
$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft
File: D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft (raw, json)
Hash identifier: yVz/LceGpe2AgPzRDspl6AHBoo4V6FQriZhY7mSqJiE=
Subject key identifier: BC:49:02:D4:AE:B8:5F:91:D0:40:99:ED:9B:C2:9A:22:09:30:99:B2
Authority key identifier: D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42
Certificate issuer: /CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742
Certificate serial: 32498BE05787269D2DA62B3D1BA5404B702FDB40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft
Manifest number: 27
Signing time: Sun 01 Mar 2026 16:24:55 +0000
Manifest this update: Sun 01 Mar 2026 16:19:55 +0000
Manifest next update: Mon 02 Mar 2026 16:43:55 +0000
Files and hashes: 1: 323830343a336563343a3a2f33322d3434203d3e20323636363139.roa (hash: NMXs+d51bVk/z5q22Tx9T25srwjT6cqAT+oz13kBezw=)
2: D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl (hash: 0mzjMGUfLPKoG0VPUXg/+rLJFxi3h6zE2dT4Ot3Ae0E=)
3: 34352e372e3231362e302f32322d3234203d3e20323636363139.roa (hash: eANC6AkIb7brkzKwP7sUrnXl8fUbqph3YLW2GuBsUzQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl
rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 16:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:49:8b:e0:57:87:26:9d:2d:a6:2b:3d:1b:a5:40:4b:70:2f:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742
Validity
Not Before: Mar 1 16:19:55 2026 GMT
Not After : Mar 2 16:43:55 2026 GMT
Subject: CN=BC4902D4AEB85F91D04099ED9BC29A22093099B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:17:5e:86:9e:f4:2f:de:4f:2a:d7:59:b6:
96:59:07:d6:8f:8f:50:1d:3c:84:ff:d9:8d:a6:4c:
f6:d3:a9:05:80:89:ec:e2:cf:1d:e1:e8:ed:54:dc:
04:d0:df:b3:1c:c8:51:fb:a5:51:90:6e:ad:c4:37:
51:23:9c:8a:c3:90:ab:1b:b3:d9:44:51:b2:79:72:
a7:e5:47:af:29:2e:f1:0b:ee:8a:86:93:15:21:61:
62:9f:c8:69:27:95:52:b2:bf:2c:b6:fe:11:ef:2f:
74:49:83:85:a7:4d:d6:1f:76:5a:c5:35:f9:ff:ff:
ed:55:1f:76:8b:6f:55:2b:ba:ef:18:80:f0:b2:4a:
00:98:f5:80:a0:2f:32:bc:ae:9c:16:48:22:0c:62:
74:1d:d9:c2:12:4b:67:68:ba:49:23:cd:57:6e:2f:
78:1e:cc:09:20:ca:7f:52:78:42:6c:e4:b8:e8:f3:
cd:53:76:db:20:83:af:f2:3a:2a:23:40:b9:e2:ad:
a5:18:6c:da:24:ee:5d:13:dc:d6:5a:10:99:f0:73:
79:17:c9:f7:2f:4f:a6:1b:5d:ab:9d:84:ef:66:d2:
81:1b:3e:10:0b:87:83:2b:af:78:1e:a8:42:1b:86:
cb:70:ae:f3:43:c8:2b:33:c8:61:cc:81:57:9b:d7:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:02:D4:AE:B8:5F:91:D0:40:99:ED:9B:C2:9A:22:09:30:99:B2
X509v3 Authority Key Identifier:
keyid:D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:95:b4:4f:af:2e:07:b9:b2:df:39:84:fa:2d:87:be:45:
28:c3:84:cf:8d:21:ca:49:19:80:75:02:cc:73:fd:19:2a:47:
67:1c:85:7b:27:e4:a5:35:36:53:2e:f2:86:ef:b5:65:82:87:
0f:39:e3:77:18:8d:d5:f7:84:ee:bd:63:23:64:f4:37:e1:71:
c4:7e:f8:21:d4:8e:a6:a1:92:d1:c6:76:82:68:c1:aa:d4:35:
33:1e:71:01:e7:5c:15:28:49:75:d5:a5:c6:da:73:40:62:cc:
17:77:27:71:aa:dc:42:bd:09:03:c1:50:8c:c8:d4:b3:0c:ba:
12:59:13:6b:6d:32:e3:77:70:97:31:4f:ff:7a:cc:02:06:52:
75:37:a1:e8:82:a1:7f:f0:f4:f3:a7:2e:87:3d:b8:54:6a:e0:
6d:48:d8:7a:95:43:ad:18:be:8b:2d:15:8b:bb:05:ee:df:b0:
db:63:8e:da:f9:61:d4:f3:20:c4:26:78:ce:6c:89:6a:d5:d3:
84:e5:a4:bd:c0:db:4a:cc:ac:fc:69:e0:7b:35:27:97:16:3e:
3e:35:02:78:e9:e8:2e:e3:95:90:10:75:d8:b5:db:83:50:60:
08:be:ee:ff:de:f6:94:4d:db:95:05:2f:65:c9:99:b2:60:33:
f0:55:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:12 2026 by rpki-client