
$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
File: 5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft (raw, json)
Hash identifier: L6dvH+jV21oq7btoHnZ41Fo92hs0izonnPGk3BGweW0=
Subject key identifier: 81:F2:66:03:24:EF:B2:F1:B2:56:84:DC:6E:AF:38:D4:82:AC:CD:31
Authority key identifier: 5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
Certificate issuer: /CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
Certificate serial: 203915617E1E208E2C7D0C4E58A4A872BB014030
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
Manifest number: 5A
Signing time: Thu 26 Mar 2026 17:37:43 +0000
Manifest this update: Thu 26 Mar 2026 17:32:43 +0000
Manifest next update: Fri 27 Mar 2026 18:07:43 +0000
Files and hashes: 1: 3136382e302e3136342e302f32332d3233203d3e20323633343833.roa (hash: e9/O62ZEPkBCNGnDpzyARSyuYb1zB9mtqW31b7CHJP0=)
2: 3136382e302e3136362e302f32332d3233203d3e20323633343833.roa (hash: jMkRqtoEFReHbIVj0glijLpMJ6PwiTGu44jvbzjPxeI=)
3: 5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl (hash: sq2KGZ0KpDMsDOIfmW6f0b1mif/T8VHCuhsubp1QthE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl
rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 18:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:39:15:61:7e:1e:20:8e:2c:7d:0c:4e:58:a4:a8:72:bb:01:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
Validity
Not Before: Mar 26 17:32:43 2026 GMT
Not After : Mar 27 18:07:43 2026 GMT
Subject: CN=81F2660324EFB2F1B25684DC6EAF38D482ACCD31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:7d:e2:35:0b:2d:32:5e:72:ef:d4:dc:9a:
09:bb:33:50:6c:d9:ae:73:52:08:c0:e7:fa:67:36:
14:24:3c:6d:42:f7:3f:0c:5e:b7:17:2e:2b:df:4f:
c9:28:7d:59:e9:ee:85:60:cf:32:6c:0e:12:5c:3d:
94:34:a9:e8:f4:fb:33:ad:86:d1:b3:ba:8f:9b:e4:
0a:3a:c8:c1:ce:b2:d3:f1:0a:20:27:29:6f:84:04:
95:0a:c3:7a:92:8c:bd:25:3a:d5:8b:79:d1:07:c2:
c2:42:0f:8a:57:da:3d:68:7e:cc:f8:36:db:40:cb:
79:7c:ad:e5:c3:e1:a3:c8:61:ea:a8:f2:fa:de:ea:
5f:12:31:a6:b1:7f:c6:c2:80:f4:3e:b7:79:93:49:
46:f4:de:db:8c:5d:62:b2:b4:3e:5e:29:3e:a3:f0:
26:25:24:7a:9a:1d:e9:40:4f:04:7a:23:c0:d5:94:
00:60:b1:5c:d4:28:ef:72:6b:77:a5:ef:d7:fb:bf:
1a:08:27:4f:4d:b0:51:a3:c9:77:e2:9e:7d:f9:3d:
6d:1a:24:6e:ad:6e:5a:0b:b2:5e:f1:72:0c:d1:b9:
5b:ff:3b:68:25:81:a5:67:e9:2e:ab:ef:02:40:62:
56:19:31:70:de:ab:c1:26:8f:c3:0b:d8:6c:00:03:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:66:03:24:EF:B2:F1:B2:56:84:DC:6E:AF:38:D4:82:AC:CD:31
X509v3 Authority Key Identifier:
keyid:5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:92:f7:23:b4:2f:57:7e:46:a1:57:04:0e:00:56:cf:92:b2:
51:e7:40:71:86:6c:5f:fe:83:76:9a:e6:bb:56:68:eb:ac:c8:
94:75:9c:85:82:c7:89:33:a5:d7:c6:23:df:f7:28:bb:99:93:
ba:3b:1c:fb:8d:ed:ea:30:2a:dc:e8:82:53:9a:d4:83:87:e3:
04:5f:75:34:81:8c:52:34:a8:3f:e8:55:27:92:d9:d5:9f:2e:
80:72:77:db:27:b9:44:4f:13:a4:b3:b1:85:d3:92:a5:46:e1:
96:d9:3a:be:3a:fe:eb:46:c5:18:ca:19:d5:5d:99:54:42:87:
27:0a:77:2e:00:01:0b:1f:ee:4c:bd:79:2c:21:b5:1f:a4:61:
84:c0:bb:4e:f0:94:91:23:c3:85:f8:3d:f4:98:67:55:41:d1:
02:3a:1e:1f:a2:d1:bc:4a:92:28:3d:26:63:e0:17:e1:55:8d:
00:a9:3a:4c:e6:80:cf:6e:61:17:b1:0f:af:02:c7:4a:94:d5:
af:fd:f4:1f:f1:92:a0:20:b8:be:09:8c:36:71:b9:1e:d8:11:
5c:7f:90:48:71:ef:93:8c:18:2a:50:9d:90:73:61:c4:63:ac:
22:92:e0:05:d8:78:99:33:26:27:44:71:94:a7:44:1a:ac:d2:
17:aa:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:24 2026 by rpki-client