
$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
File: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft (raw, json)
Hash identifier: 60KVTzzUUahzLfPO45k685kskddSt9tqD1EPuPFWFZE=
Subject key identifier: FA:1E:28:91:79:4F:14:CA:C2:8A:FE:3A:D8:62:B5:0E:11:92:B7:10
Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
Certificate issuer: /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Certificate serial: 75FA0B8ABC39C603FE283D8B9AB89B772CD461E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
Manifest number: 02A1
Signing time: Thu 26 Mar 2026 14:56:14 +0000
Manifest this update: Thu 26 Mar 2026 14:51:14 +0000
Manifest next update: Fri 27 Mar 2026 15:12:14 +0000
Files and hashes: 1: 34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (hash: aevkZNp1r0p7IWRIUz8od2ybg+zKEryAACHQcwg1UxI=)
2: 323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (hash: XH1N2cfxCmBT8VcK9qJsDfraONQoZ81C4Yo8ki7quN0=)
3: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl (hash: beKRBCFZBHPNESmcZ1xQ2R0m7GfEVIiTETb+QYLimlc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl
rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 15:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fa:0b:8a:bc:39:c6:03:fe:28:3d:8b:9a:b8:9b:77:2c:d4:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Validity
Not Before: Mar 26 14:51:14 2026 GMT
Not After : Mar 27 15:12:14 2026 GMT
Subject: CN=FA1E2891794F14CAC28AFE3AD862B50E1192B710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:d8:62:1d:e2:ee:f8:40:68:ab:68:28:cb:
d9:a6:f6:b9:45:95:59:c0:0f:d0:42:08:58:03:bb:
4e:66:40:d6:54:7e:92:5f:ef:da:00:5b:5f:43:88:
dd:1a:ef:8e:11:98:dd:8c:f7:41:36:2b:e4:15:e8:
1c:1f:c0:96:64:cd:97:91:35:81:ef:b7:ef:f4:cc:
f6:9b:85:07:09:31:36:e6:c2:87:d4:f6:9b:56:ae:
7b:87:85:3e:16:c1:9b:15:03:b0:e1:b7:50:ac:04:
29:1e:9c:2f:84:25:1d:74:ff:6f:e4:95:ba:4a:ab:
5a:d9:be:94:d5:ce:5d:1b:a3:92:2c:d8:71:68:d7:
d1:ef:3a:75:71:9d:f7:23:52:e8:41:15:1c:e1:02:
64:d0:95:c0:2e:ff:0c:66:79:48:ca:f0:be:07:af:
86:8f:c8:11:10:d4:9d:c8:5c:bb:c8:d0:03:f9:60:
64:c1:7b:48:e0:8b:fa:fb:16:78:f1:82:bc:a1:df:
fb:95:69:3e:f6:71:95:e8:e9:6f:e9:f0:aa:dc:b2:
92:6a:61:e4:76:cc:7d:3c:b7:41:61:7d:e3:5a:9e:
cb:a9:be:f3:52:3d:6a:66:cf:67:14:02:fe:16:99:
ca:c2:da:ed:db:44:3c:d6:8e:31:6c:71:38:13:7c:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:28:91:79:4F:14:CA:C2:8A:FE:3A:D8:62:B5:0E:11:92:B7:10
X509v3 Authority Key Identifier:
keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7d:0b:84:11:04:5f:60:2c:65:a5:f2:b6:64:bf:d9:47:55:
82:e4:24:3c:aa:e9:a0:bd:90:18:96:f3:43:12:9c:bf:96:c1:
f8:2f:3f:6d:e7:be:cf:09:52:84:bf:e5:be:9e:c0:f6:e0:44:
e9:f0:32:a9:be:3e:7b:ca:91:0d:a5:33:d2:e3:4f:6c:e2:27:
b8:42:fe:bf:77:b7:b4:bb:f7:70:56:e3:2c:66:58:00:6e:65:
ab:42:84:c4:3f:a1:0c:33:41:1e:31:00:02:d9:38:43:6c:a0:
bf:33:8a:99:d9:7c:c5:8f:a7:bd:e4:51:cb:33:eb:f8:93:46:
5a:d7:24:e0:ae:6c:b8:04:f3:c1:19:67:59:7e:2a:8c:51:c9:
7b:1d:65:e9:61:f3:2b:05:92:7c:c6:d7:a3:17:f7:3f:ba:bd:
07:e5:bf:b6:3a:cc:ed:37:77:ea:40:9e:6f:86:a2:36:d8:84:
d0:a3:65:68:6b:8b:a0:c6:59:f5:63:46:1a:33:69:71:d1:d9:
db:71:45:d9:ec:f9:9b:ab:df:43:3d:e4:1c:f1:78:34:74:92:
e4:dc:e7:46:64:93:a0:86:5a:e0:1b:1b:b6:07:ec:f6:6d:2d:
75:3a:56:36:a0:44:b1:f4:a0:f3:ce:b1:74:a9:6b:e6:c2:22:
7b:f9:a0:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdfoLirw5xgP+KD2LmribdyzUYekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJFODk5NUZDOUMzOTUxNDVBOTc0NTZCNjQ0NDJBQzY4
QzBERjRFQjAeFw0yNjAzMjYxNDUxMTRaFw0yNjAzMjcxNTEyMTRaMDMxMTAvBgNV
BAMTKEZBMUUyODkxNzk0RjE0Q0FDMjhBRkUzQUQ4NjJCNTBFMTE5MkI3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDZNhiHeLu+EBoq2goy9mm9rlF
lVnAD9BCCFgDu05mQNZUfpJf79oAW19DiN0a744RmN2M90E2K+QV6BwfwJZkzZeR
NYHvt+/0zPabhQcJMTbmwofU9ptWrnuHhT4WwZsVA7Dht1CsBCkenC+EJR10/2/k
lbpKq1rZvpTVzl0bo5Is2HFo19HvOnVxnfcjUuhBFRzhAmTQlcAu/wxmeUjK8L4H
r4aPyBEQ1J3IXLvI0AP5YGTBe0jgi/r7Fnjxgryh3/uVaT72cZXo6W/p8KrcspJq
YeR2zH08t0FhfeNansupvvNSPWpmz2cUAv4WmcrC2u3bRDzWjjFscTgTfP+tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+h4okXlPFMrCiv462GK1DhGStxAwHwYDVR0j
BBgwFoAUG+iZX8nDlRRal0VrZEQqxowN9OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002
S3IvMC8xQkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTg5OTVGQzlDMzk1MTQ1
QTk3NDU2QjY0NDQyQUM2OEMwREY0RUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002S3IvMC8x
QkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbX0LhBEEX2AsZaXytmS/2UdVguQkPKrpoL2QGJbzQxKcv5bB+C8/bee+zwlS
hL/lvp7A9uBE6fAyqb4+e8qRDaUz0uNPbOInuEL+v3e3tLv3cFbjLGZYAG5lq0KE
xD+hDDNBHjEAAtk4Q2ygvzOKmdl8xY+nveRRyzPr+JNGWtck4K5suATzwRlnWX4q
jFHJex1l6WHzKwWSfMbXoxf3P7q9B+W/tjrM7Td36kCeb4aiNtiE0KNlaGuLoMZZ
9WNGGjNpcdHZ23FF2ez5m6vfQz3kHPF4NHSS5NznRmSToIZa4Bsbtgfs9m0tdTpW
NqBEsfSg886xdKlr5sIie/mgtQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:45:20 2026 by rpki-client