
$ rpki-client -vvf rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.mft
File: F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.mft (raw, json)
Hash identifier: 2COeAv6lybQva39tvvnlJ+VBBxVHe2jtmPSKIthS7EQ=
Subject key identifier: 42:D1:1E:AE:B5:23:4F:92:1A:FC:9A:E7:88:34:7A:2A:CA:6F:C1:5E
Authority key identifier: F4:5B:E9:69:01:B5:2A:D5:AB:CD:18:F4:3F:AF:F3:94:DA:16:47:D7
Certificate issuer: /CN=F45BE96901B52AD5ABCD18F43FAFF394DA1647D7
Certificate serial: 3E1797ACB94E7F09F2D6A7D1B7F68ECB7664F882
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.mft
Manifest number: 01AF
Signing time: Sun 01 Mar 2026 16:57:40 +0000
Manifest this update: Sun 01 Mar 2026 16:52:40 +0000
Manifest next update: Mon 02 Mar 2026 18:28:40 +0000
Files and hashes: 1: F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.crl (hash: QziGm+cA/IuHUNfuHr1A5q81SXBV1orlccC6eutF8Fs=)
2: 3134332e3230382e3232302e302f32322d3332203d3e20323635313331.roa (hash: HQx9JOrwo431ZZzmS1BON1j6+H52RFOg42wH26w6+vc=)
3: 323830343a326230343a3a2f33322d313238203d3e20323635313331.roa (hash: 3CxJb2TY4K1KW7QRSxKnm1cLPm0q2zYUT5weFk/24FU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.crl
rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 18:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:17:97:ac:b9:4e:7f:09:f2:d6:a7:d1:b7:f6:8e:cb:76:64:f8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F45BE96901B52AD5ABCD18F43FAFF394DA1647D7
Validity
Not Before: Mar 1 16:52:40 2026 GMT
Not After : Mar 2 18:28:40 2026 GMT
Subject: CN=42D11EAEB5234F921AFC9AE788347A2ACA6FC15E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:44:17:37:6f:11:40:87:a5:ca:42:9f:4c:
c0:a6:cd:9e:5e:34:c5:e7:a4:ba:3a:54:61:75:45:
e7:b6:c6:ab:6b:ea:61:75:06:3f:f7:f1:bd:74:86:
e8:ca:d5:5d:c0:84:14:5d:e4:fa:f8:b3:01:76:72:
cc:f6:ad:88:34:ad:37:cd:d6:dc:e8:55:4a:da:1f:
1f:b7:3d:64:f3:a9:38:42:87:2e:ac:b6:ae:b2:3a:
a5:17:77:7f:4b:80:e6:c2:f7:1e:23:57:36:9f:37:
02:c0:5f:3c:c3:97:f1:f5:f8:58:c2:55:6b:32:b0:
f0:ff:25:61:07:db:e8:bb:9b:9e:23:0a:f1:d0:0d:
31:94:d3:f5:de:70:de:77:1f:ef:f5:59:db:3a:69:
f6:c9:19:bd:6b:43:08:09:4d:3a:90:10:7a:45:50:
21:78:05:57:e0:cd:d2:79:b9:ff:78:1f:e5:4e:d5:
79:3d:a1:a4:a6:aa:e2:5b:88:6b:eb:29:02:c5:bb:
f7:fc:f0:af:c3:4f:38:67:8a:64:ab:92:6d:00:d8:
fe:b3:49:17:8b:a7:db:0c:1f:4d:c6:12:2e:13:5a:
d4:05:12:07:a3:89:22:4a:13:87:ef:c4:fd:7c:64:
47:db:b3:54:95:d4:59:ea:58:e0:97:71:e0:5e:85:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:1E:AE:B5:23:4F:92:1A:FC:9A:E7:88:34:7A:2A:CA:6F:C1:5E
X509v3 Authority Key Identifier:
keyid:F4:5B:E9:69:01:B5:2A:D5:AB:CD:18:F4:3F:AF:F3:94:DA:16:47:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/F45BE96901B52AD5ABCD18F43FAFF394DA1647D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5d:55:48:21:a7:5c:81:4e:21:83:c0:67:ea:d0:cf:3b:7e:
b2:5a:59:39:ab:ea:d1:ae:e7:cd:fc:48:02:14:39:ba:99:7a:
6e:57:5b:e7:3d:ce:6e:11:21:ba:95:89:81:dc:1e:c3:6a:cc:
c7:0f:56:e8:4e:c5:13:d2:c1:7f:e4:38:40:fa:80:9b:2e:1d:
50:2a:d8:53:ef:24:e3:29:fb:8b:94:0d:18:fe:56:7f:de:f2:
67:b6:83:ab:c2:50:3a:4f:d9:ab:29:af:d3:d3:0f:b0:35:d5:
92:fd:53:ab:49:13:37:4a:cd:37:71:67:56:2b:0d:95:a4:62:
84:66:c1:69:e2:2e:04:25:1e:68:83:56:7c:88:69:50:06:69:
f5:c2:45:ac:18:14:e4:d0:f3:b3:1f:e3:f6:13:94:88:5d:33:
2f:04:d9:00:0e:39:fd:e4:d4:18:0b:5d:8f:b4:18:45:cc:e0:
c1:34:2d:48:13:9f:af:b2:57:69:0b:d1:a4:92:f0:4c:34:8b:
a4:2c:4a:ea:25:73:19:ad:e9:e1:17:13:b8:15:9b:e2:d9:cb:
02:84:53:17:21:f8:c2:e5:2e:54:91:5b:7b:2b:27:7b:8e:4c:
0c:3e:68:ac:26:93:19:5a:3c:ac:a8:ba:85:f4:47:04:e6:fd:
7d:84:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:42 2026 by rpki-client