
$ rpki-client -vvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
File: 3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft (raw, json)
Hash identifier: FRMPsbRJy46Ll+zVm92dJCwwpl5fHegmIXhu6xhvULw=
Subject key identifier: A3:9E:41:B8:F4:7D:F2:DA:4A:1A:C4:82:58:2F:CB:56:CA:10:CF:1D
Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
Certificate issuer: /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Certificate serial: 0BE0546AE58ED921CDB0184AA2B1B22CA498F9A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
Manifest number: 0123
Signing time: Thu 09 Apr 2026 04:40:50 +0000
Manifest this update: Thu 09 Apr 2026 04:35:50 +0000
Manifest next update: Fri 10 Apr 2026 06:19:50 +0000
Files and hashes: 1: 34352e3137352e39362e302f32322d3332203d3e20323638393037.roa (hash: gWzg9YpbqycEBcqFyDV9C2c1ifzIdZhpIdaqvGl1vpE=)
2: 323830343a356336383a3a2f33322d313238203d3e20323638393037.roa (hash: ydeiKw+dDRQOyoxa0XqUWRDqo3xlSdNN3y9kxTu5DL0=)
3: 3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl (hash: XN2PkPWOa6nX+say677hUkJJ2rWo1lnmrXdsCzUWjow=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 06:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e0:54:6a:e5:8e:d9:21:cd:b0:18:4a:a2:b1:b2:2c:a4:98:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Validity
Not Before: Apr 9 04:35:50 2026 GMT
Not After : Apr 10 06:19:50 2026 GMT
Subject: CN=A39E41B8F47DF2DA4A1AC482582FCB56CA10CF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:0d:33:46:e4:ad:1b:03:16:ec:7c:01:a7:
d1:1c:3b:2c:7d:1a:5a:57:11:76:ee:d8:2c:c8:55:
3c:c8:bf:d0:f7:59:43:58:01:f3:c6:62:dc:c7:16:
a3:61:fd:07:17:cb:e9:34:ce:9c:36:35:52:75:9f:
f6:0c:da:ed:f3:89:0e:0e:2b:65:da:c7:2e:cc:47:
08:16:b7:29:c1:a7:c6:78:f7:1f:b1:bb:9a:1d:c6:
8f:b9:da:52:da:4a:fc:d9:9f:6d:93:2a:cc:9b:32:
f7:d6:ad:b4:0b:67:34:53:3a:22:83:83:66:c7:6e:
b0:58:12:7c:42:e2:bb:b8:fd:c1:60:99:b0:67:95:
8d:be:1c:56:2a:ac:b1:50:4f:d7:db:36:71:7d:ab:
16:09:53:9f:ad:1f:a9:09:22:15:76:7f:36:81:07:
47:61:09:ef:e3:2c:73:f6:70:3b:a8:4c:87:6e:55:
ff:47:bc:d7:ee:62:3e:18:0f:ac:28:9f:b9:2f:a1:
f7:be:64:aa:75:1c:28:16:1e:d5:5b:df:b3:11:24:
19:8c:7f:f5:08:cf:20:bd:b0:0a:bd:68:7f:41:36:
2f:27:44:10:73:09:bd:fc:5e:92:52:60:2b:2b:7c:
f4:c5:13:eb:df:c1:3f:cb:b8:2a:41:6b:83:0e:1e:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:41:B8:F4:7D:F2:DA:4A:1A:C4:82:58:2F:CB:56:CA:10:CF:1D
X509v3 Authority Key Identifier:
keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e8:49:88:3c:56:33:ce:52:81:1c:6c:b5:bf:0b:5c:3a:1d:
59:cc:be:d0:76:79:ef:b0:56:b9:c7:a3:7a:d7:43:11:f2:63:
d7:4c:eb:ea:d4:d8:fc:98:72:9c:cb:0b:43:49:4b:df:c5:29:
44:be:0c:7a:d9:d9:9c:12:35:a0:09:56:97:f2:67:33:f1:df:
79:d6:32:6f:10:7a:3c:ba:e5:13:5f:71:9f:66:f5:84:63:32:
9a:2d:7a:59:95:47:0a:56:d8:9c:f7:2c:d3:b1:97:1d:f3:87:
19:11:fa:f0:06:7b:ff:4d:f7:cb:ee:ed:4b:91:db:bc:5b:50:
d8:c2:31:24:3e:1f:12:4f:69:4b:fe:e8:25:b0:ff:a3:b1:a6:
15:8d:25:e3:8f:1b:b5:f4:49:7e:12:87:8b:6e:f0:eb:3d:97:
57:67:03:7d:31:e6:a4:f8:c7:2c:77:2f:40:ea:7a:4b:82:a5:
82:75:b4:74:4c:73:1e:3c:86:1f:85:f1:53:6f:fc:27:3d:de:
e4:f1:0b:93:21:e6:bd:54:89:2c:42:43:b2:09:34:2b:2a:6e:
ec:95:58:73:13:8c:fb:c5:b1:90:71:c2:ba:c1:29:53:a9:17:
2d:a3:c6:fa:67:00:38:bb:4e:e8:9f:e4:d6:25:90:81:45:3b:
b3:3d:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:00:36 2026 by rpki-client