
$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
File: 682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft (raw, json)
Hash identifier: hpzhkTMqzTMzKAmPqFQBRXUuWRK2kDQkp0icJlTJGQg=
Subject key identifier: 3C:96:3C:4C:C8:BD:30:3C:8B:20:C2:93:37:9C:27:B8:FE:FF:F1:7A
Authority key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
Certificate issuer: /CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Certificate serial: 42A0E542EFB17CB8BF03346AD970325ECD50C3C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
Manifest number: 0114
Signing time: Wed 08 Apr 2026 21:48:57 +0000
Manifest this update: Wed 08 Apr 2026 21:43:57 +0000
Manifest next update: Fri 10 Apr 2026 00:02:57 +0000
Files and hashes: 1: 34352e3137332e37372e302f32342d3234203d3e20323638383031.roa (hash: 7a67o+mENDIFROYW8r9W/RCasVJt/3+Bg4imlJqdii8=)
2: 682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl (hash: pTqTj83QyBZyxDhEz6j0W7TNNY0UELMecDl0scajjfk=)
3: 34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (hash: PcSa1+6yDncpT/u+KksZP/rtvW86OdA00qI8FyD7PRU=)
4: 323830343a356164633a3a2f33322d3332203d3e20323638383031.roa (hash: UuHh+gNtc+8lDWC/1l2ak+aLdz1059XQhtUTbhbizEc=)
5: 34352e3137332e37362e302f32342d3234203d3e20323638383031.roa (hash: KHZld2qFHMoL9CWwZszOmGwZWtFSonmkqWhUfRRAwO0=)
6: 34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (hash: y/X9o5vIJn4KUTUrJhshDVklQMZk7ZRt7/ms4iIX8eQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 00:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a0:e5:42:ef:b1:7c:b8:bf:03:34:6a:d9:70:32:5e:cd:50:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Validity
Not Before: Apr 8 21:43:57 2026 GMT
Not After : Apr 10 00:02:57 2026 GMT
Subject: CN=3C963C4CC8BD303C8B20C293379C27B8FEFFF17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:6f:a7:d6:21:2d:07:e0:d0:ff:51:94:92:
66:1b:05:f6:42:b6:ce:44:4d:fc:c3:af:5d:0f:22:
f7:ab:3e:46:59:14:4e:09:b5:85:97:bd:18:fa:7c:
f1:51:09:e6:98:77:7b:07:c9:08:57:3f:5a:21:39:
2a:85:db:82:8b:55:9e:60:75:44:6d:98:f8:a3:8d:
32:c4:38:8e:ea:05:d5:8b:0f:c6:ba:0b:f7:e2:6e:
0f:45:5a:39:a8:2f:fc:36:d2:d3:44:41:c1:23:ae:
57:7e:cb:29:d3:ef:e4:df:a2:67:1a:8c:9c:e0:cc:
60:a2:f7:24:93:2d:0f:6a:df:bc:00:84:21:78:7b:
20:90:d1:73:7e:15:0a:61:b2:7b:70:13:a9:a1:63:
c7:14:02:b2:5d:1e:c6:dd:32:75:39:9c:92:1b:6d:
e1:92:db:42:69:a2:e8:dd:1f:db:a4:a5:4d:55:7b:
b4:62:5a:4e:47:33:1f:1f:28:cd:fb:c1:41:98:dd:
61:6b:7a:1c:f8:af:e2:8e:72:f0:43:0b:f2:7f:68:
a6:b4:9a:67:8f:af:b4:c6:ad:1c:ef:4b:84:68:b6:
38:43:3c:47:cd:95:44:11:42:90:f3:b8:82:db:2e:
d0:e3:13:97:b6:c0:d9:a4:b7:1c:ca:d5:89:84:2c:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:3C:4C:C8:BD:30:3C:8B:20:C2:93:37:9C:27:B8:FE:FF:F1:7A
X509v3 Authority Key Identifier:
keyid:68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:aa:37:11:e7:53:81:70:04:1e:48:e1:c3:65:e1:7a:c3:
ac:01:e4:15:ab:7f:07:7c:44:b7:af:3b:c2:10:0d:b2:10:01:
7e:1c:a7:52:6e:da:e2:82:64:e6:d2:e8:2b:f0:9d:ec:48:b0:
8a:aa:dd:6f:f1:99:85:17:bb:e7:be:5b:1b:69:36:1f:63:1d:
be:9b:72:db:5f:e8:b2:29:b7:42:77:b2:9e:22:a9:49:c5:b0:
66:77:1b:cf:b7:1a:c0:a6:53:e0:7b:59:e6:b4:f2:78:5e:d6:
01:ad:9a:23:70:0e:df:24:f9:5f:a2:45:15:22:bb:7c:a5:db:
57:7a:2e:f1:66:80:95:cd:36:64:b2:21:f7:88:f0:a6:bd:eb:
06:fe:51:79:98:6c:b6:3d:81:53:e9:b1:c3:00:7b:58:2d:f0:
8b:0f:89:a1:0d:95:b2:3e:4a:ba:5f:ce:7c:b7:35:3f:f9:00:
86:b6:9b:f2:47:1f:e0:e0:0b:ec:90:72:3b:92:eb:2a:1b:70:
e7:0f:93:fc:78:fc:15:9d:e2:96:53:08:d3:11:d5:61:dd:66:
da:fd:25:69:54:86:c6:64:d9:7d:ce:50:7e:13:c5:ae:20:67:
c3:88:b9:bf:48:ab:02:d6:f8:4a:a2:fc:f2:46:5d:db:be:8e:
95:33:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:13:35 2026 by rpki-client