
$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
File: FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft (raw, json)
Hash identifier: Gn2nCURPY2XV9XCvSIoyjBHT0wRJriDv/C2TlCKxrgY=
Subject key identifier: EF:40:58:76:71:03:9C:AE:6A:C4:24:F6:D0:34:11:95:2F:DA:2D:89
Authority key identifier: FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0
Certificate issuer: /CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0
Certificate serial: 3F02FA10304B2B78C1A77272A02CC156B88C9B76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
Manifest number: 17
Signing time: Sun 12 Apr 2026 13:37:33 +0000
Manifest this update: Sun 12 Apr 2026 13:32:33 +0000
Manifest next update: Mon 13 Apr 2026 16:12:33 +0000
Files and hashes: 1: FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl (hash: wg87SJhZ2gUgmLtqAAVh8SAccKeNzHxsLji1ju+IpWg=)
2: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: kSiwVkFSht5sHqzzFD1P2mJQVYUOoEbi/B67iFq/CGA=)
3: 323830343a346566383a3a2f33322d3438203d3e20323638323935.roa (hash: CxZxM3BLNvFYW65Y76zKHnqGUy02Y19OL8fydS8gq8Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl
rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 13 Apr 2026 16:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:02:fa:10:30:4b:2b:78:c1:a7:72:72:a0:2c:c1:56:b8:8c:9b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0
Validity
Not Before: Apr 12 13:32:33 2026 GMT
Not After : Apr 13 16:12:33 2026 GMT
Subject: CN=EF40587671039CAE6AC424F6D03411952FDA2D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:63:2e:76:13:7e:e6:c2:0f:28:da:40:a1:
3f:ac:a4:2c:75:f1:30:c1:0b:c0:32:e9:9a:4c:8b:
68:85:de:4c:20:14:ad:6d:2f:9b:2e:97:f8:10:46:
c3:49:fa:27:c6:99:1e:05:d2:0d:a2:f5:81:d4:4f:
23:2d:ff:2a:0b:12:4d:50:13:6c:dd:ce:9b:5e:e5:
27:40:2b:b2:b4:10:d5:5d:8a:0c:d1:37:76:8a:2c:
34:79:79:71:8b:7f:6a:d4:e7:97:fc:0b:07:d7:62:
95:93:ab:35:32:53:22:40:d4:e5:c7:25:54:56:1a:
d1:12:a1:0a:63:e8:d3:7c:54:98:b1:b3:4f:8d:13:
e1:e3:13:48:3b:40:f8:32:c8:92:ee:57:4b:f0:21:
07:62:44:00:ce:4d:5e:c8:cc:32:1c:41:3e:86:7b:
ba:7c:4e:43:15:38:9e:19:bc:21:eb:ae:ff:99:14:
60:ca:fa:89:b9:a7:fb:10:68:d5:96:ef:e5:ca:4f:
c1:9c:a2:df:cf:ab:24:c4:a9:ab:a0:4f:aa:2f:65:
d2:62:cb:99:ac:e4:81:9c:4b:68:aa:3b:93:b5:50:
6d:2d:5d:0c:88:55:7a:19:91:c1:f3:9c:d8:dd:28:
26:6d:84:d5:38:14:19:ef:a5:07:c0:d3:fe:89:c0:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:58:76:71:03:9C:AE:6A:C4:24:F6:D0:34:11:95:2F:DA:2D:89
X509v3 Authority Key Identifier:
keyid:FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:16:dc:bb:c5:8f:b4:6b:94:7c:41:57:27:e8:f4:bb:a8:4d:
d0:08:91:33:05:02:93:36:54:e7:11:b3:a4:36:67:c8:35:3d:
50:a1:ba:13:80:b7:cb:55:24:fd:1d:0f:ab:dd:17:b0:b8:ea:
c1:96:44:11:c2:00:2c:89:66:f7:7a:74:98:73:f5:8c:51:41:
eb:f3:61:85:95:a8:84:d7:d6:17:18:09:7d:4e:86:a0:68:64:
04:12:c9:dd:de:fc:60:6c:3b:3e:11:c1:5f:fe:cc:b2:cc:6c:
b5:64:63:3a:4a:d4:24:6b:36:21:c6:df:94:38:67:e8:d4:4f:
86:d5:33:de:0f:28:98:24:7c:d2:4a:0d:3f:87:d9:9e:ea:be:
18:4e:87:4f:0b:fd:72:09:d7:b6:a3:a6:18:ef:ec:bc:74:bb:
6e:7d:b4:77:b0:62:08:fc:61:62:75:28:dc:3d:d9:aa:b6:a8:
ec:c2:c5:cd:13:74:90:8d:df:ae:cd:33:b3:57:cc:dc:89:e4:
de:e6:48:73:3e:9c:25:d9:87:16:5e:29:f0:47:97:1c:90:49:
cf:b9:a8:14:f6:39:5f:91:e9:9a:01:93:9e:be:e0:f3:87:c9:
4b:04:7a:7c:40:1d:80:d0:9d:80:72:77:c9:82:be:09:11:72:
6a:21:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 21:17:12 2026 by rpki-client