
$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
File: 3668F23708FFBF0EE157A9A924E8295BA896F33D.mft (raw, json)
Hash identifier: qmic6ctlZQ0KsIu2JMq/OygSk44pJHHOVDCauEvbQV8=
Subject key identifier: E4:BA:69:CF:88:40:29:40:C0:36:C0:B7:17:D0:68:1F:40:8B:2C:7D
Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D
Certificate issuer: /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
Certificate serial: 55D49402B27BF2B5AF8309B47E26C84448719F87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
Manifest number: 62
Signing time: Thu 09 Apr 2026 10:18:16 +0000
Manifest this update: Thu 09 Apr 2026 10:13:16 +0000
Manifest next update: Fri 10 Apr 2026 13:22:16 +0000
Files and hashes: 1: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: oCPIOmoYwqZXDm5OOelB6GxaBTbNHz/pae+0Bvycpx0=)
2: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 1O+rv6XlvbPZca5WvayM1LDM2sBBx6xsJcsb7KU/kII=)
3: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: K+lZkEM4v6sJ/Jk0Z8elzm60jida0+XHfBI9QU5wKa0=)
4: 3668F23708FFBF0EE157A9A924E8295BA896F33D.crl (hash: zwJALDrAJgmXyx6/CJiXBEyrzooKGmeVBGKqAOcQznw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl
rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d4:94:02:b2:7b:f2:b5:af:83:09:b4:7e:26:c8:44:48:71:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
Validity
Not Before: Apr 9 10:13:16 2026 GMT
Not After : Apr 10 13:22:16 2026 GMT
Subject: CN=E4BA69CF88402940C036C0B717D0681F408B2C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:60:09:03:46:ae:d6:98:5f:25:7e:6f:b9:
fe:7e:c4:38:61:fb:ed:46:c7:61:3b:e2:6d:3e:17:
b0:7d:78:7d:b1:7d:d9:23:bb:e4:a9:fb:28:15:57:
72:df:d0:6a:ee:de:04:12:fd:6e:3d:8b:fe:93:d0:
bc:af:3f:2f:61:d1:f3:47:f3:98:10:97:44:06:d5:
f7:a7:cd:dc:65:e1:35:2e:49:2f:4a:74:0a:eb:2a:
7d:e9:4f:c1:bf:dd:98:cb:f5:dc:34:0f:a7:bb:f8:
17:03:4c:75:f7:c9:96:eb:ba:d2:19:19:61:00:28:
95:57:3a:8d:38:38:d1:10:71:f3:f8:0f:69:c0:35:
63:9d:4a:10:ce:72:ba:e9:ee:3a:0e:7e:62:78:f3:
b5:0d:62:12:c1:50:bd:f1:2f:89:ee:14:5f:4a:4f:
1f:3c:16:8c:ec:cf:cb:81:36:8b:b4:d9:f1:06:59:
21:cf:70:46:e0:b9:99:80:42:01:02:2a:ce:ba:aa:
5c:5b:79:81:ab:01:17:94:9d:98:92:79:39:26:87:
4d:66:1c:3d:e1:ff:49:f3:dd:b7:e3:aa:2b:e3:59:
ef:d4:c8:1d:04:d5:96:ad:57:f6:86:43:3b:e4:f0:
7d:32:41:6e:57:ec:8b:66:fd:51:eb:fe:17:c9:c0:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:69:CF:88:40:29:40:C0:36:C0:B7:17:D0:68:1F:40:8B:2C:7D
X509v3 Authority Key Identifier:
keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:ae:00:83:cf:b0:69:e0:e2:4d:ff:36:dd:79:6f:1c:22:
a0:ea:d6:23:48:e8:4e:70:68:9d:d0:7e:8d:e1:30:e4:d5:60:
14:16:bd:c7:58:74:30:8f:ae:70:39:5a:37:db:55:05:57:72:
9b:a2:6f:1d:94:cb:45:51:59:e2:fa:79:9d:40:06:92:1e:9c:
ae:a6:b0:27:2a:ea:f8:15:d4:6e:1a:54:6b:5b:ec:0e:60:4d:
ab:4b:10:a8:de:db:08:6f:e1:45:62:8a:30:d0:71:6f:51:b0:
94:02:a5:b1:e3:1c:be:9d:7f:f2:c9:15:38:be:bf:a4:21:39:
9c:78:65:9b:77:5e:e6:db:7b:f6:f8:46:74:30:87:d2:3e:0c:
bc:65:37:62:70:8f:be:7d:d9:70:fd:0f:e1:19:32:da:66:64:
74:55:f2:86:ee:cd:73:50:50:39:51:b3:33:87:8d:d1:23:59:
03:55:80:fb:87:69:d7:7c:2c:0c:7c:0d:21:07:d6:c0:78:fe:
47:23:0d:67:f1:9b:53:44:70:d6:c7:83:00:ae:54:bb:87:db:
3f:81:9f:20:b6:55:3c:18:68:af:ba:f1:ae:61:86:f2:95:26:
bb:f4:5c:d1:36:b3:58:76:bf:8b:2d:a0:3c:3c:c3:ca:53:ee:
f8:fa:f3:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVdSUArJ78rWvgwm0fibIREhxn4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY2OEYyMzcwOEZGQkYwRUUxNTdBOUE5MjRFODI5NUJB
ODk2RjMzRDAeFw0yNjA0MDkxMDEzMTZaFw0yNjA0MTAxMzIyMTZaMDMxMTAvBgNV
BAMTKEU0QkE2OUNGODg0MDI5NDBDMDM2QzBCNzE3RDA2ODFGNDA4QjJDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMCWAJA0au1phfJX5vuf5+xDhh
++1Gx2E74m0+F7B9eH2xfdkju+Sp+ygVV3Lf0Gru3gQS/W49i/6T0LyvPy9h0fNH
85gQl0QG1fenzdxl4TUuSS9KdArrKn3pT8G/3ZjL9dw0D6e7+BcDTHX3yZbrutIZ
GWEAKJVXOo04ONEQcfP4D2nANWOdShDOcrrp7joOfmJ487UNYhLBUL3xL4nuFF9K
Tx88Fozsz8uBNou02fEGWSHPcEbguZmAQgECKs66qlxbeYGrAReUnZiSeTkmh01m
HD3h/0nz3bfjqivjWe/UyB0E1ZatV/aGQzvk8H0yQW5X7Itm/VHr/hfJwEfVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5Lppz4hAKUDANsC3F9BoH0CLLH0wHwYDVR0j
BBgwFoAUNmjyNwj/vw7hV6mpJOgpW6iW8z0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu
S1QvMC8zNjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2NjhGMjM3MDhGRkJGMEVF
MTU3QTlBOTI0RTgyOTVCQTg5NkYzM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMC8z
NjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANGiuAIPPsGng4k3/Nt15bxwioOrWI0joTnBondB+jeEw5NVgFBa9x1h0MI+u
cDlaN9tVBVdym6JvHZTLRVFZ4vp5nUAGkh6crqawJyrq+BXUbhpUa1vsDmBNq0sQ
qN7bCG/hRWKKMNBxb1GwlAKlseMcvp1/8skVOL6/pCE5nHhlm3de5tt79vhGdDCH
0j4MvGU3YnCPvn3ZcP0P4Rky2mZkdFXyhu7Nc1BQOVGzM4eN0SNZA1WA+4dp13ws
DHwNIQfWwHj+RyMNZ/GbU0Rw1seDAK5Uu4fbP4GfILZVPBhor7rxrmGG8pUmu/Rc
0TazWHa/iy2gPDzDylPu+PrzZw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 13:00:50 2026 by rpki-client