
$ rpki-client -vvf rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
File: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft (raw, json)
Hash identifier: y/js+VZlsdZXDSZMqTpZ8GlrQYQV9ti7TCwz3a1LMes=
Subject key identifier: A3:47:49:B1:5E:53:B4:AB:B9:D2:99:EC:54:46:CB:B1:6D:3A:5D:76
Authority key identifier: 3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D
Certificate issuer: /CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D
Certificate serial: 0E83F21F397B788AC334483740D13AAF663FC044
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
Manifest number: 35
Signing time: Fri 17 Apr 2026 20:17:37 +0000
Manifest this update: Fri 17 Apr 2026 20:12:37 +0000
Manifest next update: Sat 18 Apr 2026 22:37:37 +0000
Files and hashes: 1: 323830343a346364303a3a2f33322d313238203d3e20323637333934.roa (hash: HCMSwftiV6KHbBsfvKCGzXC1XeYHSMqJkKiP1AfSuUE=)
2: 34352e3233352e36302e302f32322d3332203d3e20323637333934.roa (hash: oCJUx1Px2xlS32pSsJcbxO3QQMpn/8vImxIQKUEhqMo=)
3: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl (hash: GDNk/tcNTFvjHQdNwGPbtOVnGRqWwIxHaiHLMzhOt3U=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl
rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 21:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:83:f2:1f:39:7b:78:8a:c3:34:48:37:40:d1:3a:af:66:3f:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D
Validity
Not Before: Apr 17 20:12:37 2026 GMT
Not After : Apr 18 22:37:37 2026 GMT
Subject: CN=A34749B15E53B4ABB9D299EC5446CBB16D3A5D76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:2c:f3:31:8f:d7:79:f9:cc:94:b0:44:90:
5c:f2:c5:83:4d:af:af:a0:d1:aa:1b:87:e3:b8:1b:
c0:31:b5:f0:e1:74:82:53:47:e4:01:48:52:19:a3:
23:fb:71:f0:6d:b5:50:72:3d:22:c9:b7:ff:27:e0:
45:c6:6c:2f:c8:4c:45:9c:db:ff:18:9a:e6:bd:7c:
02:3e:f7:9b:e8:0e:cf:e7:1a:11:ed:b0:07:8e:d8:
3b:56:26:02:77:c6:81:79:a5:af:99:ce:60:56:ee:
5e:b5:23:d5:13:97:22:f7:68:b2:33:5b:87:59:57:
91:54:21:b5:98:df:9d:74:b3:ac:98:32:14:e5:65:
f1:af:b4:ba:b3:10:79:a0:c3:89:8a:39:07:9d:c9:
2a:2e:63:bd:7a:5b:1b:b6:22:b6:a6:79:e6:71:fb:
d9:3e:23:60:a6:06:c0:31:12:92:47:2a:bd:ae:7e:
a6:71:0d:cf:1f:23:8a:ea:9b:2a:66:5d:39:97:c6:
18:c6:d5:74:a2:c9:cc:4c:94:1b:64:5e:71:da:0b:
23:43:7f:88:27:98:0a:65:33:02:dc:1a:19:14:88:
f1:d4:9d:d0:b0:34:86:59:6d:7f:44:05:23:ce:f3:
d9:a9:ad:94:a0:88:6c:82:ca:52:bc:0c:93:75:6f:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:47:49:B1:5E:53:B4:AB:B9:D2:99:EC:54:46:CB:B1:6D:3A:5D:76
X509v3 Authority Key Identifier:
keyid:3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:bf:11:94:d0:5d:3a:53:c4:95:e7:79:a2:4b:49:01:7f:
ae:6e:a5:68:a9:92:d8:85:08:19:52:69:d9:e6:ba:ab:37:05:
5c:20:b4:ef:7d:a6:8b:91:1b:01:89:74:8b:cb:6d:91:aa:fd:
50:73:4f:9e:62:54:42:31:58:4b:d1:50:f9:6a:16:ec:d9:8b:
cd:c0:2a:76:c1:be:fc:24:57:a6:ea:ac:c6:4b:61:23:6a:e3:
39:55:25:af:05:60:2f:dc:b9:36:63:33:e6:21:c6:47:c4:d8:
81:45:35:ac:7d:04:76:38:61:33:86:14:25:b9:f1:58:25:f1:
d3:ae:1a:43:32:ae:0b:40:e4:3d:a6:c6:e7:8c:10:5d:3c:ff:
2c:07:2a:4c:e3:2a:5d:c9:b7:18:d3:66:d9:4f:dc:13:2c:b4:
93:67:97:61:41:01:62:3e:03:bf:f2:66:77:0f:04:a6:0f:79:
99:68:ca:ce:93:dc:2f:dc:87:35:94:58:7b:a3:b9:b8:98:bd:
3d:f5:3a:95:5f:fb:06:e2:a8:5b:9a:6f:82:7c:40:67:36:32:
3f:c6:40:06:6d:1a:f5:96:6a:2f:ef:0d:30:e2:05:72:61:e7:
bb:cd:a9:d3:01:d1:71:9c:9b:38:56:0b:fa:4e:65:75:70:39:
81:83:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:45 2026 by rpki-client