
$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
File: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft (raw, json)
Hash identifier: U39iZm+ac1RlW0EEyMa2BrElThiqpOBYfcUdTgH3In8=
Subject key identifier: BB:21:6F:D0:91:0A:C2:B2:7C:95:DF:C3:F1:17:95:23:94:E4:D3:6D
Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
Certificate issuer: /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
Certificate serial: 2EFDC376AB384392D8ABBCE0B38F930EA8017FFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
Manifest number: A3
Signing time: Thu 26 Mar 2026 12:56:25 +0000
Manifest this update: Thu 26 Mar 2026 12:51:25 +0000
Manifest next update: Fri 27 Mar 2026 15:04:25 +0000
Files and hashes: 1: 3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa (hash: N91dwFlRpIMGXso4PKVxPSMTeHaKnAVRNeylT8GL1f4=)
2: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl (hash: A2VwywCse4YP05TzmjOmx3BhQchUGHte5Cf8bVlpyzk=)
3: 3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (hash: WlfPkdvQaK+2iNV2J8DnE42kv5R/ULsDx9rhkKjR0cA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl
rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 15:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fd:c3:76:ab:38:43:92:d8:ab:bc:e0:b3:8f:93:0e:a8:01:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
Validity
Not Before: Mar 26 12:51:25 2026 GMT
Not After : Mar 27 15:04:25 2026 GMT
Subject: CN=BB216FD0910AC2B27C95DFC3F117952394E4D36D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:ae:ad:a9:26:78:71:9b:13:d5:8a:6c:f0:
98:5a:16:53:bf:f1:3e:b2:ae:4a:4f:48:e6:a7:4c:
dd:80:89:b5:69:a2:0c:93:af:6d:74:7f:5f:3f:30:
7f:86:9f:5f:24:fe:e4:b4:0a:01:29:97:05:85:af:
ed:7e:7b:38:4a:ad:37:3f:f8:5d:b0:a9:ba:d6:f2:
e6:f7:69:e0:3e:80:32:cb:dd:11:86:53:5b:5f:3a:
1b:f2:45:ba:1d:d0:c4:c7:e3:57:8a:f2:1d:82:42:
f5:08:45:0a:31:9c:35:7c:f7:0d:26:3c:9d:d6:fe:
8e:e6:44:33:a5:31:4c:a4:87:c8:2e:17:cb:eb:c0:
90:37:94:ff:d5:59:3b:89:2c:12:42:21:36:5f:f7:
78:e2:23:0b:a5:4d:06:ce:b9:01:4b:24:33:4d:78:
9e:c4:be:4a:00:ab:8e:dd:a0:c3:ee:1c:b3:77:7e:
38:a9:72:55:6c:eb:75:7c:b1:df:fc:3b:ea:bc:2a:
55:31:6d:44:03:fa:e6:aa:95:31:be:41:9b:2b:d6:
50:3c:d1:13:38:7f:0c:a1:05:60:08:40:47:21:92:
09:18:f7:3e:e8:b1:a6:81:f2:7a:0b:19:d8:20:ef:
a5:36:f9:83:c2:63:29:ca:17:f6:0f:c7:b0:29:ce:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:6F:D0:91:0A:C2:B2:7C:95:DF:C3:F1:17:95:23:94:E4:D3:6D
X509v3 Authority Key Identifier:
keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:7d:77:4e:ef:bd:80:96:f2:d1:39:86:c8:01:48:f7:bd:
42:37:b6:03:3e:c2:55:e5:f5:4e:1d:c3:42:c5:d8:ef:fe:bb:
6b:12:42:1d:36:0d:ca:f1:67:43:41:76:05:32:0d:3a:8f:a3:
1f:33:16:fe:8b:b4:d8:60:a9:ae:65:33:1e:0a:3b:8c:0b:04:
fb:5f:09:dc:cb:d6:dd:8b:d8:0a:22:e9:92:c5:2f:a1:44:8d:
ed:f0:75:c8:ae:0a:fb:18:52:d7:29:50:e4:ae:96:c9:53:e2:
df:89:68:70:41:28:2a:b7:41:69:a4:b5:87:14:91:ea:2f:ad:
fe:f6:8e:ad:63:02:8b:4f:63:e0:59:90:f6:d9:ae:5c:a6:c4:
b8:38:b5:da:98:a1:d0:d1:cf:39:a0:4a:6d:4c:ec:ea:df:9c:
3c:cb:df:16:22:e9:c3:5c:92:4a:3b:f8:8d:db:a1:d3:dd:62:
29:c2:4a:e3:3b:e8:42:63:04:00:d5:89:69:9e:f3:08:95:a2:
b9:7f:ce:59:eb:50:d0:c9:e4:f0:f1:da:46:5f:4a:c4:7b:2b:
a1:1c:60:f8:df:3f:83:b2:7b:69:6d:96:9e:be:9f:5d:32:6f:
56:82:58:4d:aa:2c:0e:f4:d3:07:f2:10:f1:1e:26:9b:42:f8:
ee:2b:e8:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULv3Ddqs4Q5LYq7zgs4+TDqgBf/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzQUY5NzgzN0VEOUE5MThGQTc1RDQ5NjBGQzIwNDdC
MkNGODFGRjAeFw0yNjAzMjYxMjUxMjVaFw0yNjAzMjcxNTA0MjVaMDMxMTAvBgNV
BAMTKEJCMjE2RkQwOTEwQUMyQjI3Qzk1REZDM0YxMTc5NTIzOTRFNEQzNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVra6tqSZ4cZsT1Yps8JhaFlO/
8T6yrkpPSOanTN2AibVpogyTr210f18/MH+Gn18k/uS0CgEplwWFr+1+ezhKrTc/
+F2wqbrW8ub3aeA+gDLL3RGGU1tfOhvyRbod0MTH41eK8h2CQvUIRQoxnDV89w0m
PJ3W/o7mRDOlMUykh8guF8vrwJA3lP/VWTuJLBJCITZf93jiIwulTQbOuQFLJDNN
eJ7EvkoAq47doMPuHLN3fjipclVs63V8sd/8O+q8KlUxbUQD+uaqlTG+QZsr1lA8
0RM4fwyhBWAIQEchkgkY9z7osaaB8noLGdgg76U2+YPCYynKF/YPx7ApzlB9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuyFv0JEKwrJ8ld/D8ReVI5Tk020wHwYDVR0j
BBgwFoAUSjr5eDftmpGPp11JYPwgR7LPgf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9B
Sm4vMC80QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBM0FGOTc4MzdFRDlBOTE4
RkE3NUQ0OTYwRkMyMDQ3QjJDRjgxRkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9BSm4vMC80
QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfBN9d07vvYCW8tE5hsgBSPe9Qje2Az7CVeX1Th3DQsXY7/67axJCHTYNyvFn
Q0F2BTINOo+jHzMW/ou02GCprmUzHgo7jAsE+18J3MvW3YvYCiLpksUvoUSN7fB1
yK4K+xhS1ylQ5K6WyVPi34locEEoKrdBaaS1hxSR6i+t/vaOrWMCi09j4FmQ9tmu
XKbEuDi12pih0NHPOaBKbUzs6t+cPMvfFiLpw1ySSjv4jduh091iKcJK4zvoQmME
ANWJaZ7zCJWiuX/OWetQ0Mnk8PHaRl9KxHsroRxg+N8/g7J7aW2Wnr6fXTJvVoJY
TaosDvTTB/IQ8R4mm0L47ivoHw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:08:04 2026 by rpki-client