
$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
File: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json)
Hash identifier: wMDq1rANm1+gYsibwvObRRWrNmArnC/matAnAVvXQrU=
Subject key identifier: CC:A7:1A:41:DC:47:DE:A0:74:39:C6:48:01:59:2B:B1:6C:CB:DD:4F
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Certificate issuer: /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial: 32017CA65F76CDE0176908816338A9963D0B158C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
Manifest number: 03A3
Signing time: Mon 02 Mar 2026 11:52:55 +0000
Manifest this update: Mon 02 Mar 2026 11:47:55 +0000
Manifest next update: Tue 03 Mar 2026 13:11:55 +0000
Files and hashes: 1: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=)
2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: pMsRDcxvzTVW5XIFhhHjLF0haR/jSssj3LOOp2BKGrI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 13:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:01:7c:a6:5f:76:cd:e0:17:69:08:81:63:38:a9:96:3d:0b:15:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Validity
Not Before: Mar 2 11:47:55 2026 GMT
Not After : Mar 3 13:11:55 2026 GMT
Subject: CN=CCA71A41DC47DEA07439C64801592BB16CCBDD4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:3e:f8:20:cd:f5:68:ec:eb:33:c9:3e:d1:
54:d5:37:f0:5c:9a:81:3e:f5:b3:0d:df:63:0a:6a:
5f:29:59:55:5b:1c:87:64:3a:07:26:2e:e5:9f:d2:
48:5b:df:46:96:76:20:4e:4e:98:a1:f2:c8:48:2b:
b2:4a:0b:d8:fa:2c:dc:61:53:55:6c:93:63:21:7b:
ee:60:1c:eb:4b:61:92:85:91:cc:0d:7a:2f:79:d8:
7c:a2:98:66:d3:13:4c:de:a1:1c:78:c6:37:68:ca:
d8:4e:6e:18:57:a3:b5:d1:01:7c:d4:45:ae:94:32:
f4:d8:fb:b5:2d:0f:18:5c:c0:72:20:60:04:46:7c:
e8:ff:28:1e:05:93:4f:c1:8d:01:37:e2:7b:5c:c0:
5d:ba:8d:d1:7f:c4:53:55:7e:08:1b:fd:f6:7c:d5:
ae:9a:05:14:f7:3d:d4:3d:72:25:6d:31:37:50:3b:
ab:e4:03:ef:dc:19:35:5a:78:c7:d6:df:86:8a:af:
41:63:20:20:d9:ab:87:bc:ae:72:2d:2b:a9:62:1e:
74:9e:a5:17:25:83:bc:1c:fc:1d:3a:65:86:1f:ed:
bd:68:0f:f4:99:8c:e6:c9:8a:ea:cb:de:90:e1:a7:
98:64:f3:19:07:f8:f0:cc:c6:c9:d9:7f:d5:61:83:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:1A:41:DC:47:DE:A0:74:39:C6:48:01:59:2B:B1:6C:CB:DD:4F
X509v3 Authority Key Identifier:
keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:3b:09:8b:54:49:db:f5:7b:06:5f:69:3a:43:73:18:dc:
28:87:c0:0e:3f:99:27:d6:95:56:9b:ed:bd:e0:28:07:cd:6a:
a1:8b:dc:19:fb:2b:43:5f:99:bf:59:de:e2:ab:f4:3f:b2:65:
70:a1:1a:a4:de:0a:5c:48:9e:48:46:29:05:04:4e:a1:46:8d:
f4:50:66:1a:31:06:7d:01:50:77:1c:d5:a7:6d:63:72:53:bd:
bc:57:7c:03:66:58:f8:3e:fa:1b:f5:89:d4:3f:9c:22:e8:df:
e1:d9:fa:a8:6c:da:a8:42:cf:69:1d:5c:23:b5:b5:7f:00:08:
57:4b:5f:de:f8:83:3f:45:25:d0:39:cd:8e:82:35:98:a5:c9:
66:d2:e6:b5:5c:60:5c:94:11:02:c6:63:3a:fe:90:08:b4:5b:
aa:d1:c1:40:03:93:b6:39:45:97:bb:19:ec:6b:1f:84:08:d3:
46:ea:9f:a5:e5:25:ff:ee:97:16:73:5d:ff:4e:61:05:b8:9f:
87:f6:3e:a9:0f:01:a6:f6:96:c0:19:00:dd:73:3f:3d:e2:04:
da:6c:59:ea:f6:5f:87:a7:b3:65:40:0a:d1:72:ee:7d:e5:7f:
79:9c:bb:62:99:8c:8b:1e:b2:94:04:c2:a9:e6:1d:8e:2d:91:
52:37:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:00 2026 by rpki-client