
$ rpki-client -vvf rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.mft
File: 370FA9228625D3C77362513863E11FFB1C798BEE.mft (raw, json)
Hash identifier: 2OG401n1ClP/9La59A1Syg69UkO4v9MjvnaA2w0nUJI=
Subject key identifier: E1:C5:E2:08:E5:C8:4F:51:25:74:39:92:99:03:D6:16:9B:91:74:5D
Authority key identifier: 37:0F:A9:22:86:25:D3:C7:73:62:51:38:63:E1:1F:FB:1C:79:8B:EE
Certificate issuer: /CN=370FA9228625D3C77362513863E11FFB1C798BEE
Certificate serial: 1ED6DEA2B59121FCE6200C5EEE1FDBA652143833
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370FA9228625D3C77362513863E11FFB1C798BEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.mft
Manifest number: 0125
Signing time: Sun 01 Mar 2026 15:11:03 +0000
Manifest this update: Sun 01 Mar 2026 15:06:03 +0000
Manifest next update: Mon 02 Mar 2026 16:10:03 +0000
Files and hashes: 1: 370FA9228625D3C77362513863E11FFB1C798BEE.crl (hash: owWRfBTZDsJdfjHsdTTQPhkBS9r3wRRozZy0c2Tvvps=)
2: 3136372e3234392e3130382e302f32322d3234203d3e20323635313630.roa (hash: fOonwd/e8jqlurAkjjrxHNV0ZmeOu/PtqFqax4FovIY=)
3: 323830343a326239303a3a2f33322d3334203d3e20323635313630.roa (hash: 0oNukx8HuBYZ6l7icFJh/SpAqbvRQZ6hkehumokbHKM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.crl
rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370FA9228625D3C77362513863E11FFB1C798BEE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 16:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d6:de:a2:b5:91:21:fc:e6:20:0c:5e:ee:1f:db:a6:52:14:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370FA9228625D3C77362513863E11FFB1C798BEE
Validity
Not Before: Mar 1 15:06:03 2026 GMT
Not After : Mar 2 16:10:03 2026 GMT
Subject: CN=E1C5E208E5C84F51257439929903D6169B91745D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:04:c3:a6:b9:02:47:70:e1:5e:9d:bf:5b:
cd:ed:c1:8a:88:b3:4b:00:c0:25:cb:9a:44:8d:33:
06:df:65:f9:5e:25:09:5f:c9:b3:d0:33:22:41:5d:
32:7d:4d:1a:d9:08:0e:a4:d1:11:c1:19:bc:65:4f:
9d:ec:a3:d6:3d:43:0a:50:28:34:53:ad:86:c2:e7:
fb:00:1a:20:67:a9:f1:c8:2c:39:df:76:a6:e7:50:
27:64:29:51:74:05:21:d8:f6:bd:39:da:71:4d:ac:
73:c2:a0:b0:38:9e:b0:21:77:81:da:16:50:53:25:
77:ab:88:b1:a2:01:25:95:2a:8d:63:35:65:88:1a:
28:92:57:2a:74:90:8a:89:a5:52:1f:31:10:ec:3e:
f6:86:31:77:3c:41:22:fd:98:a7:dc:1c:d1:37:e2:
66:49:ee:ec:70:39:6c:1d:6e:2d:0d:a4:0b:3d:47:
9f:54:b9:19:c2:ea:28:29:88:63:bc:9d:21:bf:72:
3d:d6:e6:08:6a:ee:d7:bd:0b:c7:ee:88:55:b2:e5:
af:a0:df:c5:f1:56:86:f3:23:a0:bb:ce:77:4e:a9:
fc:6a:df:44:ef:28:c6:33:70:c7:a4:d6:94:b6:cd:
3c:00:39:8d:fc:e1:f7:55:3b:3d:6a:d4:ce:c1:db:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:E2:08:E5:C8:4F:51:25:74:39:92:99:03:D6:16:9B:91:74:5D
X509v3 Authority Key Identifier:
keyid:37:0F:A9:22:86:25:D3:C7:73:62:51:38:63:E1:1F:FB:1C:79:8B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/370FA9228625D3C77362513863E11FFB1C798BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/370FA9228625D3C77362513863E11FFB1C798BEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:8b:a0:14:3b:79:28:12:0e:3d:6e:5b:08:06:e2:88:49:
c1:4b:fd:c8:a6:4b:20:2c:56:93:21:c9:87:0e:20:51:8f:61:
b3:3b:a3:da:81:8a:79:f3:28:1f:c0:64:88:28:9c:e3:45:ac:
b1:81:1e:0c:45:b2:d1:60:f7:b1:d2:d3:27:63:26:e9:35:48:
20:66:07:69:58:1f:47:64:b1:08:45:5a:d3:a8:b3:a8:10:89:
57:2e:d9:50:48:46:29:2c:28:7c:57:0e:75:77:1a:66:c6:c1:
9e:97:0d:bd:26:6b:f0:f0:9f:a5:be:8e:4b:3f:32:62:de:0c:
68:9b:c0:76:51:e8:4f:9d:3b:a4:b9:01:95:c1:6b:68:01:c9:
07:c1:a6:8a:14:e0:c9:ee:25:7a:64:3d:ee:44:e5:ca:f2:f9:
2c:20:d3:43:91:18:70:15:37:c9:0e:15:26:38:47:fa:6e:41:
67:00:78:6e:1b:73:60:94:ff:0e:2f:c5:19:d3:2b:20:44:f5:
8b:2e:6c:bc:ce:d3:f8:a4:20:1b:7a:c8:c4:16:42:c3:d7:3a:
1d:41:9e:5d:3d:d5:80:d5:d2:3e:cc:71:b8:39:b1:87:3b:58:
79:77:b3:69:68:ce:fa:40:d4:d7:cc:56:87:d4:67:36:8e:52:
a0:57:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:29 2026 by rpki-client