
$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier: xC0jj/LFFrKhtg/7Ce4EaBxjoGSPHBWWVUwv3msQVio=
Subject key identifier: 68:D0:9E:D1:16:B2:E0:2A:20:C3:55:B0:9A:FF:CE:C2:8E:60:1A:F1
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial: 35AE5B90D51A2360B272535DC693A436A16C0C15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number: 039D
Signing time: Sun 01 Mar 2026 16:00:04 +0000
Manifest this update: Sun 01 Mar 2026 15:55:04 +0000
Manifest next update: Mon 02 Mar 2026 16:59:04 +0000
Files and hashes: 1: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: TJxrBTQtyGw74+9sY5TMpUQDfNGLNnAWAmGA0JFW73A=)
2: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
3: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
4: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
5: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
6: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
7: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
8: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 16:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ae:5b:90:d5:1a:23:60:b2:72:53:5d:c6:93:a4:36:a1:6c:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Validity
Not Before: Mar 1 15:55:04 2026 GMT
Not After : Mar 2 16:59:04 2026 GMT
Subject: CN=68D09ED116B2E02A20C355B09AFFCEC28E601AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:1f:8b:51:8a:a4:dd:64:b8:9e:27:15:0d:
94:6b:0d:91:40:58:d3:1e:2a:c0:da:63:f1:63:92:
ba:19:49:d9:8a:82:b7:ea:b6:5b:aa:4e:8e:74:06:
b3:2b:ac:03:50:f6:b7:97:6d:0e:fb:8f:5d:9c:83:
2d:c9:ba:86:29:98:1f:d3:d9:7f:ec:f0:c4:f0:3e:
31:55:5b:b2:92:90:91:a6:f9:83:1b:2b:e3:d4:27:
4f:29:fd:54:2e:09:1c:0f:85:3d:d3:fa:30:8d:95:
23:56:7d:02:1c:82:9e:8e:95:4e:ed:19:d4:7b:b3:
07:82:21:f3:29:fe:f2:3a:c4:40:3b:4d:f8:58:f9:
f4:20:00:fa:fe:ac:ba:c7:fc:79:3c:39:01:d6:3f:
b1:16:dd:27:1c:bc:21:98:28:cb:2c:65:dd:6b:b0:
d9:f3:a4:1f:dd:c7:22:01:a9:fd:4b:0e:17:70:73:
e5:94:35:4a:26:ef:0b:78:7b:68:ed:55:73:06:eb:
08:7d:a9:e0:84:d7:a7:0d:30:08:81:9b:6a:67:fd:
5c:61:1c:f4:72:4f:69:3b:0a:02:bc:80:f6:f5:02:
31:a3:fe:b7:81:2e:dc:0c:a1:e4:11:13:36:17:0d:
0d:64:39:9f:5c:4d:c7:c4:e3:99:7e:24:07:82:97:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:9E:D1:16:B2:E0:2A:20:C3:55:B0:9A:FF:CE:C2:8E:60:1A:F1
X509v3 Authority Key Identifier:
keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:26:f1:ec:e3:b0:4d:f9:5b:22:ae:cd:9a:6a:ec:ee:18:79:
9b:7c:d2:75:07:55:73:20:a6:68:62:ea:56:c0:9f:cf:b7:af:
e4:12:d3:c3:66:b9:e0:02:9e:a4:87:87:7b:cc:71:d9:f7:43:
f1:fa:5e:35:3e:1f:d0:a2:fc:53:1a:84:3c:ca:ac:6c:71:8f:
2e:a4:c7:9e:ae:1f:6b:a1:3b:53:d0:3e:25:8c:7a:52:d1:ab:
4b:a2:c8:52:5c:e8:04:5e:1f:ae:df:c6:c9:85:62:0f:67:8c:
5d:9a:4a:54:04:74:88:53:37:5e:13:49:09:f2:b1:1d:3f:56:
39:53:92:78:1c:e4:ef:92:8a:d2:bd:55:e0:5b:d5:ec:0b:69:
5f:8e:13:82:71:c9:6d:2a:08:90:aa:8d:b8:c7:e9:a6:0f:59:
88:0b:1c:85:f3:ce:41:80:76:8e:6e:73:dd:30:77:19:e5:57:
42:bd:49:f2:0b:52:5c:84:d4:10:ac:95:ee:a8:2e:04:90:e8:
25:f0:61:31:7d:da:e5:60:8e:13:ce:68:40:e8:e9:d5:64:66:
25:ad:ad:cf:67:f5:1c:0a:03:6a:68:b8:a8:31:d7:94:71:9c:
49:eb:ee:d8:17:8c:24:d2:99:69:99:2c:18:bb:a0:06:b6:a2:
69:13:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:14 2026 by rpki-client