
$ rpki-client -vvvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json)
Hash identifier: 71eCXiQixUBmjOzYo7cNB/rnmKALea7gYLWI0D4bC+A=
Subject key identifier: 7F:3E:66:76:90:78:E5:F2:1A:14:0E:22:98:46:B3:26:CC:80:8F:56
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial: 75C1FA07566E26F43D03EA38F44CA78E4562253E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
Manifest number: 020D
Signing time: Thu 15 Oct 2026 18:19:05 +0000
Manifest this update: Thu 15 Oct 2026 18:14:05 +0000
Manifest next update: Fri 16 Oct 2026 20:54:05 +0000
Files and hashes: 1: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: BAyQnsbSQS7avMz3MQTu9nikKAMfci1fpCG58jaBw4E=)
2: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: YWKrnbYgIeVW4vKjtQ4mkmrxaiS2jUAfjNZDr6nbfBk=)
3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: fBAPXrz9HDdLBnxC5VZSGZZlhRpGU63ZCbY+k1eTIZQ=)
4: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: QwFTFqEhnBK+xtJr8ArBd85hm4d1M4Y8skuEVrY1cqM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 20:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c1:fa:07:56:6e:26:f4:3d:03:ea:38:f4:4c:a7:8e:45:62:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Validity
Not Before: Oct 15 18:14:05 2026 GMT
Not After : Oct 16 20:54:05 2026 GMT
Subject: CN=7F3E66769078E5F21A140E229846B326CC808F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:d7:45:f3:da:d0:a9:20:51:b2:24:de:03:
84:6f:0a:23:21:eb:f9:a2:c1:7a:c2:9c:d8:a5:dd:
95:47:f6:19:38:63:21:95:6d:8e:ec:16:96:54:8c:
77:bc:6e:7d:51:4e:d7:13:1b:e4:83:fc:f9:6e:49:
ed:a6:43:f9:c2:cc:14:be:a1:4f:ff:1c:5f:85:85:
7d:02:a3:d8:31:fc:5a:7a:d1:af:2b:25:d1:9a:57:
2d:24:85:74:3a:c1:40:c4:e7:c4:7b:32:a4:13:71:
df:e3:be:9c:8e:43:20:7b:7a:68:6e:fb:2d:8c:03:
a4:f2:e5:36:6b:81:2d:d6:58:3c:b5:ad:c8:44:cc:
b3:1c:fd:8f:ca:3b:d6:f0:45:6b:a2:a5:5d:db:60:
0b:86:7c:d6:a8:09:0f:93:5a:c8:db:49:ed:60:30:
d3:c5:c1:69:d9:b4:ee:57:88:5c:57:1f:c3:21:bc:
1c:8d:c0:65:74:62:f0:89:9b:1f:ac:2c:a4:01:d4:
3f:49:a1:9b:7a:47:60:a4:a6:78:28:24:79:22:21:
3f:4a:d7:11:78:2d:68:cc:0c:f8:f1:78:7a:26:01:
74:f8:06:07:82:7a:9b:1e:73:a2:ec:ec:df:ad:e1:
fe:4e:f9:a4:95:de:71:50:97:2f:9f:5a:02:ac:87:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:66:76:90:78:E5:F2:1A:14:0E:22:98:46:B3:26:CC:80:8F:56
X509v3 Authority Key Identifier:
keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:92:f2:48:fc:cc:ad:48:cf:57:9c:4b:af:bb:04:a4:55:
9e:d7:59:2c:c3:8b:75:86:74:d3:cb:ac:f3:00:12:69:02:fe:
e5:d0:4b:bd:f0:bd:87:fe:c7:03:6e:bd:ea:ed:63:99:68:9f:
05:01:a7:48:f8:be:7a:01:b9:d2:52:7e:be:4c:28:21:c7:2d:
a7:99:5f:3c:98:f8:7a:6e:49:36:f6:2c:eb:16:34:c8:27:47:
a6:6d:50:69:40:84:41:b9:df:b8:21:a9:43:68:26:a3:8d:c8:
36:3d:07:ed:b9:9e:50:a1:04:f1:17:f0:e7:61:fa:96:26:85:
95:63:2d:62:bb:85:56:f1:19:76:00:b1:01:da:bc:0f:41:bd:
0a:7b:72:25:c6:06:c5:d8:fb:d0:ad:f2:e8:e3:b9:19:2d:04:
c4:d5:80:7b:9b:57:af:d7:b8:41:82:21:14:42:ba:19:2e:4f:
80:92:e7:d4:fb:aa:a8:cf:bc:6a:46:c6:c0:70:a6:2d:55:25:
0e:9e:05:ab:a6:10:80:0c:15:3a:f8:a4:95:75:12:fc:6d:69:
87:a4:fe:8c:bb:a8:7c:1e:df:20:ef:ec:49:2a:49:62:23:b7:
bc:6e:a4:f6:99:95:8e:74:e4:6d:bb:47:3d:55:00:d4:18:b6:
29:28:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:52:34 2026 by rpki-client