
$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
File: 859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft (raw, json)
Hash identifier: rSpb7vzIHf3Q0JDxKxB+y0jGO0wSXbk7lyMSrGdy3kY=
Subject key identifier: 3F:BF:05:16:E4:97:D9:44:90:37:0B:7A:D3:C7:FF:50:A3:8C:5C:8F
Authority key identifier: 85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
Certificate issuer: /CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Certificate serial: 4EC44DEA3818EE828CABD665C7550C2BC44F6A15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
Manifest number: 2A
Signing time: Fri 17 Apr 2026 12:38:24 +0000
Manifest this update: Fri 17 Apr 2026 12:33:24 +0000
Manifest next update: Sat 18 Apr 2026 13:22:24 +0000
Files and hashes: 1: 323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa (hash: fL35lLIJqdSlnvV5yi6iNGXtH8hEnxFtjwmuyKkeQAo=)
2: 3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa (hash: 0hQqQbnw5D8Q38qhX4brtADh7gRLZbpMiyZ+Mmd2Ef8=)
3: 859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl (hash: za/KiapRuba8bOFjAQa20P2ba+W9+mUU/qCHVBYLTRA=)
4: 323830343a366564383a3a2f34302d3430203d3e20323730363232.roa (hash: 6XbwwSQ4bxfUhZ8KSrUOyq/hju9rI6Hr7G0xVI6Xf1o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 13:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c4:4d:ea:38:18:ee:82:8c:ab:d6:65:c7:55:0c:2b:c4:4f:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Validity
Not Before: Apr 17 12:33:24 2026 GMT
Not After : Apr 18 13:22:24 2026 GMT
Subject: CN=3FBF0516E497D94490370B7AD3C7FF50A38C5C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:72:43:20:00:32:67:20:f2:d9:b9:68:a8:
96:a0:8d:25:c0:57:82:ad:2f:94:fd:73:37:c5:b2:
25:be:76:cf:b4:c4:fa:72:07:98:a6:7c:8f:c5:84:
d6:5b:a8:6b:6a:46:de:38:2c:7a:71:03:67:89:30:
82:95:c9:12:9c:2b:26:e6:34:a3:2a:8d:e7:db:38:
31:9d:40:1e:73:19:2e:99:eb:15:c9:46:09:31:c8:
ba:3a:a4:de:70:98:f2:56:78:e4:7c:fe:d8:af:e2:
cc:75:40:2f:e4:ec:5a:ff:eb:d1:fa:11:d1:3b:07:
da:23:7b:1b:c7:cd:da:56:1f:12:b2:8d:98:77:a6:
e9:02:78:98:e1:ed:ec:f3:67:06:49:c8:58:7b:78:
9c:4a:e6:0d:58:b0:21:4b:a6:54:94:83:47:27:78:
c4:25:43:d2:56:db:dd:d8:45:cf:81:64:d3:3c:8d:
35:9f:4e:1f:b7:23:a2:25:7f:9c:a2:6f:e2:b4:90:
c1:56:5e:5a:34:22:3e:4e:ad:d9:5d:03:18:4f:c3:
cd:97:fc:a0:44:6a:c9:0f:e3:5b:00:d1:9e:4d:0e:
7a:fd:74:b2:c2:32:21:b9:59:d1:32:af:a8:08:9e:
38:79:01:c0:0c:9f:ff:56:b5:bc:d1:24:19:c8:c6:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:05:16:E4:97:D9:44:90:37:0B:7A:D3:C7:FF:50:A3:8C:5C:8F
X509v3 Authority Key Identifier:
keyid:85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:87:02:60:40:3c:19:04:67:fb:6d:54:c8:39:29:0a:f8:
c5:50:9c:1a:b7:ea:6a:c9:92:44:f0:4c:80:bd:78:8d:5d:67:
ab:05:a6:72:1a:0c:4d:e4:4e:ec:b6:f1:79:8b:70:99:f8:3d:
10:0c:8f:b5:8b:d7:1a:f3:40:d0:08:6d:7c:7a:5b:f7:4d:a3:
81:18:de:2e:d0:c5:1c:fb:40:01:dc:01:9d:93:95:9b:1e:13:
6a:a4:cd:e9:a5:1e:47:50:44:bd:78:34:a2:f4:73:82:3f:39:
d5:55:1e:ef:8b:f9:83:ad:23:a9:08:2a:a8:2a:28:ae:98:2d:
e2:76:6f:9b:06:e0:8a:9d:0c:18:0b:6e:1d:b6:58:d8:23:93:
89:1b:4e:87:b3:4d:1a:57:82:ef:f7:04:9c:44:d6:66:18:5b:
f0:f8:8a:96:f5:1f:30:7c:a3:95:2b:44:e0:30:bf:d5:f3:7b:
a3:85:30:91:0c:1e:9e:63:98:bf:65:60:de:0c:a4:5b:34:50:
6a:75:0c:0d:20:f2:8b:8a:6d:2b:64:cf:ad:f0:f4:88:f5:22:
a5:92:4a:d0:18:29:29:2f:d9:a8:25:59:c0:bf:62:1f:7e:c8:
7b:cd:d0:78:ec:23:3a:92:3f:93:18:a8:f5:33:bc:a3:b2:4a:
53:1a:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:07 2026 by rpki-client