
$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
File: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft (raw, json)
Hash identifier: 1AVLRmx73T72fJNeHJhgqZrBI97RPVZ+QDoOw9TfgRw=
Subject key identifier: 64:04:47:46:6C:98:5D:8A:BD:FE:8F:32:AF:03:9D:5B:76:95:D0:93
Authority key identifier: D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Certificate issuer: /CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Certificate serial: 5D9D6EF60C240517780A3A34468782DBAAD99040
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
Manifest number: 1D
Signing time: Mon 02 Mar 2026 00:25:34 +0000
Manifest this update: Mon 02 Mar 2026 00:20:34 +0000
Manifest next update: Tue 03 Mar 2026 02:52:34 +0000
Files and hashes: 1: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: R3uhZoJSvdBAFSKZLP45MaoIVASbthNAoqzbBhFGlmI=)
2: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: X1mFsLI4Qx5oGKiy8k7VNSxBc0vv6a0K1FRl2fNhhiQ=)
3: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl (hash: Vu9f96DeJFdiJrEyTS1y0ZuJavWRC4pBiW/O8vRcXNc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 02:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9d:6e:f6:0c:24:05:17:78:0a:3a:34:46:87:82:db:aa:d9:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Validity
Not Before: Mar 2 00:20:34 2026 GMT
Not After : Mar 3 02:52:34 2026 GMT
Subject: CN=640447466C985D8ABDFE8F32AF039D5B7695D093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:42:4d:8d:28:ef:db:fe:77:e6:27:1a:57:
6f:05:39:fe:95:9e:10:fc:eb:76:85:b8:9a:9a:43:
9b:d3:30:f8:8f:7c:84:ed:66:20:66:05:36:f8:05:
08:1d:a8:7e:0a:31:37:ea:ae:22:ea:1e:a0:68:3b:
76:3f:f6:dd:bc:89:76:0c:80:cd:2c:22:fa:19:ea:
58:67:4e:de:ac:27:a7:35:10:a9:07:90:84:13:56:
90:37:be:31:06:33:81:66:7a:da:c9:ad:64:3c:51:
a5:7c:a1:33:80:c2:5a:67:9a:84:ac:86:18:87:cb:
81:a1:47:25:a3:ae:af:0f:1a:6a:0d:af:02:7a:70:
53:42:27:7c:b0:de:17:f8:bb:5d:9a:28:e0:19:7f:
f9:20:99:3a:82:31:7f:d6:a5:bf:49:92:18:b1:1d:
61:fe:92:98:bb:e7:b9:5a:e7:c5:a3:51:e8:5e:a1:
58:9f:1a:f8:4c:9f:51:a9:02:d8:13:85:aa:cd:69:
cc:8e:c8:e1:4a:b8:42:1b:60:2e:01:2b:cc:15:48:
1a:c8:62:ff:ec:3a:ad:04:56:0d:06:ef:52:07:73:
51:1b:76:0c:5e:2d:c2:a5:43:be:d4:f7:05:70:d7:
be:02:bb:b6:b1:34:ee:4d:41:54:d6:aa:f3:87:4c:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:47:46:6C:98:5D:8A:BD:FE:8F:32:AF:03:9D:5B:76:95:D0:93
X509v3 Authority Key Identifier:
keyid:D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:14:df:63:32:5e:0a:aa:4d:21:46:65:28:ce:5c:74:dc:cb:
e6:07:8e:36:83:b8:99:8c:2b:04:85:41:8c:e6:3c:93:ce:cf:
26:99:f6:fc:6f:97:38:c2:24:86:42:af:16:df:b1:20:39:45:
60:59:23:b7:8a:05:3f:88:80:18:35:59:18:97:f1:5a:7d:cb:
b5:b1:9a:05:ea:5b:8b:4c:b3:12:88:46:07:f6:3d:4f:e9:03:
76:52:7c:13:5f:68:69:47:2b:e4:34:1f:12:77:30:08:b2:60:
e5:09:db:2e:3c:51:81:8b:ee:1c:43:42:24:fb:d1:d6:2c:cc:
21:50:ee:1a:67:ca:65:38:34:5b:b2:cb:de:71:68:d1:0b:40:
42:35:10:66:2e:61:93:65:27:65:62:47:3f:5d:cc:86:69:6e:
e4:0d:2a:d2:31:d0:bd:ad:5e:ce:3d:bd:c5:66:95:c0:28:33:
2b:87:61:ec:41:03:24:8d:3e:8d:b6:d4:09:9b:68:4d:71:16:
c6:07:17:0f:95:fc:c7:ad:90:6a:67:f2:0b:79:06:27:9a:3a:
26:a8:23:9f:23:84:b0:c8:e9:0b:8f:6d:04:28:ce:63:bc:8b:
8b:b8:31:77:22:1c:b0:3c:4b:74:67:c5:9c:be:00:31:60:e5:
af:bd:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:56 2026 by rpki-client