
$ rpki-client -vvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
File: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft (raw, json)
Hash identifier: Szlybe1RflBQK/3NGIwYPCn9lChy2BkKlJ83YanLYv4=
Subject key identifier: FD:C2:EE:48:9D:C7:C5:BA:5B:10:63:63:09:5D:90:C2:EB:03:38:F6
Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9
Certificate issuer: /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
Certificate serial: 6CB3694E04837DA4BB06F25CBDBF598ABDED71F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
Manifest number: D2
Signing time: Fri 17 Apr 2026 21:11:37 +0000
Manifest this update: Fri 17 Apr 2026 21:06:37 +0000
Manifest next update: Sat 18 Apr 2026 22:23:37 +0000
Files and hashes: 1: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (hash: 0pHtEVmtptfCW1hlsfzp0qcUp3I9S9GwoWoaQ04Zss8=)
2: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl (hash: TtjOKr0rTLIKf61R8cBJfBn+iWe9t32TFb4fkOFYbuQ=)
3: 3138312e3139312e3133362e302f32322d3332203d3e20323731303739.roa (hash: N+VS1gEZX19mdKurLnVGGGidsfPq2fXzteV2UkYkHBM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl
rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 22:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b3:69:4e:04:83:7d:a4:bb:06:f2:5c:bd:bf:59:8a:bd:ed:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
Validity
Not Before: Apr 17 21:06:37 2026 GMT
Not After : Apr 18 22:23:37 2026 GMT
Subject: CN=FDC2EE489DC7C5BA5B106363095D90C2EB0338F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:7c:7f:8a:40:bb:75:29:dd:70:0f:6f:c1:
e2:59:23:94:e9:ee:b1:07:ff:5f:75:b3:f6:b1:30:
1d:d7:81:6e:2c:1c:34:de:23:a1:df:f5:19:ab:ac:
ef:e1:b2:a9:fb:4f:6b:2f:58:b5:74:16:9b:12:a8:
fd:67:89:d2:10:83:6b:6b:bf:e0:3d:61:6d:b0:a1:
a6:f0:fe:99:7c:fc:d9:fe:67:79:a2:a3:6e:bb:33:
7d:aa:b9:fe:bd:7b:47:0f:5a:f6:79:e1:55:15:54:
8c:2c:4d:12:60:3f:0c:9e:9c:9b:92:92:5e:cc:3a:
89:fb:e1:71:73:06:fe:c4:13:71:ec:c8:1e:49:b1:
21:04:33:4b:5d:fe:f0:cd:89:11:b6:47:0b:95:10:
98:82:cf:5a:15:05:5b:a2:64:61:67:6d:e3:99:5f:
67:91:84:03:68:6e:15:f6:64:e0:c5:dc:b4:e1:9b:
06:22:4f:54:5b:34:22:83:45:bd:9d:09:fb:81:76:
b4:37:b4:c4:59:b3:72:98:f2:e4:7e:88:be:16:0e:
52:9e:ab:50:9e:75:05:cb:a1:d4:a4:a8:8b:02:2f:
64:36:cd:3c:e4:8e:ce:3e:18:79:37:7e:c2:02:96:
9d:fb:4f:e3:01:43:aa:ca:90:56:fc:25:9a:c4:db:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C2:EE:48:9D:C7:C5:BA:5B:10:63:63:09:5D:90:C2:EB:03:38:F6
X509v3 Authority Key Identifier:
keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8f:90:13:bf:aa:43:ea:f7:d6:d7:48:94:14:6b:26:a0:81:
68:f5:1a:48:40:9d:33:9d:c0:3c:5f:08:c2:93:ed:d2:d2:81:
3e:50:d7:c0:95:66:65:f4:15:76:d2:0f:42:e5:a1:37:c4:43:
d8:b2:90:64:0e:fd:99:1d:42:1b:2a:9f:eb:0f:ea:ea:ac:4d:
6d:e2:d9:ce:6d:df:a8:87:fa:4d:77:08:33:36:7b:4a:2a:98:
bd:d5:1c:11:3b:52:c7:2d:b2:e7:5c:22:e5:eb:79:c6:87:83:
b8:14:e9:dd:fb:5b:80:ee:16:3e:29:8c:0e:57:e8:8c:56:5b:
83:54:31:d8:88:fe:e9:04:54:0f:d3:81:eb:a9:d1:d4:3b:f9:
07:b2:fd:e1:77:bb:e7:e8:37:d7:2e:60:77:96:f9:b7:da:7c:
49:51:fe:52:59:cd:03:3f:7e:f2:1c:ad:10:0c:56:00:08:ed:
44:c1:e0:f0:58:13:e1:66:05:9d:ee:23:e5:e4:16:46:a5:bf:
3f:53:2e:16:65:a3:4e:38:58:b7:51:25:2f:dd:f3:6b:e0:34:
c7:62:6f:a4:7d:c6:cb:99:9b:8c:d3:37:c0:b3:2c:64:64:9a:
6c:1f:91:a3:b5:d0:0b:f7:d7:cf:ec:13:7b:b1:12:e5:e7:08:
9a:5e:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:50:20 2026 by rpki-client