
$ rpki-client -vvvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
File: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft (raw, json)
Hash identifier: W4DoYRFIw8nLICXVuHj6OvUergm0bCXQmTHHqYqOf90=
Subject key identifier: 75:4E:90:F6:E6:96:6C:00:46:99:28:70:70:B1:2F:95:DB:46:F4:5C
Authority key identifier: 38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
Certificate issuer: /CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Certificate serial: 2B4400277D767575EB21A106CB7336CC34A322ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
Manifest number: 017F
Signing time: Sat 31 Oct 2026 07:17:51 +0000
Manifest this update: Sat 31 Oct 2026 07:12:51 +0000
Manifest next update: Sun 01 Nov 2026 09:37:51 +0000
Files and hashes: 1: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (hash: 5ta1zOMgVoZPbCGHY6y3AGzRt6BUjiuQbVXNMQPJM9g=)
2: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl (hash: RCAOHwd3uLVr7hF9phgk50LsX/WegVxpf/dbB5IAIto=)
3: 3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (hash: /hfh1NstAGKg1PWqlzIvXS4gPPZBA4gGIqKAAZ2U1gs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 09:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:44:00:27:7d:76:75:75:eb:21:a1:06:cb:73:36:cc:34:a3:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Validity
Not Before: Oct 31 07:12:51 2026 GMT
Not After : Nov 1 09:37:51 2026 GMT
Subject: CN=754E90F6E6966C004699287070B12F95DB46F45C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:52:8d:ad:88:e6:a4:4d:47:ad:0c:ac:59:
1d:18:cc:36:b1:7c:87:25:ef:a5:7c:d0:1a:30:3b:
d6:54:4a:0c:b8:d1:60:84:80:c9:a3:86:d4:34:a4:
68:e4:80:78:d9:74:27:ce:42:8f:de:58:66:af:b7:
e8:9a:e1:85:cb:a0:56:2f:4b:9d:76:16:97:a0:d2:
80:de:9e:cd:2e:f1:7b:93:7c:f0:e3:5d:46:dc:b4:
9e:41:97:4e:db:3b:c2:23:22:54:26:ce:fd:b6:5c:
7c:5b:6a:57:45:52:87:3c:9b:b2:8b:7b:1a:16:ec:
3c:69:81:b0:cd:36:4c:d2:5e:58:ba:cf:aa:3a:46:
66:34:58:69:d1:6c:ee:91:97:19:76:19:37:ed:dd:
8d:6e:cd:b2:d2:17:ff:0a:f0:b2:08:fb:9f:6a:4d:
68:15:51:97:d9:c5:34:5b:43:8a:60:57:16:c2:e1:
58:2a:82:f6:4d:f0:9b:31:59:63:33:4c:85:7d:df:
6a:75:a8:40:b3:98:0c:75:b4:ec:1e:68:21:fc:0e:
5e:7c:c7:55:fd:05:ab:5f:c3:4b:50:2b:5a:82:87:
ec:83:c7:d7:aa:85:32:5f:66:e2:52:20:40:28:24:
1c:bd:9e:59:a0:54:aa:10:8f:eb:53:01:59:1f:e0:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4E:90:F6:E6:96:6C:00:46:99:28:70:70:B1:2F:95:DB:46:F4:5C
X509v3 Authority Key Identifier:
keyid:38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:94:58:39:ed:a9:94:66:dc:52:47:1b:16:f6:72:43:97:80:
cf:88:71:fe:20:f0:15:38:e4:4d:23:b0:47:50:5c:e2:f5:8d:
89:13:c5:3e:dc:7e:42:04:ad:ce:c8:46:88:64:97:5a:41:95:
1c:88:33:14:c4:e5:22:5b:79:3a:31:e1:05:f2:13:29:0a:19:
a1:91:bc:08:da:56:be:5f:13:f7:41:e2:15:1d:6e:78:2c:34:
2c:d2:91:43:45:2a:08:a1:92:04:e4:66:84:c2:8e:84:f5:93:
e3:34:ee:e2:e5:94:b0:47:db:55:7f:61:c7:46:34:fb:7a:6f:
cf:fb:cb:ff:f7:34:c0:d0:09:fb:d6:1f:bd:11:44:67:26:f2:
2e:6a:ae:42:1c:61:97:c2:69:14:35:d8:87:c9:31:e2:6d:16:
f2:dc:0a:18:5e:2c:ec:54:98:59:b4:c4:01:b2:f1:84:84:57:
65:c7:85:68:36:98:b4:37:fd:f6:32:27:b1:df:ee:c3:72:95:
b3:c4:dd:9e:eb:51:f7:43:04:52:8e:59:ec:b3:23:83:5a:c9:
96:d7:8a:b1:fb:46:cc:55:28:8d:f2:65:0f:b3:b0:b5:8e:79:
b4:eb:03:ef:0e:e2:f2:bf:f6:47:48:a7:18:3f:39:38:f4:d9:
88:c6:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:33:50 2026 by rpki-client