
$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
File: 22CBA337E0370365B681D563898357F37A7D4D97.mft (raw, json)
Hash identifier: 416IBFUwt+/1+bfCZ2xwkGTsOOZMlOZxQyBlN8vD0Qw=
Subject key identifier: 07:1F:A9:A5:68:AC:DB:38:7C:6A:0A:E1:11:41:FA:F1:32:29:D8:69
Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97
Certificate serial: 22755877605EF2E007EB9CC581A2160882C25B02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
Manifest number: 023F
Signing time: Mon 02 Mar 2026 14:52:44 +0000
Manifest this update: Mon 02 Mar 2026 14:47:44 +0000
Manifest next update: Tue 03 Mar 2026 18:40:44 +0000
Files and hashes: 1: 3230302e3232352e3131322e302f32322d3332203d3e20323638323037.roa (hash: eI9fHZ3KLBcG6xXFiThpMiP1ThyI4F2F2i1mydfMToo=)
2: 22CBA337E0370365B681D563898357F37A7D4D97.crl (hash: SCsK1C1+uDwTALXYW781mDqJXP/allwC7q1vXQ+UKe0=)
3: 34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (hash: px7bKqzWCRjS/nhYLdDdhRyRozqA4RvYohgLi4LW0Hc=)
4: 323830343a346439383a3a2f33322d313238203d3e20323638323037.roa (hash: y7zKx4TsW0QghEIMCq7bJ5hTklvu2VN2EabupoYne2M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl
rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:75:58:77:60:5e:f2:e0:07:eb:9c:c5:81:a2:16:08:82:c2:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97
Validity
Not Before: Mar 2 14:47:44 2026 GMT
Not After : Mar 3 18:40:44 2026 GMT
Subject: CN=071FA9A568ACDB387C6A0AE11141FAF13229D869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:82:01:f0:59:4a:89:a6:b4:da:94:f9:c9:
2d:e5:79:8b:c9:ad:2b:6d:f1:5b:80:3d:e0:63:c8:
2f:7d:bd:11:22:cb:95:d8:a8:13:38:c4:c4:0e:c6:
8f:8c:fe:9c:3e:47:95:1d:b2:9c:5c:14:0d:a1:bb:
0a:5f:e4:77:19:07:bf:cd:06:45:6f:3a:b6:00:47:
4b:da:4c:5e:2e:3c:aa:45:1f:e1:da:32:c2:01:a1:
8f:f7:0a:ec:53:ac:c5:f1:d3:f2:f6:cf:16:d6:2c:
08:bf:f9:a0:04:d0:15:a3:c4:a6:3b:87:c3:7d:91:
16:f1:15:75:c0:88:26:5c:f2:7c:6d:60:6a:c6:19:
0a:6a:a0:7d:e3:72:6c:38:86:63:90:12:64:47:9d:
88:a5:38:cc:67:bc:c8:31:58:0d:b1:2e:44:71:0a:
8d:26:5a:25:0a:72:fe:5c:e8:13:16:df:c4:60:94:
74:b6:9d:d0:e3:cb:76:e7:67:e8:11:c1:81:4b:19:
26:5a:f2:f7:9f:5e:71:02:f7:d3:da:93:a1:90:59:
04:37:f2:de:ff:ed:fe:80:52:fa:4a:b4:40:6d:73:
f0:94:76:2e:42:00:3d:d6:43:4f:c7:ac:ca:f1:cc:
02:9c:39:0a:a8:30:00:9a:e7:f4:53:5b:c1:6a:4d:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:A9:A5:68:AC:DB:38:7C:6A:0A:E1:11:41:FA:F1:32:29:D8:69
X509v3 Authority Key Identifier:
keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:c7:fd:3d:bd:c5:f7:d0:48:33:cb:b3:7a:9c:2b:3c:47:
fb:55:ae:29:0e:c5:91:b5:6f:a1:bf:a3:9c:be:8d:f2:1c:3e:
26:35:8d:ad:b7:eb:47:11:e6:34:4f:d9:fd:ba:fc:8e:bd:f6:
87:8f:ba:b9:2c:15:80:c0:bd:b9:a9:bc:96:b0:7a:47:2a:35:
7a:0e:06:9d:7c:c8:af:98:e2:d9:c0:28:88:6e:4c:e3:fc:f1:
dc:bb:03:92:8a:8d:af:9e:3a:19:be:b3:96:63:79:b1:c9:58:
be:7f:3c:05:25:84:3b:09:9f:f7:29:2a:0a:ed:9d:d3:4c:20:
61:b8:da:5d:c1:97:41:94:f6:c1:e0:b1:09:b9:a0:13:78:c0:
ed:9c:ed:97:65:8a:bd:84:2e:61:d8:18:3d:6b:a8:0e:57:81:
2e:30:44:10:69:05:23:54:f2:9c:92:be:9f:0a:e6:88:14:95:
23:7a:60:49:01:9e:6d:2f:f9:5f:1e:e5:0f:50:1a:c8:40:86:
10:08:0e:5b:3d:9d:6f:e5:49:93:d6:ce:03:11:b3:88:d5:4b:
97:fa:c9:6d:f4:98:4e:4c:d1:e1:0c:e6:56:ec:e6:71:f2:a0:
17:71:d7:27:3c:90:6a:2a:ea:98:9c:26:ee:49:96:25:0c:21:
03:19:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:27 2026 by rpki-client