
$ rpki-client -vvvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
File: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft (raw, json)
Hash identifier: i2gebzIZ7tkne0gU9a1DknTmtWiUKy3bJGE5ZSuMTdY=
Subject key identifier: 92:73:30:90:40:AD:69:02:44:7E:B9:08:D3:BE:44:6D:79:7E:A3:77
Authority key identifier: 38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
Certificate issuer: /CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Certificate serial: 48F7B2967A29264D3EBB06F929808828D96DDA64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
Manifest number: 0125
Signing time: Tue 25 Aug 2026 02:06:18 +0000
Manifest this update: Tue 25 Aug 2026 02:01:18 +0000
Manifest next update: Wed 26 Aug 2026 04:39:18 +0000
Files and hashes: 1: 3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (hash: /hfh1NstAGKg1PWqlzIvXS4gPPZBA4gGIqKAAZ2U1gs=)
2: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (hash: 5ta1zOMgVoZPbCGHY6y3AGzRt6BUjiuQbVXNMQPJM9g=)
3: 38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl (hash: mNz95oWe3uVVQ3It19eu8ZQpoSNrDzHgTEChGfhaQl4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 03:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f7:b2:96:7a:29:26:4d:3e:bb:06:f9:29:80:88:28:d9:6d:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707
Validity
Not Before: Aug 25 02:01:18 2026 GMT
Not After : Aug 26 04:39:18 2026 GMT
Subject: CN=9273309040AD6902447EB908D3BE446D797EA377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:f0:45:0e:24:75:8b:f3:9a:0a:c5:30:0b:
9a:bf:27:01:12:8c:d9:61:24:98:47:3b:22:97:7b:
44:a2:ac:0e:4a:17:8b:6c:b6:31:74:3a:be:66:8e:
a4:d0:ba:29:e8:5f:7a:d4:03:c5:1a:9c:21:4b:9d:
bf:9c:f8:63:98:e3:97:2b:5d:de:b1:d1:85:92:b4:
4d:3f:98:32:7e:55:da:b3:db:52:19:6a:ed:01:87:
e4:3f:64:d0:65:b2:57:6d:37:80:64:78:66:44:af:
72:9e:0d:b9:08:75:3a:8d:67:42:4e:64:91:82:da:
f9:6c:7b:10:c8:ea:ef:95:bb:18:e3:59:6a:63:25:
e1:cb:49:ba:df:5c:24:5e:f1:a4:ac:ad:61:8f:d1:
8b:1b:ee:5b:55:85:f3:cb:6a:b5:e9:09:3d:1b:f8:
b0:2e:60:64:e3:c9:c7:d9:bf:8d:88:2c:61:6e:e0:
1f:fb:b8:e4:39:9e:54:bb:27:3e:2c:1f:1a:eb:54:
8e:33:af:4c:0e:43:3e:a8:8d:90:14:45:16:40:01:
9c:b7:e6:c9:62:7a:92:12:58:6f:7e:8c:be:41:cd:
38:88:14:72:87:d9:e0:f4:3e:b3:8f:70:75:71:95:
76:0e:97:b1:e2:d3:2d:a8:bd:9e:29:aa:85:c0:51:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:30:90:40:AD:69:02:44:7E:B9:08:D3:BE:44:6D:79:7E:A3:77
X509v3 Authority Key Identifier:
