
$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json)
Hash identifier: sVt4oxogGRvyGnvGFJnx1hCGVb+YxPB8r3DufWF5I7Q=
Subject key identifier: F6:CC:C7:94:88:B7:FD:70:F4:DB:B5:84:E2:F1:A8:9A:B0:74:3F:6A
Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85
Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
Certificate serial: 5376FC480E10CFB3B2E8B8C417FEF02DF9519424
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
Manifest number: F5
Signing time: Wed 08 Apr 2026 05:43:31 +0000
Manifest this update: Wed 08 Apr 2026 05:38:31 +0000
Manifest next update: Thu 09 Apr 2026 08:34:31 +0000
Files and hashes: 1: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=)
2: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=)
3: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: xGGrucYNF4yIQrUDWPGIBLtBDktJh1Zlgcv8QNXdPFU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl
rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 08:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:76:fc:48:0e:10:cf:b3:b2:e8:b8:c4:17:fe:f0:2d:f9:51:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585
Validity
Not Before: Apr 8 05:38:31 2026 GMT
Not After : Apr 9 08:34:31 2026 GMT
Subject: CN=F6CCC79488B7FD70F4DBB584E2F1A89AB0743F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:f2:c0:66:ff:49:63:d5:06:2a:63:ac:b0:
51:46:0e:43:a4:65:ec:50:ee:dd:e9:10:86:c1:38:
a8:07:2d:06:2a:89:02:b5:7d:c2:29:fe:35:88:f4:
d4:53:d7:a9:ec:cd:ab:72:74:e6:64:9e:32:7c:e3:
c8:9b:6a:ae:9f:da:af:1e:6c:f3:70:52:c3:40:9e:
ab:fe:61:89:60:e1:30:39:aa:44:31:72:15:e5:29:
1e:9b:ca:34:87:b5:ea:be:1b:24:bc:d5:e8:ea:bf:
0e:67:56:59:01:e9:5b:c5:cf:fc:4a:64:ec:2d:8f:
c6:0a:44:39:af:da:a3:8b:32:55:ba:27:02:54:03:
50:9a:32:dc:85:9f:fd:fd:09:4e:3a:a0:c6:9a:61:
4f:34:c9:cd:d7:61:e8:3f:87:13:de:8d:64:d8:fe:
84:fa:50:55:45:15:b5:9a:0d:67:e4:7e:6a:e3:5d:
94:3c:05:49:9d:8e:06:97:69:af:9d:07:d2:91:20:
29:61:7d:fb:f6:17:96:12:87:3e:44:a3:b7:48:2e:
9a:f1:75:c4:62:3b:d2:89:bb:ad:bd:d3:7e:9e:ae:
bd:5f:95:94:51:e9:fa:a5:ed:b1:35:58:70:f9:a7:
de:e5:2e:5a:df:9e:9f:07:a5:cc:b3:2c:1f:7d:a6:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:C7:94:88:B7:FD:70:F4:DB:B5:84:E2:F1:A8:9A:B0:74:3F:6A
X509v3 Authority Key Identifier:
keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d5:7f:57:5c:8f:41:5d:4b:f7:35:f9:b3:4b:78:95:af:6f:
67:1a:a8:fd:51:01:be:77:6c:fb:19:22:50:18:04:74:66:cc:
fd:3a:42:56:6b:f6:92:0b:3e:35:36:cf:dc:64:de:62:b0:33:
4b:15:47:c0:2d:ea:db:01:20:f2:cb:d4:43:d3:c1:26:93:89:
88:ba:b5:04:6d:93:04:4d:4a:1f:db:b5:62:f4:de:18:5e:3b:
04:1f:0e:86:93:8b:8f:88:1f:01:ae:59:0e:ad:81:c3:f3:1a:
b4:de:49:d5:f4:2b:17:50:63:b0:ff:7f:64:6e:22:bf:c2:c9:
d7:aa:1f:b6:5a:e1:0b:8d:70:6b:32:c5:be:4f:28:f1:1b:33:
c3:39:6b:6d:8c:07:c2:39:4f:07:82:2e:cf:39:64:98:24:66:
a7:9f:db:aa:40:3c:b1:18:d0:8a:5a:32:05:e1:54:c9:87:41:
cc:4b:d8:b2:77:09:24:51:9d:00:b7:1e:24:b7:a9:b6:b7:d3:
47:cd:13:80:27:05:65:45:54:4b:1f:18:b4:7e:72:80:8e:db:
6e:10:37:83:8b:b7:7d:b7:e1:29:0e:12:40:1e:c6:6f:1e:b2:
65:bb:1b:49:03:13:06:0b:a6:33:e2:58:46:f3:a4:35:b3:8c:
8a:73:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:43:03 2026 by rpki-client