
$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft
File: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft (raw, json)
Hash identifier: A0wxwuSM/hgJALikrXfJxehyKAChaZdj9Gy/0C/BjWg=
Subject key identifier: 9F:87:91:C4:E6:53:B6:E7:8D:9D:15:9A:D8:A4:7E:3F:90:F5:1A:C9
Authority key identifier: 12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8
Certificate issuer: /CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8
Certificate serial: 37C7D6D861F37F417CFC0233FE4CD30159F7AC91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft
Manifest number: 012F
Signing time: Thu 26 Mar 2026 13:49:50 +0000
Manifest this update: Thu 26 Mar 2026 13:44:50 +0000
Manifest next update: Fri 27 Mar 2026 16:24:50 +0000
Files and hashes: 1: 323830343a346536343a3a2f33322d313238203d3e20323638323538.roa (hash: cIPRrBZKrOj9lWuWyZWYEmXaWAtDm4pOx+RC7zQlZq4=)
2: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl (hash: e5ZOY2eb4X3hLZKphDFHjHSroJO9MfxrdsH+Q18mFos=)
3: 34352e3233372e382e302f32322d3332203d3e20323638323538.roa (hash: gT6g9/y/7vUl+2G7uUJcrg2sfzhdljWwUSKvbqMYsLs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl
rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c7:d6:d8:61:f3:7f:41:7c:fc:02:33:fe:4c:d3:01:59:f7:ac:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8
Validity
Not Before: Mar 26 13:44:50 2026 GMT
Not After : Mar 27 16:24:50 2026 GMT
Subject: CN=9F8791C4E653B6E78D9D159AD8A47E3F90F51AC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:9d:15:2b:a8:30:a9:d1:2b:d7:21:3b:b2:
da:2b:ff:df:f4:b6:dc:21:ee:aa:29:cd:a6:6b:df:
d6:33:0f:6f:72:2f:4e:ee:34:40:6c:e9:99:7a:64:
75:23:c1:2f:f2:52:45:e8:e0:9b:5e:a5:d6:8f:38:
96:c9:bb:19:7c:28:a8:aa:bf:1c:2a:28:6f:48:9f:
59:b3:08:2e:84:d6:dc:5b:2d:3a:7f:81:6a:16:f4:
91:e3:76:34:87:45:77:20:66:52:07:69:e1:e2:a8:
56:ea:2c:a3:e4:fb:31:7b:b1:3e:3d:fe:5f:15:fd:
9b:dd:25:4e:25:52:74:ae:7b:c3:6a:8d:7b:99:89:
01:eb:93:26:35:65:81:ba:34:09:46:20:09:64:6a:
f0:52:22:03:6f:94:d5:55:af:c1:98:c7:44:2d:f6:
01:ae:7a:bb:8b:d5:05:77:d6:46:b1:e0:da:68:ea:
c3:c4:1b:df:67:3e:d7:99:40:3e:54:fe:75:36:79:
90:a3:40:2a:64:96:30:f9:99:ca:90:d8:2d:f1:23:
62:fb:01:71:84:27:13:5f:57:93:aa:25:06:a7:d6:
91:ea:c9:9b:26:76:6c:f8:c1:55:4b:e5:d0:15:72:
6e:4a:35:04:df:56:cf:77:02:b6:62:77:45:3a:26:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:91:C4:E6:53:B6:E7:8D:9D:15:9A:D8:A4:7E:3F:90:F5:1A:C9
X509v3 Authority Key Identifier:
keyid:12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:26:64:ca:f3:32:8b:99:2e:e3:bd:c8:24:79:3b:71:50:cb:
8a:b3:0a:56:b9:c4:81:71:00:12:52:69:d7:7e:93:f2:2d:f3:
f5:c0:6b:87:5c:02:7a:bc:aa:b8:1a:6e:ff:01:70:fc:63:56:
b4:39:94:f6:af:79:43:06:78:f5:48:2c:c1:aa:a4:ed:03:0f:
f6:18:34:1f:33:95:cf:f2:f4:a0:f4:4b:f0:c3:7e:35:7c:bd:
29:c1:7c:13:47:91:75:39:ff:72:9b:50:90:a6:d3:b5:f8:aa:
ad:74:f8:1d:42:07:eb:21:f8:fb:d3:4c:ce:18:5e:52:4c:26:
ea:38:22:2d:9a:9a:6c:50:31:72:20:2c:5f:43:bc:77:44:70:
2f:6e:c1:4c:03:ed:15:4d:66:38:34:19:4b:c0:f9:ff:92:1d:
2a:7e:1c:f5:84:98:09:fd:52:59:91:0c:5b:bd:6a:67:d5:fa:
dc:c5:b3:74:dd:5a:af:3b:4a:09:37:83:d9:59:de:a4:7a:ec:
2e:72:b5:ec:96:0c:96:aa:c6:28:0b:ab:5a:20:44:a0:f7:d8:
de:5b:67:2f:f6:19:8d:02:88:61:15:c5:75:89:55:65:7f:8d:
26:17:b1:c7:1d:98:ce:7d:1a:b8:b6:f2:a6:3f:72:fc:e3:3b:
47:bd:32:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN8fW2GHzf0F8/AIz/kzTAVn3rJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4NjQ0RUNFQjMwODY4RjdEREQ4QjUwQkRFM0NEMEE1
QTNBMDZCODAeFw0yNjAzMjYxMzQ0NTBaFw0yNjAzMjcxNjI0NTBaMDMxMTAvBgNV
BAMTKDlGODc5MUM0RTY1M0I2RTc4RDlEMTU5QUQ4QTQ3RTNGOTBGNTFBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP8Z0VK6gwqdEr1yE7stor/9/0
ttwh7qopzaZr39YzD29yL07uNEBs6Zl6ZHUjwS/yUkXo4JtepdaPOJbJuxl8KKiq
vxwqKG9In1mzCC6E1txbLTp/gWoW9JHjdjSHRXcgZlIHaeHiqFbqLKPk+zF7sT49
/l8V/ZvdJU4lUnSue8NqjXuZiQHrkyY1ZYG6NAlGIAlkavBSIgNvlNVVr8GYx0Qt
9gGueruL1QV31kax4Npo6sPEG99nPteZQD5U/nU2eZCjQCpkljD5mcqQ2C3xI2L7
AXGEJxNfV5OqJQan1pHqyZsmdmz4wVVL5dAVcm5KNQTfVs93ArZid0U6JtE7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn4eRxOZTtueNnRWa2KR+P5D1GskwHwYDVR0j
BBgwFoAUEoZE7Oswho993YtQvePNClo6BrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1m
QlQvMC8xMjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyODY0NEVDRUIzMDg2OEY3
REREOEI1MEJERTNDRDBBNUEzQTA2QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMC8x
Mjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbiZkyvMyi5ku473IJHk7cVDLirMKVrnEgXEAElJp136T8i3z9cBrh1wCeryq
uBpu/wFw/GNWtDmU9q95QwZ49Ugswaqk7QMP9hg0HzOVz/L0oPRL8MN+NXy9KcF8
E0eRdTn/cptQkKbTtfiqrXT4HUIH6yH4+9NMzhheUkwm6jgiLZqabFAxciAsX0O8
d0RwL27BTAPtFU1mODQZS8D5/5IdKn4c9YSYCf1SWZEMW71qZ9X63MWzdN1arztK
CTeD2VnepHrsLnK17JYMlqrGKAurWiBEoPfY3ltnL/YZjQKIYRXFdYlVZX+NJhex
xx2Yzn0auLbypj9y/OM7R70yKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:35 2026 by rpki-client