
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
File: 70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft (raw, json)
Hash identifier: 5jKejp3pWrKK1gxLRu09b2T3hKaG39dePfE49M+aQvE=
Subject key identifier: F3:CB:71:92:10:37:5C:4E:3D:CF:1C:1E:A2:54:1E:BE:25:36:F9:25
Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
Certificate issuer: /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Certificate serial: 2E28C7C0B80213C81553422A4CB08C6A567A3095
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
Manifest number: 011B
Signing time: Fri 17 Apr 2026 17:51:35 +0000
Manifest this update: Fri 17 Apr 2026 17:46:35 +0000
Manifest next update: Sat 18 Apr 2026 18:02:35 +0000
Files and hashes: 1: 3138392e33362e3232322e302f32342d3234203d3e20323634313030.roa (hash: zvT5KGyVtEEIoyifhcqhVuT8ELJHL2b8EwqGiAIWHbU=)
2: 3138392e33362e3232332e302f32342d3234203d3e203238323936.roa (hash: LrBp2ECcdjcBDX+BIz/Vea+Y6merN7CpoFAP5mTNy5o=)
3: 3138392e33362e3231362e302f32342d3234203d3e203238323936.roa (hash: WeU38Os0MtTK6z+8vzTuxPk/qpID6wI8V8Iz5uwouH8=)
4: 70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl (hash: +CXdXbM6vq+Arkn5X0zxr1yrDG62Ba8CXF0f4Lt48rQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 18:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:28:c7:c0:b8:02:13:c8:15:53:42:2a:4c:b0:8c:6a:56:7a:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F
Validity
Not Before: Apr 17 17:46:35 2026 GMT
Not After : Apr 18 18:02:35 2026 GMT
Subject: CN=F3CB719210375C4E3DCF1C1EA2541EBE2536F925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:f1:ec:28:01:b0:c1:a4:f8:0b:ac:6b:4c:
6d:a1:86:fb:05:e1:df:1a:a6:17:4c:49:b3:df:64:
f0:75:a7:ba:ff:fe:38:8f:a3:3c:a2:d8:ad:b6:56:
e0:2e:93:c1:37:3a:eb:86:30:61:a9:00:75:bc:f1:
a9:d7:5c:48:d6:07:16:6d:a2:75:65:82:74:8a:79:
d0:4f:5d:bf:83:58:58:00:83:0e:04:3a:8e:da:3a:
61:d7:c7:02:37:ab:5a:ac:18:d1:9f:7f:9b:4d:18:
b0:95:2f:75:df:4b:c7:e5:20:67:9f:18:97:f9:fc:
93:7e:eb:90:50:84:4a:e6:8e:a8:a7:89:89:a8:64:
24:20:70:2a:a9:91:01:c9:11:df:87:55:2c:03:3a:
0f:01:ad:fb:c1:7e:d9:28:09:b3:85:b2:8e:83:4e:
c6:6f:45:c6:b1:0a:12:09:02:c9:77:c5:7e:f4:a8:
44:87:2a:ca:25:0f:9d:37:c3:5a:52:59:a3:b9:ad:
61:9c:16:fb:1d:df:54:e7:ce:c1:d2:44:57:56:35:
96:98:88:d9:24:45:5a:a0:cb:8a:51:96:5b:49:c9:
43:1b:aa:d2:13:dd:5c:15:c6:8f:c1:b6:e2:88:4a:
66:2b:12:da:41:85:38:b8:2b:2d:b2:9a:60:fa:82:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:71:92:10:37:5C:4E:3D:CF:1C:1E:A2:54:1E:BE:25:36:F9:25
X509v3 Authority Key Identifier:
keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:21:1c:39:8d:e1:cc:c9:88:91:4b:b3:06:f4:f2:a1:58:71:
6f:c1:e3:1d:31:7a:ce:58:a9:35:5f:e4:be:22:17:f8:c9:b0:
05:37:78:ed:ea:43:30:5f:eb:12:1d:c1:83:f9:d6:cb:19:36:
1c:97:56:01:4f:e2:9a:33:71:9d:74:f5:34:78:0f:eb:7b:d1:
bd:99:ff:84:bf:63:90:e6:db:c5:02:49:7e:05:9d:0e:31:5f:
bc:4a:16:d9:40:ca:53:fe:db:d1:bf:cb:85:a4:c0:00:2e:db:
88:f7:d1:6d:ce:a5:b6:74:1e:f2:44:81:f8:85:2c:b0:f3:c8:
b5:d3:25:e6:d3:2a:85:63:89:95:26:ff:d9:84:d2:a2:c0:79:
81:8f:1f:6b:f9:36:30:ff:ca:2e:89:4a:92:4c:55:45:5e:42:
b6:1f:7d:a2:e4:b5:ab:0b:a0:93:e9:4d:bf:8c:09:b5:04:e8:
d4:38:19:2a:14:26:2f:d2:5b:b4:a0:b1:a1:99:46:03:9f:bc:
ac:cf:67:7c:03:9e:b6:7a:af:af:85:1f:86:93:60:b6:ef:e4:
29:7f:6c:89:23:97:bc:8b:e8:c9:22:b2:2e:78:bc:fc:01:30:
1b:11:83:16:21:0b:a5:9c:72:bf:4d:37:d3:67:9e:f5:28:f0:
f8:cf:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:12 2026 by rpki-client