
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.mft
File: 04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.mft (raw, json)
Hash identifier: tf2BGBKWOiFP+5+drWfHIoUAuhv3uxrKf4mLBhyZE/4=
Subject key identifier: CE:05:B9:A7:DE:DC:6B:43:90:57:F6:63:1A:FD:43:D0:EF:5C:BA:13
Authority key identifier: 04:AA:D6:8C:48:A4:F5:18:3D:1C:CC:DC:92:B3:AB:44:A2:7E:89:52
Certificate issuer: /CN=04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952
Certificate serial: 58D37BECA22B971E824BEF109FC8C85837F300CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.mft
Manifest number: 20
Signing time: Tue 28 Jul 2026 13:29:13 +0000
Manifest this update: Tue 28 Jul 2026 13:24:13 +0000
Manifest next update: Wed 29 Jul 2026 15:16:13 +0000
Files and hashes: 1: 04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.crl (hash: 5ZEHTG0GjOhoEG7FSgMOjbnVe1FsoxZtNoqcoCewGcU=)
2: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: kio/GHyzUVFAIAZP9FIBF2xDQuUGdst4KNka4ZyUYuI=)
3: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: SNeq1ybYGtbYDEGKCpoCjXuVA7KyMP9OO/XDTDpkk2M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.crl
rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Jul 2026 15:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d3:7b:ec:a2:2b:97:1e:82:4b:ef:10:9f:c8:c8:58:37:f3:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952
Validity
Not Before: Jul 28 13:24:13 2026 GMT
Not After : Jul 29 15:16:13 2026 GMT
Subject: CN=CE05B9A7DEDC6B439057F6631AFD43D0EF5CBA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:71:79:fa:19:6a:ba:7c:7a:2a:8c:c1:4b:
d8:c7:f0:9f:21:f7:a3:d6:a1:9c:4c:78:6e:e9:1c:
50:94:39:e1:c0:d5:55:0a:5a:a7:91:70:49:7d:a9:
e4:79:9d:58:46:2e:f7:42:56:41:82:85:2d:e9:28:
61:a2:76:db:a5:b7:21:c8:93:92:68:9c:57:e6:9b:
17:29:68:78:ad:ab:e6:5d:7d:41:cb:f5:6a:22:33:
7a:d1:2d:8d:b7:28:40:6f:e5:61:72:ee:9b:52:5f:
a6:37:91:9a:4c:bb:4e:e8:87:d4:d9:f2:81:ea:61:
63:d7:1e:8e:2d:0e:75:dc:b4:bc:ea:a3:e8:00:6a:
17:1d:80:f7:c1:34:9f:fa:fe:38:30:ae:81:1a:67:
b2:01:93:2e:58:37:6e:c0:b1:2d:03:5c:dd:c7:99:
14:46:60:f4:d4:03:88:c5:a7:04:92:0c:93:ec:cf:
33:f6:2e:86:6d:96:df:73:30:38:9b:4d:d6:0d:94:
cd:2b:26:fe:fe:d3:f1:a9:40:95:02:25:77:08:6b:
8e:f2:c1:d1:c1:08:53:fe:7a:a5:3b:a6:f3:c0:cb:
e7:28:ed:06:c6:9f:bf:c0:99:cc:3d:66:ff:ac:81:
aa:bb:c9:2b:7e:62:9c:66:0f:39:6e:76:40:44:dc:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:B9:A7:DE:DC:6B:43:90:57:F6:63:1A:FD:43:D0:EF:5C:BA:13
X509v3 Authority Key Identifier:
keyid:04:AA:D6:8C:48:A4:F5:18:3D:1C:CC:DC:92:B3:AB:44:A2:7E:89:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/04AAD68C48A4F5183D1CCCDC92B3AB44A27E8952.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:a8:f0:33:84:22:37:ea:41:5c:97:68:2c:1c:40:b0:10:
61:61:d7:64:3a:94:6b:27:23:47:bf:34:a8:fc:86:53:35:d4:
5f:90:b5:b5:b3:0e:f7:3b:34:60:54:e2:40:fe:6e:f5:47:86:
d1:98:c2:60:08:0a:b7:65:aa:4a:c9:da:a8:6c:7c:6c:97:17:
ce:33:11:47:57:b2:0a:58:07:29:fc:76:84:b5:ea:12:d2:2e:
d2:94:23:d1:6e:d1:26:a6:05:0d:9e:1b:d5:2b:82:cd:2e:7c:
76:88:a6:f4:03:69:93:c3:98:af:0f:fc:8f:85:f8:29:be:a1:
62:8b:1e:64:7c:18:e7:23:11:67:5e:93:1e:d7:33:de:81:9b:
28:81:eb:c4:ab:76:52:53:5e:8e:99:0f:8a:18:40:ae:fc:ef:
04:e2:66:2d:e2:8f:e4:33:28:b3:dd:aa:3c:98:c9:15:5d:dc:
c2:04:77:cd:7f:7c:b5:36:33:e2:68:ca:a3:8e:cb:03:f8:e9:
6e:5c:ec:55:01:5e:bb:b5:0a:d4:ca:d8:20:11:27:35:d4:49:
4e:e7:7d:29:18:ad:d4:b0:95:6c:de:43:27:bf:5c:bc:8d:f6:
be:01:39:42:63:ea:2e:62:a4:eb:00:96:57:c0:62:96:4a:77:
76:21:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:38 2026 by rpki-client