
$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json)
Hash identifier: YWwxDPFzcCZKYUVPPkSD/1ugpiaGz2NCDBxsxch/ROc=
Subject key identifier: AE:5A:77:C1:80:1C:C1:A2:3B:0F:26:D3:E6:24:71:62:D4:09:B6:D3
Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F
Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F
Certificate serial: 60B092C4FF6FE10068859B708A32C8F9643BCB5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
Manifest number: 036E
Signing time: Mon 02 Mar 2026 09:07:06 +0000
Manifest this update: Mon 02 Mar 2026 09:02:06 +0000
Manifest next update: Tue 03 Mar 2026 12:38:06 +0000
Files and hashes: 1: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: uYTAwx2xmkA48+4cL1J3tuiS92/1XPc7ULDhXOjpkmc=)
2: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: Jh/VdyotAGrLtClsSoR+lr2Ks9WJJw9NYbI44v4sSFs=)
3: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: RRiA3TSl+z/eEsw4tlbAbDMdSZOuk6NNt0WFL07GjPY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl
rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b0:92:c4:ff:6f:e1:00:68:85:9b:70:8a:32:c8:f9:64:3b:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F
Validity
Not Before: Mar 2 09:02:06 2026 GMT
Not After : Mar 3 12:38:06 2026 GMT
Subject: CN=AE5A77C1801CC1A23B0F26D3E6247162D409B6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:69:24:7f:83:93:29:26:2c:93:9a:66:a0:
0d:3d:fd:15:bd:58:ab:df:78:ff:18:3f:fe:d2:d3:
e0:80:00:13:0c:bc:d7:38:04:b7:74:1e:5d:24:b4:
71:59:1b:f0:20:c7:71:94:9d:5b:2d:9d:be:10:9f:
11:a2:25:c7:7d:40:2d:a4:23:d6:36:7f:71:fd:29:
1f:22:1c:7f:78:89:aa:b9:d2:d1:69:3b:60:83:4d:
ef:23:22:a5:fb:cf:06:02:da:d9:5e:3a:28:42:16:
fc:be:8e:67:91:a9:37:bd:14:df:9e:8f:7b:87:c3:
96:9c:a5:0e:a5:a2:9f:09:05:74:21:f0:8e:68:67:
03:87:6b:1d:d0:da:67:d8:32:90:b5:a4:5a:89:0b:
d6:4e:47:94:7e:25:41:a9:ee:ac:8a:c3:87:5f:10:
83:68:fd:1b:64:bd:3a:fe:73:59:a3:f6:07:3f:6c:
eb:7a:5d:96:63:b5:94:0b:25:29:08:6e:52:b5:19:
ab:eb:5a:d1:11:3d:1c:12:b9:99:d3:4d:85:ae:4a:
33:e1:f8:ae:a2:01:cd:1d:a1:24:9e:e3:b5:b7:9f:
25:31:6f:35:5d:a5:8e:fe:32:25:3f:14:ca:64:fd:
d3:43:71:f9:54:1b:d4:fa:5a:a3:ce:da:e0:a2:ba:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:77:C1:80:1C:C1:A2:3B:0F:26:D3:E6:24:71:62:D4:09:B6:D3
X509v3 Authority Key Identifier:
keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:12:02:06:89:89:b6:ed:51:ab:c1:06:cd:e2:54:da:26:
06:a5:16:ac:be:9f:c3:13:c1:46:a4:f5:aa:11:06:76:2c:47:
d9:f5:62:d1:b0:ab:53:53:f4:44:6e:d3:4a:02:38:da:c6:00:
da:ec:c2:d8:34:f2:94:e7:7a:24:89:76:58:be:48:b5:9d:0d:
3f:5e:34:98:8d:ad:05:71:f9:a9:43:48:2a:72:9f:8e:da:71:
ca:29:3c:11:a1:cc:1c:f9:0a:4b:7e:d6:65:1f:99:c4:e5:5c:
3e:2d:f5:d8:60:22:b2:b5:0c:11:d5:d5:16:27:e0:50:5a:79:
5f:6d:6f:07:6a:e7:db:92:4b:fd:18:dd:e9:34:f4:12:37:77:
7b:93:8e:3f:0c:a5:f6:f8:16:91:41:d1:9e:52:74:39:f8:e2:
fb:21:c7:95:f0:b0:99:53:24:26:7e:64:0f:60:08:00:7b:0a:
08:b7:6f:94:5b:1a:38:34:6e:79:6f:f5:4a:cb:6b:c8:6d:9d:
88:d0:53:78:cd:d3:39:84:bc:4e:15:7b:cd:71:28:8d:e5:38:
2d:ff:bd:c4:77:f6:a1:f3:a1:1c:84:29:e9:17:8b:7c:8b:42:
5c:dc:09:0f:53:02:ec:2e:15:e8:68:fa:c8:78:8d:0c:42:2c:
14:60:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:38:00 2026 by rpki-client