
$ rpki-client -vvf rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
File: D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft (raw, json)
Hash identifier: iCbAtKoC6fH5SvngXPSLrEtOjybMj6Kax083pnmEhj0=
Subject key identifier: EC:28:2D:9F:D1:41:AF:2A:D6:4A:83:85:EA:73:92:22:1D:1D:80:EE
Authority key identifier: D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00
Certificate issuer: /CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
Certificate serial: 352BC172424CAA3A1DCEB4DF289B7933E9861516
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
Manifest number: 17
Signing time: Tue 28 Jul 2026 17:46:35 +0000
Manifest this update: Tue 28 Jul 2026 17:41:35 +0000
Manifest next update: Wed 29 Jul 2026 20:05:35 +0000
Files and hashes: 1: D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl (hash: gSabRfSQI3q7mbD7YHY4m+Py5X3AfzIuRKwhGWHPCp8=)
2: 3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa (hash: uHnjdQrQPrfAXqaQE1CfLJcDudQ8gZIF7o8xe9UB3Wc=)
3: 323830343a316135303a3a2f33322d3334203d3e203631383533.roa (hash: o2cRHB8VLaulYEsD7EXAfKSLpkE/joxRBXT/iIJXwu4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl
rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Jul 2026 20:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2b:c1:72:42:4c:aa:3a:1d:ce:b4:df:28:9b:79:33:e9:86:15:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
Validity
Not Before: Jul 28 17:41:35 2026 GMT
Not After : Jul 29 20:05:35 2026 GMT
Subject: CN=EC282D9FD141AF2AD64A8385EA7392221D1D80EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:71:9e:7e:f7:83:cb:73:eb:c7:26:ca:af:
31:89:98:c1:21:72:65:21:68:50:7b:1d:b7:47:16:
f2:eb:b2:67:3d:92:6e:8f:45:50:7c:80:fc:75:35:
c4:8b:f9:ec:5d:40:50:86:f8:0c:5c:9a:79:28:ce:
d7:d2:99:c2:8d:8d:e0:f2:45:97:b0:2e:0c:ff:76:
a8:50:c4:d9:57:52:39:ed:f3:5c:40:0d:82:6d:5a:
40:4f:7f:3c:72:5b:19:cd:58:35:2f:c0:92:f3:07:
fc:47:fd:97:b2:d0:58:16:82:fa:70:e8:44:f5:2e:
bd:d6:06:ae:c4:51:cb:20:e6:61:f2:f3:e4:fc:21:
b1:76:15:c9:92:89:22:af:eb:b6:c7:19:0a:92:ef:
32:48:77:9e:fd:c8:fb:5b:87:89:9f:66:26:de:1a:
49:85:84:64:53:4c:ff:30:69:91:0c:18:f0:f8:b2:
1f:fe:0d:7a:47:96:1e:18:f3:82:45:78:bc:03:c5:
bf:c5:ac:5d:68:77:8c:c7:b4:2c:f3:25:a4:f4:bd:
10:62:97:c8:00:d7:65:be:d1:6d:95:83:d1:6f:fa:
00:72:5b:57:6e:96:87:38:47:da:9c:fb:75:3c:4f:
8e:e9:ed:65:f6:26:a7:77:b3:ab:44:0a:01:23:49:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:2D:9F:D1:41:AF:2A:D6:4A:83:85:EA:73:92:22:1D:1D:80:EE
X509v3 Authority Key Identifier:
keyid:D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:87:51:a5:db:56:78:f9:88:76:02:b2:44:4a:91:0c:61:
c3:1f:e0:2d:e4:f5:c2:0a:bb:38:31:61:76:81:a9:00:8b:9e:
12:93:87:d4:b2:c5:e0:ec:31:a4:79:a0:56:bd:4d:e2:f6:80:
67:91:36:b5:8a:56:e1:8a:48:55:03:51:35:d5:7d:cd:bc:27:
bf:53:07:5b:bf:7a:8e:b3:9a:3b:b7:46:82:07:05:89:0e:d0:
46:32:c0:5e:df:65:0d:22:58:b8:6d:48:6c:17:30:6d:75:85:
bf:14:80:cc:92:97:ad:ea:62:e6:73:e7:0e:53:3c:e3:5e:22:
aa:6e:18:cc:71:b0:0f:af:34:f3:d7:da:33:e1:5a:3c:6d:4d:
ad:09:c8:b4:38:87:5b:30:69:eb:6a:e3:65:80:c1:90:e0:45:
cb:82:b5:e8:e8:cb:7c:ce:45:16:b3:4b:e9:d7:0d:bf:ec:38:
b8:c4:08:d1:95:dc:26:34:e9:9e:bc:50:20:15:df:82:a4:1a:
81:fb:60:6c:1b:ef:8b:8d:af:0b:ed:71:bc:2e:6a:ca:ac:dd:
32:a7:79:1a:3c:6c:2a:96:a6:5d:45:79:7a:76:36:6f:84:68:
d2:97:01:ab:f3:79:7c:6e:aa:d5:ec:a7:e9:65:5e:c6:bd:c1:
78:5b:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:26 2026 by rpki-client