
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File: CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier: e03OKp9qz8R3lKJWPOPjcAr2h5c4xdmCF7yqRPe2qGI=
Subject key identifier: 9F:5D:00:5C:D0:60:5C:AE:0F:D1:2E:6C:82:99:17:19:48:51:42:15
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 5CD1D22FC4FC8A302C40F0853F8FD453DEE41C7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number: 039E
Signing time: Mon 02 Mar 2026 06:42:58 +0000
Manifest this update: Mon 02 Mar 2026 06:37:58 +0000
Manifest next update: Tue 03 Mar 2026 10:16:58 +0000
Files and hashes: 1: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=)
2: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wLIsioKqEUKS9TMeNf/n9LEYrLxpZbmg2+NMq5W8NRo=)
3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: +AvGtCf+AU5LwACHP6y9XoaKQHGyU3BqFXSQdbCUG5w=)
4: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 9NaA8Dq04c7j0pLtLEkFvCIZPUGfEE8aa950uY+eEJs=)
5: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: 2nczleJFPRyvFicJVGQltpFOvvykoBSvwigtbcxyl9Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 10:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d1:d2:2f:c4:fc:8a:30:2c:40:f0:85:3f:8f:d4:53:de:e4:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Mar 2 06:37:58 2026 GMT
Not After : Mar 3 10:16:58 2026 GMT
Subject: CN=9F5D005CD0605CAE0FD12E6C8299171948514215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:44:73:1b:ae:03:d2:87:9d:e8:7c:4c:cf:
41:da:d8:a4:ae:6e:89:32:40:2f:73:69:fd:38:ce:
02:22:c1:bb:8e:90:da:58:10:f6:65:8b:55:f6:37:
d9:83:72:a5:11:6c:92:bc:ac:11:da:16:14:f5:85:
9c:ec:2a:6a:ca:b2:2d:69:03:ec:18:d5:5f:f9:6e:
bd:68:17:ea:63:75:a0:86:d4:e3:ba:ce:93:9d:48:
88:e7:10:1d:74:8d:5a:ab:d3:e5:6e:62:53:45:c1:
02:8d:0a:b7:23:8b:f7:a7:61:b3:9b:e9:67:4b:9a:
be:65:16:9d:74:44:e2:7a:5f:a0:67:55:31:b8:e0:
72:fb:83:80:f0:a3:86:59:3f:37:31:10:a6:e2:a8:
90:d5:32:c2:a2:e2:88:cc:77:a3:f7:01:62:1c:c5:
95:6e:a3:25:55:f8:bf:2e:59:19:fc:0d:97:c3:1b:
f0:22:82:b0:6c:e6:1f:e2:12:4b:fa:79:8f:e0:23:
fb:da:25:f3:50:f8:63:ca:05:e4:d0:1d:3a:09:f1:
c9:a8:f6:fa:41:f1:95:3b:ee:69:2b:20:a1:dc:37:
f0:f5:c1:69:29:71:af:6c:fd:58:94:84:4f:a1:ba:
a0:b2:fe:a7:e7:21:b8:44:e1:7d:07:73:8e:4e:e1:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:00:5C:D0:60:5C:AE:0F:D1:2E:6C:82:99:17:19:48:51:42:15
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:79:63:64:e0:05:a9:13:c7:55:8f:9f:1a:82:96:55:52:
5e:0d:2f:a5:3d:c3:fc:68:94:39:00:6d:65:91:bc:0f:23:0b:
1a:d9:d4:94:04:3b:f3:b2:fb:c1:24:32:87:8d:15:82:be:ed:
50:e2:4b:45:c4:31:67:84:ac:39:7a:c8:70:2b:4a:05:5c:0d:
3d:ba:93:5d:1f:bc:06:f0:50:20:68:ad:bd:19:07:4d:a2:cb:
f4:3c:bd:5d:90:e2:4a:20:7b:d5:1d:56:22:f8:c1:15:ab:55:
01:a4:42:3a:12:08:37:6e:e6:23:cf:20:7d:78:26:ba:cb:49:
0e:26:6e:0f:84:b5:fc:20:d0:54:c7:5e:bb:5a:37:db:1e:19:
2d:b3:f8:6d:1d:3b:ce:c9:dc:af:bf:3c:c6:ee:52:55:98:c3:
c2:13:83:89:10:67:a3:24:e8:6d:4c:cb:0a:0f:d0:d6:ca:9a:
db:5e:f1:f7:3c:45:ea:79:94:9a:fc:7a:8d:73:6f:74:90:8b:
39:3b:f0:7c:ef:a6:b2:77:fc:3c:6f:58:ab:62:53:15:ca:50:
4b:f5:81:e6:ac:78:08:fc:e7:17:da:7a:4a:08:9d:3b:eb:ac:
f9:e6:df:7a:c2:54:96:15:ab:51:90:81:be:74:0c:4a:6e:e4:
40:6b:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:56:32 2026 by rpki-client