
$ rpki-client -vvf rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.mft
File: 8B11D102B9B6311625032B2D5F8266B6885CF7FF.mft (raw, json)
Hash identifier: 7Yb4Rv7u4jUVubk5W3imzgVSrP7JVouTkfM+ZiY1iIk=
Subject key identifier: 4D:76:BA:7E:09:F0:23:C9:14:7B:F8:53:03:40:CF:82:88:DF:C1:40
Authority key identifier: 8B:11:D1:02:B9:B6:31:16:25:03:2B:2D:5F:82:66:B6:88:5C:F7:FF
Certificate issuer: /CN=8B11D102B9B6311625032B2D5F8266B6885CF7FF
Certificate serial: 4B252239005FAFA5CC57E7DF246CD9DDB1768FAE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B11D102B9B6311625032B2D5F8266B6885CF7FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.mft
Manifest number: CA
Signing time: Thu 26 Mar 2026 14:19:33 +0000
Manifest this update: Thu 26 Mar 2026 14:14:33 +0000
Manifest next update: Fri 27 Mar 2026 14:28:33 +0000
Files and hashes: 1: 323830343a353630343a3a2f33322d313238203d3e20323637393731.roa (hash: vDvMXrmNi7Y6lYIELSDk0NJV5j6wsgjCwYoi8gR2EC8=)
2: 8B11D102B9B6311625032B2D5F8266B6885CF7FF.crl (hash: ocyV1gn5eUkPru7tLDENWJ0iMaG8+7Ir3CPGBNETylU=)
3: 34352e3136362e3232302e302f32322d3331203d3e20323637393731.roa (hash: eNuDkDpJHQw7UZu0U40YMg169y992ggjvkTOpdcOjTQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.crl
rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B11D102B9B6311625032B2D5F8266B6885CF7FF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:25:22:39:00:5f:af:a5:cc:57:e7:df:24:6c:d9:dd:b1:76:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B11D102B9B6311625032B2D5F8266B6885CF7FF
Validity
Not Before: Mar 26 14:14:33 2026 GMT
Not After : Mar 27 14:28:33 2026 GMT
Subject: CN=4D76BA7E09F023C9147BF8530340CF8288DFC140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:26:de:d0:1f:f6:2b:0c:fc:b6:b6:b1:c0:
09:d0:e3:df:bb:02:73:fa:78:1b:0a:d7:04:b0:96:
41:04:88:aa:d9:3f:b4:ca:a7:9e:e5:b3:00:5f:b1:
97:d3:67:ae:96:6e:cf:82:ef:85:65:57:75:17:de:
57:be:89:a9:8c:ac:ea:c5:b8:c2:aa:40:97:26:f3:
bf:05:07:3b:3f:7f:68:e0:90:18:2a:e3:05:93:54:
ac:bd:55:61:db:3e:8b:8f:73:dc:73:56:2d:34:5f:
c2:4f:4e:cf:1e:44:d1:c6:14:e4:f9:1f:36:47:dd:
de:53:5d:99:2a:3e:9d:75:ff:13:42:0d:5a:1e:1b:
91:35:4b:1b:8e:78:62:6d:34:cb:6a:25:05:af:7d:
6f:94:15:65:a1:2c:68:69:ad:5a:cb:18:dd:c9:da:
84:b8:0a:97:65:06:bc:f8:46:ff:82:1d:7f:fe:11:
52:7d:a0:ad:bf:32:9c:54:f9:67:5d:9d:03:7c:3f:
67:c3:e4:37:93:f6:e6:06:72:02:6f:26:ef:ff:c5:
88:3c:47:5f:22:ee:18:f5:d0:74:14:93:13:9a:82:
69:d1:51:fc:fc:9f:b2:97:69:cf:e8:2c:80:ad:8b:
9d:26:60:58:7f:3c:96:a5:97:e7:b8:11:1f:69:15:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:BA:7E:09:F0:23:C9:14:7B:F8:53:03:40:CF:82:88:DF:C1:40
X509v3 Authority Key Identifier:
keyid:8B:11:D1:02:B9:B6:31:16:25:03:2B:2D:5F:82:66:B6:88:5C:F7:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B11D102B9B6311625032B2D5F8266B6885CF7FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:40:f7:af:c9:a4:82:05:0b:b2:d1:74:6d:b6:80:3e:76:87:
9a:e0:8e:6e:45:51:80:08:2b:c1:01:39:db:c3:15:d8:c9:f7:
3d:b3:28:03:06:43:0d:bf:bd:67:a8:d2:bd:85:09:6d:06:16:
0c:a9:26:79:3e:67:18:79:2c:8b:00:d8:06:b1:de:93:63:25:
38:06:c3:e1:fe:be:36:be:62:42:81:bf:c1:14:ed:86:66:75:
64:27:5e:f2:13:66:56:12:1d:8c:29:82:f2:ee:50:67:c8:50:
6f:fd:52:bb:fb:2f:da:3b:4b:95:e7:59:f4:2e:7b:a3:73:e7:
41:96:14:12:a5:7b:55:6d:8c:bd:e9:7e:da:ff:77:41:86:a3:
c9:9f:6b:c7:05:d9:78:f6:7c:6d:1c:15:7a:35:f2:08:86:2b:
fd:86:be:c0:01:ae:1f:fb:ec:70:ec:11:ac:8a:87:04:b3:f4:
45:6e:45:a6:b0:04:b4:52:06:d3:51:cc:d5:33:d3:78:5c:cb:
98:bd:02:b9:ec:ea:f3:f1:e8:86:bc:05:f1:b6:f2:f8:41:d5:
0a:97:a3:8c:38:98:1e:05:e4:59:28:db:3e:54:4f:56:1b:89:
9d:8d:2e:3b:00:81:2e:7a:de:78:66:cc:ad:f9:81:bb:5b:3f:
8c:3d:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:16:25 2026 by rpki-client