
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier: A+C+p/57IbuxAKmX/Yk4tQsKQVmknH/YSscF5fRhA2U=
Subject key identifier: 67:4F:9B:DD:5C:35:E7:D7:8C:63:B9:B5:9C:25:DA:9A:CD:CF:64:5D
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 3902A1299C40A4A2EF040C6AC19EE681D12EB47D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number: 0253
Signing time: Mon 02 Mar 2026 00:41:28 +0000
Manifest this update: Mon 02 Mar 2026 00:36:28 +0000
Manifest next update: Tue 03 Mar 2026 02:02:28 +0000
Files and hashes: 1: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
2: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
3: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
4: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
5: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
6: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
7: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
8: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: lE40JzwON4gugMdOhhZCaQLBfSGxxsNUDs5kmJj9fRI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 02:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:02:a1:29:9c:40:a4:a2:ef:04:0c:6a:c1:9e:e6:81:d1:2e:b4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Mar 2 00:36:28 2026 GMT
Not After : Mar 3 02:02:28 2026 GMT
Subject: CN=674F9BDD5C35E7D78C63B9B59C25DA9ACDCF645D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:11:e4:93:42:5f:c8:fe:8d:50:72:8d:07:
0b:d3:b6:5e:c6:3c:e8:d1:1a:78:7d:18:d8:d4:62:
60:d6:2e:7b:8d:29:27:47:cb:74:e3:24:ec:99:fd:
bd:fa:67:f0:86:96:3e:f7:90:e0:65:0d:c7:fd:d7:
6a:b2:94:8c:c6:bc:4b:79:6b:1d:ec:2e:57:3e:9a:
e3:d0:01:90:29:a8:dc:3d:8c:ba:3a:65:c8:59:3a:
dd:70:50:1d:07:b7:cd:4c:0f:59:7f:ec:a8:12:65:
a8:6f:15:66:7b:a2:ba:37:fe:e2:f4:aa:08:58:ef:
0c:f9:2a:66:8b:82:a2:c8:9a:de:d1:8e:23:30:c4:
1c:1c:dd:66:23:a0:d7:16:d5:00:15:dd:87:07:f8:
15:df:70:84:c1:ea:2a:b4:66:31:f4:e0:4a:b7:29:
38:3a:7f:d7:db:2f:80:6a:36:9e:3e:96:f0:21:cb:
49:9e:0c:a7:f7:09:cf:8f:a8:b8:c7:17:fe:bc:40:
57:4a:be:90:e1:cc:43:21:cd:bf:95:58:ba:59:02:
21:e8:e1:64:b7:7d:b4:23:f0:78:23:5a:d0:c7:fc:
96:30:43:a9:71:9e:30:9e:fe:8e:c8:41:ac:0b:f8:
2a:6d:ab:dd:0b:b7:b9:9d:2f:16:a7:e4:2a:df:7d:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:9B:DD:5C:35:E7:D7:8C:63:B9:B5:9C:25:DA:9A:CD:CF:64:5D
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:32:45:05:52:45:8e:c1:7b:a3:d6:7a:bd:9e:4c:89:61:01:
58:b4:06:1b:51:ff:60:db:4f:14:99:9b:b4:29:2f:b4:53:2d:
2f:f6:a9:66:6f:8d:07:58:c8:08:2e:0f:f7:b2:2d:94:a4:4f:
9c:e2:18:e9:d5:55:46:80:fa:ab:eb:92:ad:c0:39:01:c4:f5:
73:1e:e2:b2:ba:97:14:de:90:1c:ae:79:bd:a3:6c:aa:76:95:
fa:cb:62:97:1c:3f:7c:5f:17:57:11:45:06:f9:e8:2d:11:6b:
05:ef:fb:1f:92:4c:a4:85:9d:e7:ba:ac:7b:7b:03:8c:36:6d:
b1:2a:62:d8:15:4f:e3:17:dc:3a:ff:81:d1:09:f5:9a:5b:9e:
0e:9b:12:86:d9:82:2f:09:bf:86:66:78:9c:ec:ca:4c:f0:c4:
60:66:1c:0f:67:e3:10:c9:75:49:54:5a:66:b0:e8:8b:6e:db:
99:ac:a2:07:8a:ac:e2:36:cf:1e:77:7c:c3:92:52:45:e0:97:
be:91:3e:20:ea:73:7b:d3:45:fd:f3:be:3e:54:63:ed:9c:e4:
45:b9:ff:e2:60:0f:b2:4d:43:35:8d:ae:89:50:f1:64:6f:2d:
7a:e1:19:d3:a2:37:d3:e9:e9:5e:d9:6c:22:67:ea:b9:7e:29:
6c:f9:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:33 2026 by rpki-client