
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File: CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier: tX+r9ezOBgAq+qrylv9300ripmZ63cUsE7ewv9X+16g=
Subject key identifier: DC:42:E3:E1:E0:ED:86:3A:FC:61:7B:41:19:8D:BA:58:B7:42:19:91
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 46560824860D557EB9452622F2C220AE4BB7BFBC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number: 03BD
Signing time: Thu 26 Mar 2026 00:16:40 +0000
Manifest this update: Thu 26 Mar 2026 00:11:40 +0000
Manifest next update: Fri 27 Mar 2026 02:58:40 +0000
Files and hashes: 1: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: xAF/9vEKF2e/T8IofVq99wh/I2lOBrEY20yGnAaSgF0=)
2: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=)
3: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 9NaA8Dq04c7j0pLtLEkFvCIZPUGfEE8aa950uY+eEJs=)
4: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wLIsioKqEUKS9TMeNf/n9LEYrLxpZbmg2+NMq5W8NRo=)
5: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: 2nczleJFPRyvFicJVGQltpFOvvykoBSvwigtbcxyl9Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 02:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:56:08:24:86:0d:55:7e:b9:45:26:22:f2:c2:20:ae:4b:b7:bf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Mar 26 00:11:40 2026 GMT
Not After : Mar 27 02:58:40 2026 GMT
Subject: CN=DC42E3E1E0ED863AFC617B41198DBA58B7421991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:7f:c2:c3:d8:83:fa:61:11:21:87:26:ca:
1a:24:96:fc:47:94:48:b9:14:0e:5a:8c:58:46:28:
a3:62:eb:12:34:d2:d5:1b:63:2d:d1:de:16:ed:3a:
44:c8:37:6a:b5:44:9e:9a:01:24:7a:38:d4:9a:de:
05:d6:f4:0b:6f:93:ef:55:be:2e:86:9a:ce:3b:51:
06:87:7b:8d:0a:d9:33:fb:c7:0e:2e:5c:7a:e4:f2:
29:15:8d:10:d3:b7:b5:30:c7:ff:64:dc:a8:e0:44:
fc:b7:65:13:3d:a1:9e:48:c5:99:19:2b:b2:12:51:
30:2e:df:72:1a:04:88:76:b5:d9:17:ff:53:63:aa:
35:51:62:c9:12:2b:3f:c0:fe:a1:3f:a2:58:7b:a4:
0f:38:e4:e6:b5:fc:fa:ee:8c:ac:a3:25:91:56:8f:
d2:8a:b5:0c:29:6e:f0:c9:cb:79:fc:fa:73:c8:01:
97:ca:6f:5b:e8:e5:14:69:ed:d3:0b:6d:ed:cf:53:
e3:b3:40:e1:96:3c:b8:f7:8c:c4:cc:64:a6:63:62:
d2:3f:57:9a:b5:b7:c3:44:aa:b5:a2:f2:4e:5b:1c:
bb:ae:6c:7c:16:64:7a:8a:1d:00:b5:52:0c:6a:72:
5b:fc:89:37:8b:3b:e6:41:18:49:dc:60:db:27:33:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:E3:E1:E0:ED:86:3A:FC:61:7B:41:19:8D:BA:58:B7:42:19:91
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a2:fa:1e:a1:71:df:06:e2:48:9a:1c:3f:41:e1:ae:47:1b:
51:fc:12:e3:7f:86:1e:a2:58:d6:0b:e7:31:d2:06:75:e2:46:
f4:e9:08:3b:ce:01:27:63:81:97:63:04:3a:31:99:8c:67:18:
9f:7f:f6:bf:32:e5:ee:31:ab:64:51:fd:2c:ee:ef:9b:58:1a:
04:87:9c:80:d3:5f:99:6c:f6:f1:6e:13:63:36:68:9b:d5:44:
9e:b5:e9:47:9f:ab:95:e7:95:18:3c:24:bc:2e:23:95:35:b3:
ee:c1:44:c6:8f:1f:16:d2:e7:6d:ac:06:03:e4:7f:cc:e7:fc:
a6:e2:07:d9:26:06:d5:de:aa:87:98:82:f9:be:3e:24:f6:bf:
8f:5a:0d:98:f8:b0:a8:1a:65:e5:d6:b4:6d:0b:aa:45:3c:6a:
45:ba:37:48:46:d3:e9:50:cc:63:5e:fa:2e:28:57:a7:46:95:
f4:b0:86:b9:cb:54:a0:af:3c:81:56:80:e3:96:c3:b9:27:33:
97:ca:f3:e8:45:95:28:26:5d:0f:15:ae:ed:73:86:8c:f8:d0:
d0:bf:c8:bb:94:ac:5a:e4:5d:42:16:b0:d0:3e:16:29:82:88:
46:81:0c:14:85:b3:80:cf:48:a4:ed:9c:c2:89:79:bb:45:d4:
22:83:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:12 2026 by rpki-client