
$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json)
Hash identifier: W3ZqkDiTCU1XqFOeok6KQiyoLYcRxDhFD/pyCT7PX4k=
Subject key identifier: 83:4E:FC:AB:34:0F:EF:2E:49:74:AC:AA:EE:57:31:9C:0D:EC:62:16
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial: 582E9CF42F45A397417E76EEBF115D499B84232B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
Manifest number: 0127
Signing time: Mon 02 Mar 2026 08:21:25 +0000
Manifest this update: Mon 02 Mar 2026 08:16:25 +0000
Manifest next update: Tue 03 Mar 2026 09:04:25 +0000
Files and hashes: 1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: Sc0TL3nXouas4NILi6j3eYgBNZyHAKDr4SPYmuYj08w=)
2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 09:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2e:9c:f4:2f:45:a3:97:41:7e:76:ee:bf:11:5d:49:9b:84:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Validity
Not Before: Mar 2 08:16:25 2026 GMT
Not After : Mar 3 09:04:25 2026 GMT
Subject: CN=834EFCAB340FEF2E4974ACAAEE57319C0DEC6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:73:65:98:dd:28:c9:6b:f4:ef:fb:77:75:
aa:a6:ce:7e:46:4a:e8:c6:92:18:43:b0:17:a2:7e:
ef:9b:6d:b7:22:0a:fc:dc:75:70:46:9e:17:98:92:
4a:37:3f:aa:c2:63:8c:9a:72:8e:b9:8e:f7:ad:6e:
a1:c6:1d:5b:95:83:1a:27:71:4d:71:66:73:ea:1b:
56:3b:98:0d:be:a2:5a:bd:16:e6:14:8c:73:ba:68:
23:30:f6:ae:c5:eb:89:8c:5f:02:ae:65:30:61:80:
99:46:e7:33:d8:c0:5c:e9:87:88:a9:db:66:09:98:
20:f1:ac:03:71:72:0a:6b:54:63:c7:1f:b9:5c:ca:
92:35:c6:96:9b:80:2c:c9:ac:d4:e1:f1:c1:c0:de:
67:4e:02:26:68:71:55:ac:75:ae:90:88:3c:a3:a2:
f6:c2:d0:04:82:7e:95:7e:78:b3:65:1c:21:96:99:
3e:16:bf:54:c2:bb:0b:b2:5a:7d:d7:dd:74:72:24:
56:ec:10:82:d6:fc:c2:09:c6:de:8d:a2:1d:b1:82:
9e:da:2d:55:9a:73:c4:6f:36:9b:42:46:bb:b1:80:
5f:f7:fc:b5:07:f7:bf:48:12:af:66:7a:88:74:3e:
ac:2d:3d:50:d5:11:b9:2a:69:b2:2e:67:9e:3a:11:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4E:FC:AB:34:0F:EF:2E:49:74:AC:AA:EE:57:31:9C:0D:EC:62:16
X509v3 Authority Key Identifier:
keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:04:02:97:06:6d:37:4a:67:68:97:7d:a5:96:12:38:08:a3:
9e:68:96:0f:6f:93:c9:85:c1:d8:19:95:d7:45:2f:1d:40:e8:
f6:3f:9e:d9:ee:45:cd:7d:fb:3d:cd:33:ae:6b:b8:8a:00:51:
af:b5:1a:d5:dc:d1:f1:37:3c:84:48:f9:e3:fc:7d:7d:e4:e0:
93:c9:ff:ea:06:b6:6a:f7:69:d6:89:9a:12:ea:7b:b9:c2:79:
dc:23:b7:1c:47:3e:8b:17:86:ce:01:1c:cb:a8:d9:8a:ad:a3:
19:20:c2:b3:30:53:df:23:5a:c8:e3:4f:f4:99:da:ba:66:7e:
9e:59:9c:4b:13:02:e4:5b:0f:63:91:4d:7a:44:62:80:9f:90:
da:88:2d:bc:d7:3e:b2:5a:c7:07:e4:cd:15:b0:f9:74:ad:27:
73:f6:0b:d1:fe:bc:ed:ec:16:e9:3c:09:a1:1f:91:12:76:3e:
be:03:93:c4:b2:12:ff:57:1a:bb:28:ee:d8:b1:e3:aa:aa:81:
02:1f:7d:12:02:f3:16:08:35:ec:dc:9f:2a:c9:90:80:69:0b:
d8:df:2d:c8:04:b5:d6:e1:f6:1f:d2:25:5e:38:fa:f4:e1:14:
31:d3:a4:0a:f5:a0:04:2c:db:76:10:e9:95:f6:28:99:41:7f:
3c:d3:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:56 2026 by rpki-client