
$ rpki-client -vvf rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
File: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft (raw, json)
Hash identifier: rmQ63V//bgq4eq7x9GUE1JM7nHLNFLhCvAEpWUAk120=
Subject key identifier: D3:5F:C0:1A:C8:25:37:BB:C6:2D:C0:0C:2F:FA:6B:B5:CB:1D:6F:76
Authority key identifier: 3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D
Certificate issuer: /CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D
Certificate serial: 577BF1CC5081B3D412303A35004753D29BA6994D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
Manifest number: 16
Signing time: Wed 25 Mar 2026 11:17:20 +0000
Manifest this update: Wed 25 Mar 2026 11:12:20 +0000
Manifest next update: Thu 26 Mar 2026 14:58:20 +0000
Files and hashes: 1: 323830343a346364303a3a2f33322d313238203d3e20323637333934.roa (hash: HCMSwftiV6KHbBsfvKCGzXC1XeYHSMqJkKiP1AfSuUE=)
2: 34352e3233352e36302e302f32322d3332203d3e20323637333934.roa (hash: oCJUx1Px2xlS32pSsJcbxO3QQMpn/8vImxIQKUEhqMo=)
3: 3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl (hash: LONmm8BRyoIYfZRhW/qBVGFaNsJiXZ5htxpCsBQywwY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl
rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:7b:f1:cc:50:81:b3:d4:12:30:3a:35:00:47:53:d2:9b:a6:99:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AA963244A6A5B3E821B89FAF5E483A306A3E96D
Validity
Not Before: Mar 25 11:12:20 2026 GMT
Not After : Mar 26 14:58:20 2026 GMT
Subject: CN=D35FC01AC82537BBC62DC00C2FFA6BB5CB1D6F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:f7:15:74:1a:4a:16:e5:12:9c:2c:4e:7d:
4d:8c:43:1c:7c:3e:44:8d:2f:1c:ad:73:8d:c2:24:
a1:4e:be:62:1b:4c:b3:aa:5e:24:ee:00:e9:75:e7:
c0:f8:78:a9:11:06:6e:69:cf:45:45:7a:fa:8b:ba:
fb:89:7e:d3:b0:71:b2:dd:44:11:6c:a1:cf:36:6e:
a9:78:50:48:47:3f:d0:54:82:19:0d:8e:56:32:5f:
e2:b0:3c:a4:da:5b:a2:27:cb:00:f3:83:e1:13:8c:
65:41:78:1c:6d:dd:5d:f8:9c:32:2a:ec:ae:b1:1a:
00:d8:d6:5a:c4:18:80:b3:e0:81:48:08:a7:b5:51:
62:57:d7:f2:84:63:26:83:9f:17:45:ea:07:92:4e:
15:56:6b:7e:d8:1a:fb:2c:64:9f:23:51:f9:af:b5:
a1:c6:dc:56:ab:be:9a:5e:a3:90:12:c1:fb:8b:c0:
fe:77:76:72:0a:a0:f4:b8:8e:10:40:79:11:95:35:
34:57:5d:ac:67:c0:27:3b:7a:64:4c:06:6f:d8:d1:
d2:e3:d5:a0:9c:3b:e7:52:62:50:b2:68:9c:c2:79:
c8:f8:eb:af:1e:94:44:72:6e:57:41:fb:dd:b9:bc:
46:9b:30:ea:08:3c:45:ba:7f:c4:c3:45:28:42:de:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:C0:1A:C8:25:37:BB:C6:2D:C0:0C:2F:FA:6B:B5:CB:1D:6F:76
X509v3 Authority Key Identifier:
keyid:3A:A9:63:24:4A:6A:5B:3E:82:1B:89:FA:F5:E4:83:A3:06:A3:E9:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DujprS5kTWhzkGn8KtQzwnP6pfKdjXfvGNcnUnTWXCe/0/3AA963244A6A5B3E821B89FAF5E483A306A3E96D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:a0:3b:c5:c0:e4:7e:4e:1c:9c:c4:db:b5:e6:dd:ea:46:
f8:04:fc:59:33:af:10:75:a5:1f:af:f1:ae:c2:f7:64:48:6e:
7f:ea:6d:dd:80:49:97:ab:7d:ff:35:1a:95:e9:23:c2:58:27:
c0:2b:37:4d:81:e3:5d:6f:d9:ef:eb:96:cb:ee:34:4a:73:d2:
11:f2:48:1d:c8:64:b0:f1:d6:4d:e9:55:79:87:d2:18:05:75:
34:8a:48:5c:3c:71:78:a4:97:6b:dd:57:ed:6f:17:20:88:8d:
05:2b:0d:48:65:3d:d8:db:47:03:09:ad:f1:7b:51:e5:d1:f5:
59:ff:18:a1:29:4c:8e:bc:7a:96:8b:3b:81:21:6d:04:c2:1c:
f3:83:f1:ab:9c:c6:55:c2:76:2b:7b:e1:95:5a:b8:57:4c:59:
0e:2e:08:2a:65:cf:fb:5f:46:a3:e8:a6:9e:ce:a6:2a:8e:f7:
d2:ce:59:95:de:fe:bd:69:20:85:76:9b:c2:dc:1f:8a:12:71:
89:41:8a:a9:b6:b4:b3:61:be:0b:6e:b9:ed:05:45:40:8c:8d:
8f:59:c9:0f:11:97:0b:7b:eb:12:5a:2b:42:b7:b5:cc:c4:3c:
71:a6:5f:9b:45:bd:65:26:8c:28:12:b0:af:b4:ff:2c:fd:84:
f6:12:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:28 2026 by rpki-client