
$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft
File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json)
Hash identifier: 1HyqrWEQG6Th/MTAPS1gu/SwDoPxpXG+7GfFluDL4Hc=
Subject key identifier: C7:D9:1B:8E:54:65:09:6F:01:12:63:2A:5E:92:20:3B:86:8C:57:63
Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0
Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0
Certificate serial: 40F7D7C8CB4FE2027CCC0B8EABF30B93D7316319
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft
Manifest number: 039B
Signing time: Sun 01 Mar 2026 18:20:53 +0000
Manifest this update: Sun 01 Mar 2026 18:15:53 +0000
Manifest next update: Mon 02 Mar 2026 19:30:53 +0000
Files and hashes: 1: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: yt0+lDM6RonbzzI+RCNFz0ZkVevzaldW76EfOrBv9BY=)
2: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: fih4ghc++QxRbuMD80Tj/5rMxg3GIY59h9217dp1HLA=)
3: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: bUpM9mayFU58v4z1u76bGH1T6kn9PfHOaGVQYvWq8M8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl
rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 19:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f7:d7:c8:cb:4f:e2:02:7c:cc:0b:8e:ab:f3:0b:93:d7:31:63:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0
Validity
Not Before: Mar 1 18:15:53 2026 GMT
Not After : Mar 2 19:30:53 2026 GMT
Subject: CN=C7D91B8E5465096F0112632A5E92203B868C5763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:5a:fc:1f:12:aa:5b:d0:9c:f9:14:ad:c2:
4b:76:06:8c:96:ab:e6:c2:14:c6:82:fa:1c:f7:17:
22:1b:b7:e8:1c:d3:08:e2:e3:98:87:2f:a0:5b:5f:
20:81:f6:f2:89:31:7c:1c:1d:82:bf:1e:eb:2d:0a:
6a:ee:fa:c2:ea:1b:ed:ab:dd:e9:23:89:2c:72:5b:
0b:ce:e7:79:3a:be:60:ee:40:65:6d:1a:2a:ca:d6:
e0:c5:cf:be:b4:f6:22:2d:ea:a3:28:95:fe:39:31:
17:3a:40:fb:bf:23:bb:30:82:37:4f:93:1a:9e:4d:
0c:78:12:14:1d:d5:fa:f4:d8:31:86:db:dc:f3:a0:
ab:d4:9e:99:73:84:d6:cc:0b:fe:a3:d6:c5:5e:24:
05:a9:8b:ec:8f:13:83:16:6e:81:74:20:da:9b:17:
16:98:0d:4e:8e:44:ce:65:34:a1:78:16:1e:0f:dc:
ea:f3:2c:33:98:0e:29:c6:6c:33:bb:b8:a3:9b:06:
65:82:7d:46:f2:43:a6:bb:96:21:24:0d:98:e1:4a:
12:43:ae:ad:3f:ed:d4:d7:b1:28:a1:84:54:ac:a3:
0d:1f:25:0f:9a:09:6c:67:97:32:08:6a:6c:65:ef:
ba:02:93:11:81:95:bb:9b:4e:c9:6d:6d:ef:3c:31:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:1B:8E:54:65:09:6F:01:12:63:2A:5E:92:20:3B:86:8C:57:63
X509v3 Authority Key Identifier:
keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f3:b6:c4:d2:14:58:13:8a:86:16:9d:fe:c5:35:76:88:52:
2a:f9:0b:dc:16:13:63:56:10:8a:39:d5:5c:24:fa:03:c4:e0:
8f:21:f8:c4:b0:4c:70:c6:8c:49:e5:6f:70:00:ff:7e:91:91:
49:4e:ce:e1:c6:4c:c4:e9:45:22:a2:ef:e7:f5:68:9f:11:4f:
a6:9e:90:2d:23:c3:0a:b7:76:47:eb:bd:e4:90:6b:73:42:55:
6b:8c:4e:a2:fb:6b:11:6a:0f:67:4d:4e:04:73:1a:21:d3:2c:
56:de:5b:1f:00:30:f8:e9:7d:68:12:c4:b8:d4:0b:35:6a:e4:
04:16:d8:fc:1b:ac:53:7d:4f:d6:03:37:86:98:1c:10:21:61:
7e:94:88:a5:0f:09:a3:61:91:dd:45:9c:05:48:f3:2c:9d:ab:
14:87:94:11:8e:5c:9c:3b:87:65:21:78:95:55:fd:76:87:a2:
23:69:c3:8d:f5:37:97:87:86:22:af:94:51:fd:c5:86:f2:5b:
b7:d2:70:b5:cd:00:08:fe:11:8c:41:5d:67:8f:15:3b:fb:90:
3b:fd:61:12:94:55:b8:ad:3d:c8:e5:2e:96:74:f8:2e:03:06:
8e:6e:b2:0c:11:b8:1b:8f:70:0b:2a:43:a9:fe:2e:c0:0b:ac:
3e:30:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:09 2026 by rpki-client