
$ rpki-client -vvf rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.mft
File: 344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.mft (raw, json)
Hash identifier: GpHGHyfoJm4kLbatlI6g+AYy8WapuhAKRmDRyDslraY=
Subject key identifier: CE:10:0D:CD:1D:FB:47:95:54:FF:99:1F:B7:01:78:03:D3:4A:69:A0
Authority key identifier: 34:4C:BA:FD:47:9E:EC:6C:E6:C9:1F:22:5B:D8:23:79:49:D4:CE:E9
Certificate issuer: /CN=344CBAFD479EEC6CE6C91F225BD8237949D4CEE9
Certificate serial: 670CD9DEB794B606B98E3B1BD390F9D4279D74F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.mft
Manifest number: B2
Signing time: Thu 23 Jul 2026 06:14:43 +0000
Manifest this update: Thu 23 Jul 2026 06:09:43 +0000
Manifest next update: Fri 24 Jul 2026 07:40:43 +0000
Files and hashes: 1: 344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.crl (hash: XC2aRbQ0sztpreS1nZGztcHUxBSfm34LSkWiNbIVX4k=)
2: 3138362e302e3135302e302f32342d3234203d3e20323730353036.roa (hash: 1m1XBJJg6MJ/miVH5I+RZcw1bs5p+ISegs0fUtBX+Ns=)
3: 3138362e302e3134382e302f32332d3233203d3e20323730353036.roa (hash: S3vDVpwp1pQ69FFZh7x+LteQQhFLFMrGd8LJOo0cAe8=)
4: 3138362e302e3135312e302f32342d3234203d3e20323730353036.roa (hash: 4Hv6ZpTj/mbNYBJMvMo+ug4U4UeVF63vzbkYa/DQWCQ=)
5: 323830343a366430303a3a2f33322d3334203d3e20323730353036.roa (hash: LwlpDhbDxwJLn/AiRNJw8uOWX6znsqVul/wqpwXGddc=)
6: 3138362e302e3134382e302f32342d3234203d3e20323730353036.roa (hash: 1s2zrRGKHqHyjgTxLfnw358U4kWcwQYnOfJWVvBcm3I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.crl
rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 07:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0c:d9:de:b7:94:b6:06:b9:8e:3b:1b:d3:90:f9:d4:27:9d:74:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344CBAFD479EEC6CE6C91F225BD8237949D4CEE9
Validity
Not Before: Jul 23 06:09:43 2026 GMT
Not After : Jul 24 07:40:43 2026 GMT
Subject: CN=CE100DCD1DFB479554FF991FB7017803D34A69A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:ae:f2:e8:47:21:31:65:55:6d:d1:09:da:
ee:c9:2e:24:7c:e0:83:87:c0:49:56:d5:2f:79:5e:
a5:4f:1c:62:a7:0b:5d:0d:0e:75:08:e1:83:43:18:
d1:2f:83:c8:5d:44:73:33:aa:02:c2:e0:cf:00:df:
c6:db:07:63:52:bc:8b:f4:d6:14:e7:2b:f4:f7:1e:
9d:c4:47:00:36:46:07:1d:60:76:ec:57:e6:2d:b5:
a0:2b:52:70:fb:1c:5d:d1:d6:d3:39:8e:a7:f2:6c:
c7:11:9d:d8:5b:4b:b6:57:19:19:b9:71:d2:45:10:
3e:61:e1:16:bf:6d:91:68:54:7f:b9:80:e1:9d:47:
c6:ea:5c:a6:c8:45:62:b0:1e:74:f6:76:a2:8a:d9:
5a:b7:d3:e6:c6:6d:4b:02:e4:a9:b0:67:4b:c3:90:
cc:5b:3a:cd:0d:0f:3e:22:cb:31:7f:c4:67:0f:c3:
a0:93:e8:5d:aa:80:17:0f:d2:5b:9f:6e:f9:3c:0d:
5d:b7:e8:25:48:2d:b1:b6:e6:5c:ef:10:2a:49:5a:
1d:81:bf:1e:27:e0:8d:21:35:43:d7:19:48:76:10:
cc:2b:a1:89:22:ce:29:ad:d3:a0:87:fa:b2:2e:48:
c1:40:af:70:7b:81:2f:b1:f4:92:14:9f:89:0d:d6:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:0D:CD:1D:FB:47:95:54:FF:99:1F:B7:01:78:03:D3:4A:69:A0
X509v3 Authority Key Identifier:
keyid:34:4C:BA:FD:47:9E:EC:6C:E6:C9:1F:22:5B:D8:23:79:49:D4:CE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:9c:3f:d7:45:c3:74:59:83:76:9b:f5:53:df:14:9d:7f:
e7:20:13:9e:fb:f1:5b:a6:2f:bd:56:79:1b:15:a6:8e:5f:e8:
52:d6:af:f4:89:16:31:88:a1:a6:ed:f1:41:3b:70:41:e7:3b:
68:c8:ca:ce:4e:13:38:08:b5:f9:46:ff:3d:4e:56:9d:e0:b5:
40:3d:d0:9e:41:b4:2f:f7:47:b7:97:19:b5:41:67:60:53:34:
8d:da:d9:97:da:77:53:b1:33:84:18:cc:ce:e5:57:3a:c7:45:
7a:5f:8a:15:be:ce:9d:3a:91:ab:07:59:91:d3:47:a1:33:4f:
32:27:d4:71:dd:47:3b:69:a4:53:87:60:74:72:fb:4f:13:5b:
78:f9:5b:51:29:de:61:80:7d:91:2c:d3:40:b7:23:69:fa:26:
e6:9b:59:cf:36:53:85:95:34:ec:4e:1c:e2:60:4f:ba:aa:01:
b9:ef:d1:88:64:7d:ae:b3:68:33:1c:dd:47:bd:17:e8:21:a9:
00:46:c1:39:65:39:c5:0f:63:f5:0e:72:3b:f8:9c:b0:5b:30:
5b:4f:97:59:b2:79:6d:fe:21:bc:f9:f6:37:0e:5e:a4:d2:c2:
b8:49:1c:15:b1:16:54:bf:b7:cd:1c:75:82:22:d9:90:f7:b3:
30:df:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:34 2026 by rpki-client