
$ rpki-client -vvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
File: 88F45CA9F42577057740B3862841E292FEE58105.mft (raw, json)
Hash identifier: KowBF8CgxS4tXFj4tnYcDF8dYRkNTUvqn+3dPReKp3Q=
Subject key identifier: 45:E1:FD:1E:4B:DB:28:45:24:88:F2:CD:94:3A:3E:EE:10:2B:DC:70
Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Certificate issuer: /CN=88F45CA9F42577057740B3862841E292FEE58105
Certificate serial: 3663F5B249E523B4674AD008D4B855AE7F96E955
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
Manifest number: 02A8
Signing time: Thu 26 Mar 2026 07:05:36 +0000
Manifest this update: Thu 26 Mar 2026 07:00:36 +0000
Manifest next update: Fri 27 Mar 2026 08:48:36 +0000
Files and hashes: 1: 88F45CA9F42577057740B3862841E292FEE58105.crl (hash: 2fqSv2Xj+P2zFSZpgDfMGQFhXki5QvneKstvhWFwvD4=)
2: 3137372e3138342e3232392e302f32342d3234203d3e20323733333830.roa (hash: a0sfkndj8vC8ttWwfp4V1VoUHC4cuburGaIilRgXwE0=)
3: 323830343a333665383a3a2f33322d313238203d3e203532393234.roa (hash: CmrKvDLhcDv1r2PrhVlZCz2GKreNOwMygVFrjT4bGkk=)
4: 3137372e3138342e3232342e302f32302d3234203d3e203532393234.roa (hash: tYQ5aVdpKWE5GH0LnPRha2eDtO7fiQ5Lc0RMo6kPstc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 08:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:63:f5:b2:49:e5:23:b4:67:4a:d0:08:d4:b8:55:ae:7f:96:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105
Validity
Not Before: Mar 26 07:00:36 2026 GMT
Not After : Mar 27 08:48:36 2026 GMT
Subject: CN=45E1FD1E4BDB28452488F2CD943A3EEE102BDC70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:28:95:c3:67:11:3a:3e:4a:af:55:03:93:
56:69:e7:bc:a7:15:4d:5a:01:44:8b:ab:91:0b:21:
4d:78:37:1e:fc:da:b8:dc:77:6f:09:ec:2f:b4:77:
a5:f7:4d:70:c1:cc:58:08:69:f5:94:85:9a:65:83:
99:79:c9:24:05:db:42:d7:83:82:c7:db:fa:0a:19:
f4:89:c7:37:d7:b6:2d:06:81:f6:72:8c:b1:ff:8f:
4a:47:6e:61:74:a6:60:9e:d7:6b:9a:08:d9:29:53:
6b:3e:2a:17:5c:c4:39:bb:ad:44:2e:df:8a:95:e8:
f5:24:0e:1b:2d:bc:84:f5:48:43:60:a0:9e:bf:7a:
c9:d2:44:f2:3a:06:82:40:e4:a3:36:a6:56:48:02:
37:3e:a8:40:d2:ad:1f:7b:4e:33:d7:a7:fc:67:1e:
9e:1f:92:c3:77:58:50:d2:eb:25:ea:98:f7:7d:e6:
2e:9e:14:21:61:1e:cf:71:02:5f:01:20:bf:82:c6:
e9:a8:4c:83:46:94:58:54:b7:4a:b9:11:dd:77:23:
01:94:a0:af:48:57:98:4f:17:68:c1:b3:cf:2d:24:
97:bc:02:48:c0:a4:2d:b2:17:47:f4:bf:7a:c4:79:
42:db:4e:24:35:67:fe:06:44:02:fe:38:83:d0:3c:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:FD:1E:4B:DB:28:45:24:88:F2:CD:94:3A:3E:EE:10:2B:DC:70
X509v3 Authority Key Identifier:
keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:25:06:bc:93:67:e2:e6:0d:99:31:52:a7:f5:75:67:64:
a5:10:16:60:11:75:26:5d:80:31:95:4e:99:28:11:6d:2f:24:
05:d5:94:79:15:72:9a:70:50:1d:88:f1:80:4f:b7:6c:7d:a7:
ec:89:17:01:98:ce:f8:51:84:5e:b4:9b:3e:18:3c:c3:3a:c7:
e4:11:1b:c5:39:f2:cf:86:7a:07:3e:b1:1e:6c:43:9e:73:81:
8a:41:47:1f:5a:9f:37:61:1b:a2:1c:b1:2c:cb:8d:2d:eb:69:
81:f4:c1:e1:56:6b:72:d5:82:a4:44:cb:a6:7c:eb:ad:42:e3:
1b:dc:88:bd:d5:c9:ea:4e:ba:96:43:49:30:86:18:74:14:6b:
e4:fe:83:ea:67:7a:84:49:2a:03:96:fe:1f:fe:8b:6b:b0:db:
68:62:89:15:07:73:6b:31:4b:fe:42:01:1a:4c:15:e9:22:fc:
3e:49:7b:e2:17:51:f2:03:7e:33:12:68:9f:34:55:65:1f:c2:
d7:1d:20:a5:02:ac:57:27:b8:aa:42:c8:f8:bb:e7:44:03:3a:
78:3a:82:2d:03:71:58:ed:a9:fa:21:52:8f:cc:c4:b6:a9:ed:
53:7d:59:29:8e:a1:6b:56:1c:27:1d:20:28:58:fc:52:e6:a8:
d0:3f:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:57 2026 by rpki-client