
$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
File: DC566526072898BA252A37ABF91AC32DFFCDCB28.mft (raw, json)
Hash identifier: +ZBOeLti9wWBUGIJsY0PBawt4rv6XyqhMZrvcZJVoho=
Subject key identifier: 8E:A5:52:4A:B5:F4:8A:7D:B8:49:AE:3C:A6:4C:15:D3:FA:D5:9B:CE
Authority key identifier: DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28
Certificate issuer: /CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
Certificate serial: 1CE3E818C9277009BE14CA946DC638D7D6F72138
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
Manifest number: C3
Signing time: Fri 17 Apr 2026 15:53:03 +0000
Manifest this update: Fri 17 Apr 2026 15:48:03 +0000
Manifest next update: Sat 18 Apr 2026 16:14:03 +0000
Files and hashes: 1: DC566526072898BA252A37ABF91AC32DFFCDCB28.crl (hash: XnTs1TYOx0wRajbCiJUot4kpavkg0GewPXqYvrPIP50=)
2: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: muO7hGKXHvC3T8bSCTNhPz+n78PR7f0AlhPMWQjify4=)
3: 323830343a336435633a3a2f33322d3438203d3e20323636353236.roa (hash: mH533Be2tht8K5psDXIQnJeE8QNu4JJ2clMQCKj33gY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl
rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 16:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e3:e8:18:c9:27:70:09:be:14:ca:94:6d:c6:38:d7:d6:f7:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC566526072898BA252A37ABF91AC32DFFCDCB28
Validity
Not Before: Apr 17 15:48:03 2026 GMT
Not After : Apr 18 16:14:03 2026 GMT
Subject: CN=8EA5524AB5F48A7DB849AE3CA64C15D3FAD59BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:77:46:f9:10:eb:58:66:69:14:b1:5e:8f:
a0:a5:61:3f:aa:3d:ec:02:ee:c4:29:58:e9:f3:86:
d7:b7:7b:fa:ba:72:44:70:28:64:0c:db:a4:7e:89:
d4:31:6d:0d:93:e8:45:9f:cc:58:d3:5b:3f:f8:30:
04:fb:1b:e8:a6:25:8f:8d:6e:ff:de:3c:fb:69:b6:
4e:57:93:5c:61:61:fb:8d:68:51:f3:18:dc:3a:df:
b4:20:bf:34:e0:b4:f5:08:36:f8:fc:0e:91:75:e7:
be:4e:db:16:82:56:36:71:6b:42:75:24:ff:c1:7d:
48:32:ba:95:37:8a:94:9f:fa:6e:b3:db:b7:ef:6d:
cb:dc:38:dd:1e:e9:42:36:93:47:0f:9a:83:1d:99:
41:54:89:da:ce:ce:ec:c8:a8:a5:23:d2:d1:23:07:
a8:97:43:91:ed:75:a9:de:fc:4f:8c:a9:f2:42:20:
1b:2a:0d:ac:3e:92:03:aa:01:6d:34:5c:36:4a:01:
97:54:41:31:d8:4d:74:6f:ad:ac:67:5b:3a:ec:4f:
88:8e:80:51:05:22:c9:9d:6c:7e:34:c7:36:0e:74:
3d:4b:74:f4:cb:76:bd:28:fa:b4:d7:3c:11:76:5f:
8f:e8:05:e4:28:57:bf:4b:20:71:4a:c4:79:a8:ce:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:52:4A:B5:F4:8A:7D:B8:49:AE:3C:A6:4C:15:D3:FA:D5:9B:CE
X509v3 Authority Key Identifier:
keyid:DC:56:65:26:07:28:98:BA:25:2A:37:AB:F9:1A:C3:2D:FF:CD:CB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC566526072898BA252A37ABF91AC32DFFCDCB28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DC566526072898BA252A37ABF91AC32DFFCDCB28.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:47:6a:5c:d2:29:5e:43:13:65:e8:e5:8f:77:cf:c2:58:
22:fd:06:7d:51:52:e5:5c:9f:9a:2f:ff:9e:e2:4b:3d:c7:d6:
96:fb:fd:6b:29:8d:3a:49:80:08:d7:2c:24:80:ef:b7:7d:be:
8e:18:9e:07:18:98:e8:39:2b:39:f6:20:14:44:42:7a:fb:e3:
52:2e:cd:06:56:35:17:9c:74:a4:f0:82:27:e5:85:02:be:64:
e6:44:cc:92:da:34:72:6b:62:d1:37:36:aa:e2:11:7b:04:23:
f0:de:fa:10:30:47:1c:88:d6:9b:e6:dd:c6:f3:37:d7:ae:21:
ee:38:d7:14:74:89:c1:f4:bd:78:4a:69:4b:08:1a:4b:29:42:
f0:e9:82:13:5c:47:ce:e3:2f:51:dd:e0:9f:b7:ae:c3:ed:04:
5c:03:92:db:6d:ab:10:87:34:db:ff:e3:01:25:12:29:7d:66:
4c:f1:e8:c1:5a:47:e5:0e:80:69:6d:cd:39:53:9f:85:65:e6:
63:fd:33:31:91:e6:aa:e2:5b:51:1f:e6:c3:09:4a:73:97:01:
de:ba:7d:61:22:35:81:17:17:d5:c8:59:92:cd:cf:62:c5:3e:
ed:6a:b2:a4:92:33:04:20:58:e4:90:13:c0:7b:e5:e7:3e:84:
c1:5c:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:59 2026 by rpki-client