
$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json)
Hash identifier: 3ZyLkYublOSihZ0ykI9GosRB+TfTYEhQ1hzUqpnMWIQ=
Subject key identifier: B8:9F:3C:C1:8E:51:B1:7D:03:EC:E0:78:27:87:20:60:7A:38:D5:6C
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial: 3CB8ED0207BD241FE65F0A3396A744BC3AB70F71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
Manifest number: 03DF
Signing time: Sat 18 Apr 2026 05:17:59 +0000
Manifest this update: Sat 18 Apr 2026 05:12:59 +0000
Manifest next update: Sun 19 Apr 2026 08:33:59 +0000
Files and hashes: 1: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: 02Ifct7s18goEyBDeWIdKu9ey75R5DkhKyls76plavU=)
2: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: Pc0GYVoJPbFj/fEq02BoaRQfPi2MbpirquiRIrEikGI=)
3: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: 1ZIYDp7ZeCpATgl+oTLBYnC9b1J4VHy1uwGxvI/gv74=)
4: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 1IHIztD+R8B7aYdP7wuNoDyk63HEbzqm4EctFN0Xl8o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 19 Apr 2026 08:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b8:ed:02:07:bd:24:1f:e6:5f:0a:33:96:a7:44:bc:3a:b7:0f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Validity
Not Before: Apr 18 05:12:59 2026 GMT
Not After : Apr 19 08:33:59 2026 GMT
Subject: CN=B89F3CC18E51B17D03ECE078278720607A38D56C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:03:f8:93:23:cc:88:9c:76:69:5d:94:27:
e8:1d:98:30:89:48:86:d8:a6:3a:53:bc:bb:c1:78:
b0:0c:a4:b4:a6:0c:38:4c:c7:47:95:17:b3:13:9f:
34:b5:03:8d:55:be:60:0b:15:fd:cb:2c:67:d7:e1:
31:6d:1c:c0:23:df:6c:79:0d:49:ae:55:77:af:81:
ba:d7:92:6d:94:19:a0:a0:e1:d6:6e:23:c6:40:05:
aa:0a:a8:b3:be:2b:a6:71:fd:d7:ab:41:3a:c8:a8:
dc:aa:d7:da:61:ab:1b:57:d3:ba:3b:f0:fc:3f:9f:
24:27:fa:87:6a:c9:28:4e:8a:6b:c9:03:62:eb:79:
3a:f0:59:22:2e:09:8e:cc:b8:f8:7c:c6:9a:0c:fd:
12:23:e7:17:1b:93:ab:7a:26:96:53:e7:64:ce:55:
c2:76:d6:15:b5:98:04:62:c9:e1:48:ff:1a:e6:3d:
2c:c8:db:c6:06:71:d4:0d:cf:dd:b2:07:37:eb:67:
c9:4a:4d:3e:3c:cb:1d:a2:2e:49:5a:92:f1:4e:8e:
59:53:b0:83:f6:6e:29:65:b7:58:ba:b0:8b:8e:d6:
89:1d:04:eb:fd:8d:d9:55:d3:99:ea:e0:e4:4b:2d:
38:80:ee:78:92:11:53:b6:9e:58:88:6c:d7:ce:08:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:3C:C1:8E:51:B1:7D:03:EC:E0:78:27:87:20:60:7A:38:D5:6C
X509v3 Authority Key Identifier:
keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c3:f0:88:00:1b:e1:42:0b:e1:70:83:cb:0a:ca:7f:b8:41:
fd:b2:ca:cf:70:72:a1:35:2c:66:3e:5b:d6:47:ef:65:74:65:
84:cd:6f:f8:1b:f7:0b:7d:7e:46:63:18:f7:74:d6:9d:aa:0b:
6c:43:2b:7a:b3:91:e8:1e:00:7f:97:97:80:05:10:96:5b:02:
ed:28:7c:f0:bf:db:1c:b0:c1:aa:ca:d5:e3:5e:69:ea:77:88:
6c:ca:0d:01:de:78:21:a6:a5:43:7c:e5:89:50:6f:a1:cb:a4:
55:72:39:bd:ce:8d:db:57:43:69:21:99:0e:14:c9:ee:8c:e4:
bd:bf:5d:b5:2a:37:4e:e4:e7:b9:5e:c9:e6:ec:2c:73:3b:77:
b1:f9:fb:08:75:23:9e:fb:a0:33:01:54:3d:6f:ea:8c:bd:65:
14:5f:fa:fa:22:d6:b1:fc:b0:d9:7e:13:5e:46:b6:be:8c:db:
8e:6b:a1:06:ea:4b:a0:6a:04:24:a3:80:e5:f3:52:6f:4c:cd:
d1:16:3a:30:f0:04:09:32:0b:68:05:7f:75:f9:48:b9:df:00:
3e:74:21:f8:17:5e:3e:c0:a5:bc:55:4e:dc:b3:0a:90:8e:d1:
f8:a2:42:c2:ff:e6:9f:95:18:ec:dd:64:4e:50:b8:d6:91:de:
63:0e:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:03:01 2026 by rpki-client