
$ rpki-client -vvf rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
File: 4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft (raw, json)
Hash identifier: 2/1uPL5kNo4GlkGCQLtNXo1ZqC3PwcW/oqlZh5bC90I=
Subject key identifier: 52:A7:DE:F9:F9:17:CD:1D:FF:E9:9E:7E:DF:52:D9:B3:C4:18:70:7A
Authority key identifier: 4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1
Certificate issuer: /CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
Certificate serial: 514DE9DC944153BBED152FE2B9CA74927A39D2CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
Manifest number: 033D
Signing time: Wed 25 Mar 2026 20:49:48 +0000
Manifest this update: Wed 25 Mar 2026 20:44:47 +0000
Manifest next update: Thu 26 Mar 2026 22:28:47 +0000
Files and hashes: 1: 34352e3136322e3137362e302f32322d3332203d3e20323638353337.roa (hash: HXJIleNIPQPxFJnqRJKDRqCUCguoqkaaJxQ1JKXW0G4=)
2: 323830343a353262383a3a2f33322d313238203d3e20323638353337.roa (hash: bmYIfXVGg8WO5ZV1/IP5lLo95wIFqGQQo7iQoilTy6U=)
3: 4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl (hash: zQMjb1cqhOWajnEO9WwdzGjmokCEaGPuInZ+rCocMEk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl
rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 22:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4d:e9:dc:94:41:53:bb:ed:15:2f:e2:b9:ca:74:92:7a:39:d2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
Validity
Not Before: Mar 25 20:44:47 2026 GMT
Not After : Mar 26 22:28:47 2026 GMT
Subject: CN=52A7DEF9F917CD1DFFE99E7EDF52D9B3C418707A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:7b:7e:e1:bf:48:8d:a8:7a:7c:0c:e0:40:
06:98:b0:25:37:f0:34:c8:de:52:41:ac:7a:16:71:
82:ff:24:ab:49:b5:43:c9:cd:ec:84:c3:cc:81:d4:
77:98:73:76:9f:85:41:8c:2e:a1:58:74:ff:18:0f:
4c:d8:87:68:b4:a7:52:b9:e6:6d:b9:ac:97:66:64:
4d:20:bb:9a:45:ee:c3:19:bb:1d:b4:7a:59:8a:16:
e0:6a:ae:4d:24:71:21:59:f0:97:90:cc:c9:b7:ac:
31:1e:31:f1:d5:c9:e4:8b:89:cd:75:7d:9d:1b:7e:
e7:2c:a1:0e:87:64:de:36:86:21:f8:af:3c:55:7f:
3b:c8:67:53:90:49:b5:ce:35:72:33:70:46:06:d2:
86:aa:a3:e0:cf:4d:2a:8c:af:8b:61:60:36:5d:15:
a3:16:97:95:09:de:cb:37:dd:e8:a4:42:87:bf:61:
bd:26:3a:f2:d8:1b:9f:5b:14:1f:47:db:a9:8c:32:
46:ce:d2:0c:e0:3b:fc:2c:1b:1b:b3:30:2b:f1:76:
38:a2:0f:30:c6:cc:63:00:54:8e:4d:88:4c:ac:87:
36:a5:86:49:43:77:7f:cd:1d:ae:89:d7:9b:af:ab:
c0:2b:79:f0:43:8e:3d:cd:4c:f9:96:3e:18:6f:1a:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A7:DE:F9:F9:17:CD:1D:FF:E9:9E:7E:DF:52:D9:B3:C4:18:70:7A
X509v3 Authority Key Identifier:
keyid:4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:21:cd:27:79:e4:02:3b:cc:13:36:b7:48:fb:40:23:d9:25:
33:20:92:ae:d3:1d:bb:d9:9d:92:4d:a5:6c:6f:e0:bc:5a:10:
23:5e:d5:3a:f6:9f:5c:25:2b:55:47:9f:02:8a:be:eb:3f:36:
58:a7:56:31:e1:87:fb:58:3d:68:f3:40:a4:f2:ff:e1:24:14:
67:39:f9:84:d9:8b:59:0c:89:d8:f7:3a:bf:d7:26:08:b4:00:
0c:c0:33:5c:01:2f:0b:bd:34:9e:03:17:e4:85:35:78:cf:91:
83:78:c4:4b:3f:2f:d0:84:a0:8e:51:44:e5:de:aa:a5:bc:6b:
ef:b9:ab:f0:93:92:31:0b:44:54:46:d1:2d:a7:40:b1:ce:cc:
40:7c:28:f1:a0:94:e9:f4:49:0d:ab:ea:63:47:1d:33:e4:67:
b3:f4:19:59:17:60:39:81:89:38:08:4b:2b:fd:08:27:2c:7b:
01:00:32:5f:6e:7a:a0:17:89:fd:1b:6f:a0:b4:92:4f:46:4d:
e5:7f:cb:3a:dc:77:55:4d:d3:17:af:d8:1b:5b:86:59:cb:97:
ab:45:da:68:06:ae:ee:c6:08:f8:46:9e:54:f9:36:34:c0:9a:
8d:bd:99:7b:8f:11:74:79:50:8a:64:37:38:1b:3a:9e:07:ef:
d5:f6:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:45 2026 by rpki-client