
$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
File: CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft (raw, json)
Hash identifier: olS8bhtcEFkDDquTGX2nSAzwYvuklZgjf6JQUGuVP+8=
Subject key identifier: E2:CD:78:A8:D8:44:E9:CF:0B:83:8C:BE:F2:E1:78:16:73:07:B0:65
Authority key identifier: CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
Certificate issuer: /CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
Certificate serial: 22C333B5E240DC53E542DAFC82DE48A6144B21FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
Manifest number: BE
Signing time: Fri 17 Apr 2026 06:37:31 +0000
Manifest this update: Fri 17 Apr 2026 06:32:31 +0000
Manifest next update: Sat 18 Apr 2026 07:59:31 +0000
Files and hashes: 1: 3138392e3132362e342e302f32322d3332203d3e20323730333434.roa (hash: TWpMsUryptQu6Hi6KjgY8UHGV5Dc4mwwgB/z57TzmHE=)
2: CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl (hash: FJ6dlPk5vfeXZwV3bB2bOwTiLaPCfy77RkORVK5ttQY=)
3: 323830343a366139303a3a2f33322d313238203d3e20323730333434.roa (hash: i51l37KiQWwXtN+K1/iN3p/yRB7t5FE68ciQe18TlUs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl
rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 07:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c3:33:b5:e2:40:dc:53:e5:42:da:fc:82:de:48:a6:14:4b:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
Validity
Not Before: Apr 17 06:32:31 2026 GMT
Not After : Apr 18 07:59:31 2026 GMT
Subject: CN=E2CD78A8D844E9CF0B838CBEF2E178167307B065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:d3:bb:bd:cd:1f:6c:99:51:85:1e:b7:c0:
cd:06:55:7b:2e:cf:6f:64:c7:df:34:94:7d:c2:a6:
d3:b9:5e:3f:33:df:e7:8c:80:4e:d3:bc:70:f5:c7:
ca:19:64:11:ed:da:de:b8:d7:92:e2:a6:8a:7c:ef:
4d:0a:9d:69:d4:a8:37:aa:71:15:88:d5:82:f4:77:
01:da:8e:b8:75:4d:0a:83:e6:29:c1:5d:d0:82:cf:
79:21:51:e4:bd:53:03:45:92:7e:c9:bc:04:d4:44:
96:66:1b:cb:d4:04:cc:41:c9:e7:f0:b7:6d:67:0e:
7d:db:83:75:41:12:45:ab:0f:6c:bd:26:bd:22:22:
90:ab:b5:29:98:4c:2c:c2:22:d3:8b:79:29:b5:4d:
b5:88:ef:6e:ff:66:50:2f:d1:98:e3:a6:4d:e0:45:
ab:be:62:bb:8b:b2:1d:4b:8a:16:6c:62:87:5d:b6:
41:1f:8a:22:f4:29:dd:c7:6c:a8:c2:24:ab:26:6e:
54:a5:69:b0:a1:13:a0:a4:af:77:da:8a:46:62:82:
ca:e2:56:4c:56:09:a2:80:a8:26:fb:be:f1:53:82:
03:a9:93:67:c4:46:56:75:45:e1:12:0e:3d:0e:08:
2e:54:b5:09:3d:44:8b:0e:6d:c0:7c:3d:05:0b:ae:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:78:A8:D8:44:E9:CF:0B:83:8C:BE:F2:E1:78:16:73:07:B0:65
X509v3 Authority Key Identifier:
keyid:CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:40:ee:a2:a6:a5:6f:7f:cf:08:ab:16:25:7a:34:ce:f6:
2d:76:f3:83:cd:23:47:1f:74:b6:d6:5e:75:96:af:fa:0c:85:
36:ce:1f:df:22:c4:97:cd:f7:fd:ee:47:34:29:ca:d8:da:7d:
06:3b:99:39:a1:01:eb:bd:a5:ac:b3:b0:93:03:7f:37:f9:3f:
6f:57:e3:17:76:20:7f:b6:cf:9b:0a:63:a8:8f:e5:c1:db:76:
44:b7:1f:db:0a:09:35:25:8f:b5:5c:86:76:40:ed:a2:f0:13:
88:36:84:3d:37:bb:d1:a7:ef:e6:bd:1b:61:fd:da:a5:e3:59:
45:7a:88:76:5f:98:3d:9a:7b:ba:d6:1b:3e:83:23:15:2a:0f:
3e:a3:e5:54:58:c9:e3:49:cf:7a:a3:9a:a5:a1:d5:6b:5c:57:
29:bc:12:59:09:66:f5:d2:ce:b9:76:a9:d6:94:f2:f7:4f:97:
d4:a0:b4:c5:a3:19:7a:14:3a:b6:2a:e4:9f:ef:32:51:d2:3d:
4b:ae:44:9e:c9:50:9e:ea:26:cc:d1:ee:31:77:69:93:5a:e9:
1a:9a:ee:36:53:30:98:8b:89:37:97:d3:35:7e:8c:bf:a5:8d:
12:a8:6c:98:a9:e5:3d:53:f7:ec:36:ca:36:57:8d:64:9d:5c:
c8:a3:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:31 2026 by rpki-client