
$ rpki-client -vvf rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/384E35249745487DADF56806D3C7544AED861CC2.mft
File: 384E35249745487DADF56806D3C7544AED861CC2.mft (raw, json)
Hash identifier: YB31bYDgUZd0PdEnJFCsmARaY4XFE0NpQPPMnLKIKdA=
Subject key identifier: C8:DF:44:1A:C3:9C:C8:D2:60:80:46:B6:F9:32:87:AC:08:4E:49:33
Authority key identifier: 38:4E:35:24:97:45:48:7D:AD:F5:68:06:D3:C7:54:4A:ED:86:1C:C2
Certificate issuer: /CN=384E35249745487DADF56806D3C7544AED861CC2
Certificate serial: 23A2E8D61D25474F4C022F57AD13ABFF4CF24426
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384E35249745487DADF56806D3C7544AED861CC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/384E35249745487DADF56806D3C7544AED861CC2.mft
Manifest number: A4
Signing time: Thu 26 Mar 2026 06:13:47 +0000
Manifest this update: Thu 26 Mar 2026 06:08:47 +0000
Manifest next update: Fri 27 Mar 2026 07:31:47 +0000
Files and hashes: 1: 323830343a343039383a3a2f33322d3438203d3e20323635393639.roa (hash: JT9M2o6U0pUc46gkFIafaBuzvd3WBRyvSc/XsP98n00=)
2: 384E35249745487DADF56806D3C7544AED861CC2.crl (hash: iWEEQn689i5avCc5GHO7dqwphR5Dtowg3+xprzRh8dk=)
3: 3133312e3139362e39362e302f32322d3234203d3e20323635393639.roa (hash: +wuUQBLMt3QPLIzZ87VGp9RCOnjWkR39aG3c9tLFNt0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/384E35249745487DADF56806D3C7544AED861CC2.crl
rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/384E35249745487DADF56806D3C7544AED861CC2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384E35249745487DADF56806D3C7544AED861CC2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 07:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a2:e8:d6:1d:25:47:4f:4c:02:2f:57:ad:13:ab:ff:4c:f2:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384E35249745487DADF56806D3C7544AED861CC2
Validity
Not Before: Mar 26 06:08:47 2026 GMT
Not After : Mar 27 07:31:47 2026 GMT
Subject: CN=C8DF441AC39CC8D2608046B6F93287AC084E4933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:a1:2c:0b:fc:79:1c:c4:8d:c0:7e:bb:3b:
6a:1b:5a:ce:d6:10:59:1f:92:ff:21:8a:16:ce:c5:
08:f6:48:d1:0b:e0:c4:dc:8d:61:4e:f0:46:64:8c:
1b:e8:75:06:50:65:e2:6d:63:c7:87:e8:f8:e7:25:
6c:fb:cd:01:eb:a7:7b:3a:dd:a8:1a:51:2b:ad:8b:
cd:d3:c3:44:a7:80:b0:bc:31:28:c5:fa:93:69:fc:
63:f7:5d:dc:43:34:65:49:4d:31:50:6d:a1:f3:72:
d7:b6:16:47:1f:dc:47:84:1a:8d:98:3c:bd:c4:3c:
59:66:e6:c1:fc:69:fc:81:27:0f:e7:e7:c5:e5:38:
60:5f:d2:02:5d:40:bd:32:10:c8:a1:02:c5:11:0c:
e7:ad:4f:a0:b4:c0:d4:fd:c1:26:ee:06:b9:c6:19:
58:67:bd:6a:03:92:8a:0d:d8:c3:18:05:35:da:43:
2e:70:44:c3:0f:66:3f:ff:e7:1b:9a:a5:c8:0c:af:
32:e9:43:11:ad:54:98:c9:25:78:62:e5:6b:cb:ee:
99:f5:ad:a9:48:9f:94:b7:5c:da:cc:14:6a:c7:d8:
a9:5e:54:ac:79:4f:28:46:de:9c:00:dd:1c:a9:cb:
77:b8:08:47:11:eb:67:a0:08:dd:e1:8f:08:bd:f3:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:44:1A:C3:9C:C8:D2:60:80:46:B6:F9:32:87:AC:08:4E:49:33
X509v3 Authority Key Identifier:
keyid:38:4E:35:24:97:45:48:7D:AD:F5:68:06:D3:C7:54:4A:ED:86:1C:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/384E35249745487DADF56806D3C7544AED861CC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384E35249745487DADF56806D3C7544AED861CC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B7TEchseq2qgCBeak6HGzoHUqtVxAzUJCmcMoxmZDww/0/384E35249745487DADF56806D3C7544AED861CC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:70:18:02:c1:34:fa:9d:e7:0d:c8:47:a3:9c:e0:3b:92:33:
3a:4a:ba:61:02:03:d6:c7:d9:34:aa:98:3a:68:39:98:fa:f4:
b5:24:9b:fe:99:dd:32:cd:a6:4b:69:56:36:5c:98:2c:33:95:
c3:b6:37:92:a7:9d:99:45:6e:9a:0a:a9:93:69:8f:06:a7:d7:
a9:05:78:28:8a:13:67:52:b6:c1:7d:f3:6b:e6:84:c1:6d:12:
63:8f:87:56:51:6d:b1:15:b0:d6:ac:ad:a8:ef:61:c9:a7:e6:
c9:81:c7:d9:a4:d9:92:ab:a5:c7:25:ea:d4:b7:32:d3:ed:66:
ac:34:03:ca:57:34:e8:ec:2c:9c:f4:fc:c2:54:1d:09:55:6d:
21:a6:c5:64:56:a9:09:96:23:84:a8:2f:40:a1:c2:69:7e:da:
d7:83:be:cd:c8:44:36:4a:7c:e5:11:95:4e:12:db:c7:a7:20:
77:6b:89:21:b0:f2:e0:0d:ff:b7:94:01:57:31:0d:0a:a7:44:
c3:bf:ab:4b:fa:bf:68:28:98:aa:b4:3a:ae:72:ae:ca:59:41:
22:1b:7e:5c:c5:86:0b:8d:1c:c3:76:a3:8e:c1:2b:35:a5:43:
61:2d:de:d9:f9:85:09:ad:c8:b8:99:4d:af:a0:03:46:9f:70:
04:8d:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:18 2026 by rpki-client