
$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.mft
File: BF36A2B9A3E27762F582C1C4B5497A28F4298803.mft (raw, json)
Hash identifier: m21WVQuwjiXsSuhve0ZLytfnIvN8l5XMDvXdSap5Ok0=
Subject key identifier: 0A:F9:63:45:28:7B:53:3F:AF:68:A5:04:94:9D:0A:07:2B:9D:32:21
Authority key identifier: BF:36:A2:B9:A3:E2:77:62:F5:82:C1:C4:B5:49:7A:28:F4:29:88:03
Certificate issuer: /CN=BF36A2B9A3E27762F582C1C4B5497A28F4298803
Certificate serial: 202C5B7EC30BCFE61C146FA63211A065C4CF121A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF36A2B9A3E27762F582C1C4B5497A28F4298803.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.mft
Manifest number: 3D
Signing time: Thu 15 Oct 2026 15:01:57 +0000
Manifest this update: Thu 15 Oct 2026 14:56:57 +0000
Manifest next update: Fri 16 Oct 2026 17:52:57 +0000
Files and hashes: 1: BF36A2B9A3E27762F582C1C4B5497A28F4298803.crl (hash: eWPFMlAzClNmCeJzSxPNmg0jz+WPMe68cL4HNX6P5dM=)
2: 3139312e33372e38302e302f32322d3332203d3e20323730393732.roa (hash: U9IsLZhnDXH1JWo4aQKSErMDcJ9qpkuAtI4LX0Eh1yU=)
3: 323830343a373434633a3a2f33322d313238203d3e20323730393732.roa (hash: mAGeWyOvupLK4mwbC2bZEedIO8bvuJ3ctka2BKLLPko=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.crl
rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF36A2B9A3E27762F582C1C4B5497A28F4298803.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 17:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2c:5b:7e:c3:0b:cf:e6:1c:14:6f:a6:32:11:a0:65:c4:cf:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF36A2B9A3E27762F582C1C4B5497A28F4298803
Validity
Not Before: Oct 15 14:56:57 2026 GMT
Not After : Oct 16 17:52:57 2026 GMT
Subject: CN=0AF96345287B533FAF68A504949D0A072B9D3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:54:35:e5:0a:e0:2c:69:01:63:2e:5d:38:
68:21:bc:35:2a:cf:07:3a:f6:cd:ea:68:f4:68:09:
ef:8f:8a:42:82:2c:5d:57:f2:e3:44:4e:b6:e6:17:
6e:cd:a4:92:b7:d4:0f:94:90:f0:09:95:2f:c1:da:
f3:f6:7d:c9:b6:22:9a:9b:0b:a3:90:34:34:0b:da:
85:d3:3c:f4:7b:bd:a1:3c:e5:76:2f:23:16:4a:52:
f5:c4:1e:ee:56:2b:44:e9:be:03:32:24:7b:8b:ec:
00:7d:d9:cb:08:a5:79:78:7e:93:5c:be:74:8e:9e:
c8:ee:45:98:20:04:3a:6e:5c:a4:30:26:fd:5a:94:
87:e6:71:5e:75:cc:4c:79:5c:a1:20:64:e5:c6:7a:
60:b6:29:f2:73:09:53:70:e1:23:4a:c0:43:ff:e3:
9a:a6:84:d1:85:73:f3:25:91:0c:f1:e9:80:7f:89:
88:e0:b3:92:84:04:c8:31:70:ec:b8:88:0e:68:45:
b8:96:26:98:2d:ab:11:ac:0d:ff:62:82:4a:cd:ad:
dc:7c:5c:20:e0:f3:f8:34:c4:39:cc:14:0a:1c:da:
49:8f:e6:f4:b9:34:8a:46:93:e9:a1:39:52:ef:6f:
39:51:82:86:b7:72:19:37:03:7f:95:58:29:f9:ed:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:63:45:28:7B:53:3F:AF:68:A5:04:94:9D:0A:07:2B:9D:32:21
X509v3 Authority Key Identifier:
keyid:BF:36:A2:B9:A3:E2:77:62:F5:82:C1:C4:B5:49:7A:28:F4:29:88:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF36A2B9A3E27762F582C1C4B5497A28F4298803.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:e4:f8:7e:26:91:4c:f0:17:3c:4d:52:0a:8f:25:e2:ed:
9c:c8:38:62:39:86:c9:96:cb:bb:0f:f9:07:9f:bf:1c:91:86:
34:55:ca:5b:29:8d:3b:6d:b0:4e:03:77:5d:b9:bf:11:f1:51:
a4:61:35:e9:d8:e9:be:7b:1a:64:44:16:a5:d1:49:39:3b:b1:
99:9f:b3:f0:1f:5b:ae:9c:ce:de:ef:b0:d0:f9:60:5d:55:fa:
94:b9:06:f8:cc:3f:7d:3d:82:68:b6:ae:14:40:1e:c9:fa:03:
3d:70:8b:02:27:cc:2a:bf:ad:e2:9c:10:56:cd:dc:2f:b8:ac:
c6:08:07:d0:45:84:0a:cd:64:39:b6:f9:00:fe:e3:f5:49:ef:
3e:b1:ee:65:95:e6:11:9d:d6:ed:6d:c8:f9:70:8d:42:46:79:
77:20:1d:cf:bc:a9:30:e8:c9:b9:93:6f:c9:e7:97:9c:d6:24:
2d:72:f9:be:6b:ab:3b:ea:3d:bb:0d:32:97:03:6a:0f:ed:b9:
13:bc:21:c6:45:06:3b:d6:c1:c6:8d:6f:cb:e6:4d:93:06:95:
ba:49:ac:5f:f8:d9:35:23:00:81:bc:51:aa:df:15:ce:b0:09:
4d:1f:c2:83:7d:90:59:90:7c:b7:9a:79:84:01:4d:f6:34:8e:
fd:79:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:43:57 2026 by rpki-client