
$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
File: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft (raw, json)
Hash identifier: k1jUhAQNRr+fESs8CZewvGGdMED3P0+2c6e/jW1TiaA=
Subject key identifier: 75:7A:E0:DE:D5:F1:D1:F3:75:BB:91:0A:71:24:2F:63:7A:23:EB:EC
Authority key identifier: CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7
Certificate issuer: /CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7
Certificate serial: 73D6E6D52DCAB76D5E920182470836DF2C1C7AC4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
Manifest number: 3E
Signing time: Wed 25 Mar 2026 16:53:57 +0000
Manifest this update: Wed 25 Mar 2026 16:48:57 +0000
Manifest next update: Thu 26 Mar 2026 18:18:57 +0000
Files and hashes: 1: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: sHP2ygrqTYTY15dtbi0gTVuddZSIHRSH0IyS1EMxOo4=)
2: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl (hash: ZPF+8RQQVnVb3xRzGzFqVNYxcazHmI5y12IEit97KGQ=)
3: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: rqFpRbi2nHQnPx4E/BliB9kjTJF3Fdr2CbPUaChmPDo=)
4: 3230302e3139322e3135322e302f32322d3234203d3e203631363133.roa (hash: u/gXstXvaoXswmUY2weSiF3XDVA5+Rjw0+u0Ea1eciY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl
rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 18:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d6:e6:d5:2d:ca:b7:6d:5e:92:01:82:47:08:36:df:2c:1c:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7
Validity
Not Before: Mar 25 16:48:57 2026 GMT
Not After : Mar 26 18:18:57 2026 GMT
Subject: CN=757AE0DED5F1D1F375BB910A71242F637A23EBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:51:f1:62:87:f8:31:93:29:7b:09:a2:db:
06:b3:85:b7:bc:66:91:db:eb:90:8b:0c:fa:ba:26:
cb:e6:c6:37:60:e6:fc:f8:74:78:1f:df:a1:c6:f2:
eb:8c:cf:0f:d6:6d:71:64:a2:01:b9:8b:eb:34:aa:
91:41:5a:a4:6a:93:74:4a:0f:a7:ce:67:dc:79:96:
6a:d0:b4:dd:e7:39:a8:c4:f1:b0:7b:cf:ef:e5:5c:
f0:b8:41:71:5d:4d:87:cc:3a:00:65:d9:b5:31:3a:
fd:79:16:3b:23:02:0b:95:cc:74:f0:53:a8:59:84:
c6:0c:f8:6d:9f:29:07:87:8b:31:2d:ef:b6:3a:ea:
7b:45:e0:97:f5:b8:83:1b:b2:6e:b9:fc:ee:d9:16:
fd:c7:85:ff:8b:7c:94:00:c4:21:d9:f9:64:9b:d6:
a9:bd:a7:c4:b7:5f:9d:e3:57:80:16:4a:88:a3:43:
1f:63:33:ca:06:23:3d:a6:09:40:18:ab:f2:a3:e6:
f1:ae:13:29:30:28:d2:05:de:1a:26:36:3a:ef:c0:
27:9d:14:97:63:d2:99:85:33:55:84:5b:13:15:04:
6d:2d:91:73:37:8f:21:9a:79:b8:93:9f:26:c2:11:
32:88:f4:cd:5a:d0:52:d6:4e:fe:2d:e1:f6:47:45:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7A:E0:DE:D5:F1:D1:F3:75:BB:91:0A:71:24:2F:63:7A:23:EB:EC
X509v3 Authority Key Identifier:
keyid:CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8d:98:d2:47:0c:22:c9:a2:dc:3a:90:06:7e:e1:8d:01:e9:
55:7e:a3:25:dd:75:78:38:77:26:eb:4f:1e:a8:8b:e6:d8:83:
92:bd:8e:52:cd:8f:02:d0:68:34:0f:32:b6:d3:7c:2e:a9:9a:
70:c1:d8:ab:62:d3:b5:c6:e5:bf:77:d2:37:15:24:c4:e5:fa:
ca:40:51:cb:b9:e8:7b:9e:5d:60:53:09:bf:84:1f:a6:93:a1:
50:7d:78:91:ec:f2:d2:ed:2d:02:20:b3:38:fa:1c:06:18:4d:
a8:7e:1d:17:50:70:2f:b0:55:9d:5a:21:c2:b0:a4:c8:d0:cd:
66:bb:0d:88:f7:a3:61:ce:13:f4:53:1c:62:54:39:7e:20:40:
31:c3:22:7b:4c:13:b5:10:6f:95:d8:9a:66:29:12:a3:f7:ba:
aa:c8:7c:a9:8b:fe:e3:c8:db:64:61:01:2e:7a:50:46:f8:7a:
f6:ac:ed:2d:42:93:c5:e5:22:4b:de:f0:c8:de:81:df:59:b2:
bb:32:e3:68:e8:f7:10:f2:65:5b:0f:c2:05:fa:bb:5b:35:d3:
08:ee:29:a7:b9:51:25:a2:0e:05:1d:9f:9c:2e:20:b5:78:39:
f6:f0:ac:2d:44:13:bf:bc:3e:80:81:e9:ff:73:e1:66:3c:55:
ce:42:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:51 2026 by rpki-client