
$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
File: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft (raw, json)
Hash identifier: 1HnziDKOHxFciZkg4cOh0csTbCInorJK9NE6tNlgFk0=
Subject key identifier: 3D:D9:14:E8:AF:19:96:FB:A0:12:3F:B2:27:0C:11:70:13:59:B3:AF
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Certificate issuer: /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial: 1C3AFA373AA7200AF2D97A6A0BB89D07195EB4C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
Manifest number: 03A0
Signing time: Mon 02 Mar 2026 12:00:01 +0000
Manifest this update: Mon 02 Mar 2026 11:55:01 +0000
Manifest next update: Tue 03 Mar 2026 14:31:01 +0000
Files and hashes: 1: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl (hash: kkpmdtrtprQ6h+rgQxysBGPBDIKr5ygjS8g8EmGMgCI=)
2: 34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (hash: 1bgkEfX/ZiKH+p1a8vc8ehTtCBqKtbVVtw8qkL5lHGI=)
3: 34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (hash: O1px1yBgfGPgKN2tRciqp1LjemGUV5DFMNwWLnJOCE4=)
4: 34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (hash: bf/O8ThUR/sxxfb+3RnCJKyXL2K/OaMkDOc8hSaDklY=)
5: 34352e3233352e39352e302f32342d3234203d3e20323637343130.roa (hash: hducqS2ZdGZm+SE5GdXxUznr8Wm7+DXWX3dd+MnB8yI=)
6: 34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (hash: 03Mqs/VxX4YlEDgZyihTQwdg0wG9WA4K0cWVShPcQ/0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 14:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3a:fa:37:3a:a7:20:0a:f2:d9:7a:6a:0b:b8:9d:07:19:5e:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Validity
Not Before: Mar 2 11:55:01 2026 GMT
Not After : Mar 3 14:31:01 2026 GMT
Subject: CN=3DD914E8AF1996FBA0123FB2270C11701359B3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:06:34:b7:63:6c:5b:e7:aa:d6:2e:cc:b9:
49:e2:3c:01:22:3a:b6:1b:cc:7f:58:c9:d8:ed:52:
71:4d:04:11:1e:b3:02:8f:af:91:6c:d5:ec:e1:b6:
5a:b6:00:1c:63:05:8a:40:a2:35:fd:96:60:db:77:
02:d1:1e:a3:ab:18:b3:69:09:8c:f2:42:bb:a2:d0:
59:7a:98:a7:75:4e:92:35:02:90:7b:d9:b5:72:38:
c5:65:24:ae:0a:3b:e7:5f:4a:a6:20:93:99:8f:05:
37:ab:b6:d7:1d:07:27:4b:4c:f6:5c:70:32:5c:03:
04:ec:14:bb:19:27:a3:39:66:e0:35:2b:40:72:6d:
8e:c1:3f:39:56:ad:38:95:6a:9c:6c:5d:11:04:c2:
ce:5e:62:2e:af:30:46:f0:44:a2:9d:c2:61:cb:cb:
1f:87:47:ec:18:92:a4:28:99:94:63:a3:ef:c0:a3:
d0:de:1d:cb:18:24:92:61:bc:df:c6:f4:2a:09:56:
ed:26:e0:63:e0:0e:68:59:ce:8f:ae:60:23:72:29:
b0:9a:98:67:0f:03:82:5c:f0:66:8c:54:e4:ae:f5:
95:39:a2:c0:ba:b9:34:3c:48:ae:f8:f7:ca:da:f9:
0c:c3:c0:c1:3b:aa:8d:76:a7:fe:9e:f9:41:56:9a:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:14:E8:AF:19:96:FB:A0:12:3F:B2:27:0C:11:70:13:59:B3:AF
X509v3 Authority Key Identifier:
keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:cf:01:56:f0:87:c5:75:1c:28:7c:1b:39:3b:b7:06:52:
c4:92:a8:08:84:86:06:0e:c2:8f:c8:63:6b:9a:60:4a:c1:5c:
c0:fa:11:8a:0b:32:bb:56:7b:c9:8a:3f:7c:78:1b:33:51:72:
a2:39:45:ef:95:53:3b:6f:61:1f:23:15:b3:84:10:38:ea:7e:
72:6c:67:e7:65:2c:a4:3c:10:8f:35:74:82:2e:9a:91:ed:af:
f6:d6:50:cc:93:64:2c:b8:2a:60:f1:ed:7a:82:12:49:cb:27:
d8:3f:c1:63:4e:72:9b:b5:3a:c9:54:6b:a2:bb:a2:3b:68:a6:
9a:cd:20:b2:ba:8e:6f:e5:7a:40:80:60:ca:b2:aa:a4:c3:41:
70:b7:07:72:fc:67:da:c7:bf:96:2b:89:d3:7e:c1:ff:b5:18:
db:82:d5:c6:c7:6a:4a:69:9b:d2:25:2f:eb:c9:cd:8b:27:37:
f2:95:e1:a1:72:30:4d:31:78:4c:91:ad:6c:58:45:5f:43:b2:
bf:e8:a8:8f:16:e3:58:12:c2:d0:3e:8f:03:64:57:38:ba:a5:
98:62:03:d2:5c:2e:29:e1:1a:16:07:4f:71:d3:08:d3:ee:46:
77:2d:82:b8:b0:7e:7c:29:b8:13:59:ae:9f:05:db:15:de:01:
74:03:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:15 2026 by rpki-client