
$ rpki-client -vvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
File: D2986464325E8FD5DF10CBFA8DD303EF12449774.mft (raw, json)
Hash identifier: +QIB3t3dM5F0xGo+20l/1fzfJUOBnqeEm+VxT9N2Hy8=
Subject key identifier: 43:CF:A2:B6:8E:7D:52:26:4E:AC:C7:E4:A2:66:60:15:A6:6B:A9:32
Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Certificate issuer: /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Certificate serial: 3A8E037246DD5841181B7AE64AE6B9EF8F379A5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
Manifest number: 03C4
Signing time: Wed 25 Mar 2026 10:07:50 +0000
Manifest this update: Wed 25 Mar 2026 10:02:50 +0000
Manifest next update: Thu 26 Mar 2026 13:01:50 +0000
Files and hashes: 1: 323830343a343439343a3a2f33322d3438203d3e20323637363430.roa (hash: f7MnHyJkzdNTO1BEnrZgsQBYBh4ro0Q04OtUU9Iejlc=)
2: 34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (hash: r7klzKUdJTnnFWbsNasJuaPJzJXzSoOurGolGTkdpnc=)
3: D2986464325E8FD5DF10CBFA8DD303EF12449774.crl (hash: UilF07h2hqqlzY6BT5IG+Pu/NAmmnN/HCOX6516Myac=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8e:03:72:46:dd:58:41:18:1b:7a:e6:4a:e6:b9:ef:8f:37:9a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Validity
Not Before: Mar 25 10:02:50 2026 GMT
Not After : Mar 26 13:01:50 2026 GMT
Subject: CN=43CFA2B68E7D52264EACC7E4A2666015A66BA932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:7c:9a:1b:9c:9a:97:de:1f:86:c4:c5:c8:
e6:7d:60:35:c6:ae:0e:58:42:7a:67:81:cf:1f:5e:
a8:af:70:ee:32:43:88:79:f6:29:7c:05:71:0b:24:
c1:d6:32:e0:07:50:39:98:27:d8:e3:37:29:99:d4:
7d:2b:db:c3:1c:40:65:aa:c7:c7:f2:26:01:df:8a:
1d:de:ef:55:b2:fc:5b:7c:b8:b7:35:57:35:02:89:
0b:f8:54:76:25:d1:fe:88:ea:8c:c9:28:4f:e0:77:
cd:a9:f2:11:74:44:81:e1:57:09:28:7e:e5:1b:af:
11:5e:e3:0c:54:bd:91:59:54:8a:98:cb:11:6e:d8:
d3:fb:87:56:be:4e:ea:e7:a9:7e:5a:af:80:84:f0:
5b:eb:47:1b:33:18:88:f5:56:49:68:eb:f3:6b:fe:
7c:61:d4:22:39:7d:0b:f3:ac:02:52:86:7a:2a:0b:
1c:33:88:c6:5f:28:0a:28:cd:bc:3f:32:14:9c:6e:
2f:36:fa:6c:70:9c:bb:1d:35:bd:10:2c:fe:a0:5d:
f3:35:b9:41:b9:57:00:8e:d9:5e:56:5f:41:1c:56:
6c:af:8a:2c:bb:26:69:39:cc:42:1c:4f:48:bb:9c:
be:51:a1:55:20:01:64:20:4d:a6:6b:d8:eb:72:70:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:A2:B6:8E:7D:52:26:4E:AC:C7:E4:A2:66:60:15:A6:6B:A9:32
X509v3 Authority Key Identifier:
keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:21:73:83:68:ed:fc:cb:f3:5b:53:60:12:40:68:45:ad:7e:
c0:26:e5:f3:7f:dd:e9:04:6c:b8:a7:6b:38:43:9f:a3:0f:05:
c5:61:a5:df:75:be:4b:3f:a6:4f:ff:61:a8:71:72:3f:34:2a:
fd:18:53:83:4a:b5:6b:60:0c:c8:fd:4b:cf:99:7e:85:87:aa:
ef:62:20:79:da:7f:7d:d6:9d:36:2d:26:1f:56:c3:0e:f9:b5:
cb:8c:7d:cb:e3:9d:7e:a7:e5:ea:a2:57:15:24:58:1b:1b:94:
d7:b7:d3:ac:28:90:23:28:3e:c2:c3:d1:a6:1e:38:31:1d:7d:
73:86:ae:aa:07:32:9b:5f:1f:be:e5:0a:ed:4e:32:62:13:7f:
2f:35:d5:ce:ef:5f:05:d9:6f:71:b8:0a:1b:ee:87:17:16:79:
20:51:d8:e9:f2:7d:93:4d:f0:ee:f3:79:e4:22:ac:be:f7:bf:
3a:e3:6e:a0:ca:bb:39:a7:b9:08:db:b5:18:86:90:63:11:04:
47:01:5e:37:87:29:d5:39:51:d8:2e:37:c3:dc:46:e5:71:30:
18:7d:75:af:c9:7c:0c:6b:18:2f:f3:36:56:b1:cd:f9:71:87:
c8:3b:5c:c9:79:95:b9:a6:3d:18:93:fd:24:de:1f:b2:2d:1f:
c1:8b:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:51 2026 by rpki-client