
$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
File: BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft (raw, json)
Hash identifier: i8JNW2YcPNVpX822Mfk5gAtcdnOTMnBklflYy+iKKDQ=
Subject key identifier: 08:B3:25:0B:24:5B:66:F9:97:29:41:F6:E9:EB:60:A0:98:4E:0E:6D
Authority key identifier: BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42
Certificate issuer: /CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42
Certificate serial: 1CDC60A8A2E5E4741C5B7BCA200B1E218BFB8E51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
Manifest number: 6D
Signing time: Tue 07 Apr 2026 22:18:12 +0000
Manifest this update: Tue 07 Apr 2026 22:13:12 +0000
Manifest next update: Wed 08 Apr 2026 23:42:12 +0000
Files and hashes: 1: BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl (hash: 8q+somwmCgw+X3oigN6HFVi7Dlbdk0wZi+NKqBr2YBc=)
2: 323830343a376434343a3a2f33322d3438203d3e20323731353530.roa (hash: ZmEJlxfCjB01FfOsgXaQherYYGrs/PAQPCRqSg5n1As=)
3: 3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa (hash: bmzUQKBGoCibwkCkfQLsT9Y7VMqYOw530WoffvJ5Z+E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl
rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 23:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dc:60:a8:a2:e5:e4:74:1c:5b:7b:ca:20:0b:1e:21:8b:fb:8e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42
Validity
Not Before: Apr 7 22:13:12 2026 GMT
Not After : Apr 8 23:42:12 2026 GMT
Subject: CN=08B3250B245B66F9972941F6E9EB60A0984E0E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:63:d3:51:64:04:56:5b:7a:82:31:19:6a:
34:93:c2:59:13:8b:b6:95:3e:2d:d5:fb:d7:25:b7:
f2:34:8c:3b:bb:21:f7:28:7f:d6:84:c4:7c:62:9b:
f4:f8:0a:ac:d4:04:6b:6b:6e:12:6b:c1:73:75:6b:
94:1d:0c:78:83:da:07:b4:33:f5:e4:53:98:f4:cd:
0e:4b:b5:fe:98:63:41:4d:00:88:dc:40:4a:5a:f9:
f1:dd:6d:84:25:1b:01:99:3b:cd:81:39:ae:8b:87:
46:cb:ce:5d:a6:e3:ef:08:54:98:e8:92:7b:60:2e:
81:0d:e6:df:fe:f2:79:1c:19:5b:60:cd:08:3d:c7:
42:bb:4a:11:e5:c2:eb:a4:d6:fd:7f:d3:c4:92:06:
95:41:46:9c:72:cb:bc:26:89:76:ba:65:24:53:1a:
37:ad:9c:05:01:41:32:20:79:64:d1:7b:a0:7a:05:
ea:cd:8f:40:1b:0b:f1:14:f4:6d:07:49:4a:31:4a:
c3:77:f5:a3:60:ca:78:bc:00:c1:19:4a:f8:c0:20:
9a:88:c7:9e:66:cb:0e:45:b7:f2:98:8c:22:5e:25:
09:ee:fd:ce:69:c9:c5:c2:7f:e6:2f:52:24:ca:61:
5b:0b:f7:e2:b7:e0:5c:7f:62:05:b0:7f:ce:aa:fe:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:25:0B:24:5B:66:F9:97:29:41:F6:E9:EB:60:A0:98:4E:0E:6D
X509v3 Authority Key Identifier:
keyid:BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:d8:4b:b6:1f:fa:91:55:f0:fc:48:92:af:12:31:59:9e:
df:f7:42:8d:45:62:d0:3e:b0:7c:3c:67:73:02:2d:8b:81:f4:
49:26:43:7f:8d:20:95:cf:1e:e4:89:05:6f:1a:d0:01:e2:82:
06:6e:82:58:f2:e2:f6:b8:03:7e:33:74:c6:7c:09:a2:cf:b7:
7f:1f:c9:09:90:a8:42:71:22:67:59:47:e4:0f:f3:5f:5c:35:
ae:8f:b6:40:83:55:8e:7b:39:4d:87:4c:c7:1e:6c:d8:d9:5e:
08:1a:f7:8d:17:15:b7:50:ed:43:47:31:a5:55:2a:a7:37:63:
41:15:7b:f3:f9:a2:10:a2:ac:60:8d:92:75:0a:b8:22:1d:7b:
28:36:fd:c9:4a:f9:05:88:8b:c3:43:7c:68:55:71:93:1d:96:
a2:07:78:84:8e:5d:42:10:26:6d:59:15:8d:7f:ac:01:91:fb:
51:68:a4:21:da:ba:eb:89:f3:68:da:13:b9:b5:37:f8:5d:6e:
25:1e:18:c1:3c:9e:9d:67:d7:6b:a8:b2:58:a1:16:15:3f:5a:
ee:2d:b9:dd:5b:05:65:40:b7:6f:4d:aa:c9:0b:a7:fe:5e:9f:
64:15:f3:c0:9a:3f:ce:cf:c3:62:28:e7:37:25:72:cb:b2:b2:
9c:7f:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:01:49 2026 by rpki-client