
$ rpki-client -vvvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
File: D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft (raw, json)
Hash identifier: HZtWqaG6aQzUkeqhwgKSu7lp0WyiHllnrrtkLc7CRIo=
Subject key identifier: B8:CF:30:37:00:F4:EE:7D:8A:84:3B:43:72:2B:30:1E:26:60:D3:EA
Authority key identifier: D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94
Certificate issuer: /CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294
Certificate serial: 6C51490BD02F38B446FF70484B5E61CD06100F8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
Manifest number: FA
Signing time: Tue 13 Oct 2026 19:12:57 +0000
Manifest this update: Tue 13 Oct 2026 19:07:57 +0000
Manifest next update: Wed 14 Oct 2026 22:59:57 +0000
Files and hashes: 1: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: CTc/I4oATaUgTnMimYPthSK6cv6XoInRJAu88IlIznw=)
2: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: Ew+XSXX5kjV3yvQliJbXhg9r/kN5uUZU+7rqkq7LYtw=)
3: D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl (hash: 67nMjPxi5+jINMoQBojOta8tvzYTf/X+Ho6ZPiR6ee0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl
rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 22:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:51:49:0b:d0:2f:38:b4:46:ff:70:48:4b:5e:61:cd:06:10:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294
Validity
Not Before: Oct 13 19:07:57 2026 GMT
Not After : Oct 14 22:59:57 2026 GMT
Subject: CN=B8CF303700F4EE7D8A843B43722B301E2660D3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:1a:37:8e:9b:5e:42:40:d7:aa:a1:29:6d:
77:33:69:99:4a:7e:30:5b:4f:ca:1e:b9:27:0f:9d:
c3:67:8b:35:22:10:fb:b0:1b:0c:96:0e:12:54:46:
90:6e:20:98:a1:cb:6e:22:21:b5:cf:aa:46:96:64:
1b:4e:07:f7:fc:34:51:2a:c7:3e:73:68:d9:31:70:
58:62:bc:05:c7:41:96:bd:52:73:3e:ef:49:a7:f4:
1c:9c:33:b2:d4:69:be:a7:84:af:0a:fb:1f:78:71:
5c:f4:c2:e9:4b:20:3e:5a:83:27:d2:0c:7b:12:50:
4d:a6:3b:be:68:af:b8:70:67:4a:99:4a:2d:7f:26:
52:cc:ee:48:aa:6b:77:db:04:85:dc:53:f9:f1:ea:
95:ee:3a:7a:35:d8:f9:c3:c4:fc:69:99:7e:19:68:
9e:b7:a6:50:fc:3e:45:ca:2b:ba:36:fa:76:2a:49:
5c:a2:4b:f2:02:55:13:ed:27:4d:e7:ec:ac:61:13:
b6:fa:7b:c4:e5:09:ed:2c:32:1b:67:7a:7c:b8:6e:
03:cb:3d:f1:64:d1:27:23:4f:1f:16:40:0a:9c:e2:
b7:4d:f8:09:81:fe:01:a5:05:d1:70:5f:1e:e7:0e:
a6:b7:0d:6d:a1:1c:22:db:ed:c8:74:b1:e0:1d:38:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:30:37:00:F4:EE:7D:8A:84:3B:43:72:2B:30:1E:26:60:D3:EA
X509v3 Authority Key Identifier:
keyid:D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:1b:ae:fc:33:51:71:a6:3b:73:fd:79:30:f3:90:e1:aa:eb:
1e:0d:43:99:de:4e:0d:5e:da:f4:cc:ab:b2:dc:6c:df:ff:aa:
11:3b:ef:1d:2d:45:f8:b6:7f:43:55:10:cf:ab:57:74:cc:f7:
a8:6b:b7:f8:51:e8:81:f1:73:a6:62:34:ff:d7:b1:9f:93:93:
b7:3c:88:d5:7a:6c:3d:10:da:06:90:f6:47:37:80:fe:5f:34:
9c:22:b1:5d:8c:5a:d6:a9:18:8b:60:b8:c7:36:99:14:75:9f:
b9:09:b8:3f:73:75:7d:f4:30:ac:3d:bd:57:23:28:fb:d6:13:
d9:4e:6b:a5:fc:b0:a4:5a:59:b2:52:ef:2d:7d:6d:b4:87:61:
e9:93:f4:17:4d:a7:25:14:02:ab:80:37:46:13:3e:e6:40:f6:
2e:3b:04:5c:d4:ec:89:2c:cf:1a:77:c4:0f:b4:c8:0e:53:12:
8b:c5:e5:c8:08:1c:fb:c3:8a:28:5c:f0:43:51:6f:4c:d3:62:
04:d7:d7:ef:4f:01:ea:7c:f2:02:42:d8:aa:51:ad:05:40:89:
47:58:48:1d:14:6a:54:e7:05:e9:46:90:02:6b:74:51:74:ec:
bd:fe:47:c1:a2:f0:45:4c:16:5f:d7:7a:d0:c7:e5:b9:64:fd:
e0:33:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:54:48 2026 by rpki-client