
$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
File: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json)
Hash identifier: 3Jc6O07d1D5XH78qfbpuKi2iABMZ1KReCHsrDlSHpM4=
Subject key identifier: 34:15:73:D4:9E:CC:AC:EB:CE:40:90:AD:BA:59:99:F1:45:37:81:15
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial: 444837A66A496EA7407D1E0B663B1DE1C1417438
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
Manifest number: 03FB
Signing time: Mon 02 Mar 2026 15:32:50 +0000
Manifest this update: Mon 02 Mar 2026 15:27:50 +0000
Manifest next update: Tue 03 Mar 2026 16:39:50 +0000
Files and hashes: 1: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=)
2: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=)
3: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: bX4Fd9CcEJCm3kHzQQSUnm1lb59Fq5NVQfAmuKhJDHA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 16:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:48:37:a6:6a:49:6e:a7:40:7d:1e:0b:66:3b:1d:e1:c1:41:74:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Validity
Not Before: Mar 2 15:27:50 2026 GMT
Not After : Mar 3 16:39:50 2026 GMT
Subject: CN=341573D49ECCACEBCE4090ADBA5999F145378115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:71:68:37:a4:90:cf:0e:a0:61:8b:f3:28:
1b:85:08:92:05:4a:10:46:ae:87:d2:7f:4c:33:3d:
f6:b8:3e:7b:58:35:70:09:05:25:7f:6f:a2:f1:aa:
96:11:9c:4c:1c:8e:10:e5:11:06:1a:90:ef:41:48:
54:b3:2d:bf:63:e8:fa:62:af:c4:1d:14:42:8a:2f:
aa:a4:49:9e:e0:34:4d:b4:4b:a3:97:4f:a7:b6:bf:
63:12:2a:45:8b:40:38:2f:50:11:4f:ed:ac:f8:94:
50:2e:f4:ee:b4:58:96:74:fd:16:3f:23:de:c7:09:
fe:cd:3b:f4:c6:46:d8:e5:41:17:e1:9a:33:23:d8:
01:9d:5d:bf:fc:21:47:18:ab:55:19:04:f6:50:52:
32:9f:dc:83:fe:52:ea:01:af:13:7e:39:4f:7a:66:
f6:45:4f:93:1a:e0:d9:42:55:37:7d:c8:dc:0a:93:
d7:ef:c7:c7:dc:49:ca:d3:06:21:de:56:f4:5e:46:
66:7d:ef:0d:e0:7d:56:8a:fc:11:87:b5:cc:9a:d7:
b5:90:95:7b:68:3a:6a:d4:74:48:6e:b6:73:5c:35:
98:bc:dd:64:ee:08:7b:04:40:e2:b3:86:7e:9c:dd:
79:73:2d:8a:c7:52:42:00:a3:0f:78:ff:20:f0:72:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:73:D4:9E:CC:AC:EB:CE:40:90:AD:BA:59:99:F1:45:37:81:15
X509v3 Authority Key Identifier:
keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:75:05:f5:4f:b3:56:eb:0c:2f:75:5a:92:c4:36:55:85:
55:f6:df:61:a8:1f:56:41:66:c9:33:71:9a:44:47:3e:72:a5:
7c:d3:0e:87:6e:52:97:df:33:73:58:5b:42:1f:30:44:9a:fa:
86:85:15:5c:b5:9d:ba:ac:3a:ea:4d:b9:9a:06:15:4e:6c:f7:
91:7a:f9:1a:da:79:29:7d:e6:04:85:a0:22:8c:85:3e:a5:44:
7f:1c:35:56:02:05:ed:c9:5e:62:15:a7:b5:c5:17:2c:f3:16:
0c:2f:56:23:d0:97:e1:9c:20:af:42:a8:a5:76:95:34:af:83:
a9:e2:88:e3:9e:56:46:52:c0:59:b4:99:c1:3f:5a:df:a5:a1:
32:ac:48:0d:70:8a:19:c6:70:2a:c0:e0:71:aa:03:75:c7:42:
c9:bc:e4:b1:f9:d7:d0:b9:ad:7d:48:8a:0c:d5:02:9d:0a:41:
47:32:7e:55:10:a1:12:d2:cc:bb:38:e7:c0:3b:5a:75:23:0b:
69:f3:e1:1f:90:55:a0:11:0d:1d:c4:9e:33:c3:36:29:45:b0:
ca:31:e2:cb:84:e8:96:7e:3f:9b:aa:0c:9f:82:f4:53:06:57:
5b:40:c5:d2:fd:56:13:2c:17:96:fb:50:23:ae:71:60:99:75:
37:1e:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:31 2026 by rpki-client