
$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
File: 17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft (raw, json)
Hash identifier: LIAYriBSxTcD2AMP8XbuAxzMgsx7fc5AHYbAJ+u1SNQ=
Subject key identifier: C6:9C:4D:6A:A4:37:4F:BF:05:4F:D0:41:12:CC:00:A1:20:CA:DB:86
Authority key identifier: 17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA
Certificate issuer: /CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA
Certificate serial: 1EFD0082BF1D67D4F4C93391FB45F9CAEE9D6D26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
Manifest number: 8B
Signing time: Mon 02 Mar 2026 16:45:16 +0000
Manifest this update: Mon 02 Mar 2026 16:40:16 +0000
Manifest next update: Tue 03 Mar 2026 18:55:16 +0000
Files and hashes: 1: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: jXI+rnnGScFRIoLsTqtkiZ6Ij3SjhmDHR0OsRnyshww=)
2: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: B4gsqalww0dlIMwP17NQDWnEssmAF5DwJk52DCBpJFg=)
3: 17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl (hash: Ugtb+AhqUsZq2uO1vfl/OmwvAolOn8IgjQbM/pFVcSc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl
rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 18:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fd:00:82:bf:1d:67:d4:f4:c9:33:91:fb:45:f9:ca:ee:9d:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA
Validity
Not Before: Mar 2 16:40:16 2026 GMT
Not After : Mar 3 18:55:16 2026 GMT
Subject: CN=C69C4D6AA4374FBF054FD04112CC00A120CADB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:79:c2:2c:29:c4:c4:ba:b3:a5:0c:b3:fe:
43:9f:98:2a:fc:51:49:17:32:07:ed:82:b2:2b:c2:
57:ab:3a:e8:54:4d:78:7e:b0:d0:33:e1:f9:09:38:
f4:c6:80:69:c1:39:49:bf:10:e9:d8:dc:79:79:64:
ad:ef:1f:03:be:9a:02:de:75:99:b9:ba:22:01:b9:
a7:5e:2c:05:0b:36:7d:c7:36:06:96:3f:e6:50:2f:
46:fe:54:2c:52:e4:29:7e:16:ee:17:11:ab:d1:9d:
b0:12:4f:b2:a7:4c:ec:4f:5c:aa:0f:be:0f:ef:8a:
e7:70:1c:b5:52:23:29:68:1a:cb:64:d2:aa:c9:58:
fe:2d:65:11:4f:7b:6d:74:30:20:d5:0d:83:df:b0:
54:8b:ee:89:6a:77:a9:2a:04:8c:6d:ed:4d:99:d9:
97:bb:ef:a0:14:29:13:ac:19:b2:8d:70:b5:d6:89:
43:0c:67:d6:7a:78:f4:5d:97:9d:80:fe:de:d5:ec:
4a:45:b8:34:0a:59:99:97:b6:13:e4:93:f4:6d:1f:
33:48:7a:0b:9e:8a:f4:4d:95:ed:bb:c0:db:10:03:
c8:6f:40:9c:93:60:ef:2b:1c:06:fb:39:31:4f:13:
fa:19:75:89:6c:96:f5:9e:84:04:e3:68:ad:a7:05:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:4D:6A:A4:37:4F:BF:05:4F:D0:41:12:CC:00:A1:20:CA:DB:86
X509v3 Authority Key Identifier:
keyid:17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:d7:b3:3c:50:96:aa:33:28:c1:71:b1:b2:d0:8d:03:f1:
95:52:3d:07:97:6a:d3:5c:14:f6:fa:fa:d3:49:1b:45:44:fb:
a2:2e:70:3e:1c:fd:d2:40:2c:a5:5f:d3:ab:f4:c9:e2:de:61:
b7:60:9a:b1:00:9d:6e:17:97:77:e8:31:6d:31:92:4e:0b:32:
1f:0c:b5:5f:c4:bb:24:15:a6:34:4d:f7:01:76:83:93:cf:d0:
cd:eb:1a:94:b7:62:cd:ff:98:15:7a:84:c7:32:2e:67:d3:21:
b1:5d:51:d5:37:63:f1:70:92:91:4c:02:cb:2d:6d:07:d3:c8:
6c:f6:8a:4e:70:9a:c4:67:d6:75:63:fc:45:9b:5f:4e:67:1d:
74:e3:f5:15:c0:dc:5e:76:8f:de:cf:47:37:cf:7b:6b:de:f5:
ee:f7:1b:26:e0:fb:e0:88:7a:5a:1d:58:30:7f:e9:d6:46:47:
41:9b:92:ef:39:c6:f7:96:f7:43:05:46:28:7b:ff:2a:d7:7a:
f3:1a:1b:61:6b:1e:f6:96:65:1d:8a:8a:63:e5:14:b7:e6:c9:
52:50:66:ad:32:50:69:0a:9e:97:72:40:42:84:4e:6f:bb:53:
5d:fb:82:82:f5:61:8c:36:8a:54:ea:54:42:aa:a1:b3:a2:e6:
d9:db:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:17 2026 by rpki-client