
$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
File: FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft (raw, json)
Hash identifier: fW9MLgD5lLX+8eTL9y2pzwNTY0EA6g3aOWTHlxIjlYU=
Subject key identifier: DD:36:CD:31:A7:90:2B:A7:D3:91:D1:FD:FD:7E:A3:00:F8:17:46:1E
Authority key identifier: FA:8F:AB:FB:F1:A1:C5:61:2D:7C:C8:D0:30:06:A9:17:66:40:EB:68
Certificate issuer: /CN=FA8FABFBF1A1C5612D7CC8D03006A9176640EB68
Certificate serial: 1659D3629C4A29AB0BF0DF277BE318E8D42FC9F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
Manifest number: 03A1
Signing time: Mon 02 Mar 2026 15:06:10 +0000
Manifest this update: Mon 02 Mar 2026 15:01:10 +0000
Manifest next update: Tue 03 Mar 2026 18:20:10 +0000
Files and hashes: 1: 323830343a326435383a3a2f33322d3438203d3e20323635323736.roa (hash: wUFuu/O26/UkZSJ2ioO4qmybz7nmO2IbNlE/TS47W/w=)
2: 3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa (hash: LJ3Bqo5AkYzvIhdZkwh/mP77qY94QQ/TotyFcSJCorg=)
3: FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.crl (hash: TkjRCLz5iLYnv2cc12AZExLJxGGi1L5kJcM9MmASmsE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.crl
rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 18:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:59:d3:62:9c:4a:29:ab:0b:f0:df:27:7b:e3:18:e8:d4:2f:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA8FABFBF1A1C5612D7CC8D03006A9176640EB68
Validity
Not Before: Mar 2 15:01:10 2026 GMT
Not After : Mar 3 18:20:10 2026 GMT
Subject: CN=DD36CD31A7902BA7D391D1FDFD7EA300F817461E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:f0:0f:56:e8:8f:c3:bc:56:64:55:0e:b1:
1b:43:6d:09:a8:02:3c:0e:ae:f4:56:73:ee:fd:17:
20:50:c3:c4:99:fb:5a:37:df:17:3e:19:13:fd:c2:
d1:e9:32:0d:71:0f:7f:71:22:27:8a:6b:a5:ab:59:
a4:62:38:1e:ad:5f:93:e1:35:26:b8:14:1a:62:4d:
ba:b1:07:38:e2:42:96:cb:00:e0:e3:3a:f8:d0:35:
5a:4c:51:7b:fd:c9:d1:57:4f:d1:0a:da:73:93:6c:
43:4b:64:1a:8f:3e:86:fb:d1:28:b3:6d:5d:0c:d6:
36:08:e5:c1:10:6b:de:a2:79:d2:1b:a2:f7:91:5d:
a0:d7:d9:ce:94:dc:c4:62:e4:a9:64:a8:1d:0e:09:
4f:68:5f:28:af:40:44:74:fe:a1:0f:aa:c4:fe:c6:
d3:37:ce:30:88:2b:d2:cb:05:0e:6d:09:cd:b2:69:
cb:22:6d:a9:85:dd:00:43:8c:56:ba:9a:6b:9c:a0:
12:4b:2b:8f:4d:7f:9a:e7:41:80:ae:09:9c:00:ca:
4a:20:de:26:67:45:2f:36:2e:55:0f:97:84:76:11:
00:d8:3b:ad:9c:88:7e:44:65:df:5a:b8:12:4a:ef:
5b:73:7c:48:59:12:e1:db:50:fd:e3:b9:7f:99:9c:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:CD:31:A7:90:2B:A7:D3:91:D1:FD:FD:7E:A3:00:F8:17:46:1E
X509v3 Authority Key Identifier:
keyid:FA:8F:AB:FB:F1:A1:C5:61:2D:7C:C8:D0:30:06:A9:17:66:40:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:33:52:d2:1b:72:0a:a9:f3:97:81:3a:59:77:f8:0f:d8:
6a:91:81:fa:6d:9d:0a:63:63:b2:9b:8a:1d:67:2a:11:05:20:
cc:4f:24:27:f1:3d:aa:f4:ff:19:aa:d7:c8:f7:6a:fb:f9:0c:
34:18:b4:6c:be:fd:08:05:2f:3b:dc:70:90:90:fc:7c:07:19:
0e:09:03:66:1b:dc:dd:c3:a0:c0:a1:8c:ce:07:68:e3:bb:46:
7f:9c:e8:6e:95:1c:68:c8:15:66:fc:e2:9c:e3:d2:5f:00:71:
45:27:1c:cc:55:cf:d7:77:3d:32:c9:de:f6:b0:48:96:9e:b6:
d3:f1:9c:18:ef:9a:fa:74:ed:67:95:a9:93:91:1c:dc:92:ea:
37:52:3e:2a:b0:6c:d1:6d:39:20:57:fd:07:39:17:53:d9:90:
73:dd:dd:98:8d:af:47:b2:d8:a2:29:e5:1f:1f:5d:fc:07:43:
4b:89:31:0e:19:09:81:ae:23:77:08:b2:b8:e5:0c:30:40:5f:
4e:61:2b:25:a4:d2:ea:6b:95:9e:cb:72:17:56:b9:4f:d5:f7:
29:c8:37:19:af:a1:e6:26:08:ca:4f:f5:8e:78:31:0c:6d:23:
9d:95:e9:19:b4:ac:91:13:42:cb:d4:82:7d:2a:36:cb:29:b7:
42:14:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:46 2026 by rpki-client