
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier: lmliclK+36eU6z4XYfLgAK2MiagTD97oZjL9GEJkcSs=
Subject key identifier: 63:F2:E3:FC:AD:BC:63:03:F3:91:33:71:8E:59:CB:4D:28:44:28:C3
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 40AA597A73A263A54FC5B6EAAB45C74886485223
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number: 0286
Signing time: Thu 09 Apr 2026 10:42:15 +0000
Manifest this update: Thu 09 Apr 2026 10:37:15 +0000
Manifest next update: Fri 10 Apr 2026 13:45:15 +0000
Files and hashes: 1: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
2: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
3: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
4: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
5: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
6: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
7: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
8: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: oPcNFkIGIexIXo9wFyuFE8wDPvx8UsqjswTKNhuf7Rs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:aa:59:7a:73:a2:63:a5:4f:c5:b6:ea:ab:45:c7:48:86:48:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Apr 9 10:37:15 2026 GMT
Not After : Apr 10 13:45:15 2026 GMT
Subject: CN=63F2E3FCADBC6303F39133718E59CB4D284428C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:1a:85:d6:02:7f:e1:47:7d:d5:bb:57:15:
90:28:5f:cc:dc:3e:0e:b8:76:d5:ab:21:21:c4:a1:
f7:1d:5a:35:2b:88:c7:6a:47:c4:21:40:bc:0c:73:
d5:bd:72:0f:a5:a2:86:40:49:98:d9:47:20:cb:43:
ba:52:b1:f8:51:e7:60:0d:b9:bc:5b:13:14:e8:c0:
01:0e:7e:a3:71:13:21:5f:1b:c8:87:2c:b3:a2:2a:
a3:2f:06:59:df:cd:42:a4:76:86:f1:50:70:37:a1:
e0:32:18:8b:55:b6:3b:44:e9:d1:a9:1b:f6:59:bb:
f8:e5:54:09:11:bc:93:21:26:09:3a:34:3f:15:93:
95:45:e8:7c:b8:48:1f:59:c4:1a:b1:97:ea:29:14:
b0:35:54:f2:0d:fd:e2:4d:49:68:c4:25:57:58:39:
b7:b3:f6:df:1f:36:67:2c:f7:2d:f8:f7:6f:88:0d:
da:26:3b:f1:52:b1:ff:2b:f9:fe:d6:c4:4b:e4:14:
3f:6a:f5:91:0a:01:86:ab:6b:d6:48:cc:07:ac:cb:
7f:89:8b:73:df:a6:7a:1a:d1:ec:0a:1d:8d:ad:e6:
9b:44:0e:17:ca:2e:df:03:f3:9b:c0:3b:7b:e1:f9:
2b:6f:f4:a3:1b:8e:4e:cc:00:42:65:0a:d6:d5:f5:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F2:E3:FC:AD:BC:63:03:F3:91:33:71:8E:59:CB:4D:28:44:28:C3
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5b:13:e4:db:84:18:40:e7:e9:fc:ce:89:79:37:dc:b2:a2:
42:fa:e4:d4:9c:75:e5:26:1f:2d:d4:2b:33:b7:a0:ba:a7:ec:
a7:72:78:c3:d2:20:e8:8c:6f:e3:46:48:39:cb:43:d7:5d:f8:
0d:b9:51:8e:47:1a:55:c8:1a:e7:c9:62:2e:77:8c:a9:48:b1:
4e:e0:d4:21:fa:b8:74:6c:03:32:56:b2:b2:18:4f:72:b1:cc:
07:dd:f5:9e:a6:94:b8:17:f1:7d:e0:4a:99:b9:08:22:34:f6:
34:1c:70:75:61:84:50:be:0f:39:2e:e1:e3:d5:39:c8:83:ba:
34:fe:1c:db:22:2f:b0:33:32:3b:f0:ef:0b:a7:98:c9:fe:8c:
d8:c0:1a:9f:03:7a:4f:37:7c:e2:47:5f:49:23:c3:7b:6c:88:
8a:02:73:5a:ae:70:b5:68:e5:bf:27:17:f1:83:72:46:00:7b:
ed:17:1b:6d:34:15:c2:35:78:d3:1c:16:e0:01:a7:26:41:ae:
6a:8a:ed:c9:0b:5c:6c:00:e5:ad:f9:5b:b9:3b:c9:9b:f7:d1:
b9:02:ea:10:e4:1e:f1:ab:f8:ff:d8:0e:3b:ed:a9:d4:e5:85:
8d:fa:0f:0f:31:1f:63:59:b7:a9:3d:fe:c0:f1:07:9f:9d:6b:
95:3b:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:28:15 2026 by rpki-client