
$ rpki-client -vvvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier: 6JdlQRzUbYbGFQl6Pt35KCZ0OMJTi4KCkuharH8KhwA=
Subject key identifier: 85:D1:4F:CC:D0:D2:E0:4A:E0:2A:96:6D:A6:91:EA:52:EC:DC:22:1B
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 17038F6BB7D193C6F0D49BEAFE7878BA7E8A0B4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number: 02FF
Signing time: Mon 02 Nov 2026 03:47:34 +0000
Manifest this update: Mon 02 Nov 2026 03:42:34 +0000
Manifest next update: Tue 03 Nov 2026 07:12:34 +0000
Files and hashes: 1: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: QqvqjcCgTDkafRMNRsCZPwrbrdOMG+AkkuU8bIcS1Fs=)
2: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: ktGx59JETujExjo30VVMt5PUSTyoY0psMj+P78eLE/Q=)
3: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: crA8QF6SL3DxsHKwch4/HWDtNk4isPssfccRPXZ4lNE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 06:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:03:8f:6b:b7:d1:93:c6:f0:d4:9b:ea:fe:78:78:ba:7e:8a:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Nov 2 03:42:34 2026 GMT
Not After : Nov 3 07:12:34 2026 GMT
Subject: CN=85D14FCCD0D2E04AE02A966DA691EA52ECDC221B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:c2:72:cc:3d:eb:f2:b2:d6:8a:f1:2e:2c:
cb:0c:d2:76:d2:03:fd:1f:72:80:42:5e:69:68:a8:
73:ee:8e:65:51:b8:02:31:ce:47:e2:d2:c7:6d:1d:
3f:85:65:13:a6:8f:bb:7a:d2:ef:e5:43:2c:cb:76:
1a:bf:8f:e2:13:d7:5b:7e:7d:64:af:03:63:53:fa:
5b:77:d8:2e:51:dc:b4:d6:de:c5:97:d6:1a:ce:26:
60:a1:31:1e:86:43:b8:4a:4c:ea:f2:57:f2:df:b3:
86:d3:42:52:c9:d1:2d:d9:a9:9d:67:16:1a:5f:22:
7f:ee:5e:15:41:64:f9:8e:16:82:d5:8c:ee:23:08:
40:2e:b3:6c:ce:d2:d8:b5:59:3b:09:3f:35:4e:7b:
35:de:8c:ad:55:7c:e5:db:47:03:42:33:b4:47:8f:
91:d4:92:e2:18:6a:96:05:21:09:b5:bd:ab:b7:27:
31:7a:56:78:d4:d7:45:d7:07:cb:a6:b0:db:3c:bc:
b5:3e:3a:6d:a1:c9:5b:6f:bf:26:9c:d1:71:52:c7:
96:a3:fc:9c:09:a7:35:70:91:63:44:c6:ab:6d:6b:
ec:7a:26:f0:50:c2:97:0e:ee:81:f4:a6:6b:9d:09:
eb:92:d3:9a:2d:29:1c:5d:6a:44:82:5b:5a:49:fb:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D1:4F:CC:D0:D2:E0:4A:E0:2A:96:6D:A6:91:EA:52:EC:DC:22:1B
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:d7:50:33:bb:cd:e9:bf:26:c2:56:a6:cb:16:c3:a2:47:
53:66:1e:ac:68:24:7c:08:b5:76:a5:b4:f2:d2:63:a6:23:19:
cc:fe:55:46:0a:79:df:c3:26:2b:19:ca:b9:10:68:e2:08:53:
c0:86:39:b2:0a:50:3e:2a:ce:81:f5:c9:cf:3e:49:65:0c:5c:
81:60:af:c6:19:1d:75:78:dd:ee:b0:4d:fb:e4:cb:b3:db:cd:
53:62:55:dd:76:56:ea:d6:a1:48:54:43:24:e1:d2:7d:aa:0e:
71:57:a6:e9:cd:46:02:c5:d1:e3:f9:27:e5:0d:86:93:51:6f:
41:7f:b1:93:13:5a:22:62:f4:0c:56:dd:3d:ad:9e:62:4f:eb:
15:e5:d7:f8:66:ed:ca:fa:88:9d:93:1c:ec:1d:85:63:7d:89:
43:29:e7:f6:e7:0c:34:3a:57:6d:00:0f:40:17:94:06:b5:ef:
3a:b5:80:f2:a1:7f:da:43:fd:51:ba:25:e7:e3:6b:66:05:79:
90:07:79:ba:27:b2:e3:f4:cd:a4:dc:66:d4:4b:36:c5:25:e9:
b1:29:d8:51:6f:01:3e:53:41:23:81:c6:10:17:0f:3c:f4:31:
b3:1d:29:b3:f3:9e:7a:56:98:1e:07:fd:7c:e1:69:43:bb:c3:
51:f3:d9:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFwOPa7fRk8bw1Jvq/nh4un6KC0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2QjcxQTRCMDQyODVCQjBFRkVBMTFCNDBCQTc1OUJD
NUZEMUMzODAeFw0yNjExMDIwMzQyMzRaFw0yNjExMDMwNzEyMzRaMDMxMTAvBgNV
BAMTKDg1RDE0RkNDRDBEMkUwNEFFMDJBOTY2REE2OTFFQTUyRUNEQzIyMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEcJyzD3r8rLWivEuLMsM0nbS
A/0fcoBCXmloqHPujmVRuAIxzkfi0sdtHT+FZROmj7t60u/lQyzLdhq/j+IT11t+
fWSvA2NT+lt32C5R3LTW3sWX1hrOJmChMR6GQ7hKTOryV/Lfs4bTQlLJ0S3ZqZ1n
FhpfIn/uXhVBZPmOFoLVjO4jCEAus2zO0ti1WTsJPzVOezXejK1VfOXbRwNCM7RH
j5HUkuIYapYFIQm1vau3JzF6VnjU10XXB8umsNs8vLU+Om2hyVtvvyac0XFSx5aj
/JwJpzVwkWNExqtta+x6JvBQwpcO7oH0pmudCeuS05otKRxdakSCW1pJ++d1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhdFPzNDS4ErgKpZtppHqUuzcIhswHwYDVR0j
BBgwFoAUzmtxpLBChbsO/qEbQLp1m8X9HDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9DRTZCNzFBNEIwNDI4NUJCMEVGRUExMUI0MEJBNzU5QkM1RkQxQzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNkI3MUE0QjA0Mjg1QkIw
RUZFQTExQjQwQkE3NTlCQzVGRDFDMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2ajIvMC9D
RTZCNzFBNEIwNDI4NUJCMEVGRUExMUI0MEJBNzU5QkM1RkQxQzM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf6LXUDO7zem/JsJWpssWw6JHU2YerGgkfAi1dqW08tJjpiMZzP5VRgp538Mm
KxnKuRBo4ghTwIY5sgpQPirOgfXJzz5JZQxcgWCvxhkddXjd7rBN++TLs9vNU2JV
3XZW6tahSFRDJOHSfaoOcVem6c1GAsXR4/kn5Q2Gk1FvQX+xkxNaImL0DFbdPa2e
Yk/rFeXX+GbtyvqInZMc7B2FY32JQynn9ucMNDpXbQAPQBeUBrXvOrWA8qF/2kP9
Ubol5+NrZgV5kAd5uiey4/TNpNxm1Es2xSXpsSnYUW8BPlNBI4HGEBcPPPQxsx0p
s/OeelaYHgf9fOFpQ7vDUfPZbA==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:50:13 2026 by rpki-client