
$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json)
Hash identifier: 7hLNmZpZbgwG9IiaWLcfnAPtfUYIVv/m8IzXZG0kgmQ=
Subject key identifier: DD:D9:EA:D2:DB:79:FE:A5:13:1D:E7:00:43:8D:CD:A2:3B:BF:E5:71
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial: 584644EC6225E9E5B9303304EC3ADBE6ED7957B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
Manifest number: 039F
Signing time: Mon 02 Mar 2026 09:27:03 +0000
Manifest this update: Mon 02 Mar 2026 09:22:03 +0000
Manifest next update: Tue 03 Mar 2026 09:56:03 +0000
Files and hashes: 1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: c7GGQKi6ec2DB29yrMDCE13X+Wm8vYKolg76A+4gtHA=)
2: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: PYfMglksFxC5v+xgeAyjBUbMpusTFmLcGTEjqubwJ10=)
3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: P0NH3rnn8o4jwzwjk+SixmLvea8Ha66XoUWGllFpUhU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 09:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:46:44:ec:62:25:e9:e5:b9:30:33:04:ec:3a:db:e6:ed:79:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Validity
Not Before: Mar 2 09:22:03 2026 GMT
Not After : Mar 3 09:56:03 2026 GMT
Subject: CN=DDD9EAD2DB79FEA5131DE700438DCDA23BBFE571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:72:fb:f7:55:48:94:e0:01:ea:0f:c6:03:1d:
1e:65:74:5a:1b:97:4c:b8:df:75:5e:83:d8:d9:df:
2d:2c:72:f7:5a:00:ed:a1:21:dd:e8:10:9d:4a:9e:
9d:55:c4:f7:44:ed:21:3f:19:1d:9c:99:4e:c9:f6:
c3:d1:27:56:17:c9:62:0c:a8:84:d1:ce:0a:e5:f4:
e0:b8:a2:2a:1b:84:45:cc:93:65:02:d1:fc:35:9e:
0f:0a:d6:a4:a7:cb:be:4e:37:29:a0:4e:05:d6:99:
8c:31:cf:eb:b1:a7:81:4e:7b:57:45:b1:c6:c2:0b:
5d:d1:7a:36:bf:89:db:e2:86:0c:9d:82:36:e5:9f:
89:83:ea:f3:87:5b:67:cf:37:52:8c:f6:e1:7d:3b:
15:61:12:63:69:2e:5c:41:a4:a4:f1:7e:22:0d:c4:
97:dc:05:36:45:66:47:3d:d5:21:2f:d4:2f:7b:02:
bf:6b:eb:91:5d:b2:3c:c8:b1:08:47:29:0a:a0:6e:
90:b1:e5:4b:d9:cc:da:08:15:90:ea:04:cd:a7:08:
a7:5d:43:e9:a5:7d:6f:14:38:03:6e:d7:b3:3c:dd:
18:b6:aa:14:10:9d:7e:42:8b:bf:4d:a7:65:d9:4a:
8d:bf:24:7b:18:8e:50:a8:ac:f2:6c:0c:04:d6:ba:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:EA:D2:DB:79:FE:A5:13:1D:E7:00:43:8D:CD:A2:3B:BF:E5:71
X509v3 Authority Key Identifier:
keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:5f:15:8c:74:4d:81:f6:3d:0f:84:10:2e:58:d0:11:0a:
0e:bb:d0:c9:25:8f:16:f3:da:b2:94:ed:fb:3b:c2:b1:cb:4e:
d7:0d:28:97:f7:50:a5:69:1a:3d:43:1f:17:a0:b2:73:1a:c5:
fe:59:77:4e:d7:07:c0:3b:1d:cc:ce:ce:8d:16:0b:69:82:45:
a4:15:a4:da:f9:4e:ec:ea:07:06:b5:ae:71:93:b9:40:93:4e:
a3:f2:7c:67:a9:ea:b7:43:e1:86:64:32:46:6c:4d:cc:f8:b3:
22:fe:b1:c2:12:db:39:dd:be:2d:91:90:fe:41:d9:12:80:c3:
9c:74:87:c0:b5:3a:d0:aa:e1:c1:5f:bd:cb:31:64:5e:6f:d8:
7a:3e:ba:55:e8:f4:36:f7:40:6b:4e:80:2d:56:35:ae:dc:9b:
ab:cb:a9:7e:20:6e:22:44:ce:b3:ad:fd:71:60:18:d3:52:9f:
e4:7a:d0:85:f8:70:db:d9:68:c8:fa:12:7a:d3:92:2b:f2:be:
84:5e:ff:39:ca:4c:6a:95:d3:5c:65:7e:33:b2:ae:2f:55:94:
8d:a4:c5:28:27:1d:6c:8f:e1:bd:72:50:bf:50:c3:c1:7d:d2:
d9:a7:00:20:8c:83:5a:bb:49:33:ae:b9:2a:7f:3d:dc:bb:f2:
03:5a:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:37 2026 by rpki-client