
$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
File: 96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft (raw, json)
Hash identifier: oqrzcbrBelxJA1pSWksj1rLWJggzsgqAKs1wvY22Fp4=
Subject key identifier: 03:D2:ED:A3:C6:39:15:19:96:7B:90:F4:28:A6:4E:67:7F:27:73:52
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Certificate issuer: /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial: 5C82AFDD3DEE2AE3CBB7277F6711C65855353104
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
Manifest number: 03B2
Signing time: Thu 26 Mar 2026 10:43:29 +0000
Manifest this update: Thu 26 Mar 2026 10:38:29 +0000
Manifest next update: Fri 27 Mar 2026 12:09:29 +0000
Files and hashes: 1: 96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl (hash: gC0OoUoKJrdT9LVahmJ/t15Z2m4uxV4JIHSzldKBh3Q=)
2: 34352e342e35362e302f32322d3234203d3e20323636303338.roa (hash: EGNHJFsM5XGEUu/x01+dzw9Z85bzdW6FupicnEfjWj8=)
3: 323830343a333939383a3a2f33322d3334203d3e20323636303338.roa (hash: qa4JmpUgTKi07m1iEVngLtO90kMKRzciKUko8CQur6I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 12:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:82:af:dd:3d:ee:2a:e3:cb:b7:27:7f:67:11:c6:58:55:35:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Validity
Not Before: Mar 26 10:38:29 2026 GMT
Not After : Mar 27 12:09:29 2026 GMT
Subject: CN=03D2EDA3C6391519967B90F428A64E677F277352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:d9:15:5b:e9:9f:cb:1f:94:c5:16:02:5d:
b2:38:50:53:2e:b1:e3:76:51:1a:6b:ef:84:20:8f:
74:b8:a5:25:1a:46:2b:69:bd:6b:7c:da:28:c3:11:
87:c8:1e:67:ce:60:09:ef:db:6c:24:6d:0e:80:88:
14:37:bd:5f:cb:25:9c:74:19:c3:6e:ad:ab:00:6b:
1f:1d:e7:de:70:78:18:4c:e8:5e:0a:f1:9a:12:60:
0b:bd:84:b9:a7:8b:7d:64:a4:2d:37:9b:1d:70:4a:
47:5a:10:5a:64:29:2c:3e:68:0a:82:87:46:92:98:
a4:e5:e4:65:54:55:70:18:19:5f:7d:ce:39:df:7a:
14:f6:d8:3d:97:b0:2a:5b:c5:fa:9f:95:c5:71:39:
0d:74:91:08:36:d2:76:4b:18:d3:3b:cd:21:e4:17:
94:da:c8:30:f1:75:02:60:c5:81:b6:ca:be:19:16:
59:3d:13:bd:fc:9a:49:e5:c8:58:2b:1a:bb:55:90:
21:26:56:cf:ed:62:3f:c3:46:e6:2f:a3:08:c1:4d:
2e:52:b0:c5:f4:ac:70:bd:f6:00:bb:23:a0:d4:24:
be:22:2d:de:ed:6d:04:d1:65:49:69:26:64:08:5b:
a3:6f:8a:3d:a1:ee:af:e9:dd:55:3b:9e:1d:9a:1d:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:ED:A3:C6:39:15:19:96:7B:90:F4:28:A6:4E:67:7F:27:73:52
X509v3 Authority Key Identifier:
keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2d:bc:ba:a9:53:37:c8:ba:ec:43:23:44:00:a3:80:ef:61:
12:18:45:e3:7b:53:71:10:56:73:80:1d:7f:62:8e:1a:89:b7:
22:0d:8c:a6:ae:d1:27:27:43:f9:c2:87:ef:33:db:ea:5d:ea:
be:f1:1a:94:e6:20:be:c6:76:93:64:66:43:7b:03:75:51:12:
85:da:aa:cd:1d:a2:53:08:a6:14:31:c5:98:09:27:26:a6:62:
5a:20:eb:5f:87:22:75:6b:fc:ea:18:b1:7b:61:a5:0c:60:0a:
9c:5e:6a:67:5d:84:13:bd:25:fa:63:48:17:7c:c2:df:28:53:
cc:13:0a:2b:46:ca:43:51:2c:fc:b0:11:4a:52:2e:02:a3:ed:
97:f8:1c:ff:c7:3b:e9:fe:ce:c4:ec:ee:17:0c:7a:e3:38:72:
38:17:74:5d:8a:c6:6b:82:6e:fc:80:8d:85:70:a5:f8:06:b3:
fc:6d:1b:9b:9d:63:8a:4f:e5:6a:be:a6:28:f2:36:fb:86:cd:
88:0f:fb:c5:b6:01:b3:67:2c:0a:d9:01:e9:5c:17:24:aa:5b:
61:9c:37:46:4b:b1:6e:76:27:8c:b3:31:e9:7a:8c:a5:f5:77:
4b:9e:e4:87:d9:f0:6b:11:66:cf:0c:8a:55:50:10:c2:ef:9f:
52:35:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:35 2026 by rpki-client