
$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
File: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft (raw, json)
Hash identifier: qmlpP9En8waVBPltJBfdVBdQ0BN8Tb20BTr0rPtrXlY=
Subject key identifier: A8:D7:49:45:D8:46:78:A0:F0:C2:45:A0:29:B6:B2:2D:58:A3:47:E1
Authority key identifier: 71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9
Certificate issuer: /CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9
Certificate serial: 51CC20DA167719CBFC36B5E243BFD814A54F2B6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
Manifest number: 0134
Signing time: Sun 01 Mar 2026 15:48:16 +0000
Manifest this update: Sun 01 Mar 2026 15:43:16 +0000
Manifest next update: Mon 02 Mar 2026 15:49:16 +0000
Files and hashes: 1: 323830343a393363343a3a2f33322d3332203d3e20323734373939.roa (hash: Lg2xMCDUflfzYLEqDuILPmwVidL9vHQP1G7+KLc+SfE=)
2: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl (hash: o1iDa4NK1sntS8Pi3aD3+RzsAJbcuA1Ss4hrECGEnFg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl
rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 15:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:cc:20:da:16:77:19:cb:fc:36:b5:e2:43:bf:d8:14:a5:4f:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9
Validity
Not Before: Mar 1 15:43:16 2026 GMT
Not After : Mar 2 15:49:16 2026 GMT
Subject: CN=A8D74945D84678A0F0C245A029B6B22D58A347E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:cb:2f:75:f0:f9:a1:a8:f9:2c:ea:55:ee:
91:7e:a7:ee:95:c5:a5:0d:2e:9e:d1:91:f4:44:09:
9b:0c:2f:ce:52:31:04:45:5d:be:8d:e9:9b:df:88:
e6:20:2c:64:a6:b9:8f:08:98:f2:cd:0f:5a:f3:72:
4b:d1:eb:82:9c:10:0c:0e:0d:0f:0f:4a:7d:23:52:
60:9e:5c:38:ba:97:6c:70:05:19:fd:8b:94:b0:f6:
03:fc:dc:80:dd:44:0a:de:ee:29:0d:17:cc:06:a6:
1c:7e:7c:c6:58:9f:5f:fa:3a:99:8a:61:38:6a:31:
a0:60:1b:20:4a:c0:c5:a4:9c:7e:e2:6f:b5:0f:4c:
62:e7:06:05:71:62:37:ce:5a:61:fa:b9:2d:1c:17:
b5:51:b9:df:8c:15:da:4f:2a:b8:be:83:e2:50:3a:
7e:4b:6f:70:9a:8b:a7:62:ee:be:2f:7c:f2:a3:01:
ce:bc:f8:35:a1:5d:32:59:2f:0f:d3:a0:9a:29:84:
e3:a1:19:7a:17:86:58:07:fd:93:00:73:49:7f:ff:
82:72:c7:62:c1:14:76:ab:f4:3c:8e:2b:d5:ed:91:
06:8e:1d:59:f5:0a:36:6c:5e:7e:55:0f:f7:b1:22:
31:ec:79:73:ba:7c:29:a3:90:45:eb:60:22:4e:4f:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D7:49:45:D8:46:78:A0:F0:C2:45:A0:29:B6:B2:2D:58:A3:47:E1
X509v3 Authority Key Identifier:
keyid:71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:c4:7b:da:8c:a9:ed:c1:70:40:3d:e5:23:8c:94:1f:d5:
5e:cf:64:48:30:89:9d:f0:0c:78:65:db:16:98:a4:4a:86:30:
63:56:3f:9e:2a:4b:30:96:bc:9a:cb:dc:7f:78:fd:c0:ca:36:
8b:aa:6b:be:67:d4:6e:ee:f0:0e:1e:d0:3a:a1:54:d3:70:4f:
9d:89:6a:2e:0e:5f:77:2f:b8:3c:07:36:76:46:bd:b0:fc:7b:
86:a0:a3:78:78:c7:ae:c0:ea:63:61:dc:71:db:33:0f:61:6f:
91:f0:bd:bc:ae:64:f7:6b:c9:b3:04:fa:a7:b7:27:7a:7b:54:
4c:43:c2:4b:b1:19:ed:b0:28:c0:c1:c1:4c:96:a2:01:80:9e:
99:80:27:b3:f3:3f:2e:1b:af:c0:5b:90:9b:e6:43:30:bb:59:
cf:ab:3e:2c:4c:03:93:f4:49:9a:a2:dd:83:58:5d:e9:01:e7:
4a:e8:dc:49:33:9f:70:52:0a:91:21:0c:f1:61:d2:6f:48:8d:
d0:a6:9f:4f:5f:7e:71:8d:d7:6d:da:88:b9:11:00:f8:55:83:
59:53:04:f9:f8:76:53:da:30:80:82:1b:a0:cc:fb:6b:d6:ed:
38:42:c2:b9:46:5e:a8:eb:f1:e1:fd:5f:34:36:cf:dc:8d:56:
75:cc:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:16 2026 by rpki-client