
$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier: BaS1KO4wFpZQlNi6NCtWP1gdB6qwOCCrSVPvpvVJ0LE=
Subject key identifier: 73:5F:A1:68:C8:FB:CB:0F:BE:86:E4:02:03:54:49:A0:46:50:6E:91
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial: 4A5355A4B885D59D3EB5FB3DDC1DC28320105FDB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number: 039B
Signing time: Mon 02 Mar 2026 17:04:52 +0000
Manifest this update: Mon 02 Mar 2026 16:59:52 +0000
Manifest next update: Tue 03 Mar 2026 19:54:52 +0000
Files and hashes: 1: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: PKGVa0L+swMi+O3jto7r5DSG35H4tJns957ocZd1fek=)
2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: V04zcf9mn2VTZhOmG5Y0biHuffqV+J34ixOhbUQAANA=)
3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: VYej78JcpqPEEZLXLzhwSPB2VlOIApr/1pd6s3ifVWk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 18:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:53:55:a4:b8:85:d5:9d:3e:b5:fb:3d:dc:1d:c2:83:20:10:5f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Validity
Not Before: Mar 2 16:59:52 2026 GMT
Not After : Mar 3 19:54:52 2026 GMT
Subject: CN=735FA168C8FBCB0FBE86E402035449A046506E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:6e:bc:91:ab:a2:07:12:a4:3f:3b:47:a6:
df:ae:94:59:34:e6:11:21:68:19:4e:f0:ea:9f:f4:
32:31:56:e4:e1:3f:06:c8:03:5e:6a:55:38:1d:64:
1e:eb:54:7c:98:58:a8:38:6a:ff:06:3f:48:f3:6d:
e5:d8:7e:cb:ec:e0:b1:1b:ac:be:77:34:e2:2d:26:
b7:1f:7c:76:7c:38:69:2c:62:eb:9b:eb:bd:ee:c6:
e8:f3:c4:4c:96:49:d4:6e:b8:fb:1a:68:0c:85:56:
ef:27:39:58:7b:c5:85:51:ec:83:42:d0:ce:cb:8e:
13:5f:2c:3a:cc:56:5d:99:08:cf:7e:c0:17:27:93:
30:fa:5b:f8:64:fc:6c:0f:d8:8b:22:79:fe:09:75:
e4:21:45:1f:69:4e:40:4b:da:93:71:aa:9b:4e:3e:
00:da:4d:ea:09:95:82:08:7f:81:9d:2f:62:d6:ab:
75:27:dc:0c:17:c0:38:28:45:1a:d6:8e:77:53:b5:
19:1c:37:a0:b9:32:24:22:ce:b5:cd:0d:78:62:d7:
1b:74:73:83:cf:ab:3d:47:bb:b1:9f:99:cc:d4:eb:
00:7f:ba:75:c1:10:7b:f4:ad:8f:26:5d:b4:7a:b0:
49:16:ca:2d:c1:2b:af:17:b0:f5:fb:01:34:3d:a6:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:A1:68:C8:FB:CB:0F:BE:86:E4:02:03:54:49:A0:46:50:6E:91
X509v3 Authority Key Identifier:
keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:61:b5:1a:63:cb:9c:13:c9:88:f7:27:b0:3c:d4:89:c7:bf:
bc:8f:33:45:aa:a9:34:a7:29:45:83:88:15:cf:34:ba:38:f9:
0a:c4:8b:35:82:ac:1f:7d:d5:61:a3:43:6c:c4:08:39:cf:20:
d1:1b:c6:d2:33:d7:3f:7e:71:09:7b:67:50:c0:fb:02:4f:8c:
5a:4a:9b:d6:31:ac:87:4d:17:58:6a:a9:04:50:4d:5a:fd:a5:
45:b6:29:05:62:8e:8d:cc:af:9a:e3:23:d4:07:b0:ae:f5:02:
6b:fc:3b:cc:c6:78:68:43:a2:97:95:91:a3:a4:61:e4:05:58:
7f:55:67:5b:06:2f:5c:18:f0:30:68:c0:f8:43:52:df:f1:5a:
d4:84:a4:9f:2f:ac:c1:1d:b0:62:fd:84:1b:40:f9:e1:72:38:
b6:f6:a3:a8:bf:eb:f3:c7:51:f2:e1:20:05:80:75:53:1a:c0:
05:bf:24:e3:66:57:ae:6f:d9:d6:ee:02:18:7f:7f:3b:86:fd:
32:48:6b:bc:36:47:f3:59:2a:81:1d:5d:8d:08:2a:7c:4e:07:
25:4d:6b:aa:8e:d4:b1:59:46:a2:48:9e:ef:6c:a9:f9:2c:7c:
cb:f1:a9:84:b7:0d:aa:48:ae:ba:b8:06:b6:3c:90:ae:05:a6:
82:4b:81:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSlNVpLiF1Z0+tfs93B3CgyAQX9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC
MkI0MjJERjAeFw0yNjAzMDIxNjU5NTJaFw0yNjAzMDMxOTU0NTJaMDMxMTAvBgNV
BAMTKDczNUZBMTY4QzhGQkNCMEZCRTg2RTQwMjAzNTQ0OUEwNDY1MDZFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VG68kauiBxKkPztHpt+ulFk0
5hEhaBlO8Oqf9DIxVuThPwbIA15qVTgdZB7rVHyYWKg4av8GP0jzbeXYfsvs4LEb
rL53NOItJrcffHZ8OGksYuub673uxujzxEyWSdRuuPsaaAyFVu8nOVh7xYVR7INC
0M7LjhNfLDrMVl2ZCM9+wBcnkzD6W/hk/GwP2Isief4JdeQhRR9pTkBL2pNxqptO
PgDaTeoJlYIIf4GdL2LWq3Un3AwXwDgoRRrWjndTtRkcN6C5MiQizrXNDXhi1xt0
c4PPqz1Hu7GfmczU6wB/unXBEHv0rY8mXbR6sEkWyi3BK68XsPX7ATQ9pl5FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc1+haMj7yw++huQCA1RJoEZQbpEwHwYDVR0j
BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy
UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4
QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C
OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgmG1GmPLnBPJiPcnsDzUice/vI8zRaqpNKcpRYOIFc80ujj5CsSLNYKsH33V
YaNDbMQIOc8g0RvG0jPXP35xCXtnUMD7Ak+MWkqb1jGsh00XWGqpBFBNWv2lRbYp
BWKOjcyvmuMj1AewrvUCa/w7zMZ4aEOil5WRo6Rh5AVYf1VnWwYvXBjwMGjA+ENS
3/Fa1ISkny+swR2wYv2EG0D54XI4tvajqL/r88dR8uEgBYB1UxrABb8k42ZXrm/Z
1u4CGH9/O4b9MkhrvDZH81kqgR1djQgqfE4HJU1rqo7UsVlGokie72yp+Sx8y/Gp
hLcNqkiuurgGtjyQrgWmgkuBZQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:03 2026 by rpki-client