
$ rpki-client -vvvf rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft
File: B4EF21A72F48760DE13763E987C39973E33F9FD5.mft (raw, json)
Hash identifier: NCGAealHDQ8sBZe/Xf94gKnaNDhAYeowRbOBwPk3bjQ=
Subject key identifier: CF:CD:B0:C2:0D:50:41:09:58:AB:79:31:66:D4:CB:0F:7C:C4:99:2F
Authority key identifier: B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5
Certificate issuer: /CN=B4EF21A72F48760DE13763E987C39973E33F9FD5
Certificate serial: 6B4C6CF11BCBB3657C841B80DE28CCD819B66B32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft
Manifest number: D3
Signing time: Mon 24 Aug 2026 18:33:54 +0000
Manifest this update: Mon 24 Aug 2026 18:28:54 +0000
Manifest next update: Tue 25 Aug 2026 21:47:54 +0000
Files and hashes: 1: B4EF21A72F48760DE13763E987C39973E33F9FD5.crl (hash: 1Lpzk6KVhOCHqSWVuupHNHWJLcvjcj3kbtOuqkC0ctg=)
2: 323830343a383231633a3a2f33322d3438203d3e20323732343939.roa (hash: +kHabQZOvFU/JDwfE1vMQqpLNnFf9Liaj3xxBgpIejw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.crl
rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 21:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4c:6c:f1:1b:cb:b3:65:7c:84:1b:80:de:28:cc:d8:19:b6:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EF21A72F48760DE13763E987C39973E33F9FD5
Validity
Not Before: Aug 24 18:28:54 2026 GMT
Not After : Aug 25 21:47:54 2026 GMT
Subject: CN=CFCDB0C20D50410958AB793166D4CB0F7CC4992F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:63:13:c9:78:b0:cc:28:04:21:46:44:22:
4e:95:0b:0c:47:d9:d1:21:8a:bb:a5:9b:20:08:1b:
eb:a0:2f:b1:ec:2f:7d:e7:79:44:f2:d7:36:c6:0c:
23:c5:fb:fb:cd:aa:97:79:88:ba:3c:02:e5:c6:fe:
6d:98:8d:d0:b0:d5:2c:3c:30:42:0f:d8:ba:73:3d:
cf:f5:da:61:8a:5f:12:c1:d6:1d:e0:58:16:5e:be:
ad:4f:5c:3a:09:0a:75:a4:17:1a:8c:4a:8b:e5:bf:
49:00:6d:bb:ab:1d:6a:4b:13:9c:d6:4d:60:20:2e:
2f:09:cb:5c:f5:a8:d6:a6:40:51:a2:a7:be:8f:b5:
2d:01:ae:29:0a:07:3d:db:df:c5:c6:d9:c2:42:ec:
d0:23:86:76:66:bb:b9:6d:b3:03:28:62:9e:fc:3b:
c2:9b:aa:fd:21:7e:68:db:48:3e:86:c9:9c:db:52:
57:47:5f:1c:eb:31:9e:e2:f5:15:51:46:57:c2:4a:
c2:e4:94:aa:51:35:22:3c:02:0e:73:8b:ed:e3:2b:
05:97:cb:3b:97:9c:3b:d3:03:3e:b5:63:28:a1:ea:
1f:b9:86:a6:fd:77:d1:6a:fa:55:ba:4d:4b:67:3e:
2b:ba:b8:33:ee:5b:02:9f:51:e3:ae:58:01:1a:ed:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:B0:C2:0D:50:41:09:58:AB:79:31:66:D4:CB:0F:7C:C4:99:2F
X509v3 Authority Key Identifier:
keyid:B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:66:10:2f:ff:38:35:4e:15:3f:55:14:dc:e8:82:6c:1b:7e:
f7:9f:a2:57:9d:0b:7c:d7:fb:ee:a2:69:de:90:04:e4:16:8c:
81:96:0a:28:c6:a2:ee:b0:8a:be:8c:c5:9a:3b:88:d6:76:cd:
ec:fe:8a:a2:7c:34:d9:a6:f6:53:99:40:e9:fd:d6:6f:0e:08:
ac:34:a5:b2:01:3a:98:d7:0f:c2:d4:4a:45:48:51:44:8e:76:
fd:fc:e8:30:34:8d:cf:b0:d6:26:0f:6a:e7:1e:0e:fd:b3:58:
80:9c:0b:70:a8:7e:aa:c8:36:30:58:b8:32:a5:55:e6:fa:c9:
87:1d:06:fa:a0:1a:a6:60:3a:a5:4a:85:bb:1b:02:a4:88:38:
a3:f7:70:a9:55:14:be:9f:aa:b9:6c:58:ad:f7:22:4e:65:ba:
46:93:3e:ab:7f:7d:8c:51:91:9d:aa:3e:04:ed:38:e7:49:bf:
65:0b:4e:76:0a:4a:42:13:f8:a1:0f:a5:dc:e3:19:18:2a:75:
fa:24:3b:ef:83:24:75:5b:81:0c:36:2e:8c:a0:ad:76:50:d2:
4d:32:c5:a8:5f:74:93:84:13:b0:82:41:43:3e:ce:1a:5e:bc:
3d:c1:65:9e:ce:77:c2:5b:06:c6:3d:57:ce:88:2f:dc:39:c0:
a1:cc:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:37:56 2026 by rpki-client