
$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft
File: 3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft (raw, json)
Hash identifier: 2kVNpCWQRFiLM1nOyHBEPZnz6KU4wjZJ5ecJ9g4GApM=
Subject key identifier: 3A:A4:31:4B:81:4F:0D:C1:2C:D3:E1:22:E6:86:F5:F9:57:79:1F:3A
Authority key identifier: 36:28:F4:DC:97:DE:BF:13:9D:AB:6C:FD:17:DF:6F:A9:D6:2D:26:DC
Certificate issuer: /CN=3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC
Certificate serial: 580579B9D4D3EDE6CA1656AB4DB3B5ACF3450926
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft
Manifest number: 27
Signing time: Sat 27 Jun 2026 02:04:02 +0000
Manifest this update: Sat 27 Jun 2026 01:59:02 +0000
Manifest next update: Sun 28 Jun 2026 02:27:02 +0000
Files and hashes: 1: 323830343a326439383a3a2f33322d3332203d3e203631353739.roa (hash: 55LNKxtd2nm3nLCetksU00S/O1kFbg52itM9qV1Iw3Q=)
2: 3136382e39302e3234302e302f32322d3332203d3e203631353739.roa (hash: mrM6bXSUl3T24pGCTJHMwMbz/zdHZsSB3NKY1dV9uCw=)
3: 3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl (hash: hDEcGnUPsnMjdavfFt7cp+cQpFw7MI2DoYYk5pXbNyE=)
4: 3137302e37392e3234302e302f32322d3332203d3e203631353739.roa (hash: JeA+PXHEtTzUQLIBpAJaBbS7T9kw0ulo4Kgj+Kw6qdw=)
5: 323830343a326439383a3a2f33322d313238203d3e203631353739.roa (hash: dkgKiJ3g+uDldIr5gHz4aFAm0DCE0Ws3mxLbB0Nw4ok=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl
rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Jun 2026 02:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:05:79:b9:d4:d3:ed:e6:ca:16:56:ab:4d:b3:b5:ac:f3:45:09:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC
Validity
Not Before: Jun 27 01:59:02 2026 GMT
Not After : Jun 28 02:27:02 2026 GMT
Subject: CN=3AA4314B814F0DC12CD3E122E686F5F957791F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:e7:a1:78:13:02:a3:60:02:e1:ef:9a:89:
d6:c4:b9:c7:57:f0:46:33:0a:c0:58:2d:fc:5d:a6:
8c:d2:0e:70:32:fa:b8:28:79:ce:cc:99:bb:a1:d2:
23:08:d4:8b:87:b9:0e:85:e7:89:99:5e:a5:2b:0f:
bf:d3:ad:7c:11:7f:50:44:a5:99:c0:ee:0b:81:3b:
3f:f0:19:31:a1:4a:59:b8:f6:7f:69:e6:7a:0b:17:
41:75:08:0e:ce:63:09:d3:10:25:68:7b:60:a0:56:
ce:a0:c4:50:91:1a:6b:07:11:3f:04:2b:98:2d:5e:
a6:af:06:00:a2:00:a1:0d:b9:64:c9:62:f8:a9:9a:
92:09:45:80:7d:a7:84:af:e5:e1:eb:e4:b3:fe:73:
9e:81:3e:a0:01:fd:0b:e4:90:27:b2:b7:41:81:f5:
ac:48:59:09:32:1c:68:71:6a:13:6a:1e:96:60:5b:
21:3c:33:9f:fc:f4:7d:2b:e4:15:83:a9:ce:88:c9:
c4:23:d4:51:25:71:6e:44:0e:43:06:c6:6c:32:cd:
3f:42:4e:94:54:d2:1f:41:71:03:c4:5f:40:61:2e:
50:a5:cc:8d:31:1d:c8:0d:db:07:a7:22:df:96:b6:
95:be:00:96:12:cc:d9:42:34:d4:50:71:7e:93:50:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:31:4B:81:4F:0D:C1:2C:D3:E1:22:E6:86:F5:F9:57:79:1F:3A
X509v3 Authority Key Identifier:
keyid:36:28:F4:DC:97:DE:BF:13:9D:AB:6C:FD:17:DF:6F:A9:D6:2D:26:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f1:bf:7e:44:69:e1:55:59:47:bf:c7:c7:ad:bf:0a:ea:b4:
1a:fb:d7:33:28:5e:11:35:f6:47:ff:bd:96:b5:4c:4d:52:da:
ba:0c:d1:cf:fc:3e:79:de:9c:5a:e6:88:9a:22:48:e5:c6:34:
9e:22:a2:b6:56:3d:1a:30:a9:d9:a5:db:f7:ea:66:e9:98:ac:
1b:0c:e7:70:eb:35:4f:f4:2a:a7:57:67:01:04:d5:61:f2:5d:
f4:42:41:bd:38:6d:c1:46:d0:2b:b8:f6:5f:f1:c8:6e:16:e1:
10:28:87:31:4d:66:c4:b9:51:b7:b6:b4:cb:3f:82:e5:18:84:
e1:22:0c:52:45:72:f6:4d:a7:42:e7:81:9d:f7:72:c2:cb:4b:
13:25:c5:e6:9b:83:6e:d1:e9:34:bb:1d:fc:08:48:ce:d8:1c:
b7:0d:53:22:3c:15:d9:2d:16:6d:ff:54:00:d4:c6:27:08:3a:
67:93:b3:c3:d5:cf:93:87:a8:e8:93:cb:4b:2b:d6:9b:57:fc:
f4:16:e5:bf:b5:ea:b5:aa:ac:21:0b:50:3e:19:3c:2c:3d:2e:
8b:b0:52:4f:b9:7e:f8:18:65:58:e7:f7:85:6c:2c:8f:3a:d3:
b2:96:2d:03:a0:4f:a4:35:67:49:32:63:09:fd:0d:ef:33:45:
9e:eb:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:10:57 2026 by rpki-client