
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier: ke1SY5Y7JmP+gFKe32Z0Xt4ZVwUj7ya+WetR1H0T5HY=
Subject key identifier: 61:00:3D:73:CF:50:A1:F2:15:6B:F2:D5:19:95:1F:96:CA:2E:EC:CE
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial: 64A2AAA0A4EEDA3306198F537A4C44AA3A1153FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number: 0334
Signing time: Thu 26 Mar 2026 20:10:38 +0000
Manifest this update: Thu 26 Mar 2026 20:05:38 +0000
Manifest next update: Fri 27 Mar 2026 21:55:38 +0000
Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: 6MSp4fCqyn1W3NP8N4HrnuQG6doGW/TMPN0YhPtFZlU=)
2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 21:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a2:aa:a0:a4:ee:da:33:06:19:8f:53:7a:4c:44:aa:3a:11:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
Validity
Not Before: Mar 26 20:05:38 2026 GMT
Not After : Mar 27 21:55:38 2026 GMT
Subject: CN=61003D73CF50A1F2156BF2D519951F96CA2EECCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:7f:b9:bd:e5:52:4b:d2:63:5d:2f:eb:cf:
43:01:fc:f6:33:d8:e4:fe:9f:43:99:9b:d9:18:3c:
a0:b3:70:99:0f:44:d8:80:4d:8f:30:30:fa:03:de:
15:f9:23:f1:75:49:0a:34:0f:7f:e3:02:7d:c6:de:
62:ab:09:54:04:08:ec:fb:5b:bc:71:2e:d7:06:92:
e0:d3:e4:99:c9:58:e1:ad:e5:25:a7:9e:4a:81:02:
f2:ab:4d:97:47:eb:de:dd:cf:a9:c6:ed:71:64:45:
ff:76:73:b9:79:50:d0:cc:9d:be:42:1a:37:45:e4:
35:85:ef:9d:1a:d5:42:27:43:78:f4:5c:45:9c:74:
83:07:0b:69:61:13:75:76:c3:78:c9:e7:95:11:28:
66:0e:d2:fe:7f:50:2b:c6:f0:44:1d:11:a2:da:65:
70:3c:dd:0e:67:4b:59:01:65:b9:39:3e:b4:1d:1f:
ec:5d:5a:81:3c:c1:d2:cc:2b:89:b3:c1:f6:8c:cd:
bd:65:66:92:78:79:79:54:61:f5:1d:16:d1:e4:d9:
db:cc:31:6a:7f:9e:4f:00:36:c5:82:fb:7a:51:bf:
e1:96:24:c7:33:14:41:13:79:dc:9f:2c:8f:64:95:
82:1d:f2:28:f7:ae:2a:f2:b5:0a:4e:5c:a7:31:5c:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:3D:73:CF:50:A1:F2:15:6B:F2:D5:19:95:1F:96:CA:2E:EC:CE
X509v3 Authority Key Identifier:
keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:63:7f:7f:d8:04:b5:e1:c0:73:05:04:45:ad:0a:01:e9:92:
3b:55:b3:22:62:3a:85:87:2b:bd:ed:c2:24:94:f3:b5:d0:a6:
63:bf:70:fc:7a:41:61:c0:a0:43:42:5e:8b:38:4e:9a:b2:4b:
53:4f:b9:df:71:41:08:fb:52:83:1c:55:98:d0:d8:d1:63:1a:
eb:2f:d0:dc:79:be:be:47:be:4c:9a:21:2d:e3:97:92:fb:67:
7c:53:9e:c4:4e:fe:92:1d:78:1f:e8:8b:23:38:bc:ef:f6:d0:
11:d1:0f:ba:4c:fd:4d:2f:cc:87:2e:aa:ea:c1:36:f0:4d:11:
b7:96:81:5a:1d:e4:ad:c8:91:ed:6c:0a:80:3c:c9:18:01:20:
89:f3:88:10:40:eb:94:53:ff:00:86:5a:f1:63:52:9a:74:49:
e4:05:f5:d9:69:42:fa:ca:89:31:d6:87:31:2d:ec:9e:df:c8:
af:40:71:21:34:4d:4e:35:bd:fe:33:e5:17:33:a4:26:54:3a:
ab:3e:47:d9:4e:e2:98:61:20:18:d1:ea:16:14:3f:3c:dc:c7:
f9:2c:10:37:3c:5c:12:55:b5:11:59:d6:63:2c:72:cd:0f:d6:
c8:6d:1f:98:f3:b3:9a:1d:95:1b:4e:40:a7:3c:81:e3:e3:7a:
1b:6d:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:19:34 2026 by rpki-client