
$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
File: 0673A8A85FD75BDF7374650633566E470F5D792A.mft (raw, json)
Hash identifier: f/X4WSyfWOYmDujleKPlZ2tGELAncUSvN5izygg1qH4=
Subject key identifier: D3:50:D3:A4:EA:B7:9F:77:99:28:3C:12:7F:16:18:72:A3:E7:86:21
Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A
Certificate issuer: /CN=0673A8A85FD75BDF7374650633566E470F5D792A
Certificate serial: 19E216017082DD20EBD299D5BC96582A5E3CECFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
Manifest number: A1
Signing time: Mon 02 Mar 2026 20:45:00 +0000
Manifest this update: Mon 02 Mar 2026 20:40:00 +0000
Manifest next update: Tue 03 Mar 2026 22:57:00 +0000
Files and hashes: 1: 323830343a313631343a3a2f33322d3438203d3e20323633323636.roa (hash: H1ySD22gAkwKaQwiOrw+K7D23u1auOLZ3TSQPkOCeyw=)
2: 0673A8A85FD75BDF7374650633566E470F5D792A.crl (hash: EqkZmiNyjLwskJvq107NwA5otbZ2hGDlU3UF/KtzZYM=)
3: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (hash: RF38Bjpp823JDXqLKsrAUYWB/3BPbPZ7MdCkTro+SRU=)
4: 3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (hash: Upe0YPCzHj4GTIrllXLlAxIfLTx07Sm8YoEmbCifd8I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl
rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 22:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e2:16:01:70:82:dd:20:eb:d2:99:d5:bc:96:58:2a:5e:3c:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A
Validity
Not Before: Mar 2 20:40:00 2026 GMT
Not After : Mar 3 22:57:00 2026 GMT
Subject: CN=D350D3A4EAB79F7799283C127F161872A3E78621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:87:f9:4b:a1:f2:19:7e:49:1c:8c:26:3c:2d:
42:4e:80:53:38:59:80:45:ce:38:32:1f:6a:3f:48:
81:a8:dc:d4:2c:17:b2:d6:88:f6:25:42:9e:b6:e6:
db:8f:d3:06:6d:9f:c7:65:97:ef:64:aa:78:43:55:
0b:c7:e8:b5:9b:83:df:8d:81:14:c9:73:56:48:79:
1d:68:9b:20:32:e2:b4:ad:a6:38:27:95:9b:e9:30:
bf:77:a8:04:03:de:1c:75:b7:dc:79:86:fa:11:e2:
60:51:3f:27:ef:2e:58:6c:d9:7a:b6:26:ff:55:85:
a7:4e:78:9b:ae:05:44:91:91:51:19:a5:17:de:e8:
cf:8c:5c:41:1c:c4:d5:ed:5b:ba:5a:44:72:4a:a8:
86:ec:5d:7f:77:e5:dc:07:47:65:1b:3b:e3:d8:68:
87:97:6f:78:33:0c:f0:67:f6:23:a0:4a:3a:0a:9a:
e2:07:43:96:22:0d:35:d1:a7:ab:74:86:fc:12:c6:
39:e5:33:39:fb:30:fa:f7:d7:ed:fe:7e:e5:46:e2:
65:4d:3e:11:e9:a3:67:df:6c:ee:51:8b:70:da:b6:
f8:7c:22:c0:f9:96:05:b0:bc:07:bd:99:21:73:12:
22:95:b4:fb:28:38:e3:ef:d8:93:c6:4d:5c:88:c5:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:D3:A4:EA:B7:9F:77:99:28:3C:12:7F:16:18:72:A3:E7:86:21
X509v3 Authority Key Identifier:
keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b3:0d:5c:eb:82:85:67:9e:6a:80:06:bb:b9:f6:6e:55:12:
9b:e4:f0:c0:c5:50:90:6c:92:3e:1c:a2:dd:76:ee:ea:b7:96:
c3:28:c9:04:0b:0a:3b:a3:6d:4a:1c:e6:5d:e4:1c:c3:2f:71:
bd:bc:a8:4e:a1:f1:14:81:b0:6f:f2:05:21:54:59:c9:15:39:
f7:5f:07:b8:47:28:54:61:24:ba:ec:f4:6b:57:e8:8a:4a:04:
90:59:bf:a2:9d:54:b9:6c:92:21:bf:2f:0d:a7:ce:69:6b:96:
9b:c7:20:a9:6b:0f:6f:cd:d2:1d:de:83:09:86:1e:95:86:a9:
b6:fd:af:7a:97:9f:54:80:f5:98:3b:3d:1c:56:db:da:c5:f9:
29:2f:ae:3d:a4:57:86:a8:2e:f7:b4:96:54:64:04:75:8a:b1:
af:9c:09:ba:52:1d:6e:a7:62:ae:f5:a3:e3:80:2e:43:75:03:
6c:50:f5:0a:ed:79:61:82:b1:75:bf:16:83:6c:8b:9c:4b:3b:
57:1e:ad:b2:db:54:7e:54:1c:cf:9d:1b:f7:3d:7c:a7:6e:65:
5e:46:fd:d9:f6:d0:4e:ee:7d:a1:e7:04:04:ce:a5:21:0b:f8:
a0:5f:d4:8e:63:c0:d7:1a:1e:a9:cf:03:c6:b1:bf:df:7d:4c:
55:df:6b:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGeIWAXCC3SDr0pnVvJZYKl487P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY3M0E4QTg1RkQ3NUJERjczNzQ2NTA2MzM1NjZFNDcw
RjVENzkyQTAeFw0yNjAzMDIyMDQwMDBaFw0yNjAzMDMyMjU3MDBaMDMxMTAvBgNV
BAMTKEQzNTBEM0E0RUFCNzlGNzc5OTI4M0MxMjdGMTYxODcyQTNFNzg2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0h/lLofIZfkkcjCY8LUJOgFM4
WYBFzjgyH2o/SIGo3NQsF7LWiPYlQp625tuP0wZtn8dll+9kqnhDVQvH6LWbg9+N
gRTJc1ZIeR1omyAy4rStpjgnlZvpML93qAQD3hx1t9x5hvoR4mBRPyfvLlhs2Xq2
Jv9VhadOeJuuBUSRkVEZpRfe6M+MXEEcxNXtW7paRHJKqIbsXX935dwHR2UbO+PY
aIeXb3gzDPBn9iOgSjoKmuIHQ5YiDTXRp6t0hvwSxjnlMzn7MPr31+3+fuVG4mVN
PhHpo2ffbO5Ri3Datvh8IsD5lgWwvAe9mSFzEiKVtPsoOOPv2JPGTVyIxRl7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU01DTpOq3n3eZKDwSfxYYcqPnhiEwHwYDVR0j
BBgwFoAUBnOoqF/XW99zdGUGM1ZuRw9deSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1Jn
ZTIvMC8wNjczQThBODVGRDc1QkRGNzM3NDY1MDYzMzU2NkU0NzBGNUQ3OTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NzNBOEE4NUZENzVCREY3
Mzc0NjUwNjMzNTY2RTQ3MEY1RDc5MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC8w
NjczQThBODVGRDc1QkRGNzM3NDY1MDYzMzU2NkU0NzBGNUQ3OTJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAebMNXOuChWeeaoAGu7n2blUSm+TwwMVQkGySPhyi3Xbu6reWwyjJBAsKO6Nt
ShzmXeQcwy9xvbyoTqHxFIGwb/IFIVRZyRU5918HuEcoVGEkuuz0a1foikoEkFm/
op1UuWySIb8vDafOaWuWm8cgqWsPb83SHd6DCYYelYaptv2vepefVID1mDs9HFbb
2sX5KS+uPaRXhqgu97SWVGQEdYqxr5wJulIdbqdirvWj44AuQ3UDbFD1Cu15YYKx
db8Wg2yLnEs7Vx6tsttUflQcz50b9z18p25lXkb92fbQTu59oecEBM6lIQv4oF/U
jmPA1xoeqc8DxrG/331MVd9rvw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:43:33 2026 by rpki-client