
$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json)
Hash identifier: EBfSv2Ty08APSGwNDVkqu+6Tuc87FcFn8WEyhVa2Ob0=
Subject key identifier: 36:2E:A2:CA:95:AC:83:66:1D:F8:E2:3D:5F:32:A2:11:25:6A:E4:8E
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial: 1A18D253F567AAFB0E3EDA13AF7EE4CD4FEC7942
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
Manifest number: 03C0
Signing time: Wed 25 Mar 2026 06:11:41 +0000
Manifest this update: Wed 25 Mar 2026 06:06:41 +0000
Manifest next update: Thu 26 Mar 2026 07:56:41 +0000
Files and hashes: 1: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: UCfCYcfqXwUL1le+yP17n88i9noijD5swRdCB1oMKmE=)
2: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: BX4X6UEftKoFKpQeYjK4ShE2r9HBkWLwpezbEcslt+U=)
3: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: QR8q+2vhaE0GgDmRqjwo5xAEFQgodlUQtpoWgUIPRQ8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 07:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:18:d2:53:f5:67:aa:fb:0e:3e:da:13:af:7e:e4:cd:4f:ec:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Validity
Not Before: Mar 25 06:06:41 2026 GMT
Not After : Mar 26 07:56:41 2026 GMT
Subject: CN=362EA2CA95AC83661DF8E23D5F32A211256AE48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:b1:fd:fd:60:be:ec:da:47:4d:d9:f5:64:
cc:b1:92:b7:00:57:93:88:cc:b7:42:bc:68:4b:4e:
16:0c:2e:32:3d:46:92:ac:f4:88:a7:23:84:6b:34:
ec:34:02:9d:ed:93:9e:50:ae:c0:96:99:5c:1e:9b:
34:53:e0:b3:d2:77:c5:6f:e0:c6:53:f9:eb:1f:6b:
5a:7f:8a:21:65:26:84:83:32:58:5f:be:9e:6e:da:
36:8b:b0:4d:10:cd:ea:06:61:c7:99:64:4e:4c:c7:
b0:e2:87:51:d9:49:7a:8d:77:80:e7:d3:d5:02:a0:
30:b0:2f:19:39:d2:07:4f:a2:92:79:d7:48:0f:4f:
96:b7:93:ca:c4:84:49:69:55:32:5b:69:8d:8b:18:
53:c6:00:6d:4b:60:41:0f:b9:cb:0f:04:e7:bb:60:
b1:12:2a:2d:c1:1a:43:2d:1c:f5:95:03:c5:b4:60:
ca:c0:83:bb:58:0c:81:7c:4c:55:fd:df:9b:8e:09:
2a:d4:7f:d3:fc:d3:cc:81:75:df:f8:3a:87:a2:7f:
05:2e:f9:a5:12:eb:1b:c6:5e:5f:87:1b:a3:05:aa:
e3:4e:15:c8:49:27:16:92:03:bc:39:cd:8c:32:3b:
1a:48:72:4a:2b:3b:3b:a8:13:19:ff:b2:79:e9:5a:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:A2:CA:95:AC:83:66:1D:F8:E2:3D:5F:32:A2:11:25:6A:E4:8E
X509v3 Authority Key Identifier:
keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ae:f5:c3:3b:94:aa:85:e7:47:3d:52:71:2d:50:1e:fb:db:
ce:3a:85:bb:8f:b2:3a:0e:f9:4d:24:e4:ad:0b:46:54:96:4c:
7e:61:c1:29:72:c5:d5:5f:0c:37:42:3c:db:15:d5:71:2a:75:
0d:9c:8c:db:51:fb:53:8e:70:26:4f:dd:8f:79:96:e2:3e:4f:
12:c0:ae:24:ea:cb:12:46:dd:52:88:b9:95:61:83:d6:90:4e:
fa:53:33:52:e9:43:ca:3e:eb:0d:95:5c:19:09:df:9b:d2:7e:
5a:68:1c:03:10:dc:03:f5:d9:ea:4f:90:44:38:9e:89:25:4c:
a7:d7:48:b9:ba:a1:69:c8:ea:21:57:13:c0:92:a3:2e:e0:ca:
c3:36:ce:a3:bc:c3:36:c1:db:8d:c6:1b:5f:d2:cc:f0:96:0e:
4d:ba:8b:bc:af:5c:58:56:63:ed:85:a4:0d:19:3c:c3:b5:04:
69:08:72:4e:5e:4c:bc:d5:1c:97:86:39:e0:ff:f5:01:d5:ed:
05:5d:23:5c:9e:c3:8d:ef:a8:13:f1:4b:df:d9:53:e5:68:c4:
e1:0f:d0:b1:57:fe:d3:6c:0b:22:59:a8:ec:2f:18:90:cf:d2:
fa:b2:93:83:d3:c9:65:ab:05:20:e5:a8:16:9d:fd:fc:65:5c:
41:37:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:03:16 2026 by rpki-client