
$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json)
Hash identifier: /u0URNGTys9AbM35z5U2zmGtO1v1c7XU7yNiLrVyRTs=
Subject key identifier: 0B:D0:8C:BB:8A:41:8C:FA:F0:6F:A9:BE:13:3C:05:25:35:44:96:06
Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85
Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
Certificate serial: 526F2B2865FC2910B4DE3D8C5A928F4D1C9C561D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
Manifest number: 0101
Signing time: Fri 17 Apr 2026 07:54:41 +0000
Manifest this update: Fri 17 Apr 2026 07:49:41 +0000
Manifest next update: Sat 18 Apr 2026 08:48:41 +0000
Files and hashes: 1: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=)
2: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: mkE3GTUC7iGgLRwIIS0RKiAl7h15Q5T0lY6lUY7ZmkY=)
3: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl
rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 08:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6f:2b:28:65:fc:29:10:b4:de:3d:8c:5a:92:8f:4d:1c:9c:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
Validity
Not Before: Apr 17 07:49:41 2026 GMT
Not After : Apr 18 08:48:41 2026 GMT
Subject: CN=0BD08CBB8A418CFAF06FA9BE133C052535449606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:3f:19:30:56:5e:30:a2:5f:97:7d:ea:60:
ac:cd:f7:f4:a4:21:7c:a2:ae:0f:d3:54:e1:10:e3:
55:be:44:d2:6b:e8:a4:ae:e6:9d:bf:f0:11:19:1a:
cb:15:de:fb:43:4b:df:5a:c9:e1:49:61:91:3d:4f:
c0:23:f6:d3:53:fd:d7:50:44:3c:12:9c:ba:f4:00:
20:73:87:58:e3:0e:42:1f:76:2a:09:7e:40:d5:e3:
5a:52:fe:c2:c7:d8:5f:d3:0b:6b:ce:6b:2a:11:de:
e1:fc:7a:a9:44:53:b5:31:64:86:10:35:7b:fa:2c:
89:ff:26:02:43:29:6b:73:5a:80:c3:41:28:8d:03:
65:26:ee:bd:41:a2:43:6f:82:e0:92:97:04:c7:be:
2b:31:1f:b9:cc:ed:8f:3f:7c:dc:10:ed:0f:36:06:
09:ab:2f:c2:d9:d2:d7:37:d4:90:65:31:1d:ff:8b:
08:f0:ba:85:42:2b:9a:68:bd:c3:1d:7b:a3:24:52:
69:dc:80:4d:20:88:d4:3b:e4:ca:58:11:86:46:ff:
bc:46:3f:f0:c5:a5:1d:65:75:21:0d:6a:50:8e:92:
16:c0:ac:75:96:c5:ea:71:ea:ed:73:8b:13:79:fc:
61:70:a1:91:b3:ea:1f:5d:e5:7b:88:8e:1d:7e:80:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:8C:BB:8A:41:8C:FA:F0:6F:A9:BE:13:3C:05:25:35:44:96:06
X509v3 Authority Key Identifier:
keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:57:7a:de:58:f9:a6:ef:56:25:ce:3d:de:c9:be:c7:00:9b:
34:c8:a7:d5:f2:81:fc:9f:32:27:bf:33:8d:46:8c:6b:42:58:
af:a1:e2:d6:cb:e6:d3:a3:4a:54:75:d2:b2:0a:37:79:ce:42:
3d:73:8e:a0:b8:65:1e:2a:21:e9:82:ce:4c:e6:79:32:a0:7e:
86:bf:b5:bf:5c:22:be:2b:e3:16:d5:71:6d:58:87:7b:00:bc:
38:b0:9e:c2:2d:2f:eb:5e:17:84:47:64:7a:d4:aa:cc:80:f2:
84:e4:e4:d0:be:5e:0c:74:2b:69:ea:96:34:d1:af:aa:f8:65:
ec:49:5d:f8:27:d6:e8:a4:ce:34:6e:24:95:78:8a:1b:0c:6a:
27:8c:3a:00:fb:5b:a5:9a:43:4a:34:3f:40:43:15:25:f1:a1:
cd:5a:13:4f:5e:49:2f:5a:ac:0e:ec:fb:0d:cf:e0:33:dd:be:
da:69:cf:09:b0:ee:52:8a:94:3f:ba:e8:2f:f5:cb:aa:dc:c0:
99:53:7c:69:f6:bb:3d:a3:40:9f:00:88:9a:9b:ad:b5:c0:ea:
2e:e2:86:71:23:35:13:07:18:a9:37:88:a3:85:1a:95:d0:47:
3d:eb:fd:88:de:21:92:e8:65:d4:2d:e2:5a:56:6e:ed:58:d6:
33:e4:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:02 2026 by rpki-client