
$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
File: D4B92897692C4F611B738C6728923C318CA5378D.mft (raw, json)
Hash identifier: bFvchB2/VDZWtoAX+p41JtdOK4ZjS6HIuz6e1EtvXI4=
Subject key identifier: 71:05:A7:B0:C6:CF:35:82:51:81:EF:38:12:E9:2E:AB:95:82:5B:FE
Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
Certificate issuer: /CN=D4B92897692C4F611B738C6728923C318CA5378D
Certificate serial: 58E29FA587A989A2690B4D6E51D9DBD35035BA01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
Manifest number: 0389
Signing time: Sun 01 Mar 2026 18:09:42 +0000
Manifest this update: Sun 01 Mar 2026 18:04:42 +0000
Manifest next update: Mon 02 Mar 2026 20:22:42 +0000
Files and hashes: 1: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: vXIE4TsJgVb1Dp0fADvdlGmi0f/2T+z2zGGcPFCQH8g=)
2: D4B92897692C4F611B738C6728923C318CA5378D.crl (hash: cBs+dFyP2enzNPC3XrNq1InGehKf6rrUdBefGwKr6Eg=)
3: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (hash: 7nFV3a+hQjLyzppGzpIflRodGqWB/Ue6XkXpTxIfQY4=)
4: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: mtZe50uZxiA3+5DbxjjJDIEj/Q+E4SqQzcOf5lBDz10=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl
rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 20:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e2:9f:a5:87:a9:89:a2:69:0b:4d:6e:51:d9:db:d3:50:35:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D
Validity
Not Before: Mar 1 18:04:42 2026 GMT
Not After : Mar 2 20:22:42 2026 GMT
Subject: CN=7105A7B0C6CF35825181EF3812E92EAB95825BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:87:7c:63:50:1f:e9:48:03:73:18:89:b6:
63:c2:e5:a1:be:fc:b0:86:86:c6:83:69:bf:dd:fe:
62:4a:2d:9a:a0:64:2f:5e:3f:b3:3f:24:67:96:f7:
71:b9:d8:63:e2:1c:58:9c:bf:6b:fe:e0:a7:e5:fe:
1b:92:a7:9b:9e:46:13:e9:d9:3c:76:6d:9e:93:19:
74:6e:57:e2:52:46:a0:64:ce:dd:0f:a7:02:2e:7d:
cd:0d:b2:64:47:f4:28:ea:ca:8e:6b:9e:51:08:4f:
d7:f2:6f:eb:15:05:c0:2e:3b:18:36:d6:80:93:1b:
7f:75:b1:9a:a6:1f:fa:8d:d8:f6:49:94:a5:92:23:
c6:5c:5b:47:83:6a:9c:82:59:82:57:85:ea:cf:c7:
4c:39:8b:f3:d4:14:be:ba:f7:2a:09:4e:79:b4:c5:
a6:31:7f:38:f5:48:b2:ca:62:56:b1:f5:8b:53:c9:
25:e3:24:1f:91:6f:bf:a7:e0:f7:0c:c1:4a:f4:b4:
9a:25:0a:9f:67:ff:42:89:34:d3:2e:9c:9d:11:46:
9e:e7:a2:ae:2d:4a:89:c4:85:d1:ef:b1:48:ff:75:
97:93:9b:65:04:fd:6f:28:1a:c4:4f:26:9a:5b:4c:
a4:2b:51:c4:5a:58:ad:98:04:a2:8b:14:df:3e:6f:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:A7:B0:C6:CF:35:82:51:81:EF:38:12:E9:2E:AB:95:82:5B:FE
X509v3 Authority Key Identifier:
keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5e:a1:b4:8a:6e:13:ef:5d:9a:fe:c3:73:0e:66:d8:d5:a3:
fc:ff:41:8c:8e:73:cd:2b:ff:03:42:eb:9c:8b:73:53:e8:80:
e1:86:fc:1c:c9:de:f2:e8:e2:1a:80:f0:74:00:3a:c8:81:ac:
9d:9b:3e:7f:79:53:7e:60:c4:dc:4f:39:9c:5b:a6:db:7e:50:
09:f9:6e:f3:b1:f9:a0:7c:3b:d1:f9:bc:d8:58:89:78:ae:80:
5c:9e:46:5f:17:45:f8:0b:04:90:a1:cd:c5:ce:ee:26:29:78:
17:1e:30:d9:47:a3:32:6c:1b:99:5c:2c:4d:60:17:c9:c0:a5:
43:fe:c3:b5:9e:6b:cf:7f:7d:f7:b2:a7:8c:0f:45:cf:0c:20:
c1:62:60:f3:ce:9c:de:6e:fe:ad:3d:89:50:13:63:60:26:fe:
2e:fb:0e:21:0b:a4:b8:29:e4:85:d4:6f:c6:0e:80:c6:42:db:
7d:d2:8d:9e:b7:ef:44:dd:89:4d:ad:c7:18:b2:12:81:eb:df:
2b:ae:21:7e:f9:4c:7b:cd:6e:5a:3e:02:ad:34:a6:ba:5d:0a:
ab:51:68:2e:fb:bf:9d:d8:76:47:17:0c:2b:d0:03:43:05:b5:
d5:41:01:eb:dd:72:55:ef:b0:e9:cb:4a:c9:34:f6:be:56:47:
80:64:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:17:03 2026 by rpki-client