
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json)
Hash identifier: kYyPIpM9xWt7K+X94KidFJj/mq3Yg8A+uH5+geyJKwg=
Subject key identifier: 23:A4:D3:C7:7E:4E:06:4E:4A:B7:D5:81:6F:46:D7:7A:DC:86:B3:3F
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial: 46FB6A3EC699D319F1CDD9C19689413FF8BF5075
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
Manifest number: 027E
Signing time: Sun 24 May 2026 04:39:17 +0000
Manifest this update: Sun 24 May 2026 04:34:17 +0000
Manifest next update: Mon 25 May 2026 05:52:17 +0000
Files and hashes: 1: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: zLfuCXZBi2nWdOOyG+zGt+cSVyUYBRH1EQR+N0EQYZ4=)
2: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: kipjBJ09zZtwvC7nmczGaoX100huYmXa/+NwcxArDt4=)
3: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: Xni5Ld6ZZwG6unGhQt5XVYr9mq4CeydhRZclAGjLh9k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 05:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fb:6a:3e:c6:99:d3:19:f1:cd:d9:c1:96:89:41:3f:f8:bf:50:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Validity
Not Before: May 24 04:34:17 2026 GMT
Not After : May 25 05:52:17 2026 GMT
Subject: CN=23A4D3C77E4E064E4AB7D5816F46D77ADC86B33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:a1:08:e6:c5:f5:62:7b:4c:8b:99:a8:8c:
ac:19:b6:79:1f:71:32:d4:56:05:f2:68:81:16:14:
52:dc:33:b8:16:2c:c8:88:35:92:3c:63:e4:87:1c:
2b:74:4f:cd:bb:ec:79:6f:e4:e7:e2:9c:11:c3:a8:
97:f8:8c:5a:7b:6c:dc:a9:52:85:11:00:a7:ad:93:
86:c8:9d:55:cd:8d:4f:40:60:b9:b2:3c:66:71:ee:
a2:33:04:c6:95:21:53:b4:1a:40:a4:09:98:a1:62:
0d:38:55:15:14:66:d6:19:14:a9:f3:22:91:f4:1d:
22:90:7a:21:ea:c0:d6:29:5a:64:7d:24:ac:5a:70:
03:54:55:39:bb:86:bb:a8:e4:4c:f6:cd:61:70:c8:
b0:3c:d0:f3:80:64:e0:69:f8:56:87:c0:35:d1:4d:
11:e6:8f:b6:aa:16:58:d1:27:af:87:cc:ea:eb:b0:
25:5f:1c:d8:6a:02:f8:6f:82:3f:d8:b0:cb:16:52:
ed:c8:ae:17:7a:21:ee:84:32:11:79:90:26:65:67:
3c:78:c1:7f:f9:92:18:c0:7e:25:56:d0:6a:e4:8c:
57:30:18:9f:6b:b4:9b:d4:c8:75:44:0d:9b:5d:77:
d9:a6:eb:a7:ea:ec:54:a1:12:e9:b0:d0:8d:56:fd:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A4:D3:C7:7E:4E:06:4E:4A:B7:D5:81:6F:46:D7:7A:DC:86:B3:3F
X509v3 Authority Key Identifier:
keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ec:65:56:38:a4:2d:43:b5:66:73:db:6d:ee:34:fb:2a:3a:
09:ea:d0:54:93:41:41:45:2f:74:9d:48:05:a3:d4:96:16:11:
52:1a:a0:b8:3f:6d:7e:5e:f2:43:5e:6d:a9:3e:45:ad:cf:3e:
57:6d:f6:37:03:da:bb:58:29:a2:c7:f5:b6:71:dc:9e:d1:61:
2d:53:7a:92:48:9e:7a:31:12:28:77:92:b4:2c:50:6e:37:28:
8d:9f:6c:60:e8:5c:e8:9d:b4:19:7b:db:ec:2d:50:fa:75:de:
fb:e5:93:59:97:26:67:8e:31:32:a3:d0:5c:e1:a7:92:a3:1e:
82:8b:e5:7b:90:cc:46:fd:33:84:83:31:41:08:0c:4e:82:cc:
fa:a9:20:0a:56:b4:35:bc:8d:db:e7:ee:19:6e:a6:de:0e:46:
0a:24:44:08:20:09:40:5d:05:33:fa:90:3a:2b:e4:ca:d3:c6:
ce:e5:c2:1a:fb:64:ef:75:d4:15:d6:7b:cb:f9:d9:2d:cd:f7:
8c:ef:d0:5c:57:41:fe:06:0e:4c:4f:2e:c0:b6:99:ee:52:9a:
ad:c2:3e:71:f2:bb:24:c5:bd:38:81:21:c1:ec:7d:b9:26:04:
16:47:b5:25:13:d8:b4:38:fe:3e:8a:fb:43:cb:fb:28:40:c8:
b6:3d:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:18:04 2026 by rpki-client