
$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
File: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft (raw, json)
Hash identifier: eHyvp9iNJhHlccjgna0H9BcDGXDRdQEJzsLo4B+tEBY=
Subject key identifier: 39:D7:4A:8C:2B:E7:85:AB:BB:B4:15:EF:64:17:28:75:18:A2:6B:B1
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Certificate issuer: /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial: 117C6C78F676A2E8B130D9112D75C3794399FB87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
Manifest number: 0249
Signing time: Sun 23 Aug 2026 13:28:45 +0000
Manifest this update: Sun 23 Aug 2026 13:23:45 +0000
Manifest next update: Mon 24 Aug 2026 14:19:45 +0000
Files and hashes: 1: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl (hash: ajWUA4kG+VF6i94aa7/oM5/yRUmPjhCE+KqyboUQY5c=)
2: 323830343a333464383a3a2f33322d3336203d3e20323635343834.roa (hash: rqqnGf7z70ebu7k8BGzpChNYXc5ojCmWd35gMyEJ6Ug=)
3: 3136382e3139372e3135322e302f32322d3234203d3e20323635343834.roa (hash: uxrs1CWt8bnyDDm52t9J8LQ2o81S9c1JUBjBqqrNGqs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 14:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7c:6c:78:f6:76:a2:e8:b1:30:d9:11:2d:75:c3:79:43:99:fb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Validity
Not Before: Aug 23 13:23:45 2026 GMT
Not After : Aug 24 14:19:45 2026 GMT
Subject: CN=39D74A8C2BE785ABBBB415EF6417287518A26BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:8b:be:ac:56:00:c9:61:55:f6:14:04:0c:
95:97:27:2d:88:8a:63:a2:20:f5:2e:ba:a0:11:78:
55:cb:24:b8:84:c4:8a:bd:d9:7f:87:f8:6d:64:e9:
4c:a0:ba:28:ea:6d:0e:8b:d9:e0:e3:6a:3e:85:2e:
53:48:ea:15:20:4e:fe:f0:b6:11:54:69:20:f9:4b:
9e:ef:57:9a:5b:0a:e2:49:32:37:d1:0a:c6:05:ab:
e1:70:2e:47:13:41:57:83:9c:ef:d7:aa:da:3f:26:
fe:9e:06:a2:44:8a:61:05:75:6c:51:dd:7a:75:d9:
0e:ff:e8:0c:c3:79:6e:91:ad:0b:ef:db:c0:44:83:
6b:b9:31:24:12:16:87:b2:e1:90:7c:0c:6e:54:57:
a1:e7:17:b6:e0:fb:25:d4:76:a5:d5:7b:a4:bd:2d:
86:f1:78:b2:49:7c:4d:dc:b8:35:5d:73:01:44:70:
06:05:ab:46:3d:2d:01:0a:c3:36:e9:d0:71:c4:1a:
13:8c:9f:ea:79:cf:0d:e6:bb:e1:a3:9a:2d:db:ca:
b4:d6:49:8b:58:64:de:05:d2:fc:c6:b0:d7:e2:68:
9f:97:2e:66:05:18:90:69:ce:b7:c7:f3:ab:48:9d:
de:73:a7:d3:53:c5:78:c5:ad:02:47:32:8e:ae:4f:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:4A:8C:2B:E7:85:AB:BB:B4:15:EF:64:17:28:75:18:A2:6B:B1
X509v3 Authority Key Identifier:
keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:bc:90:85:18:2e:92:3b:a8:5c:77:99:ea:96:ef:32:fa:
53:3d:81:b9:29:20:c6:4b:1c:43:b9:34:11:4c:cb:74:8e:ea:
7f:69:19:70:71:5b:35:7e:59:b0:b1:d2:a5:be:6e:c6:0a:cb:
8f:16:d5:43:74:31:64:d9:5f:0d:11:3a:be:ce:ad:08:06:c9:
02:f2:e8:82:c6:25:fa:58:74:e1:43:43:ec:cb:90:be:c3:ae:
d0:09:52:e3:cf:33:24:af:a1:81:af:60:57:6b:5b:86:3f:7f:
a4:22:c0:1d:93:2f:4f:aa:11:5a:02:10:17:0c:48:4c:62:e4:
73:c5:1c:89:d9:c4:35:30:ff:a9:98:e7:04:13:86:35:4c:4d:
82:a1:f1:0c:57:8b:a3:b3:d2:7f:df:0f:b3:1b:fe:8a:f8:f4:
5a:0e:16:f9:29:02:3e:83:f1:24:31:26:fa:30:a7:ac:c8:71:
c6:66:af:f8:37:14:58:06:4a:c6:c3:37:db:fc:f0:a2:fd:08:
7c:89:e6:17:d9:25:62:8f:dd:e7:7a:af:02:d0:f7:80:c9:08:
f4:5e:e9:bd:57:7b:0d:9f:a9:e9:a6:1f:e5:a3:6c:85:ee:15:
17:12:8e:b8:ee:cf:da:24:63:26:25:5e:78:cd:a5:3b:32:c7:
fc:be:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:21:14 2026 by rpki-client