
$ rpki-client -vvvf rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.mft
File: 1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.mft (raw, json)
Hash identifier: NaXxlvretItMcBOQTTqHsYD3mUn2VpJa4xQmvsrIhwM=
Subject key identifier: 59:71:65:75:5F:73:BC:CC:3D:8C:67:96:9B:14:7F:9A:7E:80:D1:8B
Authority key identifier: 1A:70:E5:7C:76:9C:74:EE:D9:40:D7:2A:9F:28:D9:A5:CE:8C:A0:E2
Certificate issuer: /CN=1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2
Certificate serial: 5B6C894E6D1001DD25C88AD37C80D50BB0FD2BAB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.mft
Manifest number: 3F
Signing time: Tue 27 Oct 2026 09:50:04 +0000
Manifest this update: Tue 27 Oct 2026 09:45:04 +0000
Manifest next update: Wed 28 Oct 2026 10:51:04 +0000
Files and hashes: 1: 3137372e34372e36342e302f32302d3234203d3e20323632343032.roa (hash: VAPil1WF8cBCTVRZiRydXnJ283ZsQxBHkJYkn1N+Gvk=)
2: 323830343a3364383a3a2f33322d3333203d3e20323632343032.roa (hash: 5DIlT9BrNOvyodQy3j94g54W/DfmMcXWZGmfB0nWEXw=)
3: 1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.crl (hash: 9M+4zTsTSnCeZTtmI5xxBRHLVXlHEpAds29aXZ9bCys=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.crl
rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 10:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6c:89:4e:6d:10:01:dd:25:c8:8a:d3:7c:80:d5:0b:b0:fd:2b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2
Validity
Not Before: Oct 27 09:45:04 2026 GMT
Not After : Oct 28 10:51:04 2026 GMT
Subject: CN=597165755F73BCCC3D8C67969B147F9A7E80D18B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:89:58:c4:0f:0b:e0:a7:b0:12:a0:9e:b3:
40:94:23:f5:58:19:06:d4:c2:c1:d3:c9:95:ad:22:
c6:ea:f0:10:44:69:22:6f:d5:a7:27:6b:23:24:b6:
9a:d6:4e:52:70:37:14:3c:38:2d:68:a2:14:fa:9b:
e5:fb:cb:dd:4f:39:2b:82:b6:f8:1e:1c:d4:81:2c:
62:73:c1:11:d7:33:39:82:29:60:99:f1:8a:32:4d:
af:37:03:56:93:23:dd:8a:f2:ea:e2:7c:d3:b7:4c:
13:74:73:a6:5f:c6:bf:ea:4a:20:28:1e:33:0e:0b:
56:d0:fb:86:45:8a:44:21:df:01:c6:65:c2:18:9a:
37:d8:fe:22:32:bf:ce:89:a6:3e:ce:ff:94:13:d6:
03:a8:13:5b:24:95:ce:6e:ee:4d:5a:ef:4f:ae:b9:
3c:f5:36:8d:5e:be:8b:95:e9:6e:41:52:1a:6c:4a:
35:37:9f:cd:2e:7c:7a:f4:43:71:1a:ff:1b:14:a0:
ed:b1:4a:5f:be:64:0e:ed:3e:43:0a:1a:ab:31:e9:
b3:69:33:9b:08:ff:c2:89:ed:93:54:87:ed:71:65:
2f:27:3f:bc:d8:26:79:42:1a:fa:c8:de:3f:6c:8e:
12:4f:ed:16:67:0e:47:09:fc:e4:e7:30:98:a3:6c:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:65:75:5F:73:BC:CC:3D:8C:67:96:9B:14:7F:9A:7E:80:D1:8B
X509v3 Authority Key Identifier:
keyid:1A:70:E5:7C:76:9C:74:EE:D9:40:D7:2A:9F:28:D9:A5:CE:8C:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/634QZ5U1Pj1iVRudkdSTPxJpVfUrRS2rGdXaEUBhjRx1/0/1A70E57C769C74EED940D72A9F28D9A5CE8CA0E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:26:c2:54:ad:3a:69:1c:4a:44:c7:d8:48:ae:62:0d:76:9a:
b4:4e:9a:25:2e:4d:80:73:f9:74:6b:82:25:2b:7e:1f:8d:ee:
89:dc:94:81:99:14:d9:9a:2b:99:eb:33:12:13:b4:5c:2e:63:
0a:21:b3:89:7c:84:53:a1:c6:7d:a8:c0:38:5d:e6:93:00:63:
0e:d9:da:1c:42:a7:45:c7:38:fc:16:29:5b:40:cc:04:43:31:
f3:7f:a2:13:49:6e:a0:c3:9e:a6:92:77:93:d1:76:fb:29:f4:
f5:07:c3:22:f2:f5:cf:de:45:6d:32:79:2a:97:66:9d:83:00:
6f:63:40:7d:13:3f:32:b8:e9:dc:c0:66:e2:6c:c7:21:52:e5:
2d:ed:12:f6:ce:77:09:96:dc:80:0e:bc:e0:f0:e4:1e:78:99:
df:ed:92:d9:bd:11:f5:f9:5e:f0:1f:20:1a:c3:9a:55:59:a0:
2c:d5:95:78:9a:18:f1:27:85:28:a8:2b:d3:73:e5:7c:43:3c:
c4:93:31:01:e8:4a:cc:04:7e:ea:64:21:b5:4c:eb:27:78:fd:
85:f6:4b:7b:ff:c7:3d:b4:10:c6:ce:e4:47:9e:13:9f:33:f0:
ee:9b:9a:27:49:7a:8f:60:8b:cf:4b:9b:1c:73:bc:d7:69:fc:
05:3b:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:48:38 2026 by rpki-client