
$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
File: DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft (raw, json)
Hash identifier: AnKgVv5vU+7tSavNYyimiUVkjHhKmjIdO9ijlASPnk8=
Subject key identifier: 6F:2A:33:56:DD:5F:58:2B:A9:7F:A0:25:DD:1E:BD:30:10:06:E5:26
Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
Certificate issuer: /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Certificate serial: 3D4060C63F1D7373D57C53D2FD9FAE1A9960B4EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
Manifest number: BC
Signing time: Mon 02 Mar 2026 09:24:38 +0000
Manifest this update: Mon 02 Mar 2026 09:19:38 +0000
Manifest next update: Tue 03 Mar 2026 12:20:38 +0000
Files and hashes: 1: 34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa (hash: JrUEQFjfe4G5l/Qyw/wlPVbLvelmbWX+UdfuCtyaabI=)
2: DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl (hash: RZYEU/C3BV1SbkXlYPePhKH/KqGAScclUcEKtUhuhqM=)
3: 323830343a343535343a3a2f33322d313238203d3e20323636393139.roa (hash: 4tAaveoCXdDcpHp2LFl8RU4V7u4EaA1z6K9jhZ1hLbU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:40:60:c6:3f:1d:73:73:d5:7c:53:d2:fd:9f:ae:1a:99:60:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Validity
Not Before: Mar 2 09:19:38 2026 GMT
Not After : Mar 3 12:20:38 2026 GMT
Subject: CN=6F2A3356DD5F582BA97FA025DD1EBD301006E526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:cb:e8:0b:9d:c4:60:0b:4f:45:bb:c1:12:
99:fa:9f:cc:64:75:5e:51:7a:42:53:01:dc:67:3d:
e3:d6:e4:89:f4:23:91:95:53:f8:9f:7c:3b:ca:81:
c2:92:d9:69:fb:c0:e7:89:7c:b8:7a:b3:78:53:bf:
c3:0b:a8:e9:76:f6:e3:a7:ab:6a:7e:f2:ac:90:1c:
94:51:e6:8a:f4:ee:df:c8:3e:5c:12:44:ee:a0:be:
91:38:62:2c:28:fd:ac:20:4c:7f:e0:f6:8f:2f:8f:
f7:40:d0:2c:b6:ba:5d:34:1a:05:b8:21:30:75:81:
9a:ad:7d:ef:6d:01:ae:64:e2:f0:74:c9:2e:d4:52:
74:53:5b:3b:5a:80:c7:81:6c:0b:5a:3d:1e:19:91:
5a:63:f6:80:fc:cd:10:13:34:53:80:0e:18:90:2b:
f4:09:4d:aa:a6:b3:0d:3b:82:bf:6e:3c:76:e5:b7:
6f:af:66:ac:fa:62:47:0e:55:5d:5f:52:4f:3f:8d:
8e:50:15:3e:11:dc:44:b4:83:44:72:5f:c3:59:9c:
a7:fb:52:bc:dc:92:b9:4b:99:5b:34:ee:21:73:ed:
ad:55:ee:7c:6f:e5:97:f2:d8:f0:d2:ba:6d:3f:d3:
13:f2:a5:09:16:b2:44:45:82:c0:fe:96:cb:26:36:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2A:33:56:DD:5F:58:2B:A9:7F:A0:25:DD:1E:BD:30:10:06:E5:26
X509v3 Authority Key Identifier:
keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b1:cf:a8:d2:d4:03:13:69:70:6e:9f:b8:df:96:1f:82:6a:
31:18:a3:02:f5:54:c3:b6:b9:8c:a1:d5:59:59:2a:b9:14:3a:
30:e2:a9:fa:a0:f8:36:04:71:c1:73:e3:cd:76:b6:19:8e:75:
99:bf:b4:9a:9b:61:c5:0a:96:a0:8e:9b:d6:c0:c4:f1:31:5b:
6b:ac:99:a4:92:7b:8e:df:41:07:05:ba:38:16:f0:8d:4d:5e:
00:1e:ce:d4:1b:4e:73:da:a1:27:77:4e:f5:86:df:26:d0:b7:
db:fa:f1:94:7d:6b:56:48:9a:be:ae:21:b2:e1:02:fc:e2:09:
13:26:b8:48:bd:98:e3:e1:04:f0:7c:17:5e:2c:d3:3f:bd:00:
8e:4c:4f:86:3d:42:cc:5a:28:28:af:a3:c2:6f:a4:6d:ac:31:
c3:2f:7f:f7:d5:c9:19:d6:82:28:72:e9:89:5c:1f:55:65:30:
d2:2f:e1:50:c9:55:73:99:d1:03:a3:c7:e7:42:38:1d:71:3f:
68:6b:2b:7b:d8:2f:06:a1:08:76:2d:bf:b1:b9:f4:ad:dd:90:
54:c9:4e:ff:ed:62:5a:bd:8b:67:60:a2:6b:2d:dc:5d:27:ed:
d2:90:a1:ad:f9:ef:4e:92:d9:40:c8:72:3c:9a:a3:58:84:b8:
11:1b:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:59 2026 by rpki-client