
$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
File: 7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft (raw, json)
Hash identifier: h/S35QMim/cmIcwia7XOEhhEYZAubQQezlDh2OCK+A0=
Subject key identifier: B3:39:CD:FA:8E:BC:F9:5D:31:20:8D:B3:9D:AE:9C:51:77:8F:5D:AA
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Certificate issuer: /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial: 76AD82736542C814101E040CF5688C98765A752B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
Manifest number: 03A5
Signing time: Mon 02 Mar 2026 10:47:51 +0000
Manifest this update: Mon 02 Mar 2026 10:42:51 +0000
Manifest next update: Tue 03 Mar 2026 12:19:51 +0000
Files and hashes: 1: 323830343a346137383a3a2f33322d3438203d3e20323637323432.roa (hash: ayG5Bzmf8E6Tll8mTfbLcyRo/YmraaSm33LWKq5Y+SM=)
2: 34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (hash: wm5LzulkJJ0sx45wNs+CpVo56rygPBNHKlafVhbFUTs=)
3: 7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl (hash: YswXUiPbFbkuBhxyZHxvKr5u6LQcNslgVMCwFD3NHWE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ad:82:73:65:42:c8:14:10:1e:04:0c:f5:68:8c:98:76:5a:75:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Validity
Not Before: Mar 2 10:42:51 2026 GMT
Not After : Mar 3 12:19:51 2026 GMT
Subject: CN=B339CDFA8EBCF95D31208DB39DAE9C51778F5DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:e7:f7:3b:82:99:81:72:a5:5f:8c:5f:79:
3c:b9:b7:fa:44:75:3e:bb:8f:18:88:f5:e6:0d:68:
d9:1a:a9:5a:c7:28:0b:29:71:74:c3:1c:c4:df:ed:
0a:8a:d8:1a:46:22:74:c0:01:41:4f:66:b6:4b:a0:
64:e2:9b:5e:8c:31:47:fd:9c:2d:a9:99:48:69:79:
81:d5:da:0d:cc:7c:d0:a6:83:5e:3b:b4:cc:2d:18:
17:27:47:2e:fb:3d:1f:de:5e:ba:7f:cc:58:2c:cf:
2b:fc:36:3b:14:cc:d7:17:e3:01:fc:5a:c4:8b:a8:
9f:79:1e:02:d4:f3:ad:bc:bd:a5:78:97:a6:66:48:
a2:93:30:32:24:d2:b8:5c:88:5b:8f:e8:6c:27:0a:
2d:1a:35:59:90:15:75:18:ed:d0:cf:a2:e3:7c:81:
1d:4e:46:b8:11:4f:91:f3:35:47:fd:79:ff:6c:f4:
3a:1b:82:af:93:46:a1:9e:77:cd:53:17:a9:36:7a:
9d:ec:3f:85:8e:53:ba:49:8a:b7:d6:01:61:50:37:
a2:49:ed:82:70:80:c0:45:1c:7c:f5:26:b3:48:9f:
dc:f8:04:f5:4a:0f:8d:0a:71:82:52:07:29:8f:3a:
6d:87:d1:bc:d1:0d:17:bf:2f:ba:d8:b7:ed:a1:fa:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:CD:FA:8E:BC:F9:5D:31:20:8D:B3:9D:AE:9C:51:77:8F:5D:AA
X509v3 Authority Key Identifier:
keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:3d:3b:53:1d:5f:23:b0:f9:0e:16:1e:32:7b:16:cd:f3:
4f:e2:5b:14:e3:b9:0d:64:40:49:87:2b:ff:35:6b:bd:cd:0a:
26:46:33:63:34:ed:a0:9c:f8:ef:c1:b6:0f:00:60:aa:eb:93:
88:c2:7b:9d:df:81:c4:87:55:fb:7e:09:27:90:70:ae:78:c1:
56:03:2e:34:30:10:91:63:f2:0e:40:c9:9a:ca:b7:5d:71:11:
65:13:cd:e6:a9:2d:64:0a:00:a6:7f:d1:93:52:17:2c:a6:dd:
28:b7:a6:a6:32:d6:d4:5a:fa:a3:0a:e9:be:f4:0b:99:4b:e8:
69:e5:70:9c:c3:f8:0d:b4:56:82:80:11:45:55:7c:31:c7:b2:
79:69:5f:14:c6:eb:0e:0f:84:1a:b3:10:f2:d0:15:45:10:b0:
28:f4:78:1f:6a:98:03:8b:f4:17:04:93:0f:4a:e2:7d:ef:f8:
ee:d1:f2:0e:5c:f5:b4:b4:00:da:23:2f:66:f1:51:1b:f8:1f:
6f:78:ea:91:be:16:fe:bd:4d:ac:2b:85:f0:1a:cf:88:7d:ce:
86:18:9f:75:c6:e9:01:fa:52:4f:ed:cb:cd:05:f5:4e:90:85:
b5:6f:11:7f:d6:15:09:61:7b:d2:cc:ac:28:01:f1:0c:9f:03:
1b:ff:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:16:20 2026 by rpki-client