
$ rpki-client -vvf rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
File: E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft (raw, json)
Hash identifier: 88WV5z9Oynwtgh2dvDvCw6MrGJtdYoMj6bFh0sNv6WM=
Subject key identifier: 32:DD:13:B5:29:44:43:D3:F5:F9:AE:DB:D3:70:90:4C:13:21:0D:76
Authority key identifier: E7:EA:C6:C4:C6:8B:3E:30:FD:F7:CE:7C:F1:BC:53:C1:A3:2A:0A:91
Certificate issuer: /CN=E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91
Certificate serial: 40F3045A3AA7F59D63744173C18DC4E05DD3D9E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
Manifest number: 3D
Signing time: Wed 25 Mar 2026 09:06:36 +0000
Manifest this update: Wed 25 Mar 2026 09:01:36 +0000
Manifest next update: Thu 26 Mar 2026 10:38:36 +0000
Files and hashes: 1: 323830343a323433303a3a2f33322d3438203d3e20323634323037.roa (hash: Aet46v0ERR9aWxIuxrpm5BErAhKOJS81dWT/gtI9aSc=)
2: E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl (hash: 5+ggKccZ64qyNGMXKMSqhxajCHgPqCs6ymI54cGQrT0=)
3: 3133382e39372e3231322e302f32322d3234203d3e20323634323037.roa (hash: /qXNrgRHyNqaCwOvStWQWU51T0vG5oK4N0SFyijLtJU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl
rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 10:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f3:04:5a:3a:a7:f5:9d:63:74:41:73:c1:8d:c4:e0:5d:d3:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91
Validity
Not Before: Mar 25 09:01:36 2026 GMT
Not After : Mar 26 10:38:36 2026 GMT
Subject: CN=32DD13B5294443D3F5F9AEDBD370904C13210D76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:16:fa:03:eb:72:eb:57:c8:c1:05:23:49:
9c:35:1a:a9:17:88:7b:f3:53:f4:7b:4e:82:2a:e2:
c5:f8:7b:38:f6:cd:e1:76:3d:b7:93:50:9a:b3:b3:
36:10:6f:a8:b7:63:b1:4f:7a:11:21:9b:7a:16:a0:
53:d6:cf:d7:b6:58:22:5b:a2:82:a1:29:c2:34:68:
ab:40:11:f1:ee:40:a2:f7:97:c4:8e:44:a4:f5:9f:
b4:1a:18:c4:ec:c2:17:69:13:6e:aa:c5:d6:d5:68:
03:8c:f3:aa:ac:13:a0:0f:46:74:d0:a6:ce:cf:07:
1e:18:e7:b4:41:7d:5a:5c:7c:e4:81:6e:d3:6f:51:
87:a4:60:70:51:b5:c6:b8:ff:82:59:3e:32:50:06:
eb:10:7a:5e:ae:fd:66:3f:8f:91:6b:55:9c:e4:f7:
03:5b:a2:90:c3:58:a7:1d:2f:ba:b2:40:d9:cc:54:
a7:28:ff:7e:65:1c:5c:2e:32:bc:d2:32:68:95:34:
12:3b:23:a5:ae:1d:a8:b7:8e:e0:0f:eb:af:35:c0:
48:24:27:ad:5d:7c:28:ce:e8:93:d6:0e:b6:81:0d:
0b:50:a9:13:04:3c:ed:77:e4:7e:a2:1c:e4:52:a2:
d6:49:bb:4d:b7:f1:8f:36:2f:50:b3:b2:8a:f9:10:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:13:B5:29:44:43:D3:F5:F9:AE:DB:D3:70:90:4C:13:21:0D:76
X509v3 Authority Key Identifier:
