
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json)
Hash identifier: BCRHiBoAAdflKnbQt6RZii4we2yHKoBVc0dY0waN8lQ=
Subject key identifier: E9:6A:20:40:73:63:C2:E4:54:8E:8E:F7:A2:19:96:94:2A:8B:77:4E
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial: 656AE18D267411A93699077F6F26132A5429E857
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
Manifest number: 03BE
Signing time: Thu 26 Mar 2026 06:35:40 +0000
Manifest this update: Thu 26 Mar 2026 06:30:40 +0000
Manifest next update: Fri 27 Mar 2026 07:14:40 +0000
Files and hashes: 1: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: pmh4BRCTLaVheNeaFBQFQP/b/r3NgPTQ74DTv+RIp/c=)
2: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: WFmpswDhDjpd6g5xiHbucDpV+VKoEe130j9mwVUtUfs=)
3: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: Lzju1AL9ZSHnZNmiV9W+eWJo577s+/qDTATU5YHArng=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 07:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6a:e1:8d:26:74:11:a9:36:99:07:7f:6f:26:13:2a:54:29:e8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Validity
Not Before: Mar 26 06:30:40 2026 GMT
Not After : Mar 27 07:14:40 2026 GMT
Subject: CN=E96A20407363C2E4548E8EF7A21996942A8B774E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:7a:1f:bf:a7:56:4b:27:24:5d:7a:bc:fa:
e9:09:9a:30:38:83:7b:4a:fc:ed:e5:77:ea:1f:d9:
8f:1f:7b:99:4e:f5:ba:68:b3:b8:27:2d:16:01:68:
82:6f:67:18:5a:fd:6d:c4:06:50:7a:5c:0b:a3:fb:
42:a9:b8:d9:b9:9f:fc:8c:40:45:72:65:44:26:1e:
8e:36:b7:91:9c:1a:13:4a:8d:1f:ff:56:56:69:e9:
60:81:d8:e8:1e:ab:20:09:fb:ae:51:39:36:48:89:
7a:36:12:01:c6:26:6a:05:0b:06:91:1a:ef:86:26:
0d:06:e0:cf:cb:10:ad:a1:ba:0e:83:b4:25:99:94:
d6:db:8e:35:79:9e:ed:ad:54:95:93:d0:65:6d:90:
87:45:1f:cf:c0:07:0a:08:f7:8a:c8:a8:94:ec:ef:
47:34:b3:f1:ee:2d:54:cd:e4:d9:26:f0:2a:9c:43:
aa:8a:f9:6f:bd:96:60:a4:d3:2c:b6:f2:7f:68:f9:
12:4e:b2:82:d7:03:6d:c5:a4:f3:1e:37:03:96:76:
60:e3:cc:5b:fd:72:9c:43:54:fb:00:17:0e:91:64:
61:ce:ae:60:f5:33:b1:23:8a:e3:ec:98:24:5b:91:
c6:21:c7:1e:21:24:9b:86:cb:53:3c:bf:ce:f5:e3:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:20:40:73:63:C2:E4:54:8E:8E:F7:A2:19:96:94:2A:8B:77:4E
X509v3 Authority Key Identifier:
keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b5:45:8e:ea:3a:92:28:d9:4e:0a:ca:d6:0f:49:76:27:3d:
55:f2:3a:c5:42:21:d9:b6:79:1a:07:99:00:b2:65:d6:fc:7f:
74:f2:d0:77:d4:c1:17:70:38:a8:07:9c:d6:33:d1:2b:cb:4f:
37:7e:2b:61:c0:01:72:66:b8:9d:21:3a:bf:24:59:93:01:c2:
49:f5:8c:e8:24:87:ab:79:85:34:2e:9c:6c:0d:47:ed:6d:0f:
2a:1c:94:cd:e1:4d:db:62:1a:71:d5:27:5b:72:aa:90:78:1a:
18:17:14:77:9c:db:46:12:99:c7:0a:35:3d:a4:63:e3:ff:c7:
eb:a5:9e:ed:20:ff:67:4a:f9:f6:16:94:20:cf:05:b9:41:25:
df:37:bc:4b:b7:e7:25:66:a8:18:92:4f:68:a2:1b:d5:c3:39:
8a:fb:43:c2:df:3a:37:a3:63:b5:da:0d:79:54:f4:56:59:62:
8d:d4:bc:02:1a:3d:d6:23:26:f7:69:1a:bb:41:96:a9:b7:51:
ac:83:dc:63:45:e1:db:6e:cc:48:72:0b:b8:4c:6f:ea:22:25:
44:9d:2a:5b:1b:aa:4d:db:97:32:ec:0b:6c:17:01:94:c0:b2:
c9:04:72:ce:c7:cc:d4:69:64:44:a1:e4:a4:e4:d2:95:3c:55:
59:fd:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:27 2026 by rpki-client