
$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier: jmZf0eId2KjCYbNABEug8XPbAjAhitVKKS+/XOz5SgE=
Subject key identifier: 2F:15:39:68:E6:AF:0C:D4:1E:66:ED:CB:30:8C:B7:07:14:B0:51:3B
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial: 2E77446EDBA50D149D418A724EB1A6F06C534A31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number: 03A2
Signing time: Sun 01 Mar 2026 15:53:09 +0000
Manifest this update: Sun 01 Mar 2026 15:48:09 +0000
Manifest next update: Mon 02 Mar 2026 19:34:09 +0000
Files and hashes: 1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=)
2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: fManrU4i+uOxA+lZIhrq6kK30540vRKcpR0lqGr51Mo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 19:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:77:44:6e:db:a5:0d:14:9d:41:8a:72:4e:b1:a6:f0:6c:53:4a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Validity
Not Before: Mar 1 15:48:09 2026 GMT
Not After : Mar 2 19:34:09 2026 GMT
Subject: CN=2F153968E6AF0CD41E66EDCB308CB70714B0513B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:0c:82:2e:d9:68:03:15:03:6f:be:91:af:
35:c4:60:b5:c1:e5:43:81:27:35:d3:b3:a2:50:2f:
ee:a5:7b:5c:bb:5c:b3:25:af:ea:b9:f4:c7:41:7d:
d0:e5:90:1a:df:a7:a2:99:62:c5:41:f5:74:bb:88:
b1:db:77:ea:b9:07:5b:c1:30:28:58:4f:50:03:6e:
3e:23:d2:ff:b0:37:72:96:e7:79:3f:9b:af:a8:d0:
90:0e:48:89:7a:b9:51:ca:71:63:a8:fa:30:e0:88:
84:ff:0b:b6:fb:73:ee:c5:a0:13:21:0c:8a:ab:fb:
4e:da:77:ed:72:58:e5:f6:65:20:22:7a:62:e8:6f:
1e:fe:fa:86:97:4a:f7:a8:d8:7a:3e:84:d9:6d:68:
b4:f4:38:ab:e4:fc:c4:bc:5d:49:e6:63:78:76:60:
b5:df:29:b6:d8:5a:9c:e7:31:26:04:ac:ce:1c:7f:
80:8a:6e:38:67:e8:d7:0e:e1:97:db:50:15:a9:e3:
f1:92:e5:f5:bf:1f:ad:4e:3e:5f:0c:29:1c:5f:8d:
92:11:89:78:67:3d:05:0d:a4:f5:a4:2f:a1:70:9e:
e5:61:c9:f4:69:46:f6:19:6c:67:c0:bf:a5:15:15:
52:fb:3c:98:fd:ab:91:0b:2e:c3:0d:f6:07:6d:83:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:39:68:E6:AF:0C:D4:1E:66:ED:CB:30:8C:B7:07:14:B0:51:3B
X509v3 Authority Key Identifier:
keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:2b:33:85:8a:b4:01:76:f1:8e:f8:52:90:ac:2d:51:88:
51:6e:da:e6:5f:a4:c8:a4:42:7a:7c:c7:f4:18:8c:e6:a7:b5:
ed:fc:cc:7b:af:41:7d:c0:66:f4:b5:1c:e6:96:31:7a:cd:d4:
38:cd:08:87:c4:b3:69:98:52:85:05:65:1e:87:69:4a:29:b3:
d2:8e:15:3e:01:b3:66:bc:76:03:f5:ec:20:74:f0:2b:8b:e9:
52:32:c0:c9:b5:b4:83:49:28:de:0e:32:d6:1e:8d:c0:f9:3b:
56:f3:98:0c:68:55:ef:ed:91:fd:bf:8a:1a:97:65:84:36:2f:
0f:4a:66:c7:49:30:65:e6:84:da:82:53:7b:a2:28:72:68:45:
2c:94:98:7c:f5:93:d3:35:a5:6b:67:ef:8e:95:ac:3b:56:6e:
0b:ec:1c:51:a0:e6:15:f4:26:92:af:af:89:d5:79:16:a5:38:
77:50:a5:ef:77:c1:aa:d3:ef:8b:3b:c6:5c:c0:a4:19:9d:c1:
fc:d6:33:e8:b9:b4:36:2a:6c:f1:d7:f0:23:57:02:a2:36:90:
9a:6c:34:d5:c7:51:3e:ec:49:5d:84:53:3c:a6:6e:08:d7:b0:
ea:96:ed:2a:bf:96:c4:50:af:35:c4:fe:f8:f6:2e:bf:74:83:
a5:35:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:43 2026 by rpki-client