
$ rpki-client -vvf rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.mft
File: A336F0307373D367E106ACE4C73B22A06BB50DDA.mft (raw, json)
Hash identifier: PB/NteWAI6vSXux8nLpyc1zpaOaF+LBKtse4zB36ZIw=
Subject key identifier: 8D:B2:20:B9:D2:A3:36:32:FA:41:F9:D5:48:4E:C7:CC:6F:20:FB:7F
Authority key identifier: A3:36:F0:30:73:73:D3:67:E1:06:AC:E4:C7:3B:22:A0:6B:B5:0D:DA
Certificate issuer: /CN=A336F0307373D367E106ACE4C73B22A06BB50DDA
Certificate serial: 4C8211B6EEDD27BB8FCECB3C3DE0C744123BA5EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.mft
Manifest number: D2
Signing time: Mon 02 Mar 2026 14:35:28 +0000
Manifest this update: Mon 02 Mar 2026 14:30:28 +0000
Manifest next update: Tue 03 Mar 2026 17:03:28 +0000
Files and hashes: 1: 34352e372e3135322e302f32322d3332203d3e20323636353933.roa (hash: Og2f/8dn0pkXb6hU3XgHXQ/m2prHVa/iV42xbgRYR34=)
2: 323830343a336536343a3a2f33322d313238203d3e20323636353933.roa (hash: D7n3+hZX+6tSVoxxE546QUDIWjHXOI/cmTdqubTSdbI=)
3: A336F0307373D367E106ACE4C73B22A06BB50DDA.crl (hash: CMg7CQjUM0kIdVWdMCY3whImzkbLfPfRM9yOsJ4Sxx4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.crl
rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:82:11:b6:ee:dd:27:bb:8f:ce:cb:3c:3d:e0:c7:44:12:3b:a5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A336F0307373D367E106ACE4C73B22A06BB50DDA
Validity
Not Before: Mar 2 14:30:28 2026 GMT
Not After : Mar 3 17:03:28 2026 GMT
Subject: CN=8DB220B9D2A33632FA41F9D5484EC7CC6F20FB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:da:ae:b2:b2:e4:75:46:d1:9b:3e:eb:de:
70:de:13:a5:90:52:68:dc:71:35:a2:b9:38:9b:eb:
21:67:9d:36:58:c2:79:40:fa:ee:ab:11:77:f5:b7:
ca:c7:95:37:bd:9b:b3:1d:89:9f:40:25:1a:38:a5:
ab:9f:60:7e:8f:77:fb:1e:61:fe:6e:95:3e:14:75:
71:75:7d:a4:ae:d3:da:9b:36:4d:10:87:40:cc:e3:
29:cd:1d:47:de:96:9c:6a:8e:2a:06:d3:8d:50:83:
db:ca:0f:9f:5c:c2:1c:0e:7b:49:8b:61:af:d4:e3:
39:af:4a:c5:9c:cb:69:68:99:73:be:08:1d:48:c8:
4f:35:19:62:2f:51:72:17:99:9d:73:ba:71:0e:1f:
24:ce:94:28:d3:c7:a6:96:02:c1:46:cf:88:fe:a9:
72:09:42:a5:7c:64:77:8e:54:3b:36:64:c1:55:33:
b6:79:40:eb:bf:ac:0a:33:df:50:27:57:87:a6:aa:
a7:3b:71:e9:2b:fc:93:0c:4c:a5:f7:a1:d0:76:ab:
66:f9:06:da:94:99:07:8f:7e:9a:ee:91:2f:e3:d6:
bd:a0:ef:c4:29:89:63:a1:81:c2:f1:a1:cd:5a:c8:
20:d0:c4:e5:88:e8:e1:f0:bb:b8:65:0b:1f:9a:ef:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:20:B9:D2:A3:36:32:FA:41:F9:D5:48:4E:C7:CC:6F:20:FB:7F
X509v3 Authority Key Identifier:
keyid:A3:36:F0:30:73:73:D3:67:E1:06:AC:E4:C7:3B:22:A0:6B:B5:0D:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3a:43:9d:89:b0:42:e3:48:d1:89:42:b5:73:e7:cf:e5:25:
10:13:39:8e:3a:e0:e1:6b:7c:da:e9:3a:7c:7e:89:ed:7e:bf:
02:a8:26:c6:8b:15:aa:f2:5c:3a:cc:80:b3:13:e4:44:4a:d1:
e8:a8:84:53:77:f1:51:a4:10:18:ff:6b:0d:f4:d8:1f:90:f3:
4f:dd:1e:f8:61:b5:2d:c4:90:76:81:79:7e:d1:04:27:f0:01:
35:7b:04:7d:03:a0:c1:58:c5:2a:8f:56:47:28:5c:4e:cd:95:
3a:d9:4c:de:9d:ce:21:6e:e1:6a:fe:94:03:a5:8a:0b:22:f5:
95:55:e2:8e:de:9f:6e:f4:09:41:68:34:a6:74:02:20:0e:f2:
f7:7f:b0:7c:16:cc:23:cf:a6:d1:a7:f2:70:96:bc:93:48:36:
90:c8:ac:3f:01:3f:2e:ec:2d:14:79:f0:0c:d8:8d:83:9f:dc:
48:de:3b:20:b7:64:76:81:85:1c:56:cc:80:35:95:3b:0a:a4:
9d:5b:6d:4c:c4:52:d2:01:02:2d:09:14:4c:fc:dd:3c:d6:16:
2c:6d:2e:49:41:4c:5d:02:c9:0f:9e:0e:89:37:d7:30:00:03:
b3:07:e5:bb:2d:a4:34:90:68:3e:ac:75:0f:d0:a2:bd:7d:c7:
74:c3:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:13:16 2026 by rpki-client