
$ rpki-client -vvvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
File: 3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft (raw, json)
Hash identifier: SbcfDmgdGARPGANzVRV3vke72rhZ9/QNDpqVAOvMFPY=
Subject key identifier: 68:F2:27:1D:96:0D:90:31:F1:2F:C8:23:0B:B2:A4:B6:9B:66:16:C9
Authority key identifier: 3B:1E:2F:A9:B5:BA:1A:60:F6:01:80:B1:D5:64:04:5E:D6:7E:B4:A1
Certificate issuer: /CN=3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1
Certificate serial: 22BF9179E7ACAA27F68AEA17550B2B45B34A4E5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
Manifest number: 1A
Signing time: Sun 01 Nov 2026 11:24:30 +0000
Manifest this update: Sun 01 Nov 2026 11:19:30 +0000
Manifest next update: Mon 02 Nov 2026 14:06:30 +0000
Files and hashes: 1: 3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl (hash: GNCf4TeiGAvCNy4UMOnEngBy0Lvf+N+kZMeU5K3mTP4=)
2: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: c75uSCZ2MplcH9Xy/B1myzgzNIK7NBxI4OosUsuMbPk=)
3: 3137302e38322e35322e302f32322d3234203d3e20323637353738.roa (hash: OEYzLHZqJfUyGjYcpr2UFfWcx8mZEBxlUBuL49jiUiE=)
4: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: HlCsR77YgbJoDU+toq/zqs+Box4qCQ41RFogjmEMJC0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl
rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 14:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bf:91:79:e7:ac:aa:27:f6:8a:ea:17:55:0b:2b:45:b3:4a:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1
Validity
Not Before: Nov 1 11:19:30 2026 GMT
Not After : Nov 2 14:06:30 2026 GMT
Subject: CN=68F2271D960D9031F12FC8230BB2A4B69B6616C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:ae:e6:25:49:8c:2a:91:32:5b:e7:df:62:
30:b8:04:d9:59:49:1e:2a:d5:7c:0e:e8:6b:11:ca:
53:db:e4:21:18:3d:38:b5:d2:3b:4a:ab:78:de:80:
2d:38:d2:e6:96:41:35:06:9e:3e:e5:66:50:43:ef:
40:bb:51:7a:e3:d5:cc:0a:65:4d:e4:e5:04:70:8a:
d5:f6:66:cf:6f:2c:6c:3d:65:37:f8:5a:3e:e6:1c:
6f:81:8a:51:e3:cf:00:04:7b:d4:a9:46:9c:7f:5c:
17:56:aa:38:9e:15:fb:87:af:42:79:e8:c6:23:95:
bb:29:f4:e1:06:2a:22:4a:2d:66:56:92:24:aa:1a:
ce:a2:30:71:95:44:aa:40:d3:0d:7e:4c:da:e5:85:
58:be:96:06:54:c9:e2:58:3b:52:56:53:f1:3f:5b:
fa:37:ec:95:93:27:10:2e:b9:29:71:9c:aa:15:62:
e9:4f:a4:c3:f8:91:92:96:a5:35:d9:be:c3:1e:d4:
5a:e2:f9:a1:1d:61:e2:cb:dd:38:93:1d:43:35:a4:
06:fc:1e:6a:cc:32:ed:12:52:74:d1:8f:cd:21:ac:
8b:90:df:66:81:c2:37:95:ac:1e:cc:4d:45:0b:a7:
25:e7:0b:2f:8e:58:a1:f9:4f:3d:bc:63:ef:98:35:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:27:1D:96:0D:90:31:F1:2F:C8:23:0B:B2:A4:B6:9B:66:16:C9
X509v3 Authority Key Identifier:
keyid:3B:1E:2F:A9:B5:BA:1A:60:F6:01:80:B1:D5:64:04:5E:D6:7E:B4:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:db:3b:90:7e:14:e5:d2:21:65:30:9a:c6:46:80:4f:5b:
7e:83:4d:ff:4f:78:d6:11:e5:8d:60:93:bf:2a:bb:a3:f6:0f:
85:7a:8f:eb:c6:97:b3:73:6e:e1:c8:e6:33:e5:b1:30:7e:d6:
65:70:a0:91:c8:46:29:30:1c:a2:f1:85:8c:d3:4a:d0:eb:c1:
40:76:8d:cd:89:61:09:98:2b:8f:fc:3d:ea:fc:97:6d:27:32:
2a:be:29:95:6b:18:e5:d7:e8:1f:b1:48:e6:47:f9:a2:a4:c6:
e6:84:5c:ca:59:44:bf:81:b7:30:9d:c8:ad:b7:ae:c9:0f:f8:
27:70:08:95:2f:b0:5b:73:b6:8f:73:72:ba:be:4a:50:bd:05:
16:a5:7f:51:4d:88:24:e7:55:8a:48:e8:1b:73:c6:fe:3c:ba:
16:12:19:09:5d:cc:0b:23:07:04:aa:78:18:5a:d5:92:45:8a:
0b:06:b4:1e:9f:c7:61:5f:55:52:72:ad:25:99:58:57:16:c0:
36:a8:51:77:d5:bb:b4:bc:df:03:a9:d6:59:8d:2f:28:62:2f:
34:23:ac:48:a3:9f:f6:c4:3e:b8:83:64:84:5c:e3:82:34:64:
a2:3d:4d:98:a9:bc:f3:2c:90:6d:d0:2c:20:fc:8e:bf:ac:7c:
9f:35:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:55:14 2026 by rpki-client