
$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
File: 5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft (raw, json)
Hash identifier: NRBxU3CvWjsoeoKYqAoG7qNb+nU+iJ57ui5S4xtyGqQ=
Subject key identifier: 63:89:E4:C3:31:09:B2:24:A0:5F:98:64:02:E3:38:8D:21:9B:FF:82
Authority key identifier: 5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
Certificate issuer: /CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
Certificate serial: 331DD07E9CBC8F95417F9AABBB10675F822073D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
Manifest number: 39
Signing time: Sun 01 Mar 2026 11:22:08 +0000
Manifest this update: Sun 01 Mar 2026 11:17:08 +0000
Manifest next update: Mon 02 Mar 2026 11:49:08 +0000
Files and hashes: 1: 3136382e302e3136362e302f32332d3233203d3e20323633343833.roa (hash: jMkRqtoEFReHbIVj0glijLpMJ6PwiTGu44jvbzjPxeI=)
2: 5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl (hash: XRbiewwQ8nB1dBVM56u8hKYsOaiJc/gI689EcNI3KLA=)
3: 3136382e302e3136342e302f32332d3233203d3e20323633343833.roa (hash: e9/O62ZEPkBCNGnDpzyARSyuYb1zB9mtqW31b7CHJP0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl
rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 11:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1d:d0:7e:9c:bc:8f:95:41:7f:9a:ab:bb:10:67:5f:82:20:73:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
Validity
Not Before: Mar 1 11:17:08 2026 GMT
Not After : Mar 2 11:49:08 2026 GMT
Subject: CN=6389E4C33109B224A05F986402E3388D219BFF82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:52:8f:bd:06:4f:67:59:37:e7:62:b3:4b:
22:10:37:64:a7:7d:c2:50:69:7c:d4:aa:f5:de:e8:
4e:ba:d0:c1:79:36:08:c0:8a:cd:14:73:aa:d5:fd:
7a:03:77:78:08:59:26:24:02:1f:f9:22:c0:ec:48:
38:c7:64:d1:be:d0:66:cf:b9:25:d8:50:02:04:5f:
0c:c7:44:07:e0:a6:03:d6:41:55:95:19:3c:ce:b3:
9a:3e:56:6a:41:ba:91:ff:4c:e7:26:14:08:dc:7e:
9b:8e:e7:01:c2:2a:5e:d7:57:13:47:60:b9:8f:58:
60:4b:00:06:a6:af:78:d0:85:7c:a4:aa:1a:56:23:
5d:e1:cd:67:c5:2e:89:b4:f2:b9:da:6c:5d:ff:da:
0f:61:cf:e7:1f:af:e6:87:a7:b1:9b:c4:7e:f3:80:
93:bd:00:76:eb:9f:84:a0:4e:33:29:e9:92:b4:d9:
ef:ad:84:db:5a:69:5a:c7:3d:54:dc:f9:65:c4:8f:
b3:8f:4a:a7:e8:65:40:57:38:85:63:a0:5b:3f:c7:
72:4d:a7:09:ab:6c:8c:b9:d5:88:bf:28:1a:7e:cd:
d9:cf:91:c5:49:d4:f7:bc:ac:de:34:da:db:c0:36:
79:c9:71:99:3f:ec:41:69:8e:76:ba:81:e8:29:4f:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:E4:C3:31:09:B2:24:A0:5F:98:64:02:E3:38:8D:21:9B:FF:82
X509v3 Authority Key Identifier:
keyid:5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:bd:fb:58:10:75:5d:14:84:13:17:e6:23:b1:b3:88:72:38:
d5:2e:ef:b8:fe:cf:d0:43:00:13:88:e0:5c:87:18:64:01:fa:
57:46:9a:db:f3:3e:cf:9c:f1:97:51:0f:3e:80:73:e2:38:f0:
71:32:e6:da:c4:5a:ea:99:4f:f9:14:c3:48:49:53:ac:b2:e4:
ee:a4:b2:f6:ea:94:ea:c9:ff:75:22:c9:62:49:23:32:83:4b:
cc:04:1c:70:5e:9e:12:a4:09:75:f8:bd:16:6d:6a:1a:e6:ad:
48:d4:70:85:f7:c5:bd:e4:ba:80:73:97:c7:56:03:23:0f:92:
73:a8:ea:d9:79:b4:54:8b:f0:a3:2a:86:12:52:7b:28:6b:8e:
59:dc:58:eb:ee:ea:31:62:04:3d:1c:9b:7b:02:47:73:31:ea:
3a:9e:ef:1c:0a:8b:02:1a:18:0a:64:f2:f1:1f:7e:07:e3:f2:
e9:f9:cd:0f:09:d9:ca:ad:ba:3c:34:76:5a:12:c8:58:66:e3:
35:05:22:5f:db:d2:39:ea:1a:e4:f3:76:5b:ef:b1:98:83:7c:
c4:d0:05:ba:76:35:66:b0:f0:94:aa:cb:86:64:01:05:08:e9:
e9:aa:a7:01:c2:33:47:c1:f3:3a:d1:5a:50:b0:c3:44:5d:f9:
cf:7f:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:39 2026 by rpki-client