
$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json)
Hash identifier: 2/ABoIdVF6j12CqQks9JNZLLTaCD3UBLvuoPa1YtGPg=
Subject key identifier: 0E:5B:84:56:F3:BA:0A:22:51:FD:22:9C:49:14:9E:17:A1:AB:9F:47
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Certificate issuer: /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial: 52BFC707F65694BDD2F66D0115A77DA6D381EDB3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
Manifest number: 0299
Signing time: Thu 26 Mar 2026 16:11:03 +0000
Manifest this update: Thu 26 Mar 2026 16:06:03 +0000
Manifest next update: Fri 27 Mar 2026 18:08:03 +0000
Files and hashes: 1: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: 8qq0D51m5UmcvujuykD/oymQ6RkzcuwbrHhYa1VqM0o=)
2: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: 0v/IQuZRt8fOahBYOamSIWRCnGJvUKoedCirRCLNEWE=)
3: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: nwZpfdiD9lmHVEfGr7y7ft3lumKfAxBvAzwQfB72Avg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 18:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bf:c7:07:f6:56:94:bd:d2:f6:6d:01:15:a7:7d:a6:d3:81:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Validity
Not Before: Mar 26 16:06:03 2026 GMT
Not After : Mar 27 18:08:03 2026 GMT
Subject: CN=0E5B8456F3BA0A2251FD229C49149E17A1AB9F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:aa:f5:d4:2e:6a:fe:3b:30:bc:62:57:b9:
15:57:ac:c4:06:a0:b6:b3:0f:87:14:73:9b:84:34:
f9:c6:39:bb:09:2c:d0:35:a6:2f:7f:3c:42:ce:cc:
19:e3:df:a9:99:48:39:ac:d3:45:ba:9c:d1:bd:8f:
25:df:74:30:7a:4a:5b:17:ac:89:5e:78:a1:15:29:
c5:8d:b5:35:bb:c9:29:c5:ec:35:8f:ad:9b:77:5a:
6c:66:26:0d:77:33:7e:2e:1b:00:81:92:c4:ca:05:
7a:41:d7:7b:58:06:77:5f:73:77:6b:a9:40:f7:60:
2c:69:4e:e9:0d:bc:bc:35:cd:a6:53:a0:17:58:11:
14:ed:3c:1e:f9:94:3e:f5:e2:5b:ae:30:05:c5:fa:
44:f7:1e:42:cf:24:28:a2:2e:5f:f0:61:8c:87:70:
a5:5e:c8:29:1b:e1:11:34:28:cc:2f:21:c2:4b:df:
a9:0e:d7:36:6e:2d:22:ab:89:e5:ef:b5:8b:e5:c3:
2d:f1:9a:ff:d9:23:3b:a9:20:31:7f:3e:35:2a:28:
d1:4c:96:11:81:85:b7:7d:ef:ef:5b:73:7b:df:b0:
0c:ce:c5:ab:32:b5:b5:ec:cc:c8:04:17:da:d0:8e:
47:2c:39:f6:ce:02:68:77:de:eb:96:d5:4a:15:d6:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:84:56:F3:BA:0A:22:51:FD:22:9C:49:14:9E:17:A1:AB:9F:47
X509v3 Authority Key Identifier:
keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9a:83:43:e9:32:65:7a:a7:30:66:9a:93:a7:d1:34:21:9e:
bc:5c:31:5e:62:f5:f7:c3:b0:e8:15:7b:fe:50:e9:06:45:e9:
e3:39:c7:4a:a8:fd:c6:79:95:3e:73:fb:39:d5:9c:ba:e3:0c:
d8:8c:45:f3:70:96:b8:fd:e7:9e:f2:0e:d9:b9:63:f5:08:da:
b4:bc:6d:36:fb:e6:55:d9:4d:e0:b1:c8:df:a2:c3:fa:a1:a0:
dd:00:a4:cf:4a:8a:28:d6:fc:0d:19:f4:bc:06:41:bd:7b:30:
07:10:8a:e0:18:d6:f4:70:5c:09:80:39:a9:9d:5a:f5:96:1a:
89:66:ab:62:70:3c:3f:76:b8:26:dd:b7:07:26:68:a4:6d:54:
28:15:cf:9c:db:e6:d7:88:ec:8e:2d:38:27:9d:45:fc:f6:2b:
9e:01:26:cb:f7:fa:37:64:52:ee:c4:a2:21:5e:7f:db:4e:cd:
14:e3:77:bb:25:b1:53:04:eb:45:08:ee:26:bb:c4:7d:d1:7c:
02:64:ac:7f:ce:8b:7b:1f:f3:ce:9e:75:3c:19:0d:1f:d9:09:
b0:19:e2:5f:53:32:8d:0a:37:da:02:7c:4b:8b:51:17:18:33:
21:5f:c1:3e:51:a5:8b:5c:bf:06:77:d0:1d:da:b8:4c:8e:60:
c7:90:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:22:04 2026 by rpki-client