
$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier: fn+VQtGu6+kFlOuohjxsk5El8cTOFBnXx4ynYrgEoHY=
Subject key identifier: 6A:2F:41:04:58:8E:75:38:B4:E6:2C:24:16:81:CA:A8:A1:52:08:54
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial: 4DD8F7A6E4C56FCAA0AF0C4FDF347AA942E78BAF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number: 02B5
Signing time: Sun 24 May 2026 09:35:02 +0000
Manifest this update: Sun 24 May 2026 09:30:02 +0000
Manifest next update: Mon 25 May 2026 11:29:02 +0000
Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=)
2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: bFktCHqCO4uuLnPTHUcKAsgDTFMxhgX2iw1AJ74cgag=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 11:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d8:f7:a6:e4:c5:6f:ca:a0:af:0c:4f:df:34:7a:a9:42:e7:8b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Validity
Not Before: May 24 09:30:02 2026 GMT
Not After : May 25 11:29:02 2026 GMT
Subject: CN=6A2F4104588E7538B4E62C241681CAA8A1520854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ca:6c:cc:48:86:6e:62:7c:ec:e5:83:70:79:
56:06:f8:63:4b:3c:0e:13:87:30:87:ae:89:de:12:
6d:4b:86:e3:73:a4:48:c7:71:1d:39:7b:83:bf:d8:
2a:1b:83:1e:33:fa:b6:62:8b:7d:47:a2:44:0e:66:
64:d8:28:82:f7:2c:d8:48:c7:51:63:1d:2e:e9:22:
a1:60:26:94:03:af:5b:bf:9d:54:97:fb:4e:45:e1:
be:80:61:03:22:51:53:2b:b6:75:92:fd:cc:fd:69:
ed:81:6e:a0:31:3a:84:4a:e9:f6:ea:be:72:d4:1c:
04:4e:c7:f1:5b:a5:b3:dc:2f:00:08:5b:3b:25:80:
2f:97:59:1d:1f:e0:10:c1:48:4b:86:e0:5d:8b:02:
a9:09:ab:dd:aa:90:c3:f2:af:5a:88:06:cc:e7:5b:
e9:28:61:55:3d:d2:d4:82:dc:e8:65:00:0d:5a:b5:
c2:6b:e2:fe:c7:9d:29:84:17:41:b5:7a:bf:28:8d:
96:e9:ca:80:12:fb:4d:a8:89:49:9e:7c:56:fe:ba:
bf:4f:dd:de:b9:77:38:fd:17:57:78:00:ba:62:33:
26:31:af:eb:28:e4:9f:59:9f:e3:83:e7:f0:41:7f:
32:15:60:c2:b9:ca:16:8e:84:37:ab:e4:b7:24:43:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:41:04:58:8E:75:38:B4:E6:2C:24:16:81:CA:A8:A1:52:08:54
X509v3 Authority Key Identifier:
keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:a8:72:24:b2:d6:dc:c3:7a:fa:74:4f:b9:51:84:39:95:
2b:2f:19:dd:3b:e8:5e:aa:c1:b4:70:cb:2b:7a:5f:a3:20:c7:
9d:70:62:9a:7e:31:5a:7e:e0:c8:dc:2a:7a:04:e4:81:9f:8e:
7c:36:a4:d6:43:86:20:ad:0c:48:5f:e1:24:31:1f:aa:f9:1c:
a3:b3:33:01:18:6c:08:15:00:13:a9:3a:d8:e1:56:2f:4d:34:
4c:e9:18:85:c3:1d:58:d4:f8:d1:93:12:a2:80:21:3a:91:96:
e9:14:ab:ad:51:a9:09:3e:5b:53:13:f1:da:81:4a:82:64:23:
88:8a:e9:7b:a4:28:21:60:e4:a7:ba:b6:08:fe:29:79:43:3a:
b2:a2:bc:93:71:8f:27:30:1b:c6:2d:36:60:99:28:67:fa:22:
04:fe:c1:b1:66:e1:a0:ea:18:fd:4b:66:f4:0f:3c:69:66:cd:
eb:6b:36:6e:eb:a5:06:6d:68:ea:6b:e2:e5:3f:cf:13:16:55:
1c:29:9e:20:40:e7:e8:31:19:fa:61:42:97:b5:a9:8e:2e:c4:
7b:49:83:de:f8:96:50:13:76:3c:95:bc:46:0e:0b:93:3a:92:
a0:74:e9:be:9c:6b:36:f8:c7:c7:57:b8:00:c8:d5:7e:a2:eb:
fc:be:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:12:52 2026 by rpki-client