
$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
File: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft (raw, json)
Hash identifier: ZVtgSbH56ZPPzTA2Agy+NpouKt9B1ao4JGHdy0xzVpI=
Subject key identifier: 65:AB:E6:A9:EC:56:E6:C9:39:7C:3D:BE:C6:66:BD:2A:8C:3E:95:63
Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD
Certificate issuer: /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
Certificate serial: 436EC82B46BAE56D88EC7AEF26250B10A7A08664
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
Manifest number: E8
Signing time: Sun 01 Mar 2026 06:00:58 +0000
Manifest this update: Sun 01 Mar 2026 05:55:58 +0000
Manifest next update: Mon 02 Mar 2026 09:43:58 +0000
Files and hashes: 1: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl (hash: P/JFlmjJcwVq5jiDgafwQlo/KVh2+k7WQtaBeHyHnf4=)
2: AS268047.asa (hash: XFDU3GEuzuASRqL7if52+iYTZGnSFL1FsHFCeT3y1/Y=)
3: 323830343a353732343a3a2f33322d313238203d3e20323638303437.roa (hash: VO2mCl9Aq8nQpM2jsbGznOc//ApGYLZ/YC8kl2kia9I=)
4: 34352e3136382e342e302f32322d3332203d3e20323638303437.roa (hash: 2jrHaa+hwH2oFt1Zl6Q8aSVdxmSJjuGdjSzRULxSjCM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl
rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 09:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6e:c8:2b:46:ba:e5:6d:88:ec:7a:ef:26:25:0b:10:a7:a0:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
Validity
Not Before: Mar 1 05:55:58 2026 GMT
Not After : Mar 2 09:43:58 2026 GMT
Subject: CN=65ABE6A9EC56E6C9397C3DBEC666BD2A8C3E9563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:99:91:01:02:fd:f0:f0:18:32:ef:d8:60:
ea:eb:7c:4b:6e:5a:94:d0:97:04:65:22:ed:4d:46:
ae:af:d0:51:dc:a7:62:96:ab:b5:cf:b0:e8:48:c6:
37:a4:b4:06:f2:0e:46:8e:0e:81:71:61:ae:18:56:
64