
$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
File: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft (raw, json)
Hash identifier: LrdCl9qo6AkeAqy5RhBo/q+/5PUqq7305QrdZEOwCX8=
Subject key identifier: 8C:57:39:24:DF:F3:EA:01:4F:78:D1:9B:78:84:05:64:6C:F1:40:34
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Certificate issuer: /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial: 6EB750F384DEA25A953CBEDFFC57B28681D63499
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
Manifest number: 03C0
Signing time: Thu 09 Apr 2026 00:19:10 +0000
Manifest this update: Thu 09 Apr 2026 00:14:10 +0000
Manifest next update: Fri 10 Apr 2026 02:28:10 +0000
Files and hashes: 1: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (hash: 15dIOWpnG/G26F4VkypMSYogBFB6MoO+ivBg0CheS7w=)
2: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl (hash: AyxShZTvIS5n80Veew0LcogzhKHG/67kVzMfIdiSgnk=)
3: 323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (hash: WKX409mwrxTecTWeaSpXTkxv00qQP1G3yodmT88UBZ0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl
rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 02:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b7:50:f3:84:de:a2:5a:95:3c:be:df:fc:57:b2:86:81:d6:34:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Validity
Not Before: Apr 9 00:14:10 2026 GMT
Not After : Apr 10 02:28:10 2026 GMT
Subject: CN=8C573924DFF3EA014F78D19B788405646CF14034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:0c:e4:1a:fa:ec:ab:ff:62:5e:46:4e:ef:
71:0e:7f:a5:40:ea:42:c0:e3:cf:ea:fe:31:22:e9:
20:ea:a8:0b:b7:c4:b9:24:ca:8d:74:e4:ca:66:d5:
a3:0b:a0:d5:9b:b9:e4:12:74:fc:d2:bc:65:46:d5:
5c:a2:f1:a1:0e:4b:d2:84:71:ae:1e:77:30:1c:b9:
bb:40:76:a3:43:ed:6e:10:c9:76:b7:56:bc:b6:42:
49:b9:1c:55:a5:df:cd:6c:7b:b5:06:57:a1:44:3d:
d8:0d:42:bb:49:3d:c5:d9:46:02:86:85:e7:ee:12:
ac:f3:9c:e3:5a:81:fc:d3:62:c3:f8:00:b6:f8:7e:
09:3c:12:97:27:47:06:1a:f5:02:b5:cf:f1:f0:7c:
26:15:6f:f8:6c:ee:45:94:aa:29:f0:d6:26:c1:18:
d8:30:6f:c0:ca:08:44:5e:e8:7e:6a:93:26:51:6d:
c2:e0:6b:7b:20:a8:36:b6:b3:cb:06:bb:9a:65:f0:
e7:da:43:98:18:55:7e:7c:7e:68:25:61:77:64:53:
43:ed:b7:ed:78:85:7d:0e:35:97:4b:1a:2d:40:c6:
8a:89:21:07:3e:ee:bf:ab:b4:f0:92:4c:7f:10:40:
85:36:d5:fe:f7:30:53:bc:7a:49:2e:d3:8a:95:d3:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:39:24:DF:F3:EA:01:4F:78:D1:9B:78:84:05:64:6C:F1:40:34
X509v3 Authority Key Identifier:
keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:2e:48:6a:37:a3:ac:e8:a8:3f:de:09:58:42:81:f2:d4:
37:e8:d2:6c:2d:00:ac:29:92:0c:51:42:13:5d:dd:01:e4:0a:
7d:ba:fc:a8:f9:82:93:2d:19:53:00:89:57:57:4e:52:3c:e9:
10:5c:13:2f:99:b2:6c:a2:00:bb:de:ec:63:a6:ac:a3:33:f7:
c9:d9:de:6f:ad:07:55:16:1c:a5:95:b8:4f:25:cd:ef:b0:c9:
02:ae:5c:57:bc:0f:a5:09:00:68:5e:93:ff:69:8d:64:84:4c:
0d:1e:a0:8c:d4:c4:c9:2b:70:33:c1:f2:43:86:af:c3:0c:7f:
fd:7c:1e:29:c9:de:3f:9c:c2:91:66:40:63:57:a5:01:d6:3c:
b4:f9:71:1f:26:0b:aa:80:bb:b3:a9:a5:7f:13:1a:de:af:8e:
18:38:01:9d:1a:6f:d4:63:c9:3a:a5:c2:0d:13:16:98:bc:b0:
09:d5:21:e1:af:5a:06:51:ae:ff:ea:3c:36:09:d9:1d:7d:ce:
3d:af:0f:07:7b:5b:79:d0:34:3b:05:cc:a8:65:1f:5e:ce:58:
42:7c:20:b4:a1:ce:a1:16:a0:fc:c2:1b:95:59:1e:26:20:35:
6d:58:91:bd:18:ae:73:70:f0:57:e1:a6:5b:fa:69:89:ea:8d:
9b:0e:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:52:49 2026 by rpki-client