
$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json)
Hash identifier: AaYMw6JS5x8uG8/rrWQ3JH5FxjxV7FmfA8ASWKQiAyE=
Subject key identifier: E1:77:6C:13:63:7C:C6:CF:FE:A5:15:37:F8:AE:CD:69:A9:D6:CD:58
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial: 3498C0F2F81ABEA9CFD2E0DC4C5F1EB799074655
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
Manifest number: 03AE
Signing time: Mon 02 Mar 2026 12:22:50 +0000
Manifest this update: Mon 02 Mar 2026 12:17:50 +0000
Manifest next update: Tue 03 Mar 2026 16:07:50 +0000
Files and hashes: 1: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: 4ktFAvznTa/feIjjnAE9R6TDdpZg3L05EUvZaVqHxh4=)
2: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=)
3: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=)
4: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 16:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:98:c0:f2:f8:1a:be:a9:cf:d2:e0:dc:4c:5f:1e:b7:99:07:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Validity
Not Before: Mar 2 12:17:50 2026 GMT
Not After : Mar 3 16:07:50 2026 GMT
Subject: CN=E1776C13637CC6CFFEA51537F8AECD69A9D6CD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:cd:b6:50:ef:81:3b:8e:14:67:37:92:cf:
69:55:c1:a3:25:31:e7:81:d4:16:54:9f:1a:f1:3e:
1f:d6:6a:c5:b3:4c:67:ec:76:85:4e:3d:39:0b:db:
6b:fa:69:04:43:8d:36:df:0f:80:29:64:8c:34:a1:
94:26:8f:1c:07:63:84:d6:1d:dd:9e:ed:f5:7f:83:
05:60:3b:c2:4b:60:15:42:e9:df:96:a2:a2:68:8d:
33:86:23:d5:5d:cb:86:77:f6:45:66:6f:87:ee:d8:
38:c5:f8:37:41:43:7c:85:1e:f1:fa:bf:6a:b5:d1:
d3:86:ea:ba:00:48:3d:9f:22:cd:62:23:4f:c2:a9:
c4:3a:d5:e5:2b:4b:5b:37:8b:91:a5:ea:6f:12:62:
ca:ed:e9:1a:93:6d:b0:99:1b:f9:c3:56:2d:cb:35:
68:51:18:ad:18:50:31:39:1b:eb:b8:47:97:af:d8:
9d:70:dd:92:c2:73:e5:e4:b2:f0:ab:44:9e:62:8e:
4e:d2:1e:78:1c:5d:aa:d6:b0:7c:49:46:07:67:22:
2b:ee:9e:bc:f6:42:4a:b9:a4:8e:cd:8f:6d:32:98:
64:2b:04:d0:6d:08:76:b8:0d:99:7e:e7:e8:5a:ee:
b5:ed:c7:a2:ba:da:a2:06:91:aa:b6:09:e1:d1:bc:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:6C:13:63:7C:C6:CF:FE:A5:15:37:F8:AE:CD:69:A9:D6:CD:58
X509v3 Authority Key Identifier:
keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ce:b4:b4:2e:fc:85:68:91:21:a3:84:5e:cb:ef:8a:52:8b:
b1:84:b9:81:00:a6:b4:eb:64:b4:e3:b9:25:b6:73:fe:9d:f7:
df:aa:11:19:31:80:74:54:af:38:e9:8d:22:9e:c0:8a:3c:41:
1f:25:4a:72:8b:a6:35:a5:cd:02:72:f4:67:b1:1a:3f:82:64:
0f:b6:e7:7b:27:cb:23:41:07:45:22:e6:45:b3:01:3d:d5:7c:
5f:40:fd:f0:22:c3:1b:e4:13:68:c1:d3:fa:2a:b3:33:b3:b8:
0f:b9:45:26:30:58:25:6d:06:46:55:a6:f4:51:b5:70:37:7b:
c2:34:1f:a9:08:aa:87:49:78:2a:fd:0e:35:c1:94:f6:cc:c2:
bf:01:22:7b:71:9b:e6:b1:cf:0f:c7:ce:23:59:1c:61:1d:2b:
b2:d1:15:d4:a8:85:a8:aa:ac:7b:23:44:fc:72:b0:40:68:16:
e5:a5:ea:11:91:17:26:ac:d7:8c:02:d0:69:eb:c4:14:2d:87:
b5:25:50:6c:eb:10:09:8a:8a:c5:84:7b:65:89:f0:b8:26:a5:
01:7e:f4:0f:56:a9:b6:9a:12:1f:4e:fa:9c:df:de:fb:e4:30:
12:36:14:2e:a7:c1:fe:a0:70:53:08:3a:9d:07:fa:87:35:56:
9c:b6:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:51 2026 by rpki-client