
$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
File: 3A643A755DDC15D6F86DC11230B9F76A2774D614.mft (raw, json)
Hash identifier: KqGZVeYHBN7T6ZPqyn9PzSPbWh3aNkYkONWSpWYOEJw=
Subject key identifier: 8A:E9:EB:DB:94:B3:F7:0F:93:CF:8C:BA:A4:BF:F7:29:63:A7:88:DA
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Certificate issuer: /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial: 02BC7557CAF14B22E02E7D2E161C0BA02EFF66A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
Manifest number: 01AC
Signing time: Fri 17 Apr 2026 10:40:00 +0000
Manifest this update: Fri 17 Apr 2026 10:35:00 +0000
Manifest next update: Sat 18 Apr 2026 12:21:00 +0000
Files and hashes: 1: 3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (hash: 86mbNBoxrsA5PU/6bdXPR6HwbxrKjF+4v1Ng/ngi+u8=)
2: 3A643A755DDC15D6F86DC11230B9F76A2774D614.crl (hash: 4YnACmVtpFWwIWlJsi1KI6oVBRvOZkIFFZ/PRUBiPY0=)
3: 3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (hash: BqLQha74KDtppF7T3QZ5OxMFjGkWPH/hI5cH+aGR4ek=)
4: 323830343a373036383a3a2f33322d313238203d3e20323730373235.roa (hash: Zn64V4rp5ilUi+BcA6Yz4lAJz878uFpz4QzpzKZng+o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 12:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:bc:75:57:ca:f1:4b:22:e0:2e:7d:2e:16:1c:0b:a0:2e:ff:66:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Validity
Not Before: Apr 17 10:35:00 2026 GMT
Not After : Apr 18 12:21:00 2026 GMT
Subject: CN=8AE9EBDB94B3F70F93CF8CBAA4BFF72963A788DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:34:44:c9:e4:95:79:00:b5:55:35:14:1f:
7d:39:88:7d:b3:4f:7b:42:dd:d8:c7:3c:90:65:82:
c9:9d:ec:20:c0:de:93:fb:b1:94:cd:81:e2:3b:97:
cc:1d:1b:a3:07:82:f2:43:c2:e2:82:fb:60:dc:fd:
fb:a7:e4:c4:b4:72:6e:74:e6:30:1f:4f:5d:ce:25:
ff:b2:05:2e:4c:0b:e5:9c:94:8c:8e:14:f3:de:cd:
69:95:5f:0c:52:b6:8d:55:ec:87:ca:94:9e:3c:62:
8c:e8:b3:3a:fc:d2:20:53:27:1a:14:b9:78:df:b0:
8c:11:c9:da:e9:15:1e:f2:f5:7d:33:4c:17:78:bc:
3e:ec:95:20:08:61:2a:79:30:5f:82:42:dc:79:79:
94:3d:7d:21:bb:ef:93:b1:14:c7:fb:8e:15:b1:60:
b8:6d:e7:66:ce:33:ae:6f:0f:3f:ef:83:84:ef:46:
a7:d4:68:cd:e7:be:6a:f3:14:ef:bf:21:1e:79:b3:
3d:39:6c:db:c8:5d:df:28:8a:bc:af:44:02:a2:c5:
6b:3d:7c:21:97:47:d0:f2:47:f5:16:24:f1:52:67:
26:8a:74:d2:85:1c:7e:d0:f3:40:8a:2b:8e:71:92:
11:c4:89:3c:cb:85:ce:be:30:cb:f0:93:69:38:04:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:EB:DB:94:B3:F7:0F:93:CF:8C:BA:A4:BF:F7:29:63:A7:88:DA
X509v3 Authority Key Identifier:
keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ff:7b:12:24:4a:0f:12:56:1d:0c:77:e2:e5:b5:89:d2:07:
df:ae:b3:ee:a4:9e:13:92:41:05:a5:a7:b7:ce:45:37:cf:20:
f0:f2:69:0e:85:30:57:36:88:3f:c5:76:25:76:ca:d8:c3:18:
2a:95:47:b7:34:f2:58:85:1c:3d:8f:df:19:8d:00:4a:b4:d5:
55:59:5d:57:59:3e:16:45:73:bd:38:a2:27:c5:15:6e:24:0d:
f1:5f:fd:db:72:fd:eb:33:42:f6:b9:3a:ec:26:f5:8d:f3:04:
2c:6f:16:29:0c:39:6c:64:6c:3d:51:89:11:c7:13:60:1b:ab:
8c:76:88:a2:50:ce:5e:a3:e1:db:b1:4b:6b:11:f8:12:96:ce:
f0:67:0d:23:c4:e3:14:cc:4b:94:c7:61:28:71:7f:6a:db:3d:
b5:05:b7:59:84:52:ed:3c:b7:c6:e2:23:37:18:4a:57:bf:75:
be:fb:3f:7c:17:86:f8:6f:02:83:f7:6d:4b:d7:e7:86:8d:dc:
20:95:29:a2:d2:6f:1b:4a:ed:b9:52:77:5d:23:06:f3:d5:74:
66:9d:61:f2:17:d2:1f:cd:0f:d6:96:e1:4b:12:53:69:a8:21:
35:45:52:05:08:a5:f7:0e:4d:73:60:d2:8f:73:aa:47:fe:77:
ba:65:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:28 2026 by rpki-client