
$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
File: 3668F23708FFBF0EE157A9A924E8295BA896F33D.mft (raw, json)
Hash identifier: EerwDPR5cPiy4rQmgohWIOYBbDhmVN37L9821AKRn3M=
Subject key identifier: 4F:28:0B:AD:40:3E:DF:2A:5D:C5:22:A7:FC:D5:6E:18:81:AB:EB:97
Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D
Certificate issuer: /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
Certificate serial: 0160D3500ADCF5D5D3033CB3F5A152AC8DBAE2A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
Manifest number: 6D
Signing time: Fri 17 Apr 2026 18:46:07 +0000
Manifest this update: Fri 17 Apr 2026 18:41:07 +0000
Manifest next update: Sat 18 Apr 2026 20:29:07 +0000
Files and hashes: 1: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: K+lZkEM4v6sJ/Jk0Z8elzm60jida0+XHfBI9QU5wKa0=)
2: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: oCPIOmoYwqZXDm5OOelB6GxaBTbNHz/pae+0Bvycpx0=)
3: 3668F23708FFBF0EE157A9A924E8295BA896F33D.crl (hash: rq1OvNRip25nLBUN+OR22QKLwK1Uq8g0EvxCeyA93hU=)
4: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 1O+rv6XlvbPZca5WvayM1LDM2sBBx6xsJcsb7KU/kII=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl
rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 20:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:60:d3:50:0a:dc:f5:d5:d3:03:3c:b3:f5:a1:52:ac:8d:ba:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
Validity
Not Before: Apr 17 18:41:07 2026 GMT
Not After : Apr 18 20:29:07 2026 GMT
Subject: CN=4F280BAD403EDF2A5DC522A7FCD56E1881ABEB97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:af:4c:6e:60:3d:7a:18:12:2c:4e:fa:01:
79:a0:44:f8:56:b9:fd:11:02:2a:ed:1c:6e:34:46:
2b:cb:cc:84:d3:ae:08:95:1f:9c:cd:17:a1:0c:87:
f9:9c:e4:c5:ed:14:47:76:c2:a3:02:10:bb:85:a0:
82:9c:a7:93:58:c8:34:9b:5d:e7:46:ea:23:2f:64:
cc:4e:1a:a4:d6:2d:85:16:16:73:94:3c:58:88:5b:
af:64:8c:65:d5:4f:8b:c2:0c:5e:a6:2d:f5:d5:0d:
9d:76:df:5c:15:d1:d8:73:e7:fb:79:c7:1e:f3:1c:
36:47:82:2b:d0:ab:33:b4:e1:bb:ae:b4:c8:04:c7:
36:7d:b7:c3:bc:9a:70:fc:73:28:7b:5f:bd:80:19:
d7:4d:87:99:1c:cb:18:4d:bf:5c:32:ad:e2:f7:e3:
80:f7:40:e0:c5:ed:da:2f:96:1a:bd:50:8c:dd:82:
27:c9:66:f6:79:fc:3c:c3:21:05:21:68:2e:52:58:
5d:41:28:d9:b4:b7:1f:3b:93:43:4e:64:a3:b4:e0:
50:94:ce:99:7c:ce:8e:79:ad:52:a8:53:0c:14:70:
fb:fb:64:e5:c1:02:13:8e:f2:63:9b:d8:cc:1f:5a:
04:29:90:34:c4:13:ed:17:f9:6f:f0:ac:cc:05:45:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:28:0B:AD:40:3E:DF:2A:5D:C5:22:A7:FC:D5:6E:18:81:AB:EB:97
X509v3 Authority Key Identifier:
keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8c:c8:c4:65:09:35:61:1e:82:fc:a4:ba:fe:02:1c:84:d8:
e9:4d:8f:db:ac:bf:3f:94:a3:6f:dd:14:28:9e:92:51:dd:66:
6e:68:28:9d:c1:79:45:56:c9:a7:31:e7:f1:6b:49:fe:ae:1f:
d6:f3:d7:c1:12:78:84:d5:49:73:7e:d7:75:5d:50:3e:98:cf:
81:e3:fe:70:24:4c:47:51:e4:c7:db:4e:f5:8c:69:b0:c0:fa:
d8:99:0d:ad:bf:2f:23:6c:74:a9:f7:0e:ad:a5:f3:bb:4c:ad:
4e:fc:d6:b5:91:b1:0f:99:aa:79:96:98:e8:b5:03:46:55:66:
71:1f:77:c2:b4:66:6f:9a:98:23:95:50:f3:5d:14:ad:4c:50:
d7:8c:de:f0:bb:ed:66:6f:f7:13:06:6e:d2:f8:a2:45:a4:28:
b7:a1:c1:90:77:be:82:4c:75:bd:02:50:39:db:2d:26:5f:d8:
b1:20:bf:c0:e5:08:b9:a8:44:cb:86:13:51:3f:da:68:00:10:
b4:b5:47:e4:2d:74:ec:da:65:42:64:d7:10:32:05:18:39:ae:
61:7a:21:16:99:38:aa:96:ce:a4:6c:21:a1:62:83:5b:0c:5e:
13:3b:81:f0:13:d0:e6:8a:8b:55:86:29:d4:d6:bd:c2:09:4a:
4c:1a:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:59 2026 by rpki-client