
$ rpki-client -vvf rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
File: 843E46AA209E75F9302824E3938E138395B4B3A9.mft (raw, json)
Hash identifier: IwOzI1Pwb5/epSv6UG3mJsckFFTaeYukaPzE9VAGEK4=
Subject key identifier: 9A:50:EE:32:EC:4D:9A:4E:A5:A3:56:98:49:E8:2C:04:F5:05:E5:E2
Authority key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
Certificate issuer: /CN=843E46AA209E75F9302824E3938E138395B4B3A9
Certificate serial: 3DC3981A30983262032E1CE7E0EB3E3DDB7E823A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
Manifest number: 022A
Signing time: Thu 26 Mar 2026 01:38:38 +0000
Manifest this update: Thu 26 Mar 2026 01:33:38 +0000
Manifest next update: Fri 27 Mar 2026 03:27:38 +0000
Files and hashes: 1: 323830343a326663633a3a2f33322d313238203d3e20323634393132.roa (hash: PjE3SBWMgkG+BEwoUARX94C7TZj3lE6wWpKn9fgEvws=)
2: 843E46AA209E75F9302824E3938E138395B4B3A9.crl (hash: DrmDiJjH/b+XHphho6LeM3PPndhmzRGXTaWeEOR5YPY=)
3: 3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa (hash: qlcyB7/XRBRtPh4jauaGm3CMcWAxyzA/DC3hsN5yByU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 03:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c3:98:1a:30:98:32:62:03:2e:1c:e7:e0:eb:3e:3d:db:7e:82:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843E46AA209E75F9302824E3938E138395B4B3A9
Validity
Not Before: Mar 26 01:33:38 2026 GMT
Not After : Mar 27 03:27:38 2026 GMT
Subject: CN=9A50EE32EC4D9A4EA5A3569849E82C04F505E5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:5f:d9:d4:1e:55:c0:20:85:54:dd:22:01:
d9:c9:b7:0c:6d:34:e5:bc:8e:41:b0:36:8b:59:c9:
9c:cc:36:e0:51:17:35:f4:df:ec:bf:2f:6b:42:f8:
c3:ca:e8:d4:e6:d4:ac:16:e2:b1:78:19:17:09:bc:
7f:a6:31:8f:52:4c:5b:55:5e:4b:39:93:6c:36:29:
fa:fe:aa:7d:22:60:79:64:7a:13:cc:2a:2d:55:88:
6b:0d:76:01:88:96:6c:6e:92:75:6a:c7:df:62:69:
c9:70:19:e1:ea:40:b6:0c:32:50:53:78:0e:6d:8f:
79:69:97:fb:c8:42:11:d7:91:d7:8d:3c:de:f2:cf:
d0:8e:65:55:bc:38:5f:cd:7a:1e:a1:3a:bd:62:28:
63:ea:0d:02:1f:f7:db:f8:91:db:ec:75:47:04:24:
fb:82:60:22:5f:b9:3b:b4:44:92:cf:f7:39:7f:0a:
cd:97:f2:08:4d:aa:d3:f6:ea:64:7c:8b:d6:16:d4:
2d:13:d4:34:a7:83:78:7e:7d:34:6f:d4:fa:fa:71:
4d:58:18:52:fc:29:be:42:ef:f7:b3:50:15:cf:37:
ae:13:d0:26:d5:19:78:11:13:60:19:20:62:34:6d:
ac:a4:33:a5:ba:d0:40:93:63:4e:41:fb:99:16:da:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:EE:32:EC:4D:9A:4E:A5:A3:56:98:49:E8:2C:04:F5:05:E5:E2
X509v3 Authority Key Identifier:
keyid:84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:52:55:6b:61:98:80:45:bd:6e:58:de:82:7e:ec:e4:73:e0:
35:bd:1e:57:78:10:41:c9:12:33:f5:76:3f:e7:1b:46:3e:23:
5e:9c:52:36:99:3b:de:4d:20:db:ac:39:40:b2:0e:10:09:18:
31:5f:59:9e:0b:8c:d3:51:c3:3e:46:60:96:4f:f5:ce:b3:07:
c1:cd:9d:20:df:7e:df:24:1e:eb:94:d7:21:99:d4:e3:c5:73:
2c:d6:63:4f:16:36:37:0e:51:80:3b:c1:b4:59:7c:45:3a:b6:
88:99:d7:49:58:b8:25:e8:ae:53:45:40:7b:fb:fe:90:1c:25:
b6:b8:f2:fc:4e:79:21:a5:dd:d9:d9:1a:33:7b:65:a8:fb:b3:
e1:84:c5:a5:24:c5:76:f5:66:ad:10:df:34:de:96:1e:cd:4f:
ab:8a:b7:fc:d2:02:93:a1:78:2c:47:c4:33:3c:fa:2c:1f:f5:
b5:31:ce:1d:fa:bd:d5:f2:6d:30:45:a5:bf:c6:d8:ab:05:f9:
78:e4:33:1a:49:c1:5c:d9:06:a6:14:ea:11:0b:cb:47:1b:ef:
1d:a4:80:77:97:53:7b:f3:b0:a5:c9:c7:89:74:aa:2b:77:96:
5c:ed:9c:41:fc:fa:98:b7:7f:09:d9:36:c4:41:f3:3f:68:4f:
e0:1b:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:03 2026 by rpki-client