
$ rpki-client -vvf rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
File: E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft (raw, json)
Hash identifier: Brxplhw0pVuH4FAFhGlCQ2Uq/+lwwvWcKzL8SfvxGww=
Subject key identifier: 3E:4D:EF:E7:9C:E2:6C:E8:AF:5D:E6:E8:C4:D0:87:75:BA:9D:8B:48
Authority key identifier: E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88
Certificate issuer: /CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
Certificate serial: 44A0690E6986C49DD47CE15E2E6D775869136F10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
Manifest number: 49
Signing time: Sun 01 Mar 2026 23:28:04 +0000
Manifest this update: Sun 01 Mar 2026 23:23:04 +0000
Manifest next update: Mon 02 Mar 2026 23:54:04 +0000
Files and hashes: 1: 3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa (hash: z5WT02ECH4y5EWMWT0olN+gx1W+kUd49Y/UkwmEGAZA=)
2: 323830343a346237633a3a2f33322d313238203d3e203238323237.roa (hash: 77iPd4aLxfm7LKUbWKYSvRhK8QjguJyfn6gRCsckjV0=)
3: E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl (hash: +VwnDD6PKH4499hBX4zpn8D9ozlcUBURIM+NnoFg6EU=)
4: 3138362e3230392e3138342e302f32312d3332203d3e203238323237.roa (hash: 8BXPK+UE4nHpvd/64ixQIyd2mZGgN5rosZbAHqmQPFk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl
rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 23:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a0:69:0e:69:86:c4:9d:d4:7c:e1:5e:2e:6d:77:58:69:13:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
Validity
Not Before: Mar 1 23:23:04 2026 GMT
Not After : Mar 2 23:54:04 2026 GMT
Subject: CN=3E4DEFE79CE26CE8AF5DE6E8C4D08775BA9D8B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:b1:85:04:48:40:4e:1e:8f:55:cd:45:dd:
63:c1:06:ac:e1:c2:66:2b:2a:02:a1:47:10:2e:ff:
99:5a:86:7e:c0:58:22:0a:56:59:ed:ce:25:d1:76:
68:aa:9a:0d:7e:a1:53:6f:0b:aa:15:0d:a1:75:8e:
cc:c7:2f:90:c6:9b:1c:ee:fd:92:f3:40:f1:96:cf:
36:a7:f0:ae:0f:8a:3e:bb:03:b0:16:c8:88:ee:b3:
54:81:28:a4:f0:d9:86:64:63:bc:a1:07:3d:87:ca:
c9:5c:28:6b:99:82:04:d3:4d:05:8e:4a:9c:44:30:
06:aa:1c:3f:7e:04:b3:61:b2:05:1e:7f:b6:54:4e:
96:e4:68:66:9f:73:7d:b8:89:b6:8b:7c:48:f2:1c:
67:a5:2b:51:0d:44:90:50:b0:cc:31:39:e0:2f:26:
a5:c8:d1:f8:4e:26:34:59:5e:30:b5:64:5f:2b:46:
02:04:a4:56:d4:71:8f:6c:f5:96:03:77:ca:99:c4:
9c:f6:71:b6:9f:4d:9e:d9:28:da:04:7b:10:52:15:
3f:e2:b5:73:a6:b0:66:02:a8:16:26:dc:31:af:4d:
55:35:73:4f:f2:f0:66:4b:f2:58:d0:fe:ba:62:2b:
34:80:29:8a:c9:a7:16:89:96:3f:4f:64:07:f9:01:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4D:EF:E7:9C:E2:6C:E8:AF:5D:E6:E8:C4:D0:87:75:BA:9D:8B:48
X509v3 Authority Key Identifier:
keyid:E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:94:e1:14:30:33:cd:58:94:29:26:e3:8b:52:65:35:d4:0b:
0c:4c:02:84:e3:c7:91:81:78:f2:e3:28:9b:ec:e0:35:7b:9c:
86:14:5c:5e:e3:10:eb:b9:5c:37:a8:3b:ce:95:84:6d:2b:4d:
67:0e:d4:73:d4:5e:1f:58:00:6c:9a:0b:72:68:e0:44:1d:3f:
8e:89:aa:dc:b5:ed:cb:65:e3:57:45:c8:24:f4:a4:f1:9b:30:
1b:57:64:c0:9a:3b:4b:be:64:f1:13:8b:8b:4d:35:67:7a:ad:
2d:7f:23:ac:12:48:11:c4:92:08:c7:cd:1e:8f:53:10:d9:4c:
4c:ee:b7:6d:7f:20:d6:23:be:16:51:00:c3:0c:28:b2:dd:7d:
23:d2:31:bb:3c:ef:b1:98:f0:78:08:51:19:7f:51:77:65:5c:
f7:a8:ab:51:2d:2a:ef:89:d5:64:bb:da:00:d5:78:b1:48:6b:
54:81:54:9c:cb:ce:25:d7:d0:d2:b5:62:41:ae:2f:75:48:9f:
23:50:a4:45:fe:fb:71:6b:91:34:32:15:0a:07:d1:88:b5:50:
ae:05:41:e3:5c:2c:a4:8d:39:8a:8f:ab:e4:54:b4:a8:03:94:
ed:30:9e:29:fe:0e:4d:67:77:35:20:6f:55:66:a7:0e:00:6c:
5f:47:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:29:48 2026 by rpki-client