
$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json)
Hash identifier: Glv4XIuyeuLy/UHWlWDMSxuIL8I1Nn4Jcharvle5bEA=
Subject key identifier: D1:A4:C2:C1:E6:56:BC:5E:3F:82:1F:29:72:17:EB:73:CC:AD:F4:90
Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11
Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011
Certificate serial: 359DF092684108D2D540C315A9AE3D71C10DF4DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
Manifest number: 03D8
Signing time: Sun 24 May 2026 06:48:06 +0000
Manifest this update: Sun 24 May 2026 06:43:06 +0000
Manifest next update: Mon 25 May 2026 10:46:06 +0000
Files and hashes: 1: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: F7w2Dq+Yhj72VNuZUgl1wKxmEpwz0ASh9hJIJlITw+8=)
2: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: tSOXGp3AKoKrMg3hjQnTPWPEkh2iCcBNOWKCuvWdE+I=)
3: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: y05o20sp7nONtRTBUjrfwjyH34DMEi/2LnnYUomXdns=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl
rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 10:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9d:f0:92:68:41:08:d2:d5:40:c3:15:a9:ae:3d:71:c1:0d:f4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011
Validity
Not Before: May 24 06:43:06 2026 GMT
Not After : May 25 10:46:06 2026 GMT
Subject: CN=D1A4C2C1E656BC5E3F821F297217EB73CCADF490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:fb:95:57:f1:4e:2e:c3:c4:e8:1e:2a:8f:
2f:8b:8d:7a:1a:26:45:7b:1a:d1:7f:24:63:bd:fa:
32:2c:c7:27:d0:3e:b7:f1:e5:2b:e7:83:cc:0d:41:
d2:28:a2:20:d5:d9:5e:d8:63:5b:30:3f:67:93:d7:
ff:b6:e7:dc:b4:f0:5a:c4:79:29:7c:c3:ea:9d:b6:
b4:ae:d0:16:61:7f:15:32:b0:cd:ea:47:87:59:9c:
00:55:d7:b0:97:4b:a9:21:ea:7c:36:7e:66:e5:ba:
ac:e2:0d:bc:1f:ae:05:07:4e:dc:4b:ed:82:c6:1d:
53:74:db:27:eb:a5:ea:73:d4:3d:12:44:05:b1:a7:
8e:3b:d1:af:1a:c7:6b:7d:96:7d:7c:b4:3b:c5:14:
8d:bc:fe:12:6b:99:74:b9:f1:cd:e8:d9:14:cf:35:
28:c6:2e:8a:ea:44:e4:01:a2:df:ed:30:47:ee:5d:
a0:f3:25:8a:35:d1:21:e2:a8:fa:5b:b8:71:a5:0d:
d3:51:29:2b:77:c3:7f:76:80:c3:7a:f0:b0:50:b5:
0b:c5:d8:9a:9e:31:1f:8f:e3:a5:1c:19:23:92:00:
81:e9:e5:ca:30:ed:b4:1d:da:cd:d5:e1:4d:98:3a:
d2:4a:b8:83:93:9b:bd:1c:25:27:b7:4a:ac:d3:b2:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:C2:C1:E6:56:BC:5E:3F:82:1F:29:72:17:EB:73:CC:AD:F4:90
X509v3 Authority Key Identifier:
keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:6c:36:34:20:b6:45:1f:61:96:2c:8f:df:78:13:8c:f2:
38:9f:c1:44:b6:3b:13:31:26:c1:12:8f:a1:66:59:57:40:36:
60:8c:d3:40:22:dd:ff:1e:2f:3a:22:c2:98:41:cd:96:e2:e0:
df:47:28:fd:4f:04:fa:22:4a:5d:ef:fa:20:aa:c4:61:3f:7c:
57:17:4c:8a:d0:29:ea:a6:1d:ad:a1:cb:83:13:e8:8b:9d:f3:
28:4e:3b:cf:c1:3e:1e:9f:cb:d9:8e:e7:0b:4e:80:42:96:53:
47:f2:0b:40:ef:96:2c:4e:ea:c7:df:78:82:92:9b:52:11:51:
76:2a:7c:59:c1:06:da:9a:03:eb:6c:28:6c:f3:4a:f8:84:e1:
f5:86:d5:ae:ab:92:14:4f:e6:a1:88:27:09:de:06:fa:d2:a2:
b0:e4:6e:e6:09:b7:a2:bc:8d:54:bf:c2:e9:fc:d8:10:79:1b:
08:29:73:4d:32:27:0f:f5:b2:4b:39:6b:0c:34:13:79:f9:84:
01:ac:1d:37:ea:e3:1a:69:49:4b:14:f1:3a:4f:a0:4a:46:e8:
46:b6:1e:be:2d:dd:13:90:b7:c9:31:89:84:d2:a1:26:85:fc:
42:0f:fe:c4:07:96:01:61:90:e7:ae:3f:09:d9:7a:d2:96:c6:
2d:63:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:52:00 2026 by rpki-client