
$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json)
Hash identifier: ykR6IcVVo/LCtmuzF6IBCUOcAWqHY3h0Ls22l4a7Kng=
Subject key identifier: BD:F4:AF:75:7A:42:45:AB:90:D1:C4:A7:42:27:92:5B:45:FF:0B:23
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial: 14FA6EF137EB09E7EB555FF4ED2866453CC57AC2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
Manifest number: 02D4
Signing time: Fri 17 Apr 2026 04:56:13 +0000
Manifest this update: Fri 17 Apr 2026 04:51:13 +0000
Manifest next update: Sat 18 Apr 2026 08:32:13 +0000
Files and hashes: 1: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=)
2: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=)
3: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=)
4: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=)
5: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: ShH9A8tPl/hAlRlhNsU4d8d/17KIkrmKWKCNXwhhdpw=)
6: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 08:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:6e:f1:37:eb:09:e7:eb:55:5f:f4:ed:28:66:45:3c:c5:7a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Validity
Not Before: Apr 17 04:51:13 2026 GMT
Not After : Apr 18 08:32:13 2026 GMT
Subject: CN=BDF4AF757A4245AB90D1C4A74227925B45FF0B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:70:6a:62:b5:44:5b:f2:b7:ac:41:6a:9c:
2e:94:3c:33:77:01:7f:51:e1:4c:a7:c2:e9:51:1b:
ae:ce:e1:9c:88:fb:c7:18:de:88:89:f6:12:23:5e:
9a:b7:ba:56:2e:67:f0:3a:8e:77:5e:9b:c7:f8:c0:
d6:67:fc:8e:a4:ac:8a:16:67:6d:71:19:22:07:a1:
aa:a3:73:89:62:7b:45:b1:26:44:6a:45:9b:56:6c:
dc:45:8d:63:df:98:c8:85:09:ad:bf:8d:a0:6b:77:
aa:62:37:c8:37:24:bb:4d:6e:f6:02:34:4b:72:4d:
c5:e7:2a:ec:40:d9:b4:28:ab:a2:94:60:1f:bf:04:
6a:ec:62:e4:21:7e:a9:3d:d3:f3:ae:ab:7f:c6:7d:
08:53:d2:2f:87:68:65:a3:ca:2a:73:67:60:e1:e5:
3d:57:08:4e:75:e4:df:5d:23:bf:c8:23:f2:1e:18:
c0:69:da:ff:8a:88:42:81:ae:de:67:a5:81:98:b7:
0d:c2:ff:9e:4a:0f:c9:a7:d0:40:e0:b7:0c:83:71:
c9:46:89:ef:d0:21:69:4a:d7:d3:d6:44:b0:c6:9f:
7d:92:59:c2:ba:c0:b5:ca:38:d8:11:03:71:06:05:
58:97:63:26:31:7a:14:a6:d2:90:ea:5d:f5:f7:25:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:AF:75:7A:42:45:AB:90:D1:C4:A7:42:27:92:5B:45:FF:0B:23
X509v3 Authority Key Identifier:
keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:d6:04:c5:09:21:4c:cc:02:47:f9:e2:f0:60:12:9c:e5:
c3:d0:a0:b2:00:19:1a:db:56:bd:86:77:63:09:63:25:7d:b8:
05:4f:3e:f4:73:a4:f5:38:fa:3c:73:28:9b:84:9e:a8:38:b2:
17:f8:d2:8f:21:06:1a:a6:2e:d2:2d:1b:0a:a7:38:5f:19:d8:
fc:7b:09:37:0e:5d:2f:7d:8b:ce:be:ce:56:bf:d5:53:67:ab:
c5:8b:e1:ed:6c:0f:0a:f5:7c:ed:91:4f:f2:cf:3d:08:98:42:
cc:ef:23:69:60:5e:00:4a:8f:56:41:52:68:89:03:c4:94:9d:
df:11:d3:c3:e2:b4:c4:2a:6f:c6:6e:f1:7c:f5:f0:4b:63:ad:
22:bf:ac:e9:52:46:28:b2:99:b6:77:1e:3f:93:9e:26:5e:08:
7a:ea:8a:e5:b4:20:0b:72:8f:93:71:fa:e6:b9:fe:6c:ec:ca:
37:ef:01:ef:be:e4:11:b7:f5:20:d5:13:ac:83:4f:70:c0:16:
99:fb:4d:ea:17:ea:7e:c8:0d:e2:d9:8d:de:16:10:ff:1d:3c:
32:c5:fe:82:6e:a6:a6:5a:c0:cc:d8:f0:43:ba:70:3b:d8:6a:
95:84:3a:ac:3b:db:1b:84:37:92:03:e9:34:66:f3:72:00:de:
90:9c:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:51:59 2026 by rpki-client