
$ rpki-client -vvf rpki-repo.registro.br/repo/E66wQMg8PnHzjXVDZahxmiG48JTPnR3tEBvwqHY1vRJu/0/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.mft
File: 1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.mft (raw, json)
Hash identifier: jENcSSGTMuaFKfiHL62ziv8nmemuCGMP/BBaz3E7DHA=
Subject key identifier: 45:99:D1:F6:BF:6D:CA:1E:F8:98:56:70:11:F1:F4:37:F9:8F:78:07
Authority key identifier: 1C:7C:E7:E0:FA:4D:94:21:43:5B:AB:E2:9C:A5:27:AA:B6:93:FF:DF
Certificate issuer: /CN=1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF
Certificate serial: 2D29E573C508D70401D4F61CA4C3485AD7CF6EF1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E66wQMg8PnHzjXVDZahxmiG48JTPnR3tEBvwqHY1vRJu/0/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.mft
Manifest number: 11
Signing time: Mon 02 Mar 2026 10:24:11 +0000
Manifest this update: Mon 02 Mar 2026 10:19:11 +0000
Manifest next update: Tue 03 Mar 2026 13:21:11 +0000
Files and hashes: 1: 323830343a313532303a3a2f33322d3438203d3e20323633333732.roa (hash: +xYLbAOVuXn0GzQ233/KCIhSjm+O4b1buLVO5hfOMPk=)
2: 3139312e33372e3230382e302f32312d3234203d3e20323633333732.roa (hash: Ky+Jx9msqKa5L8oTBJ673eMk8rx+62nFY5KZmi71K38=)
3: 1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.crl (hash: pBn0boQ3ELlu7Qzzf0YA5fa5kgz6mtdPNGTq7gU+GrA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E66wQMg8PnHzjXVDZahxmiG48JTPnR3tEBvwqHY1vRJu/0/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.crl
rsync://rpki-repo.registro.br/repo/E66wQMg8PnHzjXVDZahxmiG48JTPnR3tEBvwqHY1vRJu/0/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 13:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:29:e5:73:c5:08:d7:04:01:d4:f6:1c:a4:c3:48:5a:d7:cf:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF
Validity
Not Before: Mar 2 10:19:11 2026 GMT
Not After : Mar 3 13:21:11 2026 GMT
Subject: CN=4599D1F6BF6DCA1EF898567011F1F437F98F7807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:ca:51:09:c1:0b:07:aa:c0:d8:91:d8:5f:
9b:ec:d7:ee:0d:e7:7f:91:f3:87:40:fc:c4:d6:b0:
77:2c:c8:7d:9f:64:c6:25:ed:fb:f7:7e:ab:4f:60:
76:0c:03:b8:85:4b:15:eb:7d:56:8d:f9:bb:42:37:
2d:66:10:90:34:b9:74:b1:90:2c:ce:31:63:4e:b4:
fe:d3:48:88:d2:35:3d:67:04:87:75:f9:ae:73:b8:
dd:9d:b9:75:ad:a6:e2:4f:87:09:5b:73:79:3b:53:
25:09:03:6c:e2:a9:9e:de:80:74:69:47:ac:b7:bc:
e8:bf:40:bd:5e:c3:9a:54:0c:ee:44:39:dd:df:d9:
8a:1b:14:4d:d5:17:d9:85:41:9b:5d:84:ae:56:ad:
ff:3d:0a:1d:a8:38:11:e0:c5:7d:33:a0:07:32:3d:
2f:14:ec:c8:22:c8:41:28:6b:50:56:c5:64:17:c1:
e6:97:b9:59:d1:3a:11:5b:85:bb:d6:84:be:85:3e:
5c:c5:06:96:d7:30:7a:68:f7:59:2b:a3:d3:2d:ac:
a3:09:bb:a1:94:73:e8:f2:ce:fb:53:f1:bf:27:13:
ea:fc:89:a2:f3:50:0c:20:25:e8:76:11:99:03:9a:
53:40:40:de:b3:06:fa:1d:1c:5b:78:aa:8e:e7:dd:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:D1:F6:BF:6D:CA:1E:F8:98:56:70:11:F1:F4:37:F9:8F:78:07
X509v3 Authority Key Identifier:
keyid:1C:7C:E7:E0:FA:4D:94:21:43:5B:AB:E2:9C:A5:27:AA:B6:93:FF:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E66wQMg8PnHzjXVDZahxmiG48JTPnR3tEBvwqHY1vRJu/0/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E66wQMg8PnHzjXVDZahxmiG48JTPnR3tEBvwqHY1vRJu/0/1C7CE7E0FA4D9421435BABE29CA527AAB693FFDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f0:40:49:24:b2:b7:1e:35:31:f2:e9:6d:a7:11:52:93:9d:
ff:f3:b5:14:37:a5:ac:95:bd:04:cd:6d:f6:fb:fd:e6:ed:4a:
02:30:d7:98:0d:e9:12:5b:0b:47:20:d5:c0:7f:8c:39:83:c9:
12:b0:12:fd:54:de:11:fb:39:80:3b:44:be:11:92:2e:2a:42:
92:b9:40:2a:f2:bd:0e:91:e1:8b:cd:f4:17:57:15:78:65:fa:
3a:c9:3c:40:55:48:88:6c:7c:63:a3:49:4c:d4:d2:85:cc:c6:
70:45:9c:0d:98:68:9b:93:93:ad:e4:b2:1f:b5:11:26:b6:d1:
b0:50:29:4a:61:7f:1e:c9:32:b5:44:3c:7e:a6:16:d7:a7:99:
f3:3a:84:90:d9:09:31:5c:87:21:70:b0:52:c8:ed:db:a6:fe:
53:9a:30:cc:7b:30:3f:00:35:b5:e2:ac:fb:0e:71:cc:76:3f:
bd:a2:3e:f8:0e:f1:8b:a9:15:e4:b5:00:8f:01:36:65:99:14:
d8:5e:af:ea:69:6d:44:8a:9e:1d:8d:02:b6:f6:a4:80:5e:3d:
8a:1e:76:24:40:d1:76:cf:60:0a:16:65:ce:4a:c5:33:67:fd:
a3:9b:75:5e:db:2b:47:fc:27:e3:37:76:77:37:d9:ac:df:88:
4c:c9:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:38 2026 by rpki-client