
$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
File: 2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft (raw, json)
Hash identifier: Dt93ycf5Qr9paJhZXRFeSsXUP1Q0TQECaeAYCeCSnhE=
Subject key identifier: 56:AA:B2:1B:AE:D3:1C:8E:7E:47:EB:64:FE:5A:EF:6B:97:37:28:8E
Authority key identifier: 2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0
Certificate issuer: /CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0
Certificate serial: 1A56D6E7B29C754E97ADE94E1B36B18FFE5BAB27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
Manifest number: 0E
Signing time: Wed 08 Apr 2026 14:05:11 +0000
Manifest this update: Wed 08 Apr 2026 14:00:11 +0000
Manifest next update: Thu 09 Apr 2026 15:57:11 +0000
Files and hashes: 1: E3BB93A402B2B2BD1B9E973D86B1B49828AF2F3F.cer (hash: AsmJqTOXBdy0axSnVZY+BIxJt9nV7s4rmgKtaIBo6+k=)
2: 2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl (hash: D57W0ceMNaD8kg99y4ZKSI2MS2p65iyJp63ij32bUCk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl
rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 15:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:56:d6:e7:b2:9c:75:4e:97:ad:e9:4e:1b:36:b1:8f:fe:5b:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0
Validity
Not Before: Apr 8 14:00:11 2026 GMT
Not After : Apr 9 15:57:11 2026 GMT
Subject: CN=56AAB21BAED31C8E7E47EB64FE5AEF6B9737288E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:67:40:e2:48:fb:be:bb:96:52:a9:9d:82:
e1:f7:02:83:5f:0c:3e:4a:4a:0a:a2:7f:19:d2:71:
5c:f7:82:5c:eb:56:1a:b0:6a:4a:e3:57:34:82:6e:
a4:43:b9:26:0b:d5:2a:39:25:49:7c:3e:2c:55:ae:
a7:1d:4c:df:b4:94:4f:89:56:67:8f:be:a7:0e:1b:
d0:f4:d6:68:c4:a0:38:52:ad:e6:e7:ca:2d:2f:a7:
a5:42:01:5e:00:91:d7:81:91:d2:b5:fe:90:99:3e:
d5:18:ff:40:69:c5:54:a4:db:d2:2e:9c:df:96:b6:
5d:e6:6e:99:2c:ef:29:2d:b1:6c:88:6d:88:61:45:
5c:6e:74:3f:38:78:77:2b:7c:0f:0e:cd:7c:54:75:
d5:a5:35:41:d5:11:0c:1a:e4:3e:62:1a:08:3d:6f:
fb:7d:bd:58:ea:83:91:58:26:10:ae:5d:b6:19:3a:
ef:ce:04:8a:f1:55:44:38:6d:d5:c9:57:a7:f5:78:
c6:7f:e6:a9:ab:30:c7:00:07:1b:8b:4f:91:41:a0:
75:36:36:37:3a:cf:74:cb:76:9b:d9:ac:fb:7a:8d:
78:d9:f6:fe:14:02:5f:2c:a9:15:0f:72:a3:8c:82:
71:27:fb:60:87:6f:fb:d3:a0:e4:3d:3f:1f:38:ea:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:B2:1B:AE:D3:1C:8E:7E:47:EB:64:FE:5A:EF:6B:97:37:28:8E
X509v3 Authority Key Identifier:
keyid:2F:3F:BF:ED:E6:76:3E:24:DD:D2:C3:A4:B9:E6:E5:AA:9E:45:3B:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/2F3FBFEDE6763E24DDD2C3A4B9E6E5AA9E453BD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:1a:19:68:c7:dc:42:50:c7:01:3c:36:37:c1:f6:c2:15:
a3:6a:e4:46:5f:20:98:b9:31:a1:ac:77:9b:ee:bb:66:d4:92:
d0:c4:22:c8:7a:c9:ec:a5:ad:fc:42:a5:15:b2:c6:bb:2d:71:
17:35:36:bf:49:9e:4f:52:0a:a6:e6:b7:88:74:14:68:5a:8a:
89:d5:b9:a0:f7:c6:d3:b4:9b:03:c8:5e:ea:7a:a8:84:1a:b6:
67:b4:a6:71:b2:c4:c1:53:94:91:92:3a:0f:d9:1f:5d:68:c4:
79:c4:68:ce:71:fb:f6:a2:d7:75:da:e9:5c:80:82:c0:47:8a:
ca:68:e0:d6:d9:27:f9:a5:d5:b7:33:e9:98:50:c5:81:eb:d9:
cd:fd:30:1c:ce:9f:63:66:66:d8:38:d5:36:da:94:d6:a5:2b:
a0:27:e7:0d:98:fc:6d:2d:07:74:67:bb:32:c5:9c:67:26:cb:
43:f4:e5:42:cd:86:82:bb:a3:9b:5b:de:1c:1f:60:b9:3c:5b:
d6:8a:1c:58:b7:5c:60:c5:f8:9f:fb:30:ca:a9:49:22:21:7f:
97:84:f3:1c:69:d2:49:79:e8:3f:72:a9:c2:17:c4:c1:0a:70:
1d:3f:b5:be:42:1c:c6:a2:7a:88:a2:1b:af:f7:43:b2:4d:d4:
53:17:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:17:45 2026 by rpki-client