
$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json)
Hash identifier: pIh2JahyB127T7PaWB0tCPLeixagTapaJceMyldBN4U=
Subject key identifier: BD:05:90:98:70:2C:B4:DA:78:EB:D4:29:73:A2:43:AC:6A:86:31:A4
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial: 1032B834F20A1E6730995276828B436AD73CF137
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
Manifest number: D4
Signing time: Sun 22 Feb 2026 18:34:00 +0000
Manifest this update: Sun 22 Feb 2026 18:29:00 +0000
Manifest next update: Mon 23 Feb 2026 21:58:00 +0000
Files and hashes: 1: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=)
2: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: LOTSIRF+RgXRZkV/Jce2XEbUDy01T2sYMD0ej+0quP4=)
3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=)
4: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 21:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:32:b8:34:f2:0a:1e:67:30:99:52:76:82:8b:43:6a:d7:3c:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Validity
Not Before: Feb 22 18:29:00 2026 GMT
Not After : Feb 23 21:58:00 2026 GMT
Subject: CN=BD059098702CB4DA78EBD42973A243AC6A8631A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:78:82:17:f2:e8:da:33:11:91:cc:12:d8:
04:f8:07:17:5c:9b:08:9a:de:9d:71:e0:ab:2b:30:
d4:ec:78:87:80:69:07:ca:b2:98:69:2c:21:f7:18:
15:44:a7:6c:db:a8:6a:e1:9f:94:66:b1:e2:b3:57:
ca:b3:15:f7:ac:f4:a3:eb:37:79:4d:23:0c:6a:49:
d4:d0:3f:c6:46:7e:a7:26:e0:da:54:4a:a4:57:19:
f1:70:06:74:f7:ea:92:60:fa:26:a4:86:9b:0f:c3:
41:c4:07:73:81:94:6a:c7:f8:1d:79:fc:0d:04:30:
11:aa:b5:13:28:f8:e9:a5:92:49:4c:64:aa:f8:d6:
d2:be:58:09:09:e7:ea:ac:bd:55:20:17:8a:a8:ab:
f0:b0:8a:68:c9:40:da:af:d3:4b:45:be:e8:c1:61:
c8:34:b2:41:ae:7c:54:6e:11:51:7a:43:85:fb:9c:
36:4d:c2:46:1e:bc:80:69:52:53:7a:31:f4:5d:11:
80:f3:e3:d8:50:61:3d:25:67:dd:f4:aa:17:61:f1:
64:85:2f:21:8f:84:75:0d:a8:5e:f4:f2:d6:d4:23:
5d:6c:ee:5b:9c:04:a8:22:44:2f:12:2c:62:0e:db:
f8:65:c3:9c:10:ae:f0:ef:0e:e8:87:17:2a:2c:b6:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:90:98:70:2C:B4:DA:78:EB:D4:29:73:A2:43:AC:6A:86:31:A4
X509v3 Authority Key Identifier:
keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:ab:2c:dd:25:91:42:e7:2b:a3:0c:ad:6e:6c:e2:66:eb:
d3:6c:d1:3c:2c:7f:ba:51:df:c7:0f:1d:ab:07:e3:34:ce:d7:
62:33:66:e4:dd:8f:89:72:11:43:96:fd:ee:72:dd:98:43:15:
e5:ce:71:df:47:de:11:02:17:8a:1b:12:7d:0e:c2:e8:b6:c0:
9c:2a:73:a0:a9:f0:08:2c:14:b4:67:0e:0c:14:6a:ea:ea:6c:
44:cf:80:3c:c8:4f:bd:de:f1:44:8d:05:b3:89:2c:00:c7:84:
d9:49:9f:e5:5e:3f:5e:6a:ce:90:39:19:72:3c:e5:e0:f5:37:
15:47:5a:f7:47:86:36:00:ac:40:b2:90:91:40:b5:b0:8a:c8:
f6:b3:45:57:94:0c:ff:d6:7d:38:26:9b:b5:da:a3:ae:9e:d5:
46:76:1e:ef:2d:6a:8a:98:96:c4:c9:50:7c:fa:31:10:ad:c5:
3a:70:76:c1:5e:c8:4a:d0:ec:f6:14:9c:2f:61:0e:94:b2:32:
06:73:55:e8:26:78:35:a8:69:94:fd:6e:7b:5e:09:e0:f5:b8:
7b:75:19:31:3e:23:81:b6:8a:49:47:9a:94:ee:29:1b:f7:be:
65:46:6d:19:de:28:16:48:ba:b7:1c:10:70:6c:74:08:47:dc:
c8:91:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:52 2026 by rpki-client