
$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
File: C37D443ACE2088B9542008EA9127A8D95802391D.mft (raw, json)
Hash identifier: gGirG29RhSJWZdSTL4XgkcUugE05WLeVokMdJSoLv+M=
Subject key identifier: 56:B2:FB:AB:DB:42:D1:EF:84:6D:51:4F:00:68:48:8B:69:0D:14:EC
Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Certificate issuer: /CN=C37D443ACE2088B9542008EA9127A8D95802391D
Certificate serial: 357314776508D2C73222800A8808D3420F2E6D54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
Manifest number: 02D5
Signing time: Thu 09 Apr 2026 09:57:37 +0000
Manifest this update: Thu 09 Apr 2026 09:52:37 +0000
Manifest next update: Fri 10 Apr 2026 13:53:37 +0000
Files and hashes: 1: 323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (hash: VUl2KBji/uPkr1rCYeNPvvVxSbxK6F6y7JqVOXB6tUs=)
2: C37D443ACE2088B9542008EA9127A8D95802391D.crl (hash: TkQsYtNJLuoHyIznKjWD8B95nrVhD6MNXRyIHMMQ2ss=)
3: 34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa (hash: 5BGiFOtUcqQZiGFluG3W3mqHyrCNrFQCh5StfotlU5Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:73:14:77:65:08:d2:c7:32:22:80:0a:88:08:d3:42:0f:2e:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D
Validity
Not Before: Apr 9 09:52:37 2026 GMT
Not After : Apr 10 13:53:37 2026 GMT
Subject: CN=56B2FBABDB42D1EF846D514F0068488B690D14EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:5f:58:68:05:de:55:75:32:bf:6a:2a:19:
75:0a:c1:58:1b:14:b3:fd:8b:bf:1d:9c:ed:84:23:
e3:f8:09:e3:4b:0e:35:e4:3e:a8:9e:13:40:e5:80:
4e:a8:c1:d0:0f:e6:b8:e7:8f:61:a8:ab:de:58:86:
c8:ff:20:b7:a7:ad:07:5d:93:73:30:c9:5d:1f:f7:
bb:17:35:66:de:2c:b1:0f:8f:71:25:23:53:42:44:
46:61:b9:3a:69:6e:8e:04:14:b8:44:a6:9f:28:5c:
b4:32:c0:93:b6:0f:5c:98:ed:24:1e:78:32:29:54:
2c:3c:7e:27:f9:d8:71:57:d9:f4:46:ab:62:d2:17:
1f:d2:e4:40:24:f6:52:14:b7:8e:2b:c3:7e:1b:d9:
62:97:ee:15:2e:98:13:93:f6:bc:c0:23:1a:76:21:
b5:58:09:41:e1:af:d5:5f:cd:3a:5f:4d:93:0d:d4:
68:49:04:ed:0b:af:1e:fb:96:4a:34:89:57:db:2d:
76:af:14:57:ca:8c:37:46:82:28:a7:b0:a6:24:75:
e0:33:e8:ef:9c:3c:20:28:be:fa:22:7e:bd:5f:f9:
cc:db:83:ed:66:ba:aa:9d:6c:a6:c7:5a:08:99:ca:
67:52:a6:d8:c1:d7:39:e7:7e:fe:cf:18:b2:77:7c:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:FB:AB:DB:42:D1:EF:84:6D:51:4F:00:68:48:8B:69:0D:14:EC
X509v3 Authority Key Identifier:
keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:5e:b5:62:03:cc:c3:ff:fc:56:e3:58:4e:bc:4f:20:18:
5e:c3:76:cf:a8:8c:cf:01:8a:e7:51:78:a9:45:f3:76:fa:47:
e4:36:bd:6d:0c:a1:40:ac:c6:f2:62:fb:b1:54:15:1e:d1:b3:
55:4d:1a:06:d2:55:b0:29:6e:25:f3:31:f2:05:a1:22:55:8a:
59:b0:0c:04:49:de:1c:8b:61:c5:71:42:98:6e:42:36:f1:4e:
08:14:f4:13:63:7b:e2:a0:3e:45:ae:ca:e3:eb:84:b3:9b:da:
9f:fc:f2:82:ba:dd:ac:d0:8b:95:17:48:e5:eb:80:31:0a:b8:
af:86:84:40:65:cd:c3:fc:cf:8e:6a:8b:ac:68:92:8b:45:9f:
18:a8:13:9e:3c:b6:2d:54:b2:71:47:af:04:16:a6:ba:c6:41:
d5:d5:49:34:84:7a:69:7f:c6:33:47:c2:ac:fe:50:69:11:4e:
15:a3:d9:ec:94:bc:91:0a:61:33:86:dd:7c:c3:5b:10:93:1a:
04:57:92:6f:98:ab:93:2a:b1:c0:8c:db:8b:dd:14:35:3d:a4:
45:25:98:e2:5d:c3:87:cf:a9:ed:b6:2e:a3:74:17:e5:c2:7c:
a0:c2:0f:17:6e:8b:48:eb:26:16:51:ce:be:1b:6e:e7:83:8e:
43:fa:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:53:09 2026 by rpki-client