f4:ae:2e:eb:3c:
0f:d9:f4:d8:0c:28:7b:41:6c:a1:9b:09:28:d1:05:26:ec:4f:
15:f1:94:1d:bb:3f:4f:40:6e:b8:4e:89:7f:8f:d6:c3:3f:7a:
51:f3:a5:78:5f:22:c4:a7:9c:51:a5:5d:a8:12:16:42:04:8c:
de:ca:1e:46:ba:1b:9d:4f:76:15:37:0f:ce:4a:a5:6d:d6:db:
d5:dc:f2:50:61:d0:73:69:db:ac:24:82:1c:87:28:b1:3c:57:
b8:7b:1c:c6:be:49:87:30:e8:36:c9:6e:c7:78:2e:97:f5:91:
da:4f:f8:ba:ff:0c:26:a2:00:13:88:d0:52:1f:f6:4e:f4:76:
b8:32:5e:6f:55:ce:8b:eb:8e:cc:ac:f9:36:ec:00:1e:25:46:
22:f1:a6:ee:db:4c:3f:05:d1:ce:9c:4c:6f:4f:43:a7:fc:14:
1f:24:14:e2:a4:84:d5:da:fd:fb:77:fa:ea:cf:ca:6d:b6:b9:
f5:d6:3b:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYuDbg2ugdnzx7nWZzGilc3YYiCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJFMUNFRUZEM0YzRjJDNkVGRUQ0NDFCOUU2QzEwRTQz
RjlEQjg2RTAeFw0yNjEwMTgxOTUyMjBaFw0yNjEwMTkyMjM2MjBaMDMxMTAvBgNV
BAMTKEQ5MEZBMUMzNjhDMTZGRDk3RTRFQTQ0ODc0NTE4RURDODI0QjRDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/pBB9MG6MQoFTtgLLU4J/qJc
KHb1U0vbqUYV2LEQASGENFFjr3DnMRL3qU+brbgi1yofo/OrclVE6WNb6q1hhP52
MJk7qiGdD8fSEViG9SOGlx272SAzvAOcIoVW+yP1akW60xtRkWtry6Fwh7vCDVQ4
4NgorL/HZC77TGKBGrGxVAzuofksY2FeMlFLvw07KiFXscd5r7QqlU+7zYLeXGNH
/lQGW1DUehvgSS/KHG930X06ZkeK/a+gkwVeiCe2pFWVdiAtIIN9AietqXCTl7lf
MJBzSaZlgHPByxMmTq/jg4wXfczL5zdqM9tjee0vT+i/t7vSKv8pami+auBdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2Q+hw2jBb9l+TqRIdFGO3IJLTJYwHwYDVR0j
BBgwFoAU2+HO79Pz8sbv7UQbnmwQ5D+duG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0
MUovMC9EQkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRTFDRUVGRDNGM0YyQzZF
RkVENDQxQjlFNkMxMEU0M0Y5REI4NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0MUovMC9E
QkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmvlRedgqJEr5seLoVqzrg2oHroWLd0XzP4K/GO+I6gkLbK5xT9+kEzywGcqp
j7UwNLMi+tR34D0owW//vC2KmUEP+PSuLus8D9n02Awoe0FsoZsJKNEFJuxPFfGU
Hbs/T0BuuE6Jf4/Wwz96UfOleF8ixKecUaVdqBIWQgSM3soeRrobnU92FTcPzkql
bdbb1dzyUGHQc2nbrCSCHIcosTxXuHscxr5JhzDoNslux3gul/WR2k/4uv8MJqIA
E4jQUh/2TvR2uDJeb1XOi+uOzKz5NuwAHiVGIvGm7ttMPwXRzpxMb09Dp/wUHyQU
4qSE1dr9+3f66s/Kbba59dY74Q==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:33:13 2026 by rpki-client