
$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json)
Hash identifier: Nh/grylrnYzKilWkIrYnwL31VARa+56ke0G5uMjgnek=
Subject key identifier: E9:85:F6:5D:E7:CF:9A:9B:B3:E0:D6:11:63:C0:DC:5A:11:48:36:00
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial: 1FBCF397C989ACA84F161955320AD40F6AFBD7D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
Manifest number: 0402
Signing time: Wed 13 May 2026 13:52:26 +0000
Manifest this update: Wed 13 May 2026 13:47:26 +0000
Manifest next update: Thu 14 May 2026 15:17:26 +0000
Files and hashes: 1: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=)
2: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=)
3: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=)
4: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=)
5: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=)
6: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: OEjV8nDrvvzh7Gg3IPsNeKpv1OmSNTphVcwwF8gZoLA=)
7: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=)
8: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=)
9: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 15:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:bc:f3:97:c9:89:ac:a8:4f:16:19:55:32:0a:d4:0f:6a:fb:d7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Validity
Not Before: May 13 13:47:26 2026 GMT
Not After : May 14 15:17:26 2026 GMT
Subject: CN=E985F65DE7CF9A9BB3E0D61163C0DC5A11483600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:70:d7:ed:9a:4d:c6:88:c3:13:1d:d0:00:
e6:2b:16:4a:d1:59:1e:a4:46:e6:bc:a7:d2:bb:91:
97:14:ef:56:38:3a:0b:4f:4a:33:08:78:78:0d:34:
8d:2b:9b:4e:50:31:96:68:48:3c:7b:c7:4c:7b:27:
7a:30:9c:af:af:ab:a4:ce:bd:ad:f7:c8:3c:95:91:
6a:6a:45:ce:25:07:54:47:df:4c:b4:d2:c5:93:ea:
fb:9d:af:d9:5d:5c:7c:fe:57:f3:56:3c:7e:cf:2a:
97:83:04:5e:75:49:75:d7:38:85:ed:15:c4:e3:cb:
54:3a:3d:39:b4:c3:35:97:b2:1f:f7:4f:e8:1c:7d:
97:5b:19:89:79:a4:b1:a3:6e:37:56:fd:62:d9:cd:
e3:1a:1c:46:79:cb:a2:03:b4:36:89:9a:d2:13:0c:
d5:49:84:54:7e:29:b7:a8:26:f4:02:fa:c5:fe:d1:
74:f8:5f:4c:1b:f5:bb:ae:a8:74:c1:05:cb:9a:0e:
7c:be:77:48:6f:6f:b0:ae:b6:45:83:f8:c3:c5:a0:
cc:8e:f6:f8:51:3c:90:1c:14:8b:79:3d:16:be:82:
58:4a:55:7e:fa:9e:9e:8d:49:4a:3f:c9:84:d1:7b:
aa:87:cb:e2:d9:96:dc:3a:f4:98:46:b5:aa:77:8d:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:85:F6:5D:E7:CF:9A:9B:B3:E0:D6:11:63:C0:DC:5A:11:48:36:00
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e4:43:43:97:21:3e:56:54:30:aa:a2:8e:4f:78:c9:37:c0:
ff:0d:86:dc:9f:42:49:99:68:bf:96:bf:da:82:e3:dd:ad:45:
7d:1f:cb:26:77:5e:ad:37:e5:a9:92:ec:0a:0e:e7:c8:a2:c7:
63:b7:80:b7:a7:c6:5a:88:ce:b6:18:4c:f3:2a:81:b1:bf:8a:
92:fd:81:94:cc:3c:d9:be:3f:c7:42:7c:f9:ce:40:09:48:5f:
c6:a8:b0:9f:f2:9c:97:76:d4:0d:6c:c6:dc:fe:07:d3:a3:af:
df:e3:e7:02:db:4e:00:71:9c:31:2c:c9:05:d3:f2:6c:6b:8d:
13:1e:49:41:4e:f1:f4:fe:1a:33:c2:00:82:d7:9e:ba:d9:fb:
d3:88:97:14:50:14:b0:61:ef:35:a6:d7:09:f0:15:ee:79:5b:
1e:9f:d8:10:a7:1a:bb:3d:02:dd:a1:be:ee:c0:f7:3c:22:1a:
1d:12:ce:d0:e3:df:3c:bf:65:b1:28:38:82:c8:52:7f:8c:00:
35:83:82:44:b9:32:a0:b5:1f:df:1b:48:b8:1c:fd:13:e1:64:
b1:93:f0:01:3d:87:e0:90:6b:7b:c9:d7:b2:c8:dd:00:31:3c:
7c:ed:91:43:f5:2c:b0:e6:40:7c:c4:31:86:44:99:d4:0c:fd:
a4:01:3c:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH7zzl8mJrKhPFhlVMgrUD2r719UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0
QjQxNDBEMTAeFw0yNjA1MTMxMzQ3MjZaFw0yNjA1MTQxNTE3MjZaMDMxMTAvBgNV
BAMTKEU5ODVGNjVERTdDRjlBOUJCM0UwRDYxMTYzQzBEQzVBMTE0ODM2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2HDX7ZpNxojDEx3QAOYrFkrR
WR6kRua8p9K7kZcU71Y4OgtPSjMIeHgNNI0rm05QMZZoSDx7x0x7J3ownK+vq6TO
va33yDyVkWpqRc4lB1RH30y00sWT6vudr9ldXHz+V/NWPH7PKpeDBF51SXXXOIXt
FcTjy1Q6PTm0wzWXsh/3T+gcfZdbGYl5pLGjbjdW/WLZzeMaHEZ5y6IDtDaJmtIT
DNVJhFR+KbeoJvQC+sX+0XT4X0wb9buuqHTBBcuaDny+d0hvb7CutkWD+MPFoMyO
9vhRPJAcFIt5PRa+glhKVX76np6NSUo/yYTRe6qHy+LZltw69JhGtap3jdjXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6YX2XefPmpuz4NYRY8DcWhFINgAwHwYDVR0j
BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K
Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE
MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z
Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlORDQ5chPlZUMKqijk94yTfA/w2G3J9CSZlov5a/2oLj3a1FfR/LJnderTfl
qZLsCg7nyKLHY7eAt6fGWojOthhM8yqBsb+Kkv2BlMw82b4/x0J8+c5ACUhfxqiw
n/Kcl3bUDWzG3P4H06Ov3+PnAttOAHGcMSzJBdPybGuNEx5JQU7x9P4aM8IAgtee
utn704iXFFAUsGHvNabXCfAV7nlbHp/YEKcauz0C3aG+7sD3PCIaHRLO0OPfPL9l
sSg4gshSf4wANYOCRLkyoLUf3xtIuBz9E+FksZPwAT2H4JBre8nXssjdADE8fO2R
Q/UssOZAfMQxhkSZ1Az9pAE8Lg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:55:50 2026 by rpki-client