
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json)
Hash identifier: zR8c2KgsjRFRrNm9i7yORUYELRYt1oeUMI7uFhkISmY=
Subject key identifier: 78:0A:B7:5C:BB:4A:21:46:A6:54:65:FA:36:42:6D:E4:32:F0:0E:B8
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial: 38E7F7EE6C27B6D7443CD8D2D77AC9BC64748736
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
Manifest number: 0270
Signing time: Wed 13 May 2026 11:51:28 +0000
Manifest this update: Wed 13 May 2026 11:46:28 +0000
Manifest next update: Thu 14 May 2026 13:44:28 +0000
Files and hashes: 1: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: kipjBJ09zZtwvC7nmczGaoX100huYmXa/+NwcxArDt4=)
2: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: zLfuCXZBi2nWdOOyG+zGt+cSVyUYBRH1EQR+N0EQYZ4=)
3: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: r6Dubpfyi5QcsWpnoZhCjMpY7iHkRGTpVsChlPKqqjA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 13:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e7:f7:ee:6c:27:b6:d7:44:3c:d8:d2:d7:7a:c9:bc:64:74:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Validity
Not Before: May 13 11:46:28 2026 GMT
Not After : May 14 13:44:28 2026 GMT
Subject: CN=780AB75CBB4A2146A65465FA36426DE432F00EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:d7:c8:17:d1:20:94:e9:2f:12:47:4f:7a:
30:88:3d:bf:19:2e:cf:e5:cd:a3:9a:0a:ae:d8:4e:
63:4a:03:4a:07:9a:8a:66:cd:10:92:a2:59:c6:de:
22:fa:b6:f2:6d:c2:03:fb:4c:22:be:67:25:55:2d:
4b:3a:bc:1b:1e:4f:95:ef:a1:a0:64:a1:fb:02:77:
70:63:27:b2:af:71:d5:1f:04:19:0f:bb:5c:cd:5a:
f5:1d:b8:1c:2d:18:53:e0:fe:6a:b8:c9:d2:6b:40:
51:ef:20:91:87:a1:0b:1b:ac:75:af:ff:3a:14:2b:
b0:6b:a1:58:39:c6:a8:3a:28:f4:55:61:01:eb:54:
58:22:a6:2c:7e:8a:76:ad:80:10:27:a5:be:14:ca:
a9:3a:3a:aa:75:07:1d:cd:2c:c9:e4:5f:03:51:4b:
e3:e8:34:ff:64:a5:9e:33:7d:1e:05:81:cb:03:22:
ff:94:a1:59:6d:96:f1:bd:9f:36:c9:fd:ee:d5:fc:
a7:a7:14:af:f2:83:4c:f3:93:0c:4d:42:d7:3b:2f:
18:ff:51:3b:4a:66:98:74:a7:a8:97:6c:a7:77:4a:
bf:f5:c5:23:0c:a0:27:61:9e:c9:4a:4f:f7:58:bb:
5f:57:46:b3:08:37:3f:ff:fb:34:53:40:b4:d6:81:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:B7:5C:BB:4A:21:46:A6:54:65:FA:36:42:6D:E4:32:F0:0E:B8
X509v3 Authority Key Identifier:
keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:05:bb:67:b4:7f:55:c8:83:db:70:80:82:1b:52:06:22:1f:
1a:3e:ad:99:05:8c:75:c1:07:73:d7:4c:b3:a4:c8:1c:22:2c:
a2:a3:40:d8:7c:7c:b6:6a:0b:7b:65:3d:14:41:7b:5e:22:66:
35:d5:72:42:40:df:b7:3f:0b:c2:a5:77:1e:07:ab:16:db:1c:
35:ec:d4:e6:ef:39:89:19:4f:9d:5f:21:2c:d5:2d:c7:e3:39:
1d:72:57:59:b7:88:7b:a6:c1:47:fd:20:9f:55:6a:a1:d9:75:
c8:4f:0b:58:b2:53:2d:d5:de:05:92:09:10:c0:be:b5:fe:0f:
9f:3e:a8:dd:f2:3d:87:11:01:b0:b3:bf:04:db:a9:25:0a:9e:
9b:c2:6f:f5:64:23:e3:1e:d8:62:bd:cb:ae:19:25:61:63:2a:
fb:42:72:63:d3:f1:a1:f8:b9:fa:95:4a:6b:f8:30:b2:b9:51:
11:4a:21:1c:0b:8c:7b:d4:cd:c1:8f:4a:d0:3d:58:ab:9b:63:
34:80:b3:46:7a:0f:0b:00:dd:a8:d8:21:4c:fb:ef:a8:84:d9:
f2:89:06:bb:8a:e4:ca:26:a4:5c:fe:5f:55:53:6e:0d:93:1b:
07:bd:05:c8:d7:12:a8:ad:dc:c1:32:d1:9d:f1:1a:b4:5e:d6:
07:c3:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:04:28 2026 by rpki-client