
$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier: AYdtfG0e9by4YedKes1uCO8Qefe57VTSSjthE+0Wlww=
Subject key identifier: EF:34:E4:C0:17:E6:DC:B9:29:AB:06:62:18:8A:65:FF:36:3C:97:5C
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer: /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial: 1AB184519F331605BAE3DA36D0C628EBC9B17DCE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number: 03A1
Signing time: Sun 01 Mar 2026 18:18:34 +0000
Manifest this update: Sun 01 Mar 2026 18:13:34 +0000
Manifest next update: Mon 02 Mar 2026 19:32:34 +0000
Files and hashes: 1: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: 4M8SIlxdY3/Aa0Sl6N59GDgEzrNP00eYvFq4t/+1lu8=)
2: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: TTezDLDgWcUhvqWmHpV5i1KSmmSwrsQoqFayy4r5BNQ=)
3: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: FbGrasg3jt61MWXUdcA5HQe2TwNTCl12WlJyNRBvtd0=)
4: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: xrJw53QFZW5nrMZxRv20z+3U45+1VZvVfPziruNz6FE=)
5: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: rhsxwkC+s3lWxN9jmR4AJFO6jBF/ENN0OcINE2Eb+ss=)
6: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: XVDZJLn2jsM19rPj80JYeF5XtdtjfD3ULyuvEfl7Uvg=)
7: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: QQuIO52jW5fpy195mW2GtIgKO2yWujKaQpD2wCgiQ3M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 19:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b1:84:51:9f:33:16:05:ba:e3:da:36:d0:c6:28:eb:c9:b1:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Validity
Not Before: Mar 1 18:13:34 2026 GMT
Not After : Mar 2 19:32:34 2026 GMT
Subject: CN=EF34E4C017E6DCB929AB0662188A65FF363C975C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:00:a5:90:6c:7a:3a:a1:19:ec:21:c6:b9:
cf:87:fe:ea:07:21:08:4a:e3:ee:9d:e6:7a:2b:8f:
cd:53:e6:38:39:26:2d:df:fa:3b:59:3b:2a:98:c6:
21:65:16:22:ff:92:e8:42:af:6c:de:1d:b0:51:c3:
80:f3:78:77:16:cc:17:d5:1f:c9:5d:6b:38:de:16:
0c:1c:fd:95:19:cc:4d:98:7a:ee:bc:ce:9a:b8:b7:
d5:e5:54:a0:85:04:a6:c2:65:9a:38:96:bc:b7:d0:
02:d1:a3:21:a9:43:04:ee:71:8b:72:f4:f2:7a:b7:
a5:19:cc:c3:7f:8d:9c:4f:49:1b:84:72:1d:16:ba:
76:e7:4d:6f:50:85:9e:87:17:c2:8f:c9:3b:89:7e:
74:49:3b:38:0e:b8:50:17:d7:e8:96:2f:06:0d:2a:
b2:28:c6:b1:3a:f4:74:4d:8b:25:40:b9:91:92:80:
df:70:b9:b8:71:d7:f6:ce:e8:12:51:00:5d:24:7f:
5f:f6:e4:91:07:08:61:a3:a8:1a:6a:64:71:fd:84:
0c:2c:47:21:96:06:06:15:a1:89:8d:89:ab:1b:9d:
1c:21:d0:5d:d7:25:4f:68:c6:85:9c:7b:fb:26:1e:
be:4e:8a:28:ee:45:17:b7:01:d2:95:a3:27:e7:e8:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:34:E4:C0:17:E6:DC:B9:29:AB:06:62:18:8A:65:FF:36:3C:97:5C
X509v3 Authority Key Identifier:
keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:55:1e:62:cc:54:39:c5:6f:70:ed:df:d0:b4:1c:df:46:d6:
b1:b9:76:68:8c:26:96:f9:a9:a4:9c:e6:79:a7:c4:01:a9:c9:
d9:6a:a2:7b:41:cf:b1:3a:ca:0a:b2:89:86:88:5f:64:f2:e2:
03:80:be:1e:b3:99:79:36:f1:c4:2e:fc:e0:22:e4:8f:56:93:
4e:4f:85:ae:79:83:04:0e:48:f6:39:f9:72:62:3a:6a:f1:0a:
7e:24:d7:d8:ca:68:0c:9c:f9:a5:d9:20:d4:2f:f6:e5:9e:ef:
ba:74:3a:70:62:ec:74:7b:9c:d9:bc:60:ac:32:9e:8b:da:9e:
d3:3a:80:c5:be:47:62:15:c1:52:ce:ef:3f:19:82:52:5d:71:
f6:7a:f4:73:91:93:1b:db:a4:48:61:2f:ae:95:09:25:c8:ea:
67:c4:db:70:a4:c9:3f:60:b1:47:d3:48:37:14:f6:d9:24:fe:
1a:21:1b:73:b2:41:5e:e9:83:8a:3f:43:d8:e3:ee:97:49:a5:
3d:22:5d:fd:fa:c8:87:73:88:d3:8d:91:53:62:ae:99:b4:7f:
b2:6f:e6:f7:8e:f9:db:05:9a:74:bc:45:71:89:c9:79:cb:35:
7d:88:0d:25:57:a0:1e:9f:77:d7:08:83:a0:48:c8:2e:19:a1:
e4:cf:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:26 2026 by rpki-client