
$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
File: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft (raw, json)
Hash identifier: AnqnuRgX+kypVHcpt+PLyfXvdlCDT3p2vk75tR9vu5k=
Subject key identifier: 30:91:B2:93:5A:E0:D7:2D:96:A9:B8:A8:86:85:7F:7E:60:93:CB:87
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial: 45869923870D1C0CEE8A7B36009B06D0AAB8D99C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
Manifest number: DF
Signing time: Tue 07 Apr 2026 22:20:00 +0000
Manifest this update: Tue 07 Apr 2026 22:15:00 +0000
Manifest next update: Thu 09 Apr 2026 02:12:00 +0000
Files and hashes: 1: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: 4V+6bYZM6miTcjX4cUxwwTV04DPj178N71VFyeduAls=)
2: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: QHEst9KOaGTCe++2DSDc7BnCEcRJHgpOE3KiiqgEcZo=)
3: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: ZhFhABfoMVGkxDSgbxcGwBkoncabPhBqubYQ1lTPGPc=)
4: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: 2Oe95y6H4KTa4uJ/WvYOY5900aXdCTqijgnRLZUWeHw=)
5: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl (hash: sChUT/pl66rhv/V4SX8g/cjrX+ZoofXjyrLf7Pj8Qf0=)
6: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: Jfp73BJ+v/xetbveN5mHCXdfPQOPKlBItCea9bLVPSQ=)
7: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: htt8/wfW6Hxe+9jIDzOcmBE4SC+NwwnFzJbq7+OCYFE=)
8: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: uCF/NQdsS1kJnzmC+uhdurLB+o61bwvge8YWOMYv/TI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 02:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:86:99:23:87:0d:1c:0c:ee:8a:7b:36:00:9b:06:d0:aa:b8:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Validity
Not Before: Apr 7 22:15:00 2026 GMT
Not After : Apr 9 02:12:00 2026 GMT
Subject: CN=3091B2935AE0D72D96A9B8A886857F7E6093CB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:cb:10:7e:b9:9d:d5:31:d2:fa:e0:ae:89:
06:45:a7:3e:65:0f:a5:5f:59:0f:fd:eb:6a:7c:21:
07:85:bf:39:14:b7:4a:06:97:2b:72:32:bc:91:a2:
5a:5e:12:69:51:f3:99:9e:64:e6:2c:db:0f:4d:63:
24:14:db:de:91:7c:c2:31:42:bc:20:bd:d3:f2:34:
b8:2c:04:c3:48:cc:fd:61:76:72:42:c5:2f:a3:50:
65:ff:42:0e:91:ea:3e:ad:33:96:2f:f6:51:9c:3e:
8f:63:f4:c1:4b:29:bd:b9:12:fa:51:7d:4f:73:96:
eb:53:7d:80:bb:8d:f0:da:89:ba:9c:8b:50:9d:fe:
cf:38:42:4c:ef:4e:24:4b:31:bf:f2:79:df:fd:3d:
ef:38:eb:1d:dc:c3:43:99:04:83:c3:4a:77:79:b0:
7b:99:37:88:b8:b2:9b:72:a7:da:b0:1b:d6:24:f6:
79:57:95:d6:e0:a5:ba:3f:23:e3:4d:e7:a5:40:29:
98:10:c5:7f:24:74:a6:85:e8:2e:18:95:f1:82:b0:
35:ca:14:0a:60:19:23:0e:38:59:e5:6a:d4:9e:43:
7f:fb:3a:e9:ef:97:62:93:e0:dc:a8:1f:6d:4a:d5:
2c:bf:08:26:81:bd:97:a8:80:a1:9e:a1:d7:94:e9:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:B2:93:5A:E0:D7:2D:96:A9:B8:A8:86:85:7F:7E:60:93:CB:87
X509v3 Authority Key Identifier:
keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:08:44:ca:2b:60:a0:1a:ae:33:44:e1:a6:2d:61:4e:30:b4:
92:af:ab:77:c6:f2:45:15:de:df:c3:58:fa:f7:81:95:b1:34:
c5:5c:5e:94:fe:3c:1d:d5:b9:c0:24:a0:3d:6c:78:85:53:2c:
46:6d:ca:95:2e:6e:6c:95:8e:98:f7:0b:bf:14:8f:e4:49:20:
73:0b:0c:5a:4b:b4:66:57:11:d1:d1:ca:d5:92:05:ba:6c:92:
a4:eb:86:64:70:1d:2b:9f:f2:ee:af:34:05:5a:78:b9:d0:2d:
fe:3d:2f:ff:d4:27:69:3d:84:8c:11:6f:31:8e:27:08:c5:06:
8f:26:74:94:ff:2f:f7:83:81:8a:f3:35:e1:b2:b9:3e:14:ec:
9a:1d:6e:6c:e8:b7:aa:1c:79:02:22:b9:d0:df:b6:20:d7:48:
16:98:ed:0f:f4:26:d4:69:cd:a9:43:78:75:59:36:fa:ea:70:
c1:dc:7e:62:a8:a7:22:22:90:44:25:e4:00:b8:02:75:26:71:
05:be:b5:00:e8:02:18:77:35:e2:06:51:6b:65:72:f8:79:17:
e9:c3:29:e8:72:89:ef:db:fe:fb:f1:10:c5:f8:e8:99:be:d0:
5b:8f:27:99:b7:50:41:8f:b3:96:84:ee:ae:87:ce:ce:57:ef:
33:04:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:39:00 2026 by rpki-client