
$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft
File: 33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft (raw, json)
Hash identifier: EHwxYJh2xHbQ3N3ln5Y6BiU0jxTpqNDAB/xZSCkVe+U=
Subject key identifier: B8:1A:62:99:12:C4:0D:19:19:14:A4:2E:ED:8F:18:12:25:F1:D9:84
Authority key identifier: 33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44
Certificate issuer: /CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544
Certificate serial: 24980FBDDA8AD09602BA84069B7877004524DF48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft
Manifest number: 5C
Signing time: Sun 01 Mar 2026 18:44:29 +0000
Manifest this update: Sun 01 Mar 2026 18:39:29 +0000
Manifest next update: Mon 02 Mar 2026 22:36:29 +0000
Files and hashes: 1: 3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (hash: seOef9NW89j1IL2/t8Ibsw6pheCDikQdCsR06ZCcFxc=)
2: 323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (hash: tDvuoyt9lPgo5jemTMcolNsz8MHK+9xyqLPEnLKEBTY=)
3: 33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl (hash: g62RW8LxWzSdfEMuKK9lmsywtYouaJkxt8yAT9sToyU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl
rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 22:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:98:0f:bd:da:8a:d0:96:02:ba:84:06:9b:78:77:00:45:24:df:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544
Validity
Not Before: Mar 1 18:39:29 2026 GMT
Not After : Mar 2 22:36:29 2026 GMT
Subject: CN=B81A629912C40D191914A42EED8F181225F1D984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:56:c1:fd:2a:af:fc:cb:8f:1a:08:73:dc:
69:f2:5c:e6:e3:94:5a:8f:16:55:59:b3:70:0e:70:
2c:27:2f:50:96:ee:b2:6f:81:4e:2d:0c:04:93:4f:
8b:48:c8:2e:5d:3b:1d:1d:14:8f:1f:98:1e:7f:e1:
6a:c2:92:29:77:f7:41:ae:79:1c:5b:9c:47:5f:5a:
c2:23:75:06:04:3c:8c:a7:05:4a:0c:e9:6e:7a:bb:
bc:03:d0:a7:db:9d:c9:52:b1:bc:9e:c8:ae:73:09:
77:09:b7:12:0b:77:0d:4c:80:bb:0f:05:75:9c:bc:
37:77:b4:16:a4:4e:49:1d:66:1f:af:99:0f:db:0e:
5e:ee:ea:56:c9:16:ba:b9:eb:c4:b5:06:68:92:91:
04:19:05:bb:c6:d8:82:5d:7d:fa:5e:61:f0:33:24:
55:b2:38:66:53:79:02:fa:3c:88:8e:50:c7:b1:ec:
02:60:af:12:83:be:9d:bd:78:ff:a6:1a:8d:4a:e8:
89:35:5d:3a:10:64:de:ee:0e:d5:bf:1c:ca:3c:d9:
35:cb:5c:01:74:cb:24:bd:90:45:b6:72:a4:f1:34:
04:28:57:93:41:35:fa:0b:6d:15:db:6d:72:51:86:
8e:6a:d2:6d:a5:fd:35:42:d0:cd:6b:3e:b0:e5:85:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:62:99:12:C4:0D:19:19:14:A4:2E:ED:8F:18:12:25:F1:D9:84
X509v3 Authority Key Identifier:
keyid:33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:04:ca:7b:ce:a4:6e:63:8c:12:10:51:85:10:fd:94:30:3b:
82:e4:f2:42:e9:70:55:63:c3:b4:56:b0:69:0f:17:1d:85:9a:
b9:e0:30:2d:d0:7a:47:bb:a5:31:e3:32:0f:3a:1f:86:71:a6:
de:6f:1d:e7:a7:dd:cb:38:4f:87:59:64:6b:20:c4:16:cc:0d:
bd:c5:a5:d5:80:82:6a:2e:28:72:98:83:00:4d:1c:2b:a5:66:
6e:0b:71:a0:a1:fa:2d:e0:2d:31:dd:55:3b:36:d7:70:ba:43:
50:b7:3a:12:83:c3:f9:6d:21:7e:b1:26:95:63:c3:e0:54:9b:
0f:cf:36:bc:25:f4:1c:57:a9:e0:0a:f5:64:25:a9:a5:b5:e9:
2f:7e:70:88:6a:23:27:eb:d2:24:f2:88:08:f5:b4:3b:6c:18:
af:e2:7a:c0:0f:97:5f:d0:bc:65:0d:04:d4:74:91:ec:50:54:
73:c8:48:b8:b2:e5:1d:42:78:65:7d:d5:4f:62:2f:bf:f7:03:
01:14:c6:25:d2:d0:cb:a2:9c:5d:0d:d8:c2:35:dc:b5:1f:90:
7f:0d:3b:2f:83:fd:7c:0f:46:73:e0:57:4c:35:e5:04:29:11:
14:82:75:ab:d3:e3:74:cb:97:b0:f6:ff:5f:ac:91:46:7f:a8:
f3:0f:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:33 2026 by rpki-client