
$ rpki-client -vvf rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.mft
File: 31DC0C0B281B0CB85FD521C54914660BD36614E3.mft (raw, json)
Hash identifier: Jt28iY9oW0NZX7EM1UID8tkJsd9Xtb58ak0gr+mPY9w=
Subject key identifier: D7:34:82:80:C7:94:BF:28:32:1E:B4:9E:E1:67:71:26:BC:C8:3D:F5
Authority key identifier: 31:DC:0C:0B:28:1B:0C:B8:5F:D5:21:C5:49:14:66:0B:D3:66:14:E3
Certificate issuer: /CN=31DC0C0B281B0CB85FD521C54914660BD36614E3
Certificate serial: 53F8713634CC39F5350257DE7C90D26E185369A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DC0C0B281B0CB85FD521C54914660BD36614E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.mft
Manifest number: 21
Signing time: Thu 26 Mar 2026 15:35:28 +0000
Manifest this update: Thu 26 Mar 2026 15:30:28 +0000
Manifest next update: Fri 27 Mar 2026 15:55:28 +0000
Files and hashes: 1: 323830343a393763303a3a2f33322d3438203d3e20323735363433.roa (hash: wiwUvddtT/CaN1irpfvMCqy6tm2vdMB+7vBmb1sY9gk=)
2: 31DC0C0B281B0CB85FD521C54914660BD36614E3.crl (hash: K90gFhOJ67HSm2kQb0mv9XH6q/Dvfz4U4SJ54MSy6Hw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.crl
rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DC0C0B281B0CB85FD521C54914660BD36614E3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 15:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f8:71:36:34:cc:39:f5:35:02:57:de:7c:90:d2:6e:18:53:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31DC0C0B281B0CB85FD521C54914660BD36614E3
Validity
Not Before: Mar 26 15:30:28 2026 GMT
Not After : Mar 27 15:55:28 2026 GMT
Subject: CN=D7348280C794BF28321EB49EE1677126BCC83DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:2e:f8:a9:33:3c:70:01:7a:36:25:ab:35:
52:4c:58:fc:0b:5e:c9:97:16:ed:52:e5:9a:24:77:
11:28:1b:74:85:ec:ab:93:dc:c2:6a:fc:5a:fa:2a:
01:3d:19:ad:17:9c:c1:cb:50:1f:21:72:e9:40:82:
17:99:01:9b:d1:10:b2:52:53:90:c7:42:8b:65:86:
25:9e:02:3e:6f:0b:40:5c:b2:67:f7:f7:fe:83:f8:
fd:2d:28:1d:9b:4e:06:e0:3d:a1:61:6c:e7:10:bd:
47:1d:95:37:f9:e1:6c:e1:4c:99:aa:54:83:95:78:
bf:1e:a1:69:1d:8b:a6:da:7c:ac:c1:4a:4c:0c:de:
80:dd:de:61:81:c6:65:c2:ab:21:57:65:0c:da:19:
5c:f9:a5:7c:42:df:09:1a:fd:f7:1f:2c:28:1f:ac:
03:e6:aa:f5:e8:de:2d:75:1b:ce:c7:78:29:ab:50:
57:ab:34:34:34:f4:a2:9a:8e:86:da:b4:dc:b9:e1:
8e:7f:9d:e1:4f:39:d8:c5:42:64:35:76:91:d4:13:
b0:42:28:55:2e:68:59:fd:90:27:35:27:c1:b5:94:
90:0b:58:94:60:ea:bd:71:89:f0:c0:79:10:0b:b9:
aa:5a:98:18:3f:20:b3:e0:16:0d:65:b9:4d:08:5a:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:34:82:80:C7:94:BF:28:32:1E:B4:9E:E1:67:71:26:BC:C8:3D:F5
X509v3 Authority Key Identifier:
keyid:31:DC:0C:0B:28:1B:0C:B8:5F:D5:21:C5:49:14:66:0B:D3:66:14:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DC0C0B281B0CB85FD521C54914660BD36614E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:89:53:cd:9e:a7:27:65:bb:74:be:9c:98:ca:ae:b4:7b:
ac:df:04:16:52:da:15:0f:6f:54:69:c4:a3:6a:5a:d4:e8:a5:
3c:78:95:15:02:df:ca:80:34:6e:89:dc:1d:aa:2c:02:82:69:
19:1b:15:1d:01:c2:f0:00:d2:86:a8:25:97:9e:ea:f1:4a:32:
fb:1b:f3:19:11:69:d4:6d:30:04:90:87:09:a6:4b:3c:62:1c:
1e:15:60:46:1f:37:43:17:36:11:f1:d7:6a:4b:bc:6a:8b:05:
df:45:f8:44:72:81:a1:fe:cc:cd:36:18:75:70:27:1e:44:2b:
21:61:ba:dd:5a:fd:14:9f:b4:2f:21:2d:31:1d:4a:18:79:cf:
2f:c4:ac:e2:5d:99:f9:5b:5d:79:44:3f:de:80:70:f2:67:e7:
0f:d5:cf:62:c8:63:78:f2:7e:19:a7:2f:16:38:61:3d:bf:81:
78:3a:e7:18:4f:af:75:95:c9:82:01:ee:b0:bf:44:e0:ff:07:
46:28:c1:4d:21:5c:05:4d:8d:54:96:7c:ed:32:b4:41:95:d1:
a5:e9:a7:52:be:8b:b3:88:8b:67:7e:8f:5f:ae:c5:62:ba:ca:
8d:4d:ff:64:bd:c8:a2:de:79:e6:f7:a2:38:aa:5b:1c:06:17:
47:f9:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:40:05 2026 by rpki-client