keyid:E7:EA:C6:C4:C6:8B:3E:30:FD:F7:CE:7C:F1:BC:53:C1:A3:2A:0A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:c2:c1:23:31:84:04:20:47:f3:08:f9:7f:19:dc:bf:de:
31:b6:4b:84:d5:fc:93:5f:26:92:6d:2e:c2:3f:34:cc:89:21:
4d:8e:04:2d:b1:d1:8f:f1:4f:7c:b5:db:f5:4e:44:ba:7d:5b:
4f:96:30:16:dd:b3:ad:3d:75:ef:a4:18:2f:59:59:43:79:0f:
94:7b:97:af:6e:55:31:5f:a6:a5:29:28:53:0e:ec:1d:eb:e3:
01:eb:f4:01:86:e3:d4:b8:43:78:33:08:61:b4:ec:2f:9e:b3:
11:4f:6e:7d:29:d0:51:dc:f9:3b:72:bd:1f:06:e1:25:55:ef:
17:6d:26:55:e3:84:45:0c:87:7c:7b:6b:8c:6e:3d:d1:1c:48:
73:63:5a:38:a9:9e:7e:62:27:80:ce:22:20:97:ab:bd:88:1f:
04:e5:1c:4e:f0:a7:37:a5:1b:44:c0:dc:b5:5c:d2:04:9f:22:
c6:e7:16:ee:a9:19:22:e6:c1:b2:45:bd:9e:67:ae:f2:a4:6d:
1b:43:95:13:17:7e:32:38:3a:18:10:37:2f:18:b8:b7:b8:14:
69:55:4b:87:3c:75:24:3e:ca:2f:1a:09:87:5c:7a:c1:40:c9:
88:23:85:bb:b2:91:80:9a:af:b8:39:42:21:06:16:28:45:b4:
17:a6:05:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQPMEWjqn9Z1jdEFzwY3E4F3T2ecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdFQUM2QzRDNjhCM0UzMEZERjdDRTdDRjFCQzUzQzFB
MzJBMEE5MTAeFw0yNjAzMjUwOTAxMzZaFw0yNjAzMjYxMDM4MzZaMDMxMTAvBgNV
BAMTKDMyREQxM0I1Mjk0NDQzRDNGNUY5QUVEQkQzNzA5MDRDMTMyMTBENzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFBb6A+ty61fIwQUjSZw1GqkX
iHvzU/R7ToIq4sX4ezj2zeF2PbeTUJqzszYQb6i3Y7FPehEhm3oWoFPWz9e2WCJb
ooKhKcI0aKtAEfHuQKL3l8SORKT1n7QaGMTswhdpE26qxdbVaAOM86qsE6APRnTQ
ps7PBx4Y57RBfVpcfOSBbtNvUYekYHBRtca4/4JZPjJQBusQel6u/WY/j5FrVZzk
9wNbopDDWKcdL7qyQNnMVKco/35lHFwuMrzSMmiVNBI7I6WuHai3juAP6681wEgk
J61dfCjO6JPWDraBDQtQqRMEPO135H6iHORSotZJu0238Y82L1Czsor5EDpBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMt0TtSlEQ9P1+a7b03CQTBMhDXYwHwYDVR0j
BBgwFoAU5+rGxMaLPjD998588bxTwaMqCpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR05FUnQ0RnhvZ0dkM1I0ZFdTMnlVMnVYb1dvTWlxOThubkVveGR0M25t
OXcvMC9FN0VBQzZDNEM2OEIzRTMwRkRGN0NFN0NGMUJDNTNDMUEzMkEwQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RUFDNkM0QzY4QjNFMzBG
REY3Q0U3Q0YxQkM1M0MxQTMyQTBBOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R05FUnQ0RnhvZ0dkM1I0ZFdTMnlVMnVYb1dvTWlxOThubkVveGR0M25tOXcvMC9F
N0VBQzZDNEM2OEIzRTMwRkRGN0NFN0NGMUJDNTNDMUEzMkEwQTkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAShrCwSMxhAQgR/MI+X8Z3L/eMbZLhNX8k18mkm0uwj80zIkhTY4ELbHRj/FP
fLXb9U5Eun1bT5YwFt2zrT1176QYL1lZQ3kPlHuXr25VMV+mpSkoUw7sHevjAev0
AYbj1LhDeDMIYbTsL56zEU9ufSnQUdz5O3K9HwbhJVXvF20mVeOERQyHfHtrjG49
0RxIc2NaOKmefmIngM4iIJervYgfBOUcTvCnN6UbRMDctVzSBJ8ixucW7qkZIubB
skW9nmeu8qRtG0OVExd+Mjg6GBA3Lxi4t7gUaVVLhzx1JD7KLxoJh1x6wUDJiCOF
u7KRgJqvuDlCIQYWKEW0F6YFLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:28 2026 by rpki-client