
$ rpki-client -vvvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
File: CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft (raw, json)
Hash identifier: t0Lx5YW9xlRoelwazjBPw0DWuWXnz8GXttEq4zmTVs8=
Subject key identifier: 64:95:60:27:30:1F:67:A1:5D:01:8F:FE:A5:21:6E:54:0B:62:2B:83
Authority key identifier: CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E
Certificate issuer: /CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
Certificate serial: 1FF5D92E418362240310168868853B6C724D3928
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
Manifest number: A2
Signing time: Sat 31 Oct 2026 08:41:05 +0000
Manifest this update: Sat 31 Oct 2026 08:36:05 +0000
Manifest next update: Sun 01 Nov 2026 09:00:05 +0000
Files and hashes: 1: 3230302e35302e3232312e302f32342d3234203d3e20323730343630.roa (hash: SMH5o9n1CaOMHF5Y9beGOeviiTT2vMf2uIf9n2Rb53o=)
2: 323830343a366335343a323030303a3a2f33352d3335203d3e20323730343630.roa (hash: gpgh2xrfm88adNbTLqZF/FxrwU7ox0xyD+CH97e+f9E=)
3: 323830343a366335343a3a2f33322d3332203d3e20323730343630.roa (hash: 8q/6yDbYiVWgtiIym0QLoY1wo86ISPzLjrR9/UvlbfY=)
4: CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl (hash: FddMpy2aY2eYmRczRYqpYPSXL1TLLLZqFdM9XvKqvFg=)
5: 3230302e35302e3232332e302f32342d3234203d3e20323730343630.roa (hash: G4XnYpdlTUxrWG7e8WOWG4NcX4N4Gz1WzA1CBIh4LvM=)
6: 323830343a366335343a3a2f33332d3333203d3e20323730343630.roa (hash: ZBH9g9Sc/Z3YSkVkNlNFqSkD7UL3dK+tLdYmHOI48/Q=)
7: 3230302e35302e3232322e302f32342d3234203d3e20323730343630.roa (hash: kaiRmg3cuVPiYECjXpAJrhkreok4VX9St4UOdFai7j8=)
8: 3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa (hash: tH26EoC8V2q1Ampd2pDJYsXR8qok65GAeIMnOio7CmQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl
rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f5:d9:2e:41:83:62:24:03:10:16:88:68:85:3b:6c:72:4d:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
Validity
Not Before: Oct 31 08:36:05 2026 GMT
Not After : Nov 1 09:00:05 2026 GMT
Subject: CN=64956027301F67A15D018FFEA5216E540B622B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:45:7b:f7:5a:03:77:aa:36:20:29:bd:0a:
8c:97:b7:b2:f1:91:aa:b5:d5:67:22:ab:52:7b:e3:
b8:1d:ba:5b:12:7c:3c:31:73:80:8c:3b:3e:d2:f7:
1f:dd:e8:cd:ff:74:a9:b3:7a:98:67:b1:07:ca:65:
4c:90:92:76:1c:10:60:f3:8c:4d:f4:ec:6a:7e:45:
31:40:22:03:7a:b7:44:03:31:c2:7c:f2:57:d9:7d:
33:0c:15:a0:92:99:d6:27:5e:49:b0:7e:18:4a:ed:
d6:bf:d0:e7:da:d9:77:39:46:60:6c:e5:eb:81:1a:
7f:68:ab:f5:dc:44:03:e4:81:36:98:c3:f9:c5:3e:
3d:43:6a:2c:44:4d:32:eb:b7:cd:89:18:d6:b4:76:
75:db:1a:fc:05:77:14:bf:c7:7a:ff:55:87:02:50:
00:85:a9:81:af:33:87:34:ab:67:62:02:d2:8f:e8:
b4:4f:d6:c3:b0:7e:4b:8b:a3:94:65:12:84:04:32:
61:b8:a9:5e:2f:8d:67:83:b5:1c:d3:9b:28:fc:da:
4e:38:d4:c4:5c:5b:c9:ec:7f:b7:dc:ce:02:79:28:
a0:16:f6:31:8e:7a:7e:eb:a2:95:79:68:3c:5d:47:
98:a1:5d:b2:e6:55:5f:dd:54:f8:18:44:48:e0:44:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:60:27:30:1F:67:A1:5D:01:8F:FE:A5:21:6E:54:0B:62:2B:83
X509v3 Authority Key Identifier:
keyid:CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c0:ed:e5:05:48:6c:ff:a9:75:01:06:db:f7:ee:72:dc:85:
49:e7:69:77:bd:e6:19:57:e4:a8:40:da:43:de:be:ed:ec:14:
a3:10:2b:4d:e9:88:3d:a2:05:7b:99:91:e3:b6:1a:b1:8a:c1:
cb:f3:20:88:b0:6b:7b:64:c7:44:fe:68:8d:63:b1:81:7a:90:
22:a1:f9:80:5b:45:7c:87:02:b3:37:e7:7a:54:46:ab:9c:03:
41:df:bc:e8:4c:85:4a:2f:85:c3:2d:81:3d:1b:7c:f7:39:e9:
49:ef:4a:62:15:08:a9:7d:66:03:be:9e:a2:c4:b7:d4:6f:26:
ce:d0:a0:a2:57:65:b6:ba:43:bb:02:0f:00:29:cb:ab:74:dd:
cb:15:1e:10:d2:df:69:fc:3f:71:7a:ce:66:54:1e:97:75:30:
3b:b8:24:ef:cf:7c:b0:b2:87:2a:55:f2:25:b3:4a:4a:56:13:
b3:12:36:af:d0:28:81:58:e0:44:2d:87:89:55:d4:37:0d:8d:
c3:9d:3c:ae:1e:3e:2d:c7:b2:48:bb:64:14:8a:22:03:6e:4d:
2c:11:c8:55:06:d8:6e:70:46:0c:c1:ee:16:9f:f5:61:22:5e:
66:b6:7c:0b:9f:44:68:a7:43:6d:5f:af:e1:21:08:56:7e:1c:
e7:6f:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:27 2026 by rpki-client