
$ rpki-client -vvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
File: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft (raw, json)
Hash identifier: OlG8B1icTFLKRs6cWYN/pyPl3yWqi6micntTUWiukZA=
Subject key identifier: B9:00:30:62:56:BE:67:43:A5:23:81:4E:EF:77:54:83:80:59:DF:94
Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
Certificate issuer: /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Certificate serial: 3581923029617146CD70670291F40932BCC4B942
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
Manifest number: 2C
Signing time: Fri 17 Apr 2026 05:23:03 +0000
Manifest this update: Fri 17 Apr 2026 05:18:03 +0000
Manifest next update: Sat 18 Apr 2026 06:54:03 +0000
Files and hashes: 1: 34352e3137302e3133382e302f32342d3234203d3e20323734343631.roa (hash: Wdxg47LRUm5TFstfbBqAIVXUclGkCk8iroEbPkc1O7o=)
2: 323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa (hash: RjVQmAXS1Jvi0ifDxtizKk45kZS/G85DZHRMfune5R0=)
3: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl (hash: l9CQEUHXNBAS95QGrwG1Zc4M3zJFnMgB70bxoEr3Jvs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 06:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:81:92:30:29:61:71:46:cd:70:67:02:91:f4:09:32:bc:c4:b9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Validity
Not Before: Apr 17 05:18:03 2026 GMT
Not After : Apr 18 06:54:03 2026 GMT
Subject: CN=B900306256BE6743A523814EEF7754838059DF94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:20:b2:a4:64:04:c6:55:4b:cb:0e:ea:1c:
b9:87:7d:0b:52:7c:b7:2a:72:64:f6:84:5a:ed:b2:
b8:ee:b7:a8:97:aa:4c:94:e6:de:fe:04:64:dc:04:
48:ed:c4:8b:cf:35:5e:b9:e6:81:b4:06:3a:e8:a3:
73:e1:f1:01:be:12:d2:59:55:f2:13:84:20:5f:77:
67:2d:d1:16:76:7b:17:cc:36:26:cd:5f:65:c3:e5:
31:b3:2d:82:87:d2:d0:a5:b9:65:56:d2:89:f5:10:
17:57:41:d6:86:d6:2d:47:02:10:64:f7:b3:de:8d:
d1:f3:02:c8:61:e5:2e:09:54:da:ac:e4:f6:d5:a0:
cf:ad:77:28:f9:0a:d3:99:14:da:40:b8:88:ff:50:
24:8a:ce:ec:be:97:40:cf:c9:fe:4e:cc:25:61:91:
79:b9:05:75:4a:56:c2:a4:91:a0:4f:10:e6:2a:dd:
c4:a6:6d:e8:35:b3:39:02:9f:cc:97:01:83:13:d0:
95:68:7c:03:f9:f1:6a:64:33:48:65:d1:dd:f5:3d:
45:14:51:87:80:0e:ef:af:6e:b9:60:05:f9:9e:6a:
7f:10:18:ea:e8:f3:9b:bc:93:19:c4:b7:38:45:bf:
02:00:aa:24:91:2b:54:7d:9b:82:52:00:40:71:e3:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:30:62:56:BE:67:43:A5:23:81:4E:EF:77:54:83:80:59:DF:94
X509v3 Authority Key Identifier:
keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:1c:c9:f9:29:83:71:b2:9e:f6:f4:cc:5d:2a:2a:a0:43:
59:2f:f4:50:71:29:57:d3:bb:c6:a6:7b:60:cf:86:1f:ac:f4:
5f:3c:eb:50:4b:fe:98:b8:b4:90:74:9b:23:d6:83:f0:b9:87:
c1:c7:3b:ef:fb:2c:1a:ca:af:01:ed:84:4c:b3:ae:bf:56:4a:
8f:74:70:7a:90:f3:71:36:0c:d0:df:3e:36:3d:4d:cd:43:8d:
ed:6b:b4:9c:4e:5b:90:ea:0f:e9:0e:21:bf:93:16:e3:09:10:
f0:da:d5:b6:8a:26:53:e5:23:7a:77:ef:9c:21:f8:16:2a:99:
87:6b:06:f0:5b:67:cf:ec:c3:04:9e:27:a5:58:69:b4:d5:80:
60:6c:b3:aa:1f:01:6a:22:80:f3:25:f6:55:b1:5d:4d:67:be:
b2:dc:b2:3c:14:3e:3b:a7:e9:b7:01:e5:a4:64:1a:98:4f:a1:
33:5c:2b:26:1f:5b:fc:bb:80:58:de:ca:76:99:67:b7:bc:27:
7c:57:93:77:79:55:f0:7e:13:dc:5b:70:11:cb:6d:b7:a8:15:
87:d1:67:8d:d5:b1:1e:85:fe:70:25:63:e3:68:47:a4:be:6c:
f0:6b:a3:a0:44:90:35:57:cf:cf:53:74:1d:cf:23:ff:1a:51:
4d:db:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:27:47 2026 by rpki-client