
$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
File: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft (raw, json)
Hash identifier: JQHhhMVtVyXPwUXTg4ovr58U70bR2pd9OOQgC92y2JE=
Subject key identifier: 1E:4D:09:BF:10:6F:2B:90:04:01:57:28:C4:EC:AC:83:E1:5C:05:50
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial: 546EBF2AF47788A7F2FFF8554F953EECD7CFE032
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
Manifest number: 0423
Signing time: Mon 02 Mar 2026 23:36:48 +0000
Manifest this update: Mon 02 Mar 2026 23:31:48 +0000
Manifest next update: Wed 04 Mar 2026 00:29:48 +0000
Files and hashes: 1: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (hash: 5D9aXFlbU9fjLoiSVvBefi4iRP3TG6aejX0Oq29ADJQ=)
2: 3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (hash: qb5CEyMM5Bsyj+QUacujxzF+SjW2ntuhn2byZVb2KWQ=)
3: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (hash: wj2v8FaXrypVWJ5QgcZuYBN25ZTB3posFfJqz3YLkcc=)
4: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl (hash: 2TN5Rq3hjLArlMjhgycRySEE6X5tjpsA559c571ql98=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Mar 2026 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6e:bf:2a:f4:77:88:a7:f2:ff:f8:55:4f:95:3e:ec:d7:cf:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Validity
Not Before: Mar 2 23:31:48 2026 GMT
Not After : Mar 4 00:29:48 2026 GMT
Subject: CN=1E4D09BF106F2B9004015728C4ECAC83E15C0550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:99:93:c9:67:96:89:f3:d7:2d:ba:90:1d:
78:28:20:7e:69:08:31:6c:bf:35:3a:a7:29:a1:9d:
92:24:ab:29:d9:a1:e3:a8:88:87:1e:6d:17:26:0f:
bd:2d:64:66:61:c4:85:ad:fb:3f:43:a7:88:4e:54:
bc:d8:12:e5:37:00:ea:70:c6:a9:3e:a6:97:38:ef:
78:66:2c:3c:c0:43:af:9b:fb:c1:6f:db:6d:52:c2:
2a:92:ad:93:13:3d:de:bf:2c:12:28:9b:60:34:69:
a2:42:7c:ff:3a:57:1a:cf:d2:bb:c5:c3:7e:11:93:
d5:56:77:cd:46:6b:30:93:47:38:ff:1c:de:e5:2b:
70:39:92:76:89:cd:c8:ca:a0:19:70:8d:d5:7a:ec:
bf:e4:9e:03:e5:fc:cd:bd:1c:f5:fd:d9:48:a6:17:
81:c8:55:a8:9d:cc:e2:aa:b3:f7:37:a0:f5:79:2a:
34:ef:1f:ff:63:8e:70:d1:3d:b9:15:5e:b7:ae:ed:
d4:eb:a1:00:55:e1:b8:0f:bb:6f:49:84:41:b8:07:
b2:4f:b3:9f:64:f8:fc:5d:09:22:0c:59:66:2d:7f:
d1:b7:88:a7:41:94:85:ec:94:fd:ce:9d:33:46:1d:
11:fe:8a:75:df:d5:dd:23:91:34:1f:c2:8b:12:ac:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:09:BF:10:6F:2B:90:04:01:57:28:C4:EC:AC:83:E1:5C:05:50
X509v3 Authority Key Identifier:
keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:15:0f:ef:d5:05:c0:47:9e:c6:03:15:ab:ce:6b:39:ad:96:
3d:09:ce:fb:e0:5a:bf:1a:a3:29:c2:7a:8f:57:29:92:9e:be:
43:41:8c:0e:96:5f:e3:52:d3:71:7d:44:47:e3:23:4c:2b:cf:
3b:c3:12:e9:24:4b:d8:e1:69:2d:08:3c:0b:c5:59:97:b1:62:
cf:c7:c9:84:fe:11:73:c6:97:89:5f:24:84:26:80:0a:2f:f9:
8e:b8:28:a7:77:42:f9:7c:85:d9:da:b1:09:b9:db:53:a1:ce:
b6:33:d7:cb:5c:a4:4c:29:a5:96:f6:b5:b7:f4:eb:89:21:81:
68:6f:ef:5d:bf:17:12:2a:30:88:44:78:89:6a:a0:d0:83:53:
b2:2c:8f:dc:61:1b:d3:c3:b7:95:65:f1:a1:8b:0b:8a:ca:59:
29:c5:9c:77:93:c1:34:2b:63:c0:d7:84:ec:ea:00:c0:c0:35:
5c:1f:2b:28:de:01:3c:a6:aa:29:10:15:d7:1c:63:5b:fc:22:
01:50:e9:72:c7:c0:34:1d:2a:31:fe:d3:91:63:da:d3:7e:42:
57:75:2c:a9:de:7d:4d:3f:3a:9d:d5:e4:82:36:3d:2d:13:c2:
09:24:a1:ba:d1:d5:5f:ba:db:27:d0:89:da:34:32:33:90:81:
0c:78:ad:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVG6/KvR3iKfy//hVT5U+7NfP4DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw
N0ZFQzVDRTAeFw0yNjAzMDIyMzMxNDhaFw0yNjAzMDQwMDI5NDhaMDMxMTAvBgNV
BAMTKDFFNEQwOUJGMTA2RjJCOTAwNDAxNTcyOEM0RUNBQzgzRTE1QzA1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6JmTyWeWifPXLbqQHXgoIH5p
CDFsvzU6pymhnZIkqynZoeOoiIcebRcmD70tZGZhxIWt+z9Dp4hOVLzYEuU3AOpw
xqk+ppc473hmLDzAQ6+b+8Fv221SwiqSrZMTPd6/LBIom2A0aaJCfP86VxrP0rvF
w34Rk9VWd81GazCTRzj/HN7lK3A5knaJzcjKoBlwjdV67L/kngPl/M29HPX92Uim
F4HIVaidzOKqs/c3oPV5KjTvH/9jjnDRPbkVXreu7dTroQBV4bgPu29JhEG4B7JP
s59k+PxdCSIMWWYtf9G3iKdBlIXslP3OnTNGHRH+inXf1d0jkTQfwosSrClbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHk0JvxBvK5AEAVcoxOysg+FcBVAwHwYDVR0j
BBgwFoAUOr+W0Y5+BaJO2qEX0rnnagf+xc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3Vz
Z3IvMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQkY5NkQxOEU3RTA1QTI0
RURBQTExN0QyQjlFNzZBMDdGRUM1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3VzZ3IvMS8z
QUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADxUP79UFwEeexgMVq85rOa2WPQnO++BavxqjKcJ6j1cpkp6+Q0GMDpZf41LT
cX1ER+MjTCvPO8MS6SRL2OFpLQg8C8VZl7Fiz8fJhP4Rc8aXiV8khCaACi/5jrgo
p3dC+XyF2dqxCbnbU6HOtjPXy1ykTCmllva1t/TriSGBaG/vXb8XEiowiER4iWqg
0INTsiyP3GEb08O3lWXxoYsLispZKcWcd5PBNCtjwNeE7OoAwMA1XB8rKN4BPKaq
KRAV1xxjW/wiAVDpcsfANB0qMf7TkWPa035CV3Usqd59TT86ndXkgjY9LRPCCSSh
utHVX7rbJ9CJ2jQyM5CBDHityA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:32:12 2026 by rpki-client