
$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
File: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft (raw, json)
Hash identifier: Qrys1GsdcHhJsX+qSpxFqlvJhtsfEC5iFANS0GZpupM=
Subject key identifier: D1:52:B8:D3:54:3F:98:F0:C3:04:BD:AD:26:38:45:54:75:EB:E3:00
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Certificate issuer: /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial: 3E39700DE3E0BEC61D64244091E8A818B42BA189
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
Manifest number: 0228
Signing time: Mon 02 Mar 2026 03:14:08 +0000
Manifest this update: Mon 02 Mar 2026 03:09:08 +0000
Manifest next update: Tue 03 Mar 2026 03:40:08 +0000
Files and hashes: 1: 323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (hash: H7CJpmPO9KYi+Vq6jKCbyTcdFDbnUWEpudbgUvYtP1Q=)
2: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl (hash: xqLMxfOU+MBINJiqm5iyaoZcbXQ5idUlu84RGAQr7to=)
3: 34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (hash: /PhRabyzTpLl9Iw9YQ2c6JL/HrTR4sj8vatQDMBiKxA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 03:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:39:70:0d:e3:e0:be:c6:1d:64:24:40:91:e8:a8:18:b4:2b:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Validity
Not Before: Mar 2 03:09:08 2026 GMT
Not After : Mar 3 03:40:08 2026 GMT
Subject: CN=D152B8D3543F98F0C304BDAD2638455475EBE300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:f4:50:84:91:e7:69:a5:93:91:90:4f:02:
f4:0f:f2:55:6d:d0:44:98:0f:97:0b:22:74:76:26:
56:74:cc:eb:40:03:5b:52:9b:3e:4b:7a:02:c7:a3:
75:03:90:0a:fb:00:e7:38:80:2a:57:13:62:05:eb:
76:a6:94:4f:33:7b:7f:74:d5:ef:e7:2f:64:0f:7e:
61:9d:5d:97:fa:19:54:3d:11:06:3a:b0:22:96:af:
32:c3:5a:2d:46:c3:a0:69:fd:d6:bf:0e:4c:f1:ae:
45:f2:01:a7:b8:31:f2:cb:3d:9b:c9:a8:73:5a:78:
9f:31:5d:73:03:52:ac:d1:78:00:b4:47:15:c2:bc:
f4:a9:3a:0a:70:6d:d3:c7:60:21:47:6b:c3:24:4e:
4a:e9:89:ba:e4:7e:8d:18:70:36:f3:cf:e5:a0:d7:
05:d8:53:c2:48:a4:3b:fb:a8:ce:52:1f:9a:85:0d:
0f:8d:db:e4:32:3e:1d:9b:67:32:d7:64:79:d0:26:
f2:0c:6a:f3:6a:49:1e:8e:30:a3:9c:0a:2e:3f:f8:
d0:11:6a:57:73:fc:fb:dd:79:12:15:2a:e2:22:8e:
e6:df:76:28:bc:fa:cc:a1:69:a9:ab:e9:d7:9b:cb:
b5:f7:76:d3:32:16:eb:1c:9d:e7:5e:d5:f4:ce:b2:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:52:B8:D3:54:3F:98:F0:C3:04:BD:AD:26:38:45:54:75:EB:E3:00
X509v3 Authority Key Identifier:
keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:41:c3:6a:26:5f:40:b2:d9:33:85:d3:5a:f4:c0:01:4e:dc:
e1:44:c4:ed:46:73:78:86:2f:e4:87:e4:9a:7b:a8:70:3d:b8:
d3:12:bc:bc:bb:89:bb:83:26:73:49:d4:6c:c4:44:6e:85:11:
10:49:d4:73:98:e2:ff:01:35:66:10:35:10:4f:fa:bc:3a:da:
12:f9:06:b9:9e:f7:46:fd:7e:13:09:50:95:86:5f:70:e7:da:
57:0a:0b:69:c8:76:f7:18:41:6d:c3:8a:8b:fc:0e:2c:8a:e4:
ca:59:8c:dc:e0:52:25:b2:cc:4b:e8:2b:e4:eb:9a:5a:b1:53:
fe:f7:04:a7:66:dd:22:9b:ab:e4:33:48:73:40:f7:fd:f8:e2:
62:8c:f6:c6:e2:1e:e1:6f:98:dc:be:11:18:e6:fd:c7:16:f8:
6d:59:b3:14:c5:11:ca:7b:16:31:d1:0e:6d:fd:fb:9d:f0:13:
f8:1e:fe:11:27:98:fb:07:4c:32:83:22:52:3b:e4:59:a5:1e:
d9:ad:ef:9f:8d:69:98:4d:8a:7a:66:08:51:d6:5c:d3:ac:d3:
7e:60:e9:e7:bf:0e:4c:77:02:ac:a4:97:68:ce:ed:3b:48:e7:
e3:1e:32:f7:65:dc:8a:55:74:63:b2:6c:a7:a0:85:d3:c3:77:
28:f6:24:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPjlwDePgvsYdZCRAkeioGLQroYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJGMDNDQUNCNTdFQzlDMzJEQjk3QUJENzk3RDgxRTJB
QkM4MjkyQTAeFw0yNjAzMDIwMzA5MDhaFw0yNjAzMDMwMzQwMDhaMDMxMTAvBgNV
BAMTKEQxNTJCOEQzNTQzRjk4RjBDMzA0QkRBRDI2Mzg0NTU0NzVFQkUzMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtB/RQhJHnaaWTkZBPAvQP8lVt
0ESYD5cLInR2JlZ0zOtAA1tSmz5LegLHo3UDkAr7AOc4gCpXE2IF63amlE8ze390
1e/nL2QPfmGdXZf6GVQ9EQY6sCKWrzLDWi1Gw6Bp/da/DkzxrkXyAae4MfLLPZvJ
qHNaeJ8xXXMDUqzReAC0RxXCvPSpOgpwbdPHYCFHa8MkTkrpibrkfo0YcDbzz+Wg
1wXYU8JIpDv7qM5SH5qFDQ+N2+QyPh2bZzLXZHnQJvIMavNqSR6OMKOcCi4/+NAR
aldz/PvdeRIVKuIijubfdii8+syhaamr6deby7X3dtMyFuscnede1fTOst6VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0VK401Q/mPDDBL2tJjhFVHXr4wAwHwYDVR0j
BBgwFoAUcvA8rLV+ycMtuXq9eX2B4qvIKSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZM
N3MvMC83MkYwM0NBQ0I1N0VDOUMzMkRCOTdBQkQ3OTdEODFFMkFCQzgyOTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRjAzQ0FDQjU3RUM5QzMy
REI5N0FCRDc5N0Q4MUUyQUJDODI5MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZMN3MvMC83
MkYwM0NBQ0I1N0VDOUMzMkRCOTdBQkQ3OTdEODFFMkFCQzgyOTJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF0HDaiZfQLLZM4XTWvTAAU7c4UTE7UZzeIYv5IfkmnuocD240xK8vLuJu4Mm
c0nUbMREboUREEnUc5ji/wE1ZhA1EE/6vDraEvkGuZ73Rv1+EwlQlYZfcOfaVwoL
ach29xhBbcOKi/wOLIrkylmM3OBSJbLMS+gr5OuaWrFT/vcEp2bdIpur5DNIc0D3
/fjiYoz2xuIe4W+Y3L4RGOb9xxb4bVmzFMURynsWMdEObf37nfAT+B7+ESeY+wdM
MoMiUjvkWaUe2a3vn41pmE2KemYIUdZc06zTfmDp578OTHcCrKSXaM7tO0jn4x4y
92XcilV0Y7Jsp6CF08N3KPYkbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:59 2026 by rpki-client