
$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
File: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft (raw, json)
Hash identifier: zA9soMieQlQdbQ3J7TtQ/EluQZ5ykmDcsB9jG20n9to=
Subject key identifier: 02:D7:BA:6E:BD:2E:78:EA:64:21:EB:92:55:FF:A4:43:99:28:D9:77
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Certificate issuer: /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial: 7DB16D8CF6FD2EE2D237F55D60AD36AF6ABB646D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
Manifest number: 0338
Signing time: Thu 26 Mar 2026 18:10:24 +0000
Manifest this update: Thu 26 Mar 2026 18:05:24 +0000
Manifest next update: Fri 27 Mar 2026 22:07:24 +0000
Files and hashes: 1: 323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (hash: 2RhvcmCViO7K6rvzNLUvrSfyH4uASVKfLVRVw16Kfio=)
2: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: TWgboQvD5ElxCD7GryGFp3lioM8xkrhIZhs+YOtG00s=)
3: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl (hash: S4UWS4wsy0UTbaxcatDStTm2mZd8ayvz5zj1RvyAUXA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b1:6d:8c:f6:fd:2e:e2:d2:37:f5:5d:60:ad:36:af:6a:bb:64:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Validity
Not Before: Mar 26 18:05:24 2026 GMT
Not After : Mar 27 22:07:24 2026 GMT
Subject: CN=02D7BA6EBD2E78EA6421EB9255FFA4439928D977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:12:fd:ae:8b:35:0e:52:3a:d4:35:32:53:
ba:ff:e4:c7:51:b0:52:9b:ec:5c:33:a6:1c:2a:33:
22:d5:93:84:02:bc:7e:04:50:ca:a3:6e:cd:d1:6c:
60:12:c5:0c:fa:49:be:20:2c:2b:a6:d0:16:9c:11:
a5:90:e7:6c:1e:03:8e:42:e5:e3:a1:c3:c1:ff:5c:
93:5b:dd:16:c1:a4:f1:6f:d0:25:0c:e9:08:66:01:
79:43:81:a9:79:a9:84:c5:69:44:1c:dc:b9:28:97:
d8:ce:c4:98:71:44:39:09:b2:73:74:d1:3e:0a:bc:
05:2f:72:ae:f7:0f:a5:97:90:a9:64:60:ac:a9:2f:
58:cb:67:93:3d:72:d0:f0:0b:6e:bd:0c:54:9d:bc:
ae:3b:c8:ee:9c:c6:67:d0:76:07:76:51:63:6c:3d:
1b:bd:df:e1:dc:34:38:a5:9e:88:34:d6:da:b6:a9:
a7:88:cb:37:a5:2c:03:16:90:2a:6d:13:8e:87:0b:
60:0a:a5:91:dc:dd:26:bd:06:31:8b:3b:23:96:03:
78:5b:9b:16:04:7e:79:79:9f:ab:19:f5:b9:9f:d1:
6f:ec:91:b7:db:c8:78:69:09:7b:3c:28:d8:be:19:
33:08:17:f1:f4:e1:e3:d3:ec:c3:78:4f:10:71:4c:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:BA:6E:BD:2E:78:EA:64:21:EB:92:55:FF:A4:43:99:28:D9:77
X509v3 Authority Key Identifier:
keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:52:7b:a0:97:83:99:0b:ef:e8:4e:f2:2b:57:fe:4f:ea:
15:c1:fa:dc:50:2c:d5:f7:5d:e0:96:f0:65:15:73:9e:5f:a1:
0b:55:a5:cb:21:dd:c0:b5:5e:2b:bf:6d:85:41:cc:7a:68:f5:
fa:cb:4c:59:48:0b:f9:36:4b:ef:bf:84:75:22:7f:f4:bd:85:
c1:8f:23:a6:ed:b8:35:06:e0:39:17:74:a9:b8:5a:9f:18:9e:
75:7d:82:54:7d:5b:13:2b:55:70:a6:e2:e1:fd:39:37:c1:b5:
7a:8a:5a:f0:25:2a:6f:e3:3c:e7:51:23:6d:24:32:3a:e5:27:
14:05:6a:c0:0d:f8:07:be:3d:98:91:dc:04:77:ea:75:dd:27:
9b:ec:03:1d:41:4a:46:93:75:72:4a:da:68:d0:63:6f:2e:09:
99:1e:d1:60:66:ac:7c:97:17:0f:0b:9c:65:4b:a2:ba:27:c7:
a4:86:0d:83:f5:6c:d1:de:dc:c9:85:7d:e7:70:43:c9:d6:c2:
3f:5b:91:7a:a6:40:bf:fa:27:23:3d:76:49:fa:3d:18:c0:da:
37:34:7c:a1:1a:44:2e:ff:f5:0b:43:39:fb:d9:f7:4e:40:22:
ca:1f:63:e9:86:0a:7b:cc:b5:73:e5:c9:f6:7d:39:f3:82:3b:
9d:80:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:05:00 2026 by rpki-client