
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier: kZYS9mmnFPW9hP+YNcqzf4ayPzjHyb8VUVHBmEqhClw=
Subject key identifier: E8:A3:9D:DC:92:56:BC:7E:C5:0F:1F:4A:68:7A:C5:A2:A6:7C:9B:0B
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial: 3FBBE49DD5A1AEA99708494B2486E00B7E13FDD2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number: 0345
Signing time: Wed 08 Apr 2026 07:40:32 +0000
Manifest this update: Wed 08 Apr 2026 07:35:32 +0000
Manifest next update: Thu 09 Apr 2026 10:40:32 +0000
Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: rKZXSsXO/p9q9GjuYNQJ7hfBVhwyhoTydaVjLEf708s=)
2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 10:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bb:e4:9d:d5:a1:ae:a9:97:08:49:4b:24:86:e0:0b:7e:13:fd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
Validity
Not Before: Apr 8 07:35:32 2026 GMT
Not After : Apr 9 10:40:32 2026 GMT
Subject: CN=E8A39DDC9256BC7EC50F1F4A687AC5A2A67C9B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:0a:f0:25:d7:09:33:31:e7:08:01:29:9d:
6d:57:82:b9:7b:f5:56:56:06:20:4a:78:71:98:0f:
52:72:cb:37:07:ce:a9:2f:be:c2:41:b1:47:e3:93:
04:8d:f2:b0:48:05:5a:35:c2:28:8c:71:42:d0:f1:
5b:0d:fa:4b:37:f3:33:98:10:07:33:c9:4b:33:6a:
ec:7c:c8:ec:1c:f0:04:7d:f1:cb:d0:a7:a3:10:ec:
7e:8a:10:3b:86:47:6c:2c:f0:a3:af:61:d6:c0:ac:
cc:a1:55:16:d1:2c:5c:70:cc:a0:35:5f:3c:78:c8:
fb:e5:e7:8e:e1:4f:e4:04:46:9d:71:1c:2b:3d:45:
e6:3c:f1:b6:80:05:7a:f2:85:64:b5:ed:51:ed:09:
35:42:3a:b1:4a:e8:a8:32:e2:74:bd:a7:13:22:32:
94:a7:c1:1e:c1:ff:4d:61:f3:0f:1c:88:fc:4f:2c:
76:de:d2:6f:9b:df:39:3c:9f:b6:8a:67:90:b2:32:
fa:da:b9:a8:71:d6:80:f5:46:54:ab:fd:78:5e:49:
a8:c4:f2:a5:14:e3:b5:71:f3:7f:42:e4:d2:3e:74:
8f:04:fd:36:f4:1d:99:e7:18:11:d7:48:b4:ef:47:
66:bc:dc:2a:26:21:85:d8:29:73:df:f6:a8:d7:b1:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:9D:DC:92:56:BC:7E:C5:0F:1F:4A:68:7A:C5:A2:A6:7C:9B:0B
X509v3 Authority Key Identifier:
keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bb:26:55:3b:32:c4:68:51:59:9c:78:76:21:b6:1d:64:53:
f7:d7:89:5b:7a:b1:41:dc:fa:3e:30:93:c8:d9:af:ba:1a:b4:
56:ea:80:15:39:c0:1c:02:da:ab:90:ed:6e:39:dd:08:06:73:
4e:6b:f6:cf:95:52:5a:2c:78:da:6b:0d:85:f5:8f:29:47:28:
cd:34:c7:f7:90:8a:51:c5:6b:99:5c:25:b4:e8:49:82:e8:92:
1a:a8:14:fc:9b:c7:03:67:db:26:21:90:26:4e:e5:80:83:80:
cd:dd:f0:8a:52:f1:90:39:b2:0e:0a:cb:ef:5e:45:2c:9f:1b:
a5:4a:ff:25:48:77:99:02:65:fd:3c:5c:b3:76:38:44:53:8d:
48:cb:52:aa:ac:78:60:d1:d8:02:26:49:76:c1:53:9f:cf:c2:
9d:13:d2:90:cd:8d:49:b5:9a:d4:43:80:f5:c6:75:2a:b7:93:
b4:d2:cb:11:af:a1:f0:29:c0:0f:53:bc:b0:1c:01:3f:78:3c:
c6:64:08:73:47:98:1c:53:99:5a:9c:cb:a7:a2:58:83:93:08:
a0:14:a5:c8:80:c0:b5:76:1f:cb:8a:9d:bf:c2:e1:b2:8d:2f:
75:fe:40:d6:9c:eb:4d:12:39:46:aa:d4:b6:ae:9a:e5:30:5c:
e0:98:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:53:49 2026 by rpki-client