
$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
File: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft (raw, json)
Hash identifier: pbpwPtrefcmkyRkLpr5BM9qEV4zITBGtN9NhM7DCmPM=
Subject key identifier: 65:5D:EB:EE:AD:D7:32:AC:CF:D2:AF:82:B1:E5:89:CE:2D:2A:B6:9C
Authority key identifier: 38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
Certificate issuer: /CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Certificate serial: 19721668FAF34BEAC81EE16884501D3ACAD13406
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
Manifest number: 3B
Signing time: Mon 02 Mar 2026 01:37:08 +0000
Manifest this update: Mon 02 Mar 2026 01:32:08 +0000
Manifest next update: Tue 03 Mar 2026 04:57:08 +0000
Files and hashes: 1: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (hash: 5ta1zOMgVoZPbCGHY6y3AGzRt6BUjiuQbVXNMQPJM9g=)
2: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl (hash: 7JnM5hUhf9iNW8xON+nH0gTi4UtJoBb0ubg9FrovJls=)
3: 3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (hash: /hfh1NstAGKg1PWqlzIvXS4gPPZBA4gGIqKAAZ2U1gs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 04:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:72:16:68:fa:f3:4b:ea:c8:1e:e1:68:84:50:1d:3a:ca:d1:34:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Validity
Not Before: Mar 2 01:32:08 2026 GMT
Not After : Mar 3 04:57:08 2026 GMT
Subject: CN=655DEBEEADD732ACCFD2AF82B1E589CE2D2AB69C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:9e:9a:42:b5:8a:24:f1:f8:55:80:8c:af:
f7:f9:a8:fe:7c:c1:72:73:17:5f:1e:9a:2a:18:14:
08:78:4e:8e:7f:ce:45:a9:01:a6:7e:bd:b0:9b:45:
1d:ba:46:31:b6:c8:de:8c:a3:73:3b:cf:d6:f3:dd:
9a:3b:b3:fa:3d:dc:22:8d:95:77:eb:95:04:a5:9f:
82:d2:5e:99:3a:20:1b:ac:57:5b:db:ff:ac:6b:ec:
50:3f:5c:b2:05:ca:0b:2d:45:84:90:cd:62:f1:8e:
c0:78:5c:c7:31:f5:bd:55:39:6b:4c:38:d9:c5:d5:
b4:ab:64:a2:5c:e3:24:3e:ec:2a:d9:20:68:9f:9d:
a2:f0:63:1f:9b:f4:3f:f4:9b:7c:e4:8f:78:87:8c:
21:e7:02:e0:b8:14:c5:e7:24:64:06:d9:f5:c4:3d:
8c:71:c8:57:3b:a4:a2:62:cc:88:c5:63:e7:86:ed:
4a:7f:45:08:42:98:d0:b8:44:33:50:f6:6d:0a:e5:
1f:21:18:a1:57:70:c3:88:e2:bd:9b:56:e8:73:a8:
8f:46:8f:34:38:e5:70:fd:12:f3:70:47:7e:b3:a5:
9b:97:bf:0f:d9:a6:43:8d:7c:3b:9e:7c:9b:65:55:
b1:c4:35:11:a0:64:7f:44:39:8e:0f:23:49:52:7c:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:EB:EE:AD:D7:32:AC:CF:D2:AF:82:B1:E5:89:CE:2D:2A:B6:9C
X509v3 Authority Key Identifier:
keyid:38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e4:74:86:93:5c:4d:12:f1:8b:02:fa:30:2c:9f:c1:ed:a1:
3e:f2:2e:45:08:32:8f:d3:f2:e7:cb:50:08:71:70:4c:b1:56:
07:6c:1c:9e:e1:6c:1b:e4:bf:05:f6:a5:d8:3a:52:67:6e:3c:
2d:8c:0c:f6:2a:71:ce:13:6c:74:a7:71:c4:8d:6c:60:6e:f6:
2b:d8:1c:b8:cd:cb:a0:04:36:72:1c:da:36:8a:da:44:98:95:
cd:20:01:ed:2f:d0:10:57:6d:6a:b9:23:25:5d:32:6e:0e:cc:
32:17:f7:f0:e2:63:89:c9:a5:de:f0:62:49:dc:d4:c4:26:55:
25:11:b6:48:63:1d:0f:7e:13:f2:52:99:88:08:9b:46:57:7e:
58:0f:bd:2d:b7:97:1e:e3:95:1f:8a:88:31:b0:b8:63:b8:df:
6a:6c:ff:5c:6a:08:56:59:51:9e:e0:3e:c8:5a:74:73:9b:1e:
9b:a2:4b:61:1d:c5:06:ce:85:cd:a5:90:8f:28:62:55:53:fe:
fa:4b:62:e1:5d:d6:f8:7c:0d:5b:40:9d:1f:ee:cc:dd:a3:d8:
10:d9:c6:79:43:59:f3:79:cd:f6:b9:22:a7:90:5b:0b:4b:6c:
d6:35:4e:88:73:b2:2b:0d:35:a2:7c:92:a3:90:db:e8:87:ac:
ee:76:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:36 2026 by rpki-client