
$ rpki-client -vvvf rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
File: 1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft (raw, json)
Hash identifier: Hjw+L3aTGIyi+QIBZAYb3xSc60HAqb7KTtN2U9Lwnp0=
Subject key identifier: 28:75:AD:71:34:19:D2:F4:9F:31:84:2F:C5:21:55:5C:A6:23:75:05
Authority key identifier: 12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
Certificate issuer: /CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
Certificate serial: 7F37247D1B66BD861248E15766693A40AB7AC1B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
Manifest number: 011B
Signing time: Sat 31 Oct 2026 20:08:44 +0000
Manifest this update: Sat 31 Oct 2026 20:03:44 +0000
Manifest next update: Sun 01 Nov 2026 20:41:44 +0000
Files and hashes: 1: 3137372e32332e32302e302f32332d3234203d3e203532373537.roa (hash: HL1XWsB0E9KpdgBdBbrJwPzpCvau8QUMFH8FKPdZcJ4=)
2: 1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl (hash: 7YLJIuAhC861QnpTNEXcnASQPD9WMI+QP4CsmS7tUfg=)
3: 3137372e32332e32322e302f32332d3234203d3e203532373537.roa (hash: 90Ww2w4BKp/NjxoTJ0TAv/+dABt+gBI+a5XWyuIhUW8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl
rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 20:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:37:24:7d:1b:66:bd:86:12:48:e1:57:66:69:3a:40:ab:7a:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE
Validity
Not Before: Oct 31 20:03:44 2026 GMT
Not After : Nov 1 20:41:44 2026 GMT
Subject: CN=2875AD713419D2F49F31842FC521555CA6237505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:73:37:d5:15:ff:05:aa:c3:f5:cf:c4:93:
88:67:b4:ba:0b:dd:54:16:41:6a:21:d2:df:4c:4a:
63:82:9d:25:52:6a:bf:44:1f:76:72:55:5d:31:f4:
a8:ff:8f:f9:13:bb:7e:86:ba:bd:b3:2b:d6:b2:6a:
a9:32:1b:47:18:ec:3a:2d:a2:88:a2:29:e6:b1:2f:
24:bf:ec:3b:f4:5a:53:fa:5f:34:cc:a7:c1:75:f6:
2b:cd:5c:0a:cf:21:19:21:f3:0b:ac:33:6d:00:39:
3b:eb:f0:64:7f:83:a5:f1:f1:4b:a1:b6:ce:25:21:
1e:21:d7:98:43:0c:b0:a7:da:f1:ff:96:6e:c6:57:
bd:ff:c3:f6:5c:51:22:12:01:2a:45:27:3a:a4:f6:
57:02:b2:4b:20:82:ca:48:b5:aa:b0:b8:cb:37:df:
6d:f8:55:89:93:87:55:8f:98:36:7d:17:5c:70:d6:
59:61:57:59:74:7b:8b:f0:ec:28:d3:45:cc:b7:b2:
57:b6:ca:f2:99:2d:f6:8f:63:83:48:3c:1b:b6:e0:
f0:41:c0:83:97:1e:c8:62:a6:ae:90:f3:77:cf:38:
57:5d:b2:9c:61:70:f1:a5:4e:38:f1:67:08:8c:6e:
f6:45:6b:42:09:29:bf:3b:cc:07:e0:17:23:cf:38:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:AD:71:34:19:D2:F4:9F:31:84:2F:C5:21:55:5C:A6:23:75:05
X509v3 Authority Key Identifier:
keyid:12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:da:47:10:73:2d:e3:42:4f:0f:7a:08:8d:06:a7:84:01:10:
15:b8:7f:a2:65:b1:d5:73:6b:f6:6b:83:c3:da:39:74:09:6f:
a7:bf:a5:3c:46:3a:2f:e0:31:0c:74:11:3d:e2:ab:36:5f:34:
40:48:9d:5a:03:b6:b8:1b:78:c6:ea:c9:aa:9d:f5:8c:23:a3:
d1:50:52:ec:d8:0c:6f:d9:57:9f:66:4a:07:58:f5:a9:87:df:
f6:8d:82:0d:7d:2a:09:a4:92:0d:42:02:ce:ce:e3:35:73:7d:
9f:15:93:81:c2:82:54:48:b3:22:b5:5b:9d:43:04:bf:2e:43:
5c:5b:c8:99:67:bf:c2:7d:3f:d2:17:e8:3b:12:d3:99:a4:04:
dc:26:4b:fe:56:dc:bc:db:fe:bd:48:df:8f:9e:09:ad:d9:64:
12:dc:ee:68:1a:19:58:c9:b7:2c:41:e0:65:39:32:87:9b:6d:
37:8a:94:47:7f:8f:02:a4:3d:a0:fe:c9:29:f6:5e:fc:67:46:
f2:f9:21:20:c0:4b:d9:b3:1c:94:0d:e8:44:c4:19:e0:07:08:
6b:4c:58:4b:48:90:75:5f:5a:2d:d0:1a:fe:d4:86:d3:00:fb:
16:0f:65:12:bd:04:c1:35:f7:1a:28:55:db:8e:48:89:fd:ca:
8c:be:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:36:30 2026 by rpki-client