
$ rpki-client -vvf rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
File: 3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft (raw, json)
Hash identifier: WhObGjNwTMQO1bv8NzL/Dy6DwBnu7VYlSSUlKXRf9fg=
Subject key identifier: 3B:43:AA:19:14:56:BA:DC:0C:61:57:28:3E:28:B9:79:C0:6E:7A:C5
Authority key identifier: 3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8
Certificate issuer: /CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8
Certificate serial: 1BD6EE4EF3E87D2B90A53B98FB9CAA1B6BE2E9C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
Manifest number: 28
Signing time: Sun 01 Mar 2026 21:52:02 +0000
Manifest this update: Sun 01 Mar 2026 21:47:02 +0000
Manifest next update: Mon 02 Mar 2026 22:51:02 +0000
Files and hashes: 1: 323830343a393739303a3a2f33322d313238203d3e20323735363331.roa (hash: Tru9K7iTZxan0rQQwtQXpAlbYmyzN539zYEj4ZP3VjY=)
2: 3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl (hash: 8a2ey8rSQwGUYrBrWKcJhFIc5BPWLCDjNuAOVUErTCk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl
rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 22:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d6:ee:4e:f3:e8:7d:2b:90:a5:3b:98:fb:9c:aa:1b:6b:e2:e9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8
Validity
Not Before: Mar 1 21:47:02 2026 GMT
Not After : Mar 2 22:51:02 2026 GMT
Subject: CN=3B43AA191456BADC0C6157283E28B979C06E7AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:7c:dc:f5:1d:eb:2a:5f:f4:69:59:8b:07:
e9:4c:03:40:fe:25:1c:96:5a:36:fe:fc:1c:3f:f6:
f4:30:7e:31:1a:8f:55:af:15:ef:b0:52:97:9c:b0:
cb:14:7d:2b:b0:16:9e:f8:e5:70:23:41:76:8a:39:
ed:f9:93:41:ec:41:06:be:45:3c:48:85:ed:1a:6a:
ba:27:4c:da:9e:b6:fd:92:3c:dc:1c:bf:5d:a4:5f:
d1:45:b6:8d:17:33:2f:a6:c1:da:78:eb:bc:fb:ad:
12:b0:b5:8b:48:df:50:dc:e2:ed:8c:9e:e4:29:ad:
8c:6f:35:4a:38:1f:5c:90:25:18:cb:c1:41:6e:e2:
b0:86:80:fa:2e:d4:1d:9d:0a:c8:c1:75:88:06:7d:
bd:d4:db:a3:06:31:28:f3:71:45:ef:27:4f:e0:37:
0d:a5:89:c5:c3:32:07:89:c9:db:d0:ee:40:df:24:
64:8f:bc:ed:c8:7f:ab:17:89:97:b2:26:21:ab:34:
a7:0c:66:0c:a1:ac:ee:07:be:7f:fd:4c:08:12:08:
6c:d8:69:ea:12:97:d0:7d:a5:78:8c:9d:a9:a9:52:
bb:04:7b:c1:8d:3c:89:ae:1a:32:0b:2e:4d:34:64:
b8:6d:3d:e8:86:2a:73:1c:cf:d7:78:80:17:76:38:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:AA:19:14:56:BA:DC:0C:61:57:28:3E:28:B9:79:C0:6E:7A:C5
X509v3 Authority Key Identifier:
keyid:3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:8b:4f:82:21:3a:74:58:3b:41:49:85:7c:be:ca:88:e8:
a6:2c:ce:b1:c5:be:ea:ad:ce:af:2b:0f:0b:0f:11:eb:a4:35:
8e:42:0a:f3:86:8f:38:6a:2d:5a:c9:24:f5:0c:5b:81:24:f9:
07:a2:f3:4c:64:85:75:2a:56:9e:6b:c2:5b:70:81:b4:bb:c2:
6c:22:21:65:65:0b:d4:b0:60:55:6a:08:26:b7:e1:31:a6:52:
d5:c5:67:5f:c3:07:c7:61:8e:9a:cc:cd:28:79:5a:e9:dd:5d:
d2:38:f2:32:66:53:ef:41:ec:db:0a:b7:8a:e2:1e:a5:a9:5f:
d7:ea:79:cd:5a:22:6e:db:bf:2b:2d:19:b4:de:90:dc:ff:32:
7b:64:a8:44:df:3a:38:ae:75:36:68:9e:89:5a:34:f4:40:44:
ca:f8:4f:ab:e3:a9:3d:31:04:f2:40:44:b8:1e:9e:6e:f5:8c:
06:d9:8d:dc:12:18:84:09:b2:dd:8c:22:48:fc:ba:08:32:23:
89:17:30:2b:1f:9e:4c:54:7c:49:7c:c5:99:33:b4:61:be:4e:
e5:6e:2c:b7:d0:f9:e9:71:3c:80:93:86:ed:80:17:44:6f:48:
7d:d2:56:7b:e4:31:15:81:b0:bc:4d:4d:56:82:19:13:42:3d:
3b:ed:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:09 2026 by rpki-client