
$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json)
Hash identifier: X0yPoRJQLHjjL+gmdhUqLlnA63CFCqm3dZbct38/4v4=
Subject key identifier: 03:69:04:6E:72:4E:AD:27:78:C9:CF:62:7E:06:AF:45:3A:99:70:AD
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial: 4F761D64FD36C25791A00B694F39414587F39F9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
Manifest number: DE
Signing time: Mon 02 Mar 2026 05:44:00 +0000
Manifest this update: Mon 02 Mar 2026 05:39:00 +0000
Manifest next update: Tue 03 Mar 2026 09:34:00 +0000
Files and hashes: 1: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=)
2: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=)
3: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=)
4: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: GHrJafcsV9T0WAZMmFNAPeXIHYht6bjF5QLfO2oOIMI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 09:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:76:1d:64:fd:36:c2:57:91:a0:0b:69:4f:39:41:45:87:f3:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Validity
Not Before: Mar 2 05:39:00 2026 GMT
Not After : Mar 3 09:34:00 2026 GMT
Subject: CN=0369046E724EAD2778C9CF627E06AF453A9970AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:7a:38:14:df:ed:ba:55:fe:e7:a0:da:e5:
7e:ea:fe:d9:0e:ed:55:d9:8b:73:56:50:eb:c5:7c:
56:0c:c2:fc:33:d8:8b:5e:90:b4:cd:ef:5b:e4:08:
eb:d3:0d:9e:e9:7c:24:19:42:24:99:0a:8f:89:06:
89:6e:98:c1:2b:bb:df:59:0e:1f:bd:47:28:10:91:
fd:3b:0c:57:14:58:7c:c7:be:e6:49:3a:58:7a:ef:
c8:d0:fd:56:e4:e9:65:5f:2d:ac:b3:7a:18:2b:f4:
64:06:92:cc:9a:4e:3a:a7:1a:59:ca:e6:fb:20:50:
3a:76:93:15:9a:13:75:82:ea:63:bf:33:4f:77:14:
54:b5:b6:88:52:f7:c5:1a:54:d1:31:ec:44:3b:36:
56:4a:76:25:af:5f:f3:8d:39:b0:ff:9b:8d:76:dd:
f5:af:98:a3:73:4f:e4:14:de:2d:ca:e8:79:65:8f:
a8:39:aa:b6:17:f8:eb:27:33:56:da:8a:d0:8a:12:
73:f0:1c:62:31:07:c4:ef:e7:2b:d9:a0:51:7a:2e:
ee:89:be:c1:4a:78:0d:6e:41:14:1d:79:34:b1:61:
57:8a:76:78:6c:d2:de:3f:3c:a2:e5:2a:93:50:d4:
79:cf:e0:d3:d2:0c:a0:29:e4:e0:16:c9:fb:46:04:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:04:6E:72:4E:AD:27:78:C9:CF:62:7E:06:AF:45:3A:99:70:AD
X509v3 Authority Key Identifier:
keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:17:4b:ee:8c:45:a4:9e:c5:fe:ab:f8:fa:a2:9a:6b:aa:a5:
49:07:ac:10:e8:b3:3c:45:53:b8:23:98:88:61:93:e0:e0:83:
0e:83:9c:ee:11:ad:ba:f9:6e:89:c9:de:88:65:43:cf:49:d8:
c1:53:67:7d:bf:7f:e7:33:98:0d:6e:09:1a:6f:59:94:b2:60:
ac:14:25:8e:59:d9:9f:45:53:8f:a5:05:87:22:a0:b7:04:9c:
8a:41:cd:44:81:2e:08:d3:9d:7c:9b:bf:98:9f:6d:a7:d6:80:
f0:3b:14:4e:e0:c1:24:83:87:3a:22:71:33:ac:57:22:74:c3:
10:53:a3:3b:cb:c6:64:da:07:b6:e9:65:c7:f0:41:1b:1a:1c:
17:15:b3:80:be:40:3b:9b:13:6c:68:96:d2:f1:81:14:5f:fe:
fb:b2:c7:9e:75:3f:6a:f7:11:74:3c:88:b6:be:69:59:ac:ad:
a0:7b:38:70:e2:23:0f:bf:49:93:58:1d:05:47:f0:a5:23:64:
f8:6b:51:7f:dd:47:07:49:52:22:23:7a:f0:ba:29:d5:a3:84:
39:73:2b:72:ab:f4:01:5d:22:57:d3:0a:7b:0d:e3:74:e4:8a:
a1:d6:e9:69:10:b7:1d:7d:10:bb:2c:9d:e6:77:5e:5c:cd:5c:
51:38:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:47 2026 by rpki-client