
$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.mft
File: 9128FD2FB3F69083F597C7967074F15DFCAC3130.mft (raw, json)
Hash identifier: BlnvoA1hJcKRfS/26Cuy12evu5CdBgdLO++CkBzTZTg=
Subject key identifier: 50:6D:A1:26:33:74:34:00:B0:6A:8A:89:A2:A6:08:E4:FF:87:B8:0F
Authority key identifier: 91:28:FD:2F:B3:F6:90:83:F5:97:C7:96:70:74:F1:5D:FC:AC:31:30
Certificate issuer: /CN=9128FD2FB3F69083F597C7967074F15DFCAC3130
Certificate serial: 61303758F95E2FAE2C3AC0372E596377755E59A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.mft
Manifest number: 021B
Signing time: Fri 17 Apr 2026 07:43:57 +0000
Manifest this update: Fri 17 Apr 2026 07:38:57 +0000
Manifest next update: Sat 18 Apr 2026 07:54:57 +0000
Files and hashes: 1: 9128FD2FB3F69083F597C7967074F15DFCAC3130.crl (hash: chkeS9uP7KECTISx6tZjMBAwEwRsxcF1NJQbAI4x5cM=)
2: 3137392e36332e3136302e302f32322d3233203d3e20323731363530.roa (hash: 5qGtAuoSpIlHyh4cIyNUzt+45zUXS9kMuwCJf446d6M=)
3: 323830343a376564343a3a2f33322d3332203d3e20323731363530.roa (hash: iZp3WPUcPgnd2HtMIJCbf7nasvDi8poz/LTEUPuGhlY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.crl
rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 07:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:30:37:58:f9:5e:2f:ae:2c:3a:c0:37:2e:59:63:77:75:5e:59:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9128FD2FB3F69083F597C7967074F15DFCAC3130
Validity
Not Before: Apr 17 07:38:57 2026 GMT
Not After : Apr 18 07:54:57 2026 GMT
Subject: CN=506DA12633743400B06A8A89A2A608E4FF87B80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:77:fa:a3:a5:e8:d9:52:e2:d8:2a:d5:3f:
71:83:65:98:7f:6e:0a:86:8f:39:d2:50:6d:49:90:
69:28:54:90:9a:7a:06:82:5a:72:47:dc:1d:75:b5:
bc:8e:46:90:80:09:b2:86:a8:39:f9:a7:3a:be:eb:
77:23:84:b6:14:54:20:fd:4d:06:ca:46:91:d5:be:
21:4a:d0:c9:18:d8:19:1f:cc:ca:7b:4f:fe:40:4f:
90:d0:dc:46:3c:eb:5e:a3:d8:bd:39:f9:9c:fc:3e:
b6:0c:e2:2b:09:dd:97:a5:37:3b:8b:f0:8d:79:0c:
08:9e:a6:97:c3:c7:b4:56:06:0a:b1:cf:82:e4:af:
f5:6c:e7:32:a0:13:5f:7a:a6:75:08:70:fe:88:47:
08:6c:5b:06:72:54:31:90:4c:51:1a:04:76:62:4b:
9b:d3:3e:f1:35:b9:29:2a:59:56:21:8a:6b:65:5e:
e6:65:8d:3f:2b:39:ed:00:9b:43:ba:fa:d0:7e:eb:
40:79:9a:33:25:03:ed:a4:a6:6b:2c:38:8a:83:83:
5e:e6:44:35:3b:19:cf:40:58:63:ae:53:14:ed:14:
ce:6b:d4:b7:a8:17:66:84:43:9b:d6:31:c2:f9:b9:
18:9d:3d:99:56:d7:a5:06:bb:5e:24:25:bf:41:8d:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6D:A1:26:33:74:34:00:B0:6A:8A:89:A2:A6:08:E4:FF:87:B8:0F
X509v3 Authority Key Identifier:
keyid:91:28:FD:2F:B3:F6:90:83:F5:97:C7:96:70:74:F1:5D:FC:AC:31:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c4:c0:86:79:10:70:3b:71:33:36:a7:05:4b:bd:b7:28:ca:
ff:a1:0f:1f:a9:b9:65:f7:54:ad:95:6d:46:02:40:c9:f6:0a:
ea:1b:f9:07:24:59:31:20:f8:fa:86:38:ec:08:f4:33:fa:01:
1a:8b:e2:cc:50:12:47:4d:3c:39:b5:36:0c:8f:4e:05:af:6c:
42:c7:01:64:12:d1:9f:4f:0b:91:0c:56:d3:e3:70:a7:d0:98:
39:2f:f9:6f:fd:34:61:af:78:4d:28:04:61:65:3c:fc:5f:70:
1e:e8:26:39:ef:cb:49:c3:90:7f:ee:84:1d:49:99:29:c1:a1:
4b:fd:f9:d5:2f:df:88:15:8e:73:16:70:8f:df:92:05:af:36:
ba:03:f3:b8:25:ff:c8:bd:30:de:b2:00:1a:89:e0:a9:9d:c9:
8b:1d:ee:71:7b:36:58:63:63:16:44:74:d3:68:6d:72:c7:ec:
86:99:c8:9d:cd:23:56:09:1b:f1:fd:a7:fb:3d:42:bd:c4:32:
0a:5f:29:70:ff:6a:e0:54:f6:5f:21:b5:a0:af:11:93:a1:51:
64:53:91:ff:6d:41:e6:ad:d5:5d:82:49:42:79:3b:3b:e5:3f:
54:88:06:7a:71:d5:91:12:c8:e8:33:b5:29:2d:48:22:3d:60:
86:80:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:20 2026 by rpki-client