
$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
File: CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft (raw, json)
Hash identifier: ws4NwNwP84i8CA53UwJAe/WciqVSqKgCXoP7rhRIhe8=
Subject key identifier: 3C:8F:D3:89:B5:D5:90:69:11:59:07:3B:7B:B2:32:BC:94:87:AD:05
Authority key identifier: CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
Certificate issuer: /CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
Certificate serial: 2CBE91404FE2D80E675964527216644DE12BF1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
Manifest number: A1
Signing time: Thu 26 Mar 2026 01:27:31 +0000
Manifest this update: Thu 26 Mar 2026 01:22:31 +0000
Manifest next update: Fri 27 Mar 2026 04:26:31 +0000
Files and hashes: 1: 323830343a366139303a3a2f33322d313238203d3e20323730333434.roa (hash: i51l37KiQWwXtN+K1/iN3p/yRB7t5FE68ciQe18TlUs=)
2: 3138392e3132362e342e302f32322d3332203d3e20323730333434.roa (hash: TWpMsUryptQu6Hi6KjgY8UHGV5Dc4mwwgB/z57TzmHE=)
3: CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl (hash: ergEZrHWKSPcUWdKogBWckXx27VBcQv8Ip46KPGOoCo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl
rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 04:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:be:91:40:4f:e2:d8:0e:67:59:64:52:72:16:64:4d:e1:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
Validity
Not Before: Mar 26 01:22:31 2026 GMT
Not After : Mar 27 04:26:31 2026 GMT
Subject: CN=3C8FD389B5D590691159073B7BB232BC9487AD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:c1:47:b9:70:73:e0:c5:69:0e:fc:bb:35:
6e:8f:5c:5f:cd:69:55:e8:ef:55:25:32:52:2c:05:
de:4a:e6:60:f5:5a:88:e1:ce:a3:cd:70:20:3a:44:
eb:f3:76:7d:39:b0:12:f1:82:5b:a2:a3:b7:4b:1b:
ea:1e:c6:f4:6b:1a:86:a3:2f:6a:30:2b:ab:43:39:
0b:3d:f8:ba:10:96:24:28:b8:11:47:c3:78:61:5a:
f7:26:96:21:9a:fc:64:8f:1f:eb:22:12:7b:7a:d1:
a8:89:74:27:43:80:2b:77:dd:20:7a:d6:52:31:9f:
ac:b1:b8:f8:a6:9e:60:2f:5b:dc:de:a9:1a:72:26:
02:3f:26:5f:ae:9f:71:f7:a0:60:2f:6a:9a:67:89:
36:a4:ee:2a:3d:67:a1:90:11:d1:6d:e7:db:03:27:
49:1e:c0:74:0a:cd:2e:e2:ac:41:32:67:3d:9b:ac:
ab:a9:aa:58:4e:82:c3:a4:6f:e1:a0:9b:85:b5:1a:
31:35:1a:4f:b8:18:43:5a:b1:b7:94:f6:f1:a4:24:
f1:41:05:56:4a:a7:a1:e2:18:f7:91:8f:a3:82:46:
9e:64:36:f7:ef:f4:61:49:98:37:88:81:da:4d:39:
25:3b:e5:23:86:7b:e8:67:8d:71:f7:cc:00:f6:f3:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:D3:89:B5:D5:90:69:11:59:07:3B:7B:B2:32:BC:94:87:AD:05
X509v3 Authority Key Identifier:
keyid:CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:30:1c:20:53:f4:a0:b3:d0:9f:91:3f:0b:82:65:06:cb:43:
95:e7:c2:01:4b:c0:4f:6a:0a:66:db:54:db:fb:5c:1b:f2:3a:
a7:20:38:7a:81:25:1e:33:f7:66:17:a5:f0:7e:1e:28:90:ef:
b9:24:3b:9e:e3:e5:4f:32:57:86:32:d8:24:b0:9d:2b:90:24:
bb:43:1f:1e:8a:08:d4:a0:7a:7c:dc:c4:58:d0:99:0d:9a:28:
2d:2c:d0:aa:d7:28:fb:02:6d:b9:37:09:00:24:08:db:77:e9:
5c:44:86:8c:93:62:0b:ba:85:1f:4f:c1:bd:a6:6f:b3:5d:b8:
93:e1:fc:d7:00:8b:51:d7:e5:d3:5c:1e:2f:1b:7b:c7:3d:05:
29:3d:20:2d:5f:b8:35:a3:c9:9a:43:64:6b:4b:e8:7c:30:c7:
03:24:33:cb:f4:5e:33:38:14:30:20:7f:07:7b:90:02:49:37:
42:9b:31:90:6d:b8:28:da:43:e5:e4:d2:eb:b9:19:f5:8b:48:
19:98:03:15:16:a0:6c:fc:cc:a7:5e:ff:29:e7:33:e1:13:4d:
d7:b5:cf:48:9f:79:c4:07:92:80:be:85:80:2c:e8:8a:67:1a:
df:b9:ff:b2:1d:aa:95:03:50:d0:d4:69:26:27:8e:8d:a0:82:
4a:9f:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:13 2026 by rpki-client