
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
File: D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft (raw, json)
Hash identifier: K3Rh+ey4R3C5AtIOe22BUuV6+Bjh9eT/W0nZkDlKs9M=
Subject key identifier: 3B:A3:CC:9C:14:D3:E4:C7:E8:BD:37:38:AB:66:C7:FC:F2:F0:A5:58
Authority key identifier: D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96
Certificate issuer: /CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
Certificate serial: 704BA382049426EDA8FE4A51E824F06F1A45BF62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
Manifest number: 0109
Signing time: Thu 26 Mar 2026 05:40:45 +0000
Manifest this update: Thu 26 Mar 2026 05:35:45 +0000
Manifest next update: Fri 27 Mar 2026 09:39:45 +0000
Files and hashes: 1: 323830343a376434633a3a2f33322d3430203d3e20323731353532.roa (hash: f+bA54ZvwvVgVSPvClxP3LCYVr08a+q/y2ITfpwob68=)
2: 3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa (hash: DAsPXz3A80BnXBgtlMV/UqMhkaUVOx80TZ4k+723/xU=)
3: D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl (hash: MY00my9kw/fYGPEH2aRUFh4DJcrFoeU+nC1uPOOVjqQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl
rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 09:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4b:a3:82:04:94:26:ed:a8:fe:4a:51:e8:24:f0:6f:1a:45:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
Validity
Not Before: Mar 26 05:35:45 2026 GMT
Not After : Mar 27 09:39:45 2026 GMT
Subject: CN=3BA3CC9C14D3E4C7E8BD3738AB66C7FCF2F0A558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:61:8a:7a:cb:c3:1b:24:08:41:ab:ac:0e:
af:d7:97:9b:2d:43:82:d8:81:02:42:1d:47:21:96:
47:62:e6:95:95:18:be:dc:89:9e:f7:ea:7d:c8:a2:
55:06:45:f7:af:d3:a0:36:c1:3f:82:07:bb:89:f4:
6c:28:bc:43:04:8f:a4:bf:7a:d1:83:bd:86:3c:3b:
f2:86:13:b9:bc:fd:9b:66:bd:1f:6f:b5:85:1a:b9:
3f:38:0c:40:f5:8e:67:19:47:60:76:75:48:bc:63:
aa:b8:07:aa:a1:91:96:41:e4:cd:00:42:56:14:5d:
7c:de:b8:f1:06:30:28:00:5f:cc:62:55:d4:6a:3c:
fe:b2:f4:b3:0e:a7:b2:3e:ff:5f:55:c7:d2:e6:5c:
db:ce:1f:a3:cc:28:61:82:20:a5:d5:1e:aa:8d:d6:
f6:ec:ef:99:fa:5c:0d:99:6e:20:97:9a:fe:5b:de:
17:15:53:ae:31:31:94:d2:83:85:29:ca:77:66:60:
5e:de:6b:ac:7f:3e:ef:63:e1:0d:b4:e5:d9:d8:85:
88:70:f2:2c:aa:8f:12:cb:8d:6b:6a:e6:e9:dd:4f:
9c:1f:c1:ca:01:86:71:a0:96:f4:f8:8c:87:b7:bd:
07:03:53:e8:f5:60:22:24:8f:59:f1:48:02:3a:d2:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:CC:9C:14:D3:E4:C7:E8:BD:37:38:AB:66:C7:FC:F2:F0:A5:58
X509v3 Authority Key Identifier:
keyid:D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:90:2b:45:85:9a:bd:98:61:95:01:09:ec:fe:15:02:6f:a1:
4a:74:6e:b4:95:46:d4:80:39:09:7d:1e:36:09:06:8a:9f:77:
3c:b7:b5:75:b5:ec:82:93:08:4f:9b:47:9f:28:d5:83:65:53:
2c:bb:a1:b9:1a:e0:29:b8:c0:73:0c:70:b5:e4:e0:03:3e:ce:
05:1a:37:a9:14:fd:50:db:61:eb:7e:87:f1:b3:21:ab:7b:f4:
c4:af:e0:6b:53:2a:ec:ab:b7:66:f9:c9:5b:2d:7e:33:76:c2:
d0:3c:89:4e:4d:08:d0:0f:9b:80:da:0b:3f:d4:7c:bb:84:e1:
b7:7c:27:3f:3c:74:0a:ee:60:ed:93:4e:52:96:0c:c7:73:9f:
bb:5c:9d:2a:68:ae:6d:b9:c6:53:b0:e4:e3:d4:f5:94:87:38:
3c:8b:62:56:36:8a:46:d5:cc:bd:09:41:87:d5:c9:23:93:9c:
ba:71:63:42:3b:f3:1f:b7:8a:d2:8b:40:6c:d0:33:f0:d0:48:
c6:af:40:bf:6e:21:4a:35:29:b5:95:63:4b:80:d3:3b:2a:52:
f6:dc:a5:0d:6b:3d:cd:e8:22:e0:f2:65:c6:58:87:31:a3:2a:
54:ab:75:bf:42:0e:da:1f:c0:5e:e3:4e:18:9e:ef:08:7b:97:
47:50:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:15 2026 by rpki-client