
$ rpki-client -vvvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
File: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft (raw, json)
Hash identifier: CmWR70xybiUPUOFEotLGCcjWYIcRlKPI8XwFgGbxnrU=
Subject key identifier: BF:2D:CC:D8:11:99:2D:D8:38:AC:C3:60:FA:85:51:35:34:3C:EE:A6
Authority key identifier: 3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6
Certificate issuer: /CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6
Certificate serial: 6F05F7DFCDE7E04E7335155428B97E1CF0EF9C6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
Manifest number: A4
Signing time: Wed 14 Oct 2026 14:44:14 +0000
Manifest this update: Wed 14 Oct 2026 14:39:14 +0000
Manifest next update: Thu 15 Oct 2026 15:05:14 +0000
Files and hashes: 1: 34352e3138322e37362e302f32322d3234203d3e20323639323334.roa (hash: y6WkApazOcWL7P7yXx57R2acGoFqorCQklwtt2CakBE=)
2: 323830343a363137303a3a2f33322d3334203d3e20323639323334.roa (hash: GDWiVyYfYIGnY9YXPjOtHtg7fsHIeEu+qkoct3a9MEM=)
3: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl (hash: ljNUCmpm/nYy11+fHNiaei2p0f781M9kcXE31CUhMco=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl
rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 15:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:f7:df:cd:e7:e0:4e:73:35:15:54:28:b9:7e:1c:f0:ef:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6
Validity
Not Before: Oct 14 14:39:14 2026 GMT
Not After : Oct 15 15:05:14 2026 GMT
Subject: CN=BF2DCCD811992DD838ACC360FA855135343CEEA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:90:9f:20:86:b7:73:83:c7:76:ee:a0:23:
90:9d:d7:4a:3d:9b:79:8f:13:1c:78:3b:7f:21:f5:
cc:2d:86:c8:48:f5:c7:98:0b:92:fd:65:82:c7:14:
07:cc:20:fc:39:6e:16:2f:71:8e:bf:49:63:ba:3e:
ec:53:0a:2a:88:85:03:7e:d3:7a:4b:96:f6:8b:f1:
34:46:d3:17:9b:06:33:df:2a:ce:35:90:cc:29:4a:
60:e7:2f:b1:fb:91:01:0c:d1:7d:6c:eb:8e:71:68:
f2:2b:e2:95:7a:65:ea:e7:10:4c:31:1f:d2:46:31:
c7:69:1f:68:8c:f8:9a:89:84:38:d0:13:ea:54:60:
71:35:ea:fb:26:4d:db:13:5b:61:6a:57:29:55:77:
01:d5:a0:95:9a:5c:e0:1a:67:9c:65:dd:18:52:d4:
dd:98:6a:33:21:f7:35:e3:11:8d:25:ac:a3:19:05:
cf:6a:a6:f4:4f:bd:fc:16:bc:55:1e:fc:e2:7d:87:
36:c5:96:65:a2:47:43:af:48:f4:a5:00:d3:71:f2:
3f:a8:1b:e4:02:64:8a:ab:2d:c8:21:7e:2b:8c:89:
dd:4a:24:c8:79:b6:33:08:07:b6:2b:8c:f5:9e:ec:
72:0e:5d:07:80:a0:3f:85:9c:52:24:b8:20:0e:cb:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2D:CC:D8:11:99:2D:D8:38:AC:C3:60:FA:85:51:35:34:3C:EE:A6
X509v3 Authority Key Identifier:
keyid:3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0f:b2:75:4f:8f:df:a0:4c:e7:a6:83:a0:2d:98:b7:03:28:
d4:d0:25:af:9c:dc:6c:42:fa:ee:8a:da:59:38:62:88:3b:45:
a5:04:3e:8e:c1:c7:97:31:64:36:61:cf:38:3e:b4:de:a8:92:
51:d5:be:ca:e7:b1:04:e0:c2:2f:a5:3f:14:3f:53:f9:c1:19:
eb:d9:a0:00:10:24:8b:20:28:13:5d:35:ad:8d:23:64:98:f6:
32:a8:d8:ee:30:7b:31:89:d1:6f:a4:82:cd:74:69:c6:ba:76:
17:b8:64:e4:7f:41:6f:e5:09:dc:0f:99:90:7a:c0:d7:29:0f:
64:67:d4:99:09:26:d7:5b:36:b7:da:e4:07:cf:6a:01:1c:fc:
e5:13:35:e2:6b:7b:25:52:24:5b:2d:44:55:88:3b:b7:b2:66:
d0:5e:0a:6e:67:56:a3:6c:f2:ab:46:b8:b9:a3:ad:d1:62:ff:
d1:5b:d7:cb:da:a5:f8:a1:42:3e:2f:eb:33:81:27:eb:80:b2:
6b:49:e0:a5:dc:ff:7f:88:95:95:8a:3a:29:21:4c:2b:b5:ef:
1b:89:93:1f:92:37:e8:60:13:8f:1b:09:16:f6:20:9a:d2:bd:
de:21:d5:b2:d6:85:8a:68:d0:b5:74:08:a7:e7:67:7e:a1:8d:
97:be:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:20:19 2026 by rpki-client