keyid:38:FF:AF:CF:7B:08:8F:B2:23:9E:A0:BD:99:CC:6B:D5:4C:FF:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/38FFAFCF7B088FB2239EA0BD99CC6BD54CFF8707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:45:31:d2:7a:28:4d:f7:e3:98:1c:82:77:2d:3b:e4:4f:54:
5a:ce:ec:8d:55:24:6c:e1:e9:e5:9e:18:d6:1b:d9:cb:3e:e4:
04:93:d7:86:8c:bd:8f:65:4b:5b:ff:28:ac:e3:26:5c:df:e5:
09:19:9a:29:e7:1e:ee:6d:00:65:b2:bf:2b:54:ca:25:b5:36:
38:30:34:93:c5:47:19:06:67:9d:67:74:b0:48:b2:f6:fc:02:
87:5e:b1:e1:37:2f:0e:af:39:50:b7:29:27:a3:31:23:7e:f1:
2e:4b:50:60:21:79:8e:d4:c0:a0:8c:08:c8:df:07:e6:36:f5:
5a:ca:49:75:8e:6d:38:2c:f0:9b:e8:71:a5:f6:3a:b8:93:21:
a6:e8:36:eb:67:f2:e9:f2:f2:55:81:c5:d3:35:e1:2b:16:43:
d1:b7:2e:f0:91:55:78:d2:a3:3c:d3:9a:c7:3d:32:b9:f3:0d:
2c:6d:56:bf:d0:94:e5:6b:50:8c:88:9f:33:6b:59:b9:49:b0:
fc:3c:7b:59:9a:ae:27:fd:a1:ff:20:e2:c0:72:1d:62:12:e9:
5b:16:77:7f:a4:4e:49:80:ba:bd:8a:72:e3:82:09:f2:ea:87:
4c:16:ec:b3:78:a7:28:3a:8f:47:c9:29:6f:c6:7e:e1:8f:81:
71:85:4b:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSPeylnopJk0+uwb5KYCIKNlt2mQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGRkFGQ0Y3QjA4OEZCMjIzOUVBMEJEOTlDQzZCRDU0
Q0ZGODcwNzAeFw0yNjA4MjUwMjAxMThaFw0yNjA4MjYwNDM5MThaMDMxMTAvBgNV
BAMTKDkyNzMzMDkwNDBBRDY5MDI0NDdFQjkwOEQzQkU0NDZENzk3RUEzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdS/BFDiR1i/OaCsUwC5q/JwES
jNlhJJhHOyKXe0SirA5KF4tstjF0Or5mjqTQuinoX3rUA8UanCFLnb+c+GOY45cr
Xd6x0YWStE0/mDJ+Vdqz21IZau0Bh+Q/ZNBlsldtN4BkeGZEr3KeDbkIdTqNZ0JO
ZJGC2vlsexDI6u+VuxjjWWpjJeHLSbrfXCRe8aSsrWGP0Ysb7ltVhfPLarXpCT0b
+LAuYGTjycfZv42ILGFu4B/7uOQ5nlS7Jz4sHxrrVI4zr0wOQz6ojZAURRZAAZy3
5sliepISWG9+jL5BzTiIFHKH2eD0PrOPcHVxlXYOl7Hi0y2ovZ4pqoXAUVEjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUknMwkECtaQJEfrkI075EbXl+o3cwHwYDVR0j
BBgwFoAUOP+vz3sIj7IjnqC9mcxr1Uz/hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8zOEZGQUZDRjdCMDg4RkIyMjM5RUEwQkQ5OUNDNkJENTRDRkY4NzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RkZBRkNGN0IwODhGQjIy
MzlFQTBCRDk5Q0M2QkQ1NENGRjg3MDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdnRHcvMC8z
OEZGQUZDRjdCMDg4RkIyMjM5RUEwQkQ5OUNDNkJENTRDRkY4NzA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApEUx0nooTffjmByCdy075E9UWs7sjVUkbOHp5Z4Y1hvZyz7kBJPXhoy9j2VL
W/8orOMmXN/lCRmaKece7m0AZbK/K1TKJbU2ODA0k8VHGQZnnWd0sEiy9vwCh16x
4TcvDq85ULcpJ6MxI37xLktQYCF5jtTAoIwIyN8H5jb1WspJdY5tOCzwm+hxpfY6
uJMhpug262fy6fLyVYHF0zXhKxZD0bcu8JFVeNKjPNOaxz0yufMNLG1Wv9CU5WtQ
jIifM2tZuUmw/Dx7WZquJ/2h/yDiwHIdYhLpWxZ3f6ROSYC6vYpy44IJ8uqHTBbs
s3inKDqPR8kpb8Z+4Y+BcYVLqw==
-----END CERTIFICATE-----
Generated at Tue Aug 25 04:25:06 2026 by rpki-client