
$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
File: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft (raw, json)
Hash identifier: gzd9ssxCPaxdAnVbLclDJX16oml1R/WCIEASbf0GUFI=
Subject key identifier: A9:C8:3E:EB:AD:71:9E:65:20:EF:E2:AE:0D:05:68:34:5A:07:47:8E
Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
Certificate issuer: /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Certificate serial: 30FD6A529680EE4FC50261079B4B7B9FD427E952
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
Manifest number: 03D1
Signing time: Wed 08 Apr 2026 05:08:14 +0000
Manifest this update: Wed 08 Apr 2026 05:03:14 +0000
Manifest next update: Thu 09 Apr 2026 08:38:14 +0000
Files and hashes: 1: 323830343a336131383a3a2f33322d3334203d3e20323636303730.roa (hash: kwhZxvJ1imUnmVCV+pvYAsi6nC3lMYiDRDXiVsnJhbc=)
2: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: wTVAwaH0BNYX5I69ioSYrWsbkEQ7T9VxfWhGYc1RCIs=)
3: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl (hash: DNrt4BhiGAwx0IUa01xAyoeN5UL4Oz+vJ2OygK+ANqQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 08:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fd:6a:52:96:80:ee:4f:c5:02:61:07:9b:4b:7b:9f:d4:27:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Validity
Not Before: Apr 8 05:03:14 2026 GMT
Not After : Apr 9 08:38:14 2026 GMT
Subject: CN=A9C83EEBAD719E6520EFE2AE0D0568345A07478E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:36:ae:c7:be:cd:df:f6:54:44:0d:6a:b4:
75:a0:0f:30:a9:16:4b:83:6b:85:ed:2d:00:47:14:
3b:56:59:92:bc:39:75:c5:52:34:57:a0:7a:04:58:
8e:a0:6d:68:7e:92:a0:a6:5f:ac:ac:a9:79:40:7d:
b2:41:b4:e7:39:ce:ba:b1:e3:c4:d7:3b:d5:77:39:
31:df:2e:9f:38:0f:f0:c7:c2:75:39:12:f4:18:24:
86:a9:07:1b:13:68:ba:25:c4:57:82:6a:cd:37:e8:
a9:e2:21:16:72:7d:08:ec:63:a2:f9:5b:2b:f9:b6:
e9:5e:81:83:d6:95:d5:9b:69:ff:93:be:e3:6c:13:
0a:b8:fc:7f:39:24:bb:96:6a:98:b4:fa:d7:64:06:
fe:ab:ac:a3:31:1f:5c:73:c3:27:52:71:ea:82:07:
ba:b3:94:2b:e1:d6:f7:df:ee:35:14:4f:82:be:a8:
fc:6e:34:74:29:8e:6f:59:98:66:ce:6b:a8:36:9e:
29:f3:5c:67:e5:b9:45:b9:5c:85:b0:e1:b4:7f:56:
b3:8f:43:da:c2:39:ec:18:55:c2:d2:79:0e:9b:54:
5c:60:c6:a9:e8:39:92:72:b1:db:62:d0:39:e3:a1:
da:36:e9:02:73:61:62:5d:49:4b:9b:93:bc:84:7e:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C8:3E:EB:AD:71:9E:65:20:EF:E2:AE:0D:05:68:34:5A:07:47:8E
X509v3 Authority Key Identifier:
keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2a:6e:ad:41:84:db:07:a5:0d:45:f4:d9:af:6f:7f:38:35:
40:63:03:41:00:1a:a5:ba:42:dd:33:e1:6d:50:ac:46:06:c9:
ee:a8:b3:84:cc:c3:95:1a:3d:f7:09:95:c4:c2:59:80:be:29:
3a:a4:9f:ee:e1:54:b3:24:a3:92:b5:e7:3b:0c:6c:22:d0:a8:
60:eb:0d:d4:f6:c2:54:82:69:3d:26:b0:3c:ef:4c:9c:48:0f:
1e:20:41:dd:77:2a:ac:ab:e4:4d:81:a1:b2:6c:6d:f4:67:04:
a8:4f:37:6f:d1:a5:0f:da:f3:9e:7c:3c:07:1f:b2:b8:a1:a2:
3d:ba:22:45:0c:cb:39:dd:2f:25:77:09:2d:c7:d9:9f:f8:e3:
00:d8:43:36:ac:63:c6:e7:ae:71:82:9e:08:b0:03:61:2f:5b:
5c:51:c5:78:f2:51:38:d5:d9:34:c9:4d:96:95:e7:31:52:e6:
85:88:6f:7f:1b:6f:b6:09:07:f0:89:62:87:76:d7:7a:c4:43:
61:a4:df:02:53:fb:fc:1c:70:74:d6:ea:60:97:18:7c:68:61:
5b:05:54:30:03:23:52:e6:00:6d:5b:97:a3:98:96:72:e2:06:
5c:af:04:92:2d:79:c1:10:6c:55:9b:27:de:18:58:27:be:ae:
8b:33:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:44:35 2026 by rpki-client