
$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
File: 33D444D18668AFF627287DE909F4EDC258CA9CC3.mft (raw, json)
Hash identifier: ha28yCgh/8BDCkwz6YnRlinm2VOaAmLRS5EI+aXzylA=
Subject key identifier: A0:49:9F:B6:7E:EF:B2:67:4D:5D:28:72:A5:53:06:0F:87:95:9D:A5
Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
Certificate issuer: /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Certificate serial: 1FD12463D9C5FFDB4C371D89D07C1161AB5A97C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
Manifest number: 038C
Signing time: Mon 02 Mar 2026 10:02:50 +0000
Manifest this update: Mon 02 Mar 2026 09:57:50 +0000
Manifest next update: Tue 03 Mar 2026 10:50:50 +0000
Files and hashes: 1: 323830343a6238343a3a2f33322d3438203d3e203532373838.roa (hash: hl/5OxGOU0JH6btmx6NDigAj4IAqY8I+wrvb5DixlD0=)
2: 33D444D18668AFF627287DE909F4EDC258CA9CC3.crl (hash: 7NzK8CSNfe/pa1/GFxOUv6Tq1b9bfUB+pBhu85sTwKU=)
3: 3137372e33382e36382e302f32322d3234203d3e203532373838.roa (hash: LsIbEV6d/qkd5SrbHcy8LV68KD6GkOp3U3cHfi9raVk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl
rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 10:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d1:24:63:d9:c5:ff:db:4c:37:1d:89:d0:7c:11:61:ab:5a:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Validity
Not Before: Mar 2 09:57:50 2026 GMT
Not After : Mar 3 10:50:50 2026 GMT
Subject: CN=A0499FB67EEFB2674D5D2872A553060F87959DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:c3:32:af:c7:df:9f:52:76:44:d0:33:20:
36:85:21:2d:34:2b:da:b3:92:d8:ca:72:75:25:f9:
f4:a0:4d:c2:43:f2:5a:06:ae:ea:b6:7e:08:cc:12:
a1:fa:8e:ab:2e:62:42:80:1d:c1:8c:45:a2:31:05:
43:da:1b:2d:c0:65:f8:7d:64:35:17:b6:5e:cb:77:
3f:89:5a:b8:26:b6:86:40:4a:3f:06:d0:44:e0:02:
ef:c3:59:2a:db:47:ba:70:48:0a:cc:65:13:a6:1e:
b4:62:1b:c3:0e:15:43:ce:be:d9:be:ca:ca:d4:ff:
5c:17:61:e1:77:3f:f1:72:b6:cf:cb:43:fc:6e:64:
b4:a8:72:bd:4b:5a:ea:7e:60:ca:a0:fe:6c:21:d9:
a6:5f:e6:f8:76:c6:83:df:8d:e1:76:55:90:d8:13:
7d:c1:6a:e0:54:9f:4e:fd:a7:3a:f5:f5:f1:b6:31:
b6:26:0b:ac:c6:6a:45:b4:63:ae:1d:0c:f3:2c:f7:
1c:69:d8:71:8f:72:2c:dc:18:ca:22:88:57:5f:fa:
e6:92:c0:a4:b6:be:7e:28:7f:2b:44:ac:3c:88:3c:
19:66:99:02:3d:27:41:23:8d:bc:5a:8e:c8:02:d8:
a8:0f:8c:7b:05:c6:a3:ed:c7:f1:4a:b1:6f:d7:81:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:9F:B6:7E:EF:B2:67:4D:5D:28:72:A5:53:06:0F:87:95:9D:A5
X509v3 Authority Key Identifier:
keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:43:ac:98:d7:47:83:b6:97:99:5a:ed:1f:aa:97:63:ae:2f:
e0:72:d6:35:b2:64:f7:e1:b4:9c:8e:3b:9f:c8:0a:fd:d8:f4:
d6:cf:a7:3b:22:63:72:45:ca:7e:95:71:30:8b:da:ad:0d:e0:
83:b9:cb:7d:48:b1:87:3b:32:45:e5:bd:76:08:a8:17:56:58:
42:83:9d:47:c6:73:11:c5:69:7a:80:89:0c:30:5a:34:34:bb:
a1:a3:53:24:06:1d:4f:fa:16:2a:8b:4b:3a:83:dc:b8:b5:62:
2c:78:09:b4:61:45:72:26:ee:09:a9:de:a2:4e:0a:1b:ea:1b:
70:e3:2e:85:4d:a5:f6:9f:b0:08:36:46:cb:28:4f:f2:2b:c2:
fd:cb:93:a6:7b:c2:cf:36:6a:7c:76:88:77:61:75:07:e9:44:
76:1d:03:49:a4:72:6c:6d:08:a7:9a:c4:d8:b8:65:9a:70:1a:
67:f8:6b:d4:95:a6:32:72:0f:80:c0:29:cc:db:15:ca:f1:33:
91:6a:90:24:35:dd:a7:a1:1b:28:f0:1a:31:55:ce:53:49:14:
e2:16:10:14:7e:4e:f2:ec:af:47:e1:aa:f9:d5:a5:5a:82:a5:
84:cc:c1:8a:55:e9:df:e6:7d:d0:89:07:16:46:50:7c:3e:cf:
39:03:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:58 2026 by rpki-client