
$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json)
Hash identifier: +DmD7FGcA/gyt+CsxhUVWXmH5lPGc7X5tuNjywYKjwY=
Subject key identifier: A4:C8:CA:10:B7:CE:64:38:46:AF:8F:A5:A3:1A:99:F3:81:1C:8D:A1
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial: 08F6F74F05A72AA07C736BD7703E3409A6639F85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
Manifest number: 03D1
Signing time: Wed 08 Apr 2026 07:00:00 +0000
Manifest this update: Wed 08 Apr 2026 06:55:00 +0000
Manifest next update: Thu 09 Apr 2026 08:00:00 +0000
Files and hashes: 1: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: eNGRoIC1MIZHrkwbT+gRbTqM7MTnVMuBG9EvAdA4qSs=)
2: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 3Vpf26/INv+eWHcXQ7mfZOqQtwrLqsaYRx7Y1pWfnUE=)
3: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: twhCXNYsxKUt2FAKh+PFseqgFgC5yGLvHauq/G9V2bw=)
4: 323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa (hash: IHCcdJHmK0uDqDY5atgymN1EVyt5Mw/EcbYmOHTF49g=)
5: 323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa (hash: 7/GkhFPFga6eSNEGWPf48bnfOxtD+TjVD74tqu8gyfg=)
6: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: Lo6va3ILT78gVxhhJeZusEhxBrkK4CWloncaSe5R594=)
7: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: kCGFK7YtNrfd2Qdx9oln7/DxL5CprsaWV3v3x5Dimdk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f6:f7:4f:05:a7:2a:a0:7c:73:6b:d7:70:3e:34:09:a6:63:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Validity
Not Before: Apr 8 06:55:00 2026 GMT
Not After : Apr 9 08:00:00 2026 GMT
Subject: CN=A4C8CA10B7CE643846AF8FA5A31A99F3811C8DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:d1:14:8d:61:4d:06:25:f2:c3:19:3f:1b:
a5:85:e4:46:64:30:95:8c:fc:76:b4:ea:5b:f0:73:
2d:e1:b7:aa:53:a8:b7:c8:81:3e:29:9c:5e:6f:f3:
74:6b:b0:e3:68:2d:36:41:4c:0e:7f:ed:6c:69:d4:
97:0a:56:18:c7:68:72:59:cd:b3:18:df:8f:a8:c8:
96:13:1b:93:60:85:0d:b8:68:81:84:bf:41:c8:37:
c1:73:75:f8:72:8e:da:b0:40:b0:d8:57:ed:cf:a0:
bb:eb:54:81:e8:c9:2a:3c:1c:c5:35:8a:72:57:64:
8d:d6:ff:4f:9a:96:77:6e:c5:36:60:5a:10:10:21:
be:26:cf:c6:b1:48:19:92:85:4f:5a:14:29:5f:6e:
8d:2b:b6:c0:0e:65:c4:fe:49:f8:c1:9f:f3:c4:d7:
63:7f:59:6e:de:0c:39:94:c4:02:c1:5a:3f:56:9a:
69:24:36:67:20:5b:d7:09:4f:c7:41:54:90:12:ff:
7b:d1:ff:ef:7d:3a:23:16:03:83:e7:e4:1f:bb:a9:
c2:28:c5:be:34:fd:2e:f8:c0:21:fc:e6:c5:da:19:
86:19:4e:30:bf:45:8d:d8:07:0d:22:a2:c3:1f:c0:
c4:81:2a:7f:c4:f6:ab:af:a2:98:f1:af:53:0e:61:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:CA:10:B7:CE:64:38:46:AF:8F:A5:A3:1A:99:F3:81:1C:8D:A1
X509v3 Authority Key Identifier:
keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:42:ef:a9:60:5b:ec:12:b6:b5:1d:a8:fa:fc:cb:ce:08:
76:ee:d5:52:82:cb:9b:96:fd:6c:41:c3:c5:dd:2e:2f:dc:67:
8e:28:fe:36:3d:6e:1d:d8:ea:0d:28:94:b2:55:b1:59:48:9d:
4d:5a:3a:d2:1c:64:5e:8b:1f:c6:81:56:d6:d2:46:27:f1:5e:
06:9a:4a:9d:12:5b:75:90:00:27:31:18:e4:79:a8:73:f3:1f:
95:ec:79:75:02:18:c7:c1:75:b6:38:53:90:62:b2:2d:69:8a:
e0:17:5f:79:77:bd:64:27:56:05:48:23:3e:11:1b:eb:79:8c:
85:ac:44:27:6a:6b:23:de:84:ac:46:12:92:05:a2:e8:8e:02:
22:d9:ca:c3:58:f9:46:9a:1d:d8:72:6c:a0:1d:94:22:fb:11:
d0:16:69:e3:4d:55:9e:51:b5:05:8e:fb:7a:d1:81:c3:34:c8:
ec:8b:41:07:ef:7c:ca:0a:42:22:67:02:67:0a:cf:f4:86:b0:
e8:64:26:99:23:de:d5:23:34:28:9a:f3:3e:57:88:d4:df:1e:
d0:fd:74:f7:e2:e7:e1:5a:79:1f:22:92:c4:c7:32:3e:f9:1d:
ef:d3:25:dc:cd:c1:3c:b6:51:a4:49:b8:2a:9a:6e:c5:da:55:
03:a6:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:44:43 2026 by rpki-client