
$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier: 1zkztixMZ6MA7ou+uglS6jdQLDKtkt1EbZxYe+pAyS0=
Subject key identifier: EE:60:89:7D:E1:6C:FD:24:57:5B:CC:5D:B2:DA:BE:06:8C:71:59:30
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer: /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial: 2E26C991B6B436E702B9355B7D8A44285C50FBDA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number: 03E0
Signing time: Fri 17 Apr 2026 14:43:30 +0000
Manifest this update: Fri 17 Apr 2026 14:38:30 +0000
Manifest next update: Sat 18 Apr 2026 16:20:30 +0000
Files and hashes: 1: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: Srd1pjsJvYtWPmUSiNRoUpMcscESorOVPvUySBKYHhY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 16:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:26:c9:91:b6:b4:36:e7:02:b9:35:5b:7d:8a:44:28:5c:50:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Validity
Not Before: Apr 17 14:38:30 2026 GMT
Not After : Apr 18 16:20:30 2026 GMT
Subject: CN=EE60897DE16CFD24575BCC5DB2DABE068C715930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:9d:8f:db:83:51:4d:a8:4d:93:cf:03:16:
77:37:8b:83:af:9e:d1:96:42:73:38:12:fe:45:8e:
85:1a:aa:ad:dc:a4:2d:ae:5b:96:d1:aa:92:47:57:
40:aa:38:62:00:fa:0f:d0:14:fd:c5:aa:48:06:9b:
7f:5e:21:dd:ed:fc:e2:5a:23:e1:ed:50:0a:ad:38:
5a:ac:1b:fb:9b:d1:9d:4f:7f:14:83:47:f4:84:1c:
0e:27:5a:0d:b8:45:6f:79:dc:5b:e5:1b:50:c0:c7:
0b:52:0f:59:47:ab:a5:ad:40:2f:78:93:43:ca:93:
9a:35:d6:0a:39:e5:f4:c3:cc:35:15:8e:7c:55:45:
ff:86:17:47:22:e4:f8:5e:55:15:81:00:cd:48:d3:
11:20:0c:e4:c6:3b:99:b1:7d:21:cb:58:b8:5d:44:
74:5e:16:1f:eb:b9:1e:7f:92:34:68:41:28:db:0b:
18:30:5c:d8:be:83:1e:37:28:20:25:6c:19:a5:b5:
c5:80:8b:1d:ce:46:8c:ec:9d:31:c1:2f:83:59:12:
1c:99:c0:a8:f3:e9:80:2a:92:0f:65:44:dc:a6:a3:
66:1c:cd:a8:ca:3c:79:7e:b3:28:8a:d0:ae:af:2d:
dc:46:b9:1a:17:58:ae:97:59:a7:37:8d:b6:d3:4c:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:89:7D:E1:6C:FD:24:57:5B:CC:5D:B2:DA:BE:06:8C:71:59:30
X509v3 Authority Key Identifier:
keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:f0:e7:b4:eb:1f:ca:c4:6c:19:9c:bb:3f:a4:3e:64:61:
1f:33:61:3e:77:f0:48:7f:68:74:5c:dc:f1:74:0a:b4:40:52:
e2:b9:63:b4:7c:66:26:92:78:67:f0:9b:e4:f1:06:63:a3:a0:
e6:eb:de:39:69:63:97:d1:90:23:2d:1c:bd:b3:0e:40:9f:01:
97:2c:aa:e5:77:68:1b:5a:ce:5a:66:6b:05:a1:e2:10:32:9b:
61:d5:ae:9a:54:e3:19:98:ec:ba:cc:aa:35:15:d1:36:80:7d:
cd:1d:0c:92:f4:f3:fe:08:5a:0e:3f:11:b9:39:46:2d:64:77:
80:ab:6f:91:33:8f:9b:34:68:e7:00:86:58:aa:ce:dc:f6:68:
c0:ad:92:6e:a4:95:42:5d:8e:b4:6a:83:6b:92:85:02:3c:92:
d5:35:fc:0d:d6:66:1e:a5:b4:8d:86:ca:ba:8d:d8:a7:8f:08:
f6:22:12:72:ed:1f:c9:e6:26:81:6d:71:6a:cf:97:6a:14:91:
be:9d:7e:cc:76:9d:21:0a:3b:93:07:eb:d8:68:b3:ba:60:25:
ee:4e:d6:0a:ac:a3:64:d3:a5:82:55:c2:c4:80:59:13:23:3b:
45:7a:a5:09:c5:0b:02:41:ba:7a:a5:52:85:99:5c:42:7d:8a:
89:35:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:33:08 2026 by rpki-client