
$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
File: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft (raw, json)
Hash identifier: BF7YPzfoyBeHMN/d2X/1gm640o4JlrXVjcie9fgoies=
Subject key identifier: 3D:02:07:E6:70:BA:63:93:2B:9F:C5:A4:05:28:6D:30:2F:3A:B4:5D
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Certificate issuer: /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial: 638B3D9420B6BFDDEB344736E41B70B66AE57C05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
Manifest number: 03A3
Signing time: Mon 02 Mar 2026 14:53:58 +0000
Manifest this update: Mon 02 Mar 2026 14:48:58 +0000
Manifest next update: Tue 03 Mar 2026 17:14:58 +0000
Files and hashes: 1: 323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (hash: ynyHF4Ric93DF0RyBskBd8RghuNgDZVqq0ZBGUMP8wA=)
2: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl (hash: 1N/4WVDZRSlwJwTzT4zXvZzrJNrElGPe2OzRdW34dU0=)
3: 3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (hash: lXRbX62fDUjeZrpp5PLUvrkTmmh3VegbvSlDaqpnno4=)
4: 3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (hash: U1T6e2BPu8q7wrVwft4eVoUVEdadxqcxl897CTz7yRU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8b:3d:94:20:b6:bf:dd:eb:34:47:36:e4:1b:70:b6:6a:e5:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Validity
Not Before: Mar 2 14:48:58 2026 GMT
Not After : Mar 3 17:14:58 2026 GMT
Subject: CN=3D0207E670BA63932B9FC5A405286D302F3AB45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:6e:55:8b:a4:78:a3:c8:c3:c5:44:77:2a:
2a:9f:a1:c2:56:62:e2:09:f0:97:1f:30:87:46:ee:
f1:0a:a3:49:82:95:a0:e1:b7:9e:c1:89:67:d6:fb:
05:1f:ed:27:11:90:31:ba:9e:e9:92:f3:f1:18:29:
a2:9c:e1:88:d8:bf:cb:6b:93:c1:4a:da:0a:91:b5:
9d:d2:6f:2f:e4:ef:40:54:a6:b3:17:23:78:c3:b2:
13:22:d4:f5:e1:9a:27:a0:87:a5:e0:7b:ab:54:0c:
82:d2:44:45:c4:ab:d2:20:f6:dc:aa:16:4a:21:56:
41:59:e5:ef:b1:92:ac:e6:d5:65:de:02:78:c3:11:
a0:45:0d:28:d0:f8:25:26:e8:6f:42:79:b4:02:e2:
50:d3:ea:37:29:66:23:66:eb:be:c4:93:cc:cd:7d:
52:3e:a7:81:78:d0:39:18:6e:be:7c:af:28:c3:30:
96:89:da:63:ee:aa:61:46:7c:d1:24:c4:24:bc:63:
4c:f9:c0:50:2d:50:63:bd:be:38:22:20:c6:63:63:
56:ae:98:4b:75:da:78:c6:a8:21:5f:14:f6:f4:3a:
6b:a5:33:4f:3a:56:15:b2:8d:22:89:c9:16:97:c8:
56:86:8f:6c:2b:00:f9:ec:3d:ff:26:ab:44:c1:08:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:07:E6:70:BA:63:93:2B:9F:C5:A4:05:28:6D:30:2F:3A:B4:5D
X509v3 Authority Key Identifier:
keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ce:54:a7:9e:19:16:d8:41:7e:11:56:72:c0:28:ba:ad:5a:
a7:c0:19:01:fd:92:2f:13:69:02:48:db:d2:d2:24:8c:fd:76:
90:c1:b5:b2:c0:53:c9:b0:33:81:90:50:3d:3e:76:1b:ce:45:
ed:26:60:7d:40:64:67:a9:92:7c:ca:da:92:a5:da:7d:12:46:
8d:c5:38:69:d3:bd:72:81:cc:c5:1a:90:5a:90:ce:45:fb:c3:
28:6e:f3:6a:ca:bc:6c:26:56:5c:40:1e:b6:4a:aa:78:4b:8e:
97:2a:32:16:76:90:31:f0:4d:3c:63:74:f8:f6:4d:7b:da:be:
1f:56:e0:03:94:e8:54:43:52:93:93:ca:5d:8b:07:16:18:4e:
80:40:c3:2a:e1:f9:98:b4:3a:54:3f:6c:37:9a:42:a7:9a:ce:
fb:74:56:a3:cd:db:8f:db:48:be:94:a1:f8:8a:84:ac:9e:60:
a3:47:2b:ef:25:28:6f:f5:d5:c1:59:63:57:21:e7:81:a4:90:
1a:eb:10:c4:71:34:15:1b:01:74:31:ea:fe:4b:7d:ce:d8:4f:
e4:a8:15:2a:a5:61:52:62:9a:c2:1d:e8:ec:a6:b1:05:c9:b3:
5b:f2:4c:2d:52:84:ee:49:71:d4:fa:36:d2:34:29:ae:20:f8:
1b:19:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:17:54 2026 by rpki-client