
$ rpki-client -vvf rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft
File: 2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft (raw, json)
Hash identifier: 2a52h3n4ijD6sT7HWVd7+lILtE6vZsX18+QSRTO1eB4=
Subject key identifier: 4E:FE:FF:06:45:BD:5A:27:ED:CA:FF:B4:C0:67:17:05:1F:B6:38:4E
Authority key identifier: 24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8
Certificate issuer: /CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8
Certificate serial: 7958986A47D411FE9C65DBE488D86E139EA48603
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft
Manifest number: A4
Signing time: Wed 25 Mar 2026 15:18:33 +0000
Manifest this update: Wed 25 Mar 2026 15:13:33 +0000
Manifest next update: Thu 26 Mar 2026 17:48:33 +0000
Files and hashes: 1: 323830343a3130633a3a2f33322d3332203d3e203238313434.roa (hash: vou9QmMUWVF+uz2a15z6yClPTe9mXQTjWIa5yxxl/5E=)
2: 2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl (hash: LMhzhXU1t9ERh0V+G7EyvsJM7RIHivLPwRkDD2l+xYU=)
3: 3138372e34392e3131322e302f32302d3234203d3e203238313434.roa (hash: zOdwAvhCdUNMrj4YgUVXLCm1Z7FltcWf8NCwDo63FaQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl
rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 17:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:58:98:6a:47:d4:11:fe:9c:65:db:e4:88:d8:6e:13:9e:a4:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8
Validity
Not Before: Mar 25 15:13:33 2026 GMT
Not After : Mar 26 17:48:33 2026 GMT
Subject: CN=4EFEFF0645BD5A27EDCAFFB4C06717051FB6384E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:ef:1e:5d:e3:55:62:de:4e:17:a8:48:b9:
9a:e4:c7:b3:cc:37:6b:43:6a:f6:dc:a3:6e:66:2c:
8f:2b:27:5b:97:aa:cd:ae:02:b4:5f:cd:63:4d:a6:
a1:2f:28:c6:02:ac:61:94:37:d7:47:dc:9e:aa:a1:
e6:38:83:b4:a4:8d:fc:2c:67:dc:bf:88:c4:1b:5f:
c8:fc:6a:15:ac:51:04:16:6c:21:ec:27:cb:f1:c9:
17:b0:58:ff:14:0d:c0:8d:1d:63:81:36:0f:1a:dc:
ea:78:14:99:61:24:69:e4:04:f1:79:c8:bd:74:bf:
8b:d5:0b:a6:88:bd:e2:05:5b:fe:79:fc:a7:5e:01:
29:e9:29:63:a8:bb:e1:0f:89:75:ad:c7:42:a0:87:
1b:88:ad:ec:d8:f2:f7:7f:4d:ef:92:16:78:a8:c8:
8a:49:d7:4a:b6:ff:af:97:fd:cd:3d:ef:f7:e1:92:
a1:69:62:0f:f8:3b:e9:d0:4f:b0:57:db:07:cd:6d:
5a:6b:22:70:d5:74:8c:5c:e5:68:46:05:8b:21:42:
81:2f:a7:7d:70:88:ea:41:8a:51:65:4a:b4:6b:93:
6e:79:52:48:a6:0e:20:35:a5:26:05:b1:6e:4a:80:
b1:b6:c6:78:fa:1b:aa:e1:c5:76:f4:5f:61:94:9f:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:FF:06:45:BD:5A:27:ED:CA:FF:B4:C0:67:17:05:1F:B6:38:4E
X509v3 Authority Key Identifier:
keyid:24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:dc:ec:86:16:42:16:7f:3c:23:93:8c:6c:1a:a2:52:e1:
cf:34:66:19:8d:0f:bf:d5:3b:68:15:49:5c:c1:a6:cf:d8:2f:
bd:26:93:55:49:b3:c9:e2:72:c3:7f:42:8d:2d:55:58:14:11:
66:94:81:4f:42:74:0c:89:30:4a:4f:2c:7b:93:95:e9:1e:a6:
be:9b:94:97:cc:8a:c3:38:96:e0:96:e0:75:e7:a9:54:79:fa:
a7:d4:fc:4d:ab:b9:1e:fa:b6:f0:cf:a4:5d:02:31:c8:1e:3b:
1e:62:f9:9b:a9:67:f6:2b:3a:fe:12:f4:82:f1:28:72:03:ca:
59:29:54:b8:f9:e5:d7:19:ed:6f:fe:7d:f3:df:5f:13:35:ba:
77:27:21:6f:2a:90:a5:f0:25:99:3e:27:bf:bd:6c:69:41:9e:
64:ef:11:8f:9e:e4:e0:81:6c:87:49:c2:47:ab:54:7e:95:4f:
ff:5b:ba:1c:08:00:8d:2e:d7:c4:ed:e4:37:4a:17:a6:dc:5f:
6f:29:77:2f:b9:48:ac:2a:6e:88:09:5f:e9:66:9a:e2:3a:be:
1a:13:c5:6e:3f:23:4b:f9:38:02:6f:39:ed:d9:54:fb:e7:32:
3a:f4:25:9e:4d:16:78:d7:1a:c7:fd:7c:c0:20:5e:a3:bd:48:
79:f7:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:01:01 2026 by rpki-client