
$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft
File: EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft (raw, json)
Hash identifier: 6zbHC9dpgWxKezmTWhQTUMJShJweEC1lk9QqssesYA8=
Subject key identifier: D5:67:0A:89:36:57:41:5B:FD:FB:40:6E:E2:87:7D:9E:DE:92:BD:1D
Authority key identifier: EC:11:D6:56:6E:30:F6:E4:7B:0B:1C:3C:93:1A:CA:63:26:C1:EE:25
Certificate issuer: /CN=EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25
Certificate serial: 6958AC7D0AA553E3F8B4ECA16E6FD4E0231FFADD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft
Manifest number: D1
Signing time: Mon 02 Mar 2026 04:26:08 +0000
Manifest this update: Mon 02 Mar 2026 04:21:08 +0000
Manifest next update: Tue 03 Mar 2026 06:39:08 +0000
Files and hashes: 1: EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl (hash: ZRNZpplQ/QFlRnyFzuj+QW4KA5fHsBNiF6MeZpcxIr8=)
2: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: cdeeQ8509mY7Km2qjycj2nRNYS5thd+cMlp1W7mFDbE=)
3: 3139312e33372e3232342e302f32312d3235203d3e20323633333734.roa (hash: MW+jMLEuufHi1/6mMTGA1v5xS5zh0uzlQ7x4DXe5hMk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl
rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 06:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:58:ac:7d:0a:a5:53:e3:f8:b4:ec:a1:6e:6f:d4:e0:23:1f:fa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25
Validity
Not Before: Mar 2 04:21:08 2026 GMT
Not After : Mar 3 06:39:08 2026 GMT
Subject: CN=D5670A893657415BFDFB406EE2877D9EDE92BD1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:61:4d:5b:0e:a3:35:60:17:a9:fd:2b:4c:
21:ee:00:d9:2e:8b:3b:fe:9b:e2:64:97:36:5e:a2:
6d:20:3a:f6:96:de:4a:01:dd:5d:11:68:6d:3e:fd:
c6:94:e2:77:4f:4d:1f:b0:26:b3:88:da:a0:a9:93:
f2:61:f5:1c:f2:f2:df:46:59:c5:3d:36:1b:c8:db:
98:b4:35:48:32:e8:c9:32:60:c9:bc:6a:e9:5f:f9:
00:95:87:e9:34:c2:91:79:0f:d7:42:5f:b3:19:28:
36:3c:5e:a4:dc:eb:b6:c7:15:bd:a8:1c:20:38:2d:
cb:af:f2:b7:d3:c3:c6:16:1a:99:7e:41:49:3e:15:
aa:d1:00:09:01:9d:91:ab:2b:72:f9:58:12:f7:93:
9b:0f:04:d8:be:5d:35:e8:9d:24:51:c1:7f:d2:3e:
a6:e6:51:b9:a2:8a:ae:4f:56:47:47:39:cb:13:16:
8a:af:e3:7f:54:c9:52:05:65:db:8c:ac:4a:8b:18:
68:10:9b:df:01:0d:60:eb:51:c7:a8:a4:fc:f0:ce:
6e:4d:e8:d0:e0:7a:e4:6e:68:09:52:b3:0f:f4:36:
ee:9b:e5:fa:b7:1d:76:15:a9:f0:eb:30:4d:d8:d0:
27:a0:1c:af:26:07:43:32:c6:e2:d4:bd:18:b3:5f:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:67:0A:89:36:57:41:5B:FD:FB:40:6E:E2:87:7D:9E:DE:92:BD:1D
X509v3 Authority Key Identifier:
keyid:EC:11:D6:56:6E:30:F6:E4:7B:0B:1C:3C:93:1A:CA:63:26:C1:EE:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:ff:60:5f:fc:70:7c:1f:13:17:e9:9e:0a:4e:19:42:da:
82:af:56:06:04:f5:79:1b:b0:53:76:db:b8:b3:5f:5c:15:2c:
6b:6b:83:27:19:5f:74:07:c8:56:4f:66:f0:94:91:ba:01:96:
67:02:21:f7:a6:82:11:e9:5f:0d:9e:3c:c6:ba:7e:5d:7a:ee:
b6:a6:28:f8:51:d5:87:d9:44:c5:81:8c:ad:96:6a:47:19:75:
6c:fb:b5:16:5d:d8:98:5d:e9:62:47:08:0e:3d:2b:a2:f9:0f:
f6:9d:56:5e:6e:db:02:80:05:0c:11:d8:66:bf:aa:93:05:39:
d0:20:1a:6f:a5:8b:ea:6d:ca:43:ae:c2:ab:1b:c4:14:8c:dd:
60:4c:36:53:7b:63:b1:f5:05:05:53:e8:3a:11:2c:74:17:a4:
d1:af:ea:73:63:5e:a8:24:3c:f2:f1:e6:8b:a1:84:69:36:64:
09:e5:32:b0:3a:ae:9d:b6:33:1b:0b:5d:14:d2:b5:56:4c:02:
d0:99:b1:87:48:ae:f6:b6:6d:19:4a:c7:ce:9f:d0:4d:1d:2c:
72:5c:ea:95:14:c3:0c:fd:22:97:ad:e1:ed:51:47:e8:af:9a:
90:e2:cc:9b:fe:c5:97:05:21:51:b0:e5:f1:6c:70:e7:56:fe:
64:74:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:37:36 2026 by rpki-client