
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier: yWDTDmhET/eAZCYR5j5StqgUtPuP0YSSMhgjR3d52F0=
Subject key identifier: CB:BB:ED:9D:5F:83:3D:90:AC:99:0A:27:E2:BE:CB:B2:AE:11:D3:9B
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 2211D74E9AEFEAD55B29788E250A89DD6DFDA0BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number: 03A1
Signing time: Sun 01 Mar 2026 21:33:52 +0000
Manifest this update: Sun 01 Mar 2026 21:28:52 +0000
Manifest next update: Tue 03 Mar 2026 00:16:52 +0000
Files and hashes: 1: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: EMY7ACk9sbLub0X3SxO0YqKt5gY47emPLv4YutJkq34=)
2: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: ncwTOoc+mNDVBWX1XYsqLYEaCqb03rAmAt6444aTZMo=)
3: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: HH80gMvMCHmEDWf+tt5FXPQLxoGNqhj/p0AifwqPBJM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 00:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:11:d7:4e:9a:ef:ea:d5:5b:29:78:8e:25:0a:89:dd:6d:fd:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Mar 1 21:28:52 2026 GMT
Not After : Mar 3 00:16:52 2026 GMT
Subject: CN=CBBBED9D5F833D90AC990A27E2BECBB2AE11D39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:f7:8b:3a:73:55:fe:23:41:27:6f:ec:04:
27:a7:43:c8:d0:48:74:7e:55:eb:88:c5:76:02:38:
55:ba:8e:ee:fd:c7:62:42:8b:e6:dc:d1:93:4d:38:
09:ce:06:70:6e:52:b4:a1:90:5e:d0:ad:8f:d8:1f:
cb:d5:23:fa:9e:40:a0:32:f7:42:01:68:fd:a0:a4:
a0:c1:4f:19:9b:c5:26:85:1b:7d:a7:49:80:68:c1:
52:d7:a5:3b:67:0c:ce:ba:ad:c7:b1:47:50:47:86:
14:b7:1c:b5:0e:f6:ec:a0:c0:9d:08:0b:da:64:4a:
c2:59:fb:ba:41:1f:63:0c:5a:ff:1a:eb:8b:7b:e1:
b0:1d:0c:23:26:14:f1:7b:a2:48:ac:64:57:e3:47:
ea:13:00:d6:fc:24:09:1d:da:09:55:86:ca:62:0f:
a4:aa:ea:cf:52:3a:a6:99:f1:60:8a:25:ba:4e:7f:
50:16:c5:46:6d:e5:32:e7:6b:e3:95:41:9f:75:49:
fe:ae:15:8a:31:39:4d:62:ff:da:0b:a2:a2:26:de:
d4:5b:64:a6:90:47:c6:0c:99:ee:6d:2f:59:07:1f:
10:7c:f2:90:70:87:5d:d4:cf:6d:79:e8:6e:55:4d:
dc:34:e0:aa:0b:36:ea:1f:24:b9:92:aa:90:c9:82:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:ED:9D:5F:83:3D:90:AC:99:0A:27:E2:BE:CB:B2:AE:11:D3:9B
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:30:07:4b:76:3f:5c:e6:d7:aa:a5:27:c0:35:a9:64:fc:ab:
62:ca:39:a7:ef:10:fe:7a:d2:7b:77:22:fd:9b:f1:5e:c7:5e:
ad:88:ba:6c:61:0c:c9:df:68:e4:ed:ef:79:19:f9:c0:b5:e0:
0c:d6:22:39:2f:e7:2f:99:53:f3:b4:17:e0:53:b1:52:33:eb:
29:63:0b:13:0f:77:9e:aa:00:92:dc:53:71:5d:33:b0:2f:96:
bc:22:57:f3:f4:4a:fe:1f:b0:a0:ac:3d:32:1a:8f:bc:79:de:
6b:3e:cf:79:48:20:90:39:de:81:06:b4:91:8e:ab:85:1c:de:
e9:e6:45:90:a8:4d:e5:1c:d7:f3:2b:ee:39:3b:6e:b1:b6:af:
1e:2b:bf:3d:d9:c4:08:93:e5:df:e9:c5:0c:77:57:5b:79:c7:
13:99:cd:1d:fa:7e:1c:a3:37:ed:73:05:b3:42:15:a7:7c:1f:
dc:5f:76:ae:c2:77:1a:40:e3:79:8b:05:fe:fe:d1:19:b9:15:
4f:5d:f4:4c:32:49:d5:ed:ac:74:14:9b:7d:64:1d:7a:1c:d8:
2e:39:ac:21:e0:df:22:55:0b:ab:09:0d:d4:3a:b2:6b:4d:74:
b1:5b:a7:4b:04:d4:57:e2:7f:51:b6:aa:0d:db:cd:c8:86:78:
12:d8:97:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:14:40 2026 by rpki-client