
$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
File: 18330DC0F98F298BD4E31F45E07E665325C9862F.mft (raw, json)
Hash identifier: UBgMqEvT3sRTk1GghU/dm7597xc5lQ1eJ8a7lTQQ5pA=
Subject key identifier: 9B:86:C9:13:EE:A3:55:1E:B3:22:C0:BB:26:F5:9A:C3:B6:43:5B:C0
Authority key identifier: 18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F
Certificate issuer: /CN=18330DC0F98F298BD4E31F45E07E665325C9862F
Certificate serial: 08E7A4FF4E52280BB54AADAFCA31E4C19FD4B3A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
Manifest number: 021E
Signing time: Mon 02 Mar 2026 15:41:10 +0000
Manifest this update: Mon 02 Mar 2026 15:36:10 +0000
Manifest next update: Tue 03 Mar 2026 15:43:10 +0000
Files and hashes: 1: 323830343a313662303a3a2f33322d3438203d3e203631393130.roa (hash: g7F9wOGlX1xF6Va3m3L1AEg0gmkFQbeDx2faSdQe/IM=)
2: 18330DC0F98F298BD4E31F45E07E665325C9862F.crl (hash: SGXpc3CbW4RQ2sqHsh27psEktssJKk/Vovy2mMqzr7c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.crl
rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 15:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e7:a4:ff:4e:52:28:0b:b5:4a:ad:af:ca:31:e4:c1:9f:d4:b3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18330DC0F98F298BD4E31F45E07E665325C9862F
Validity
Not Before: Mar 2 15:36:10 2026 GMT
Not After : Mar 3 15:43:10 2026 GMT
Subject: CN=9B86C913EEA3551EB322C0BB26F59AC3B6435BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:ea:3d:20:c2:66:9f:b9:a5:13:b4:ce:eb:
57:cb:a7:88:7e:88:e4:b9:b6:a5:83:ad:a6:8a:1b:
f9:3d:00:9a:35:99:40:b7:a6:96:78:4a:8c:ef:8f:
2b:9c:73:34:d4:36:d2:c1:52:b5:6a:fe:1f:fd:3c:
04:af:92:81:d0:6d:5e:60:29:e3:66:b1:c6:4c:85:
bc:62:01:c1:67:bd:18:20:46:ab:6a:a8:64:f1:ab:
24:2e:d3:3d:cd:3c:5e:58:d0:15:f9:ef:11:6b:e0:
0c:c4:a5:b2:dc:f3:2d:37:1b:92:05:de:23:2e:69:
82:e5:63:d6:cc:de:d4:e1:ea:c5:da:72:76:85:0c:
ee:f2:e6:b0:8f:9b:52:92:f0:0e:73:d0:ee:49:5f:
10:73:cc:87:fc:39:d3:f5:f6:6d:5b:f3:14:4b:7e:
f5:da:4a:32:89:8b:98:0f:ff:1f:5c:09:24:6d:6e:
91:28:07:59:6f:50:d9:b9:c1:15:2c:02:c7:c4:54:
d9:7c:22:9a:2d:c3:ca:91:e8:57:28:0e:5a:87:f0:
d3:0b:92:04:a2:ec:69:47:c5:6b:e3:af:e4:a5:e1:
1e:ba:f5:3b:fa:04:93:41:dc:d0:4a:21:33:12:c3:
19:82:15:ca:ac:6d:9a:e6:ea:d8:f3:f5:dd:7e:55:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:C9:13:EE:A3:55:1E:B3:22:C0:BB:26:F5:9A:C3:B6:43:5B:C0
X509v3 Authority Key Identifier:
keyid:18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bb:67:01:d3:a5:54:a9:93:57:87:94:3d:92:98:e4:74:01:
47:a4:46:8f:02:07:ff:8a:60:04:35:1a:3f:bc:02:29:bb:4a:
a5:16:da:c3:0b:b5:36:4c:53:98:83:ae:f4:47:7c:4d:bf:f0:
42:d9:a2:48:5a:4c:3b:a2:5f:db:4e:46:b8:6e:49:db:60:b6:
d5:c4:15:71:1e:5c:de:3a:50:3c:da:3f:2b:2e:c8:ba:58:aa:
20:54:63:07:33:68:7c:6d:12:60:ec:3e:5e:ff:dd:45:3d:af:
87:0b:3c:b9:8c:5e:bb:86:19:56:8a:92:6a:3e:a0:a8:ed:9b:
38:87:77:22:31:0c:57:e6:c6:2f:f0:f5:4d:25:0d:28:7b:74:
60:52:74:60:15:d2:42:9a:7c:32:b2:6f:e1:c3:63:4d:36:8d:
2d:4a:07:24:89:11:eb:81:31:6c:c1:51:ce:f3:cf:66:20:ac:
fc:51:3f:62:57:d4:65:fd:f6:6b:60:b8:e2:a1:a5:14:8a:b7:
d4:31:21:29:70:c5:e1:ec:2f:60:e0:fc:39:f4:7d:60:4c:c8:
e1:06:ac:28:27:8b:20:c4:65:37:55:b3:46:3d:f9:e1:53:0d:
b7:1f:24:98:a5:95:c9:35:5f:48:32:a7:88:21:05:39:2a:99:
8c:f3:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:47 2026 by rpki-client