
$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
File: 3252E783D98B854BCC439007DE017EB6E4E2FF51.mft (raw, json)
Hash identifier: 7HrEfJ27jmAvGycKzo2Ct9AzVUmUJEtAHNCZgKz37GQ=
Subject key identifier: 71:E6:E9:1F:2D:11:26:BB:27:68:4A:F6:A7:7A:2C:60:C6:46:BC:A6
Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
Certificate issuer: /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Certificate serial: 774D4DFAAC3B16E3A2E2A415070B836ECFB0D4DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
Manifest number: B3
Signing time: Fri 17 Apr 2026 18:03:57 +0000
Manifest this update: Fri 17 Apr 2026 17:58:57 +0000
Manifest next update: Sat 18 Apr 2026 22:01:57 +0000
Files and hashes: 1: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=)
2: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: TGqKcq5hhQvs292+DCyMD6YCLTrai4dDENZfetKhjsc=)
3: 3252E783D98B854BCC439007DE017EB6E4E2FF51.crl (hash: fKvWqG9N9KgisAxNw0GyoYrYlOpv9qPGScQm2qBvaAA=)
4: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: Gp1PMxDQ40LAoeo7u3FrJiFb2mSa2LoBqbgag3h7iyw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4d:4d:fa:ac:3b:16:e3:a2:e2:a4:15:07:0b:83:6e:cf:b0:d4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Validity
Not Before: Apr 17 17:58:57 2026 GMT
Not After : Apr 18 22:01:57 2026 GMT
Subject: CN=71E6E91F2D1126BB27684AF6A77A2C60C646BCA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:d6:46:c9:02:09:a2:f0:be:67:89:a9:eb:
2b:d7:74:f8:48:5d:1f:2b:9b:ec:08:0b:25:9d:0c:
9e:14:71:43:29:f2:16:2e:9f:dc:ed:f6:d4:9c:22:
59:b0:62:57:d6:85:21:5e:d9:39:bd:2f:6b:88:fc:
a7:6a:c2:85:a0:33:4c:a0:bf:e1:44:18:b3:54:64:
82:98:32:0c:f3:c9:23:a5:fd:ec:86:c2:90:b3:11:
65:6a:e9:68:61:32:d3:b4:b1:57:78:62:87:23:99:
de:cb:91:dd:9b:26:b6:e5:3f:7f:f1:57:45:93:39:
36:91:2c:b9:c5:a7:47:59:a4:d5:37:0d:d2:3f:b9:
85:51:e3:a9:79:d6:f2:b0:de:96:dd:b1:e9:42:cf:
60:29:bb:af:60:2f:ea:43:db:78:35:d8:98:10:ab:
a3:a0:c4:4e:08:a6:5e:8c:66:6e:34:37:18:de:8a:
dd:e1:52:94:18:4e:50:01:56:10:f2:c8:7b:97:36:
14:8a:20:9c:44:29:ca:1b:fd:3c:c7:ea:79:5a:40:
31:7a:53:48:eb:a9:90:e6:af:3e:98:39:2e:4d:d1:
b2:64:e7:9a:57:cf:e9:dc:3a:bb:5c:74:f3:cd:bc:
ba:45:7b:1b:61:49:c7:c9:71:3b:ad:90:16:b9:e1:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:E9:1F:2D:11:26:BB:27:68:4A:F6:A7:7A:2C:60:C6:46:BC:A6
X509v3 Authority Key Identifier:
keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:31:75:bd:49:16:c1:8b:5e:38:70:63:09:64:b3:48:6c:
9f:65:f1:a6:9a:3f:5f:8f:67:dc:73:af:aa:94:cd:9f:c0:bb:
2a:30:15:1f:95:53:f4:a6:9c:2a:79:4c:f4:11:31:2b:f0:03:
f6:76:56:3f:18:01:89:58:f6:22:32:30:c9:2e:69:aa:7a:3a:
29:9f:9a:41:68:9e:29:d8:3e:00:a4:8c:4f:30:bd:da:57:a0:
95:7b:71:b9:a6:28:09:7d:a2:73:46:2d:f2:ca:f8:a7:3d:c9:
71:d5:f8:fd:64:d3:a8:3f:9b:74:73:0e:66:0e:95:f3:5f:fe:
6c:42:c0:fc:60:6a:80:31:b5:af:aa:74:41:14:36:57:a1:00:
28:9d:03:9c:43:2c:2d:da:92:07:8c:79:6e:18:07:54:b3:87:
8f:30:23:1d:e8:1d:e9:a3:42:87:2e:36:d1:69:f6:9e:cb:8b:
b9:d0:51:4d:89:72:1e:78:6f:44:c7:18:1c:5d:d7:57:4f:ce:
7f:09:2b:57:be:ad:09:a8:62:8a:8c:a3:97:e3:27:7a:60:58:
c6:bc:f8:1d:52:4c:65:04:30:7c:15:07:b8:5d:ea:13:06:ff:
57:f6:01:6b:6f:da:02:4e:ba:35:76:b9:d8:b1:a1:4b:de:b8:
6d:8d:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:01:18 2026 by rpki-client