
$ rpki-client -vvvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
File: 3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft (raw, json)
Hash identifier: GE2FM2TIEKyIbZRtkEk0s8pgT1NMWA72d58M4J9KtDw=
Subject key identifier: A6:36:CB:08:08:BF:1B:72:E6:95:19:9F:A0:5E:C6:FC:9B:6E:BE:0C
Authority key identifier: 3B:1E:2F:A9:B5:BA:1A:60:F6:01:80:B1:D5:64:04:5E:D6:7E:B4:A1
Certificate issuer: /CN=3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1
Certificate serial: 78DCAFCA45316CC98E3B24928EB6287C0097F70D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
Manifest number: 15
Signing time: Wed 28 Oct 2026 19:16:13 +0000
Manifest this update: Wed 28 Oct 2026 19:11:13 +0000
Manifest next update: Thu 29 Oct 2026 20:33:13 +0000
Files and hashes: 1: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: c75uSCZ2MplcH9Xy/B1myzgzNIK7NBxI4OosUsuMbPk=)
2: 3137302e38322e35322e302f32322d3234203d3e20323637353738.roa (hash: OEYzLHZqJfUyGjYcpr2UFfWcx8mZEBxlUBuL49jiUiE=)
3: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: HlCsR77YgbJoDU+toq/zqs+Box4qCQ41RFogjmEMJC0=)
4: 3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl (hash: pLB/Jc36zWMKvLMNHjJ4OudGP63a9nVPTFNFkulPtoE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl
rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 20:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:dc:af:ca:45:31:6c:c9:8e:3b:24:92:8e:b6:28:7c:00:97:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1
Validity
Not Before: Oct 28 19:11:13 2026 GMT
Not After : Oct 29 20:33:13 2026 GMT
Subject: CN=A636CB0808BF1B72E695199FA05EC6FC9B6EBE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:8d:5c:17:5e:34:ef:bb:05:59:9b:6e:71:
38:b1:b5:4b:0b:8d:c1:1c:88:16:5b:11:8c:4f:ca:
ba:4b:c5:bb:8e:a9:02:65:bb:31:b1:8b:fe:98:d6:
8d:db:63:a7:87:d2:00:c0:83:01:ad:fa:fb:64:cc:
18:93:e1:a7:a7:d5:a9:2f:b0:9b:18:70:4d:ed:ff:
4f:7c:d2:e8:a2:c8:30:b1:ad:77:20:4f:aa:cf:fa:
c0:18:57:86:ea:99:26:91:af:cd:fd:46:39:50:9a:
56:ef:bb:6c:e9:56:2f:3d:8e:12:a6:19:28:cf:87:
6d:55:1f:40:4d:d0:ee:25:37:23:a5:ca:7a:80:36:
56:21:bb:43:f2:08:ea:b4:4b:b1:8c:3b:f1:ec:d1:
d1:d1:2c:3d:de:54:d4:a5:ea:be:74:1a:0c:4e:3f:
b3:d3:de:4d:3a:40:0f:f1:3f:a4:66:e9:0b:5e:cd:
c9:04:5b:7e:97:a1:c4:2b:30:f1:5f:19:e1:3c:2e:
b1:1c:2b:53:bd:b1:82:aa:bf:48:fa:b2:a5:fe:3b:
d1:1a:4b:d2:e1:b2:1b:b3:88:29:26:91:cf:93:82:
f5:d7:34:d6:d8:4e:a2:54:07:85:4a:a8:9d:0d:68:
6b:00:10:85:53:bb:79:99:b8:55:9a:13:37:7b:ee:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:36:CB:08:08:BF:1B:72:E6:95:19:9F:A0:5E:C6:FC:9B:6E:BE:0C
X509v3 Authority Key Identifier:
keyid:3B:1E:2F:A9:B5:BA:1A:60:F6:01:80:B1:D5:64:04:5E:D6:7E:B4:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:ad:67:b8:3b:fe:13:2b:b6:92:d5:1a:48:88:d3:a1:14:
f2:fa:d5:e1:4d:8c:26:93:8d:4b:20:77:1b:d1:10:d5:c7:bc:
8b:e7:46:a6:30:7b:7d:86:be:38:fe:d4:3b:b3:d5:ed:1b:51:
ce:7f:15:88:41:46:43:b3:20:d4:51:bd:31:7b:46:55:ff:70:
92:0b:cd:45:0d:84:a4:90:55:94:e6:93:cf:6f:d7:ee:38:1b:
28:bb:11:a4:52:c9:44:02:11:23:c1:29:a3:8d:45:3d:33:24:
f8:1b:05:55:af:d1:49:fa:a5:5a:e3:44:14:60:41:80:98:e9:
24:f1:60:3d:2c:65:ab:dd:fb:60:c0:da:33:b1:d1:50:c5:41:
57:d2:e6:08:3f:aa:02:c8:39:ec:5f:dc:63:73:0d:05:72:33:
96:3e:ec:cf:8b:41:a8:02:e1:1e:a2:70:69:88:ca:a1:dc:f7:
fb:60:5f:ae:85:d9:d3:7b:c6:be:20:7a:8a:a4:87:ae:fb:b6:
bb:ba:cb:6e:96:d5:f5:ff:0d:02:6f:1d:30:1d:e7:66:b4:17:
74:e8:a9:e4:ee:05:e3:eb:32:5e:73:fd:e9:9e:75:77:82:ae:
8d:ef:7d:e7:aa:81:17:45:93:16:7b:8c:64:b3:a8:dc:82:41:
b3:a6:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:38:18 2026 by rpki-client