
$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json)
Hash identifier: d1VcPvF7labwCxjsTy65x2vA3x79reTtqpygzHT7SCg=
Subject key identifier: 64:3B:92:3F:8A:F0:9F:29:C7:5D:41:A6:6F:5B:C6:97:7A:42:36:BE
Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9
Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9
Certificate serial: 1536A42625002053F72FC1CBC4B691C8BBFBC312
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 13:13:03 +0000
Manifest this update: Fri 17 Apr 2026 13:08:03 +0000
Manifest next update: Sat 18 Apr 2026 16:49:03 +0000
Files and hashes: 1: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=)
2: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: 1vrghJCgE6BfE//q8HK+MkGtRNNhvDfozVo9PdSnWyg=)
3: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl
rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 16:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:36:a4:26:25:00:20:53:f7:2f:c1:cb:c4:b6:91:c8:bb:fb:c3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9
Validity
Not Before: Apr 17 13:08:03 2026 GMT
Not After : Apr 18 16:49:03 2026 GMT
Subject: CN=643B923F8AF09F29C75D41A66F5BC6977A4236BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:49:ab:16:0b:67:f4:54:c0:aa:30:22:d1:
0b:b2:ee:13:95:41:0f:22:24:bf:8b:62:7e:43:6f:
a2:75:73:46:a5:a3:a4:26:76:cf:0a:18:34:2a:4a:
41:f5:b7:a4:eb:c5:14:f1:26:76:b4:9b:1a:93:4e:
61:8e:ed:f5:b5:24:84:68:af:0d:7d:72:23:86:48:
cb:2f:b5:04:1c:46:4a:94:c4:fa:b9:5c:a7:f1:d3:
c0:d5:06:67:24:f9:3d:d9:ca:fa:11:56:da:5e:da:
7d:eb:f5:40:c6:f2:21:b0:b7:a4:ce:0a:20:a5:31:
57:2d:fe:a2:f8:09:d8:25:25:84:38:45:48:c5:77:
51:1e:d8:a6:d8:38:e9:13:16:09:70:e0:70:45:7b:
c0:98:f1:73:b3:d5:0a:9c:35:a0:0d:89:02:22:35:
c7:cf:d5:c9:f6:c6:02:f1:be:3f:b7:73:a3:3b:92:
dd:ea:a1:30:d7:df:82:7c:c2:5d:c8:b9:82:58:80:
1d:64:53:7c:8b:8c:2e:0c:9e:14:3d:2e:52:d7:2e:
e3:44:43:99:94:de:d8:ea:ed:39:2f:93:45:f9:46:
68:1a:23:35:33:9a:54:e5:a0:6b:c8:69:fd:cf:8d:
1b:aa:5e:05:28:a4:f2:9f:a2:4d:87:de:7c:81:24:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:92:3F:8A:F0:9F:29:C7:5D:41:A6:6F:5B:C6:97:7A:42:36:BE
X509v3 Authority Key Identifier:
keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:89:76:a4:ec:d4:bd:35:01:c3:54:d7:5f:f7:eb:c2:67:57:
75:52:d1:87:f1:61:8b:0d:1d:70:d3:d2:a7:96:84:d6:55:32:
6f:7f:d6:17:e1:82:58:bf:16:15:43:fc:1d:34:ba:41:78:70:
07:d0:b0:7d:76:ed:54:d5:fa:ca:25:6c:33:7f:24:10:a7:46:
97:f3:a4:25:e0:56:84:68:89:42:ac:30:69:e6:ff:93:d4:43:
28:c9:77:63:77:f1:7b:61:13:79:32:e4:69:94:b6:1f:0a:7d:
30:7a:d3:94:08:c4:82:4a:3a:c5:16:70:67:e2:40:26:25:3c:
88:59:65:f5:fe:32:95:b9:10:ed:91:ac:d1:80:1b:57:e7:42:
53:24:4c:84:e2:49:37:6d:c6:b6:fa:da:15:f2:77:e1:8c:5a:
bb:1f:31:23:3f:f2:0d:65:06:34:b8:a3:6b:14:97:f4:05:01:
9d:fc:0c:ed:38:e0:d4:0f:d3:55:a6:82:ac:4a:35:b3:20:d4:
3e:e2:71:d8:99:66:04:a6:83:34:f4:a0:52:18:f6:54:8b:2f:
69:68:f2:9e:16:b9:8e:56:1c:34:3a:ea:69:25:9e:3f:67:c7:
09:64:82:f8:2f:b7:7c:95:2c:c3:1a:f8:61:d9:99:d3:60:e4:
f5:9a:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:12 2026 by rpki-client