
$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json)
Hash identifier: 6pvuYSnwWjrJLkDfXNd/yp1LFNUNUUpg4coF07O80XE=
Subject key identifier: 93:49:E7:CD:CD:D1:03:CC:5F:06:85:64:12:54:25:85:0B:28:6A:18
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial: 0A0FE13C9DE93DD31FE9BA18278DBBFA9418E3D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
Manifest number: 03C0
Signing time: Thu 26 Mar 2026 15:10:47 +0000
Manifest this update: Thu 26 Mar 2026 15:05:47 +0000
Manifest next update: Fri 27 Mar 2026 18:12:47 +0000
Files and hashes: 1: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: fZyHzJT3VMfzrLVfAm0PLYbLw1pbRxM3n1RxgZWDQOs=)
2: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: 02Ifct7s18goEyBDeWIdKu9ey75R5DkhKyls76plavU=)
3: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: 5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=)
4: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 1IHIztD+R8B7aYdP7wuNoDyk63HEbzqm4EctFN0Xl8o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 18:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0f:e1:3c:9d:e9:3d:d3:1f:e9:ba:18:27:8d:bb:fa:94:18:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Validity
Not Before: Mar 26 15:05:47 2026 GMT
Not After : Mar 27 18:12:47 2026 GMT
Subject: CN=9349E7CDCDD103CC5F068564125425850B286A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:c6:6f:42:f0:d5:3b:5f:84:76:f3:3c:29:
3a:09:e3:38:e5:06:0a:b5:64:34:13:2a:f4:98:3c:
91:f2:30:7c:73:7d:51:a9:ae:22:c4:df:69:da:65:
2b:b7:60:36:04:ac:2e:6d:9a:2c:bb:c8:7b:8b:64:
d2:05:5d:b0:ac:22:f6:1b:a8:4f:78:13:b2:30:93:
9e:69:8c:dc:b9:92:e4:4f:c4:62:a6:0a:88:75:9c:
4d:83:7e:91:08:d6:e5:72:7e:c0:d7:5e:3b:54:a9:
21:e7:77:2b:a5:c5:6e:76:3e:41:3d:96:1f:17:6d:
3c:5e:8a:1f:34:fc:1d:34:0e:fb:df:69:a5:a3:a1:
ab:2c:97:5b:8f:e0:e2:43:f5:ad:90:59:f9:96:44:
a8:da:c6:10:40:68:22:02:57:b6:9d:11:e6:89:73:
c8:88:c8:28:53:55:fd:2e:24:06:fa:20:f6:70:fc:
9c:0a:fb:e5:4a:e3:f1:77:35:4b:4d:f3:77:9b:ee:
ac:e6:a3:31:26:b8:c1:0a:31:fd:a7:03:26:5f:6c:
af:e7:06:27:41:27:37:c2:d0:fc:81:bb:77:e9:ab:
6b:9b:de:86:89:7a:58:09:47:4e:9b:fa:c2:af:d2:
9b:39:76:31:89:ab:75:6e:5b:02:24:47:f7:01:92:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:E7:CD:CD:D1:03:CC:5F:06:85:64:12:54:25:85:0B:28:6A:18
X509v3 Authority Key Identifier:
keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1a:53:c7:06:9d:74:ed:e2:cc:d7:f5:9a:62:6f:c6:9b:30:
1e:ae:58:db:16:fe:ad:89:d8:7e:7d:4e:0a:50:4a:94:27:06:
84:7f:94:aa:23:c2:26:3c:23:ea:11:5d:96:6b:f1:b1:19:93:
6a:bd:fd:6f:cb:17:36:8f:dc:ea:29:9f:a3:c8:75:ce:a8:08:
59:6b:a0:81:18:0f:e2:c5:12:7d:62:24:75:c9:ad:06:88:52:
60:ec:cd:3e:76:d6:37:24:25:70:7b:d5:9f:11:89:b6:a7:65:
47:c4:76:c8:9e:89:c1:bc:62:24:6b:97:00:05:60:37:b4:79:
50:b2:b9:1f:55:c9:77:13:2c:ba:2f:04:ec:63:fb:16:5a:b8:
b3:7a:78:b5:a4:46:c1:3d:05:6f:cc:8d:ac:f8:18:2e:ec:fc:
0a:9c:bf:80:c3:15:eb:70:0e:14:ed:0b:13:1d:32:1e:59:68:
df:a9:40:c3:da:5c:59:13:52:0d:db:65:be:2f:1d:6a:02:b5:
52:39:92:59:ab:8b:c3:26:d7:10:f4:45:ed:48:52:c8:48:4d:
2f:02:79:de:5e:2a:e9:fd:55:fb:a1:07:18:ad:d0:e5:48:f1:
1b:5b:d6:73:b3:d4:00:e5:f0:64:c3:f1:eb:d3:bc:44:2c:b9:
86:a3:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:58 2026 by rpki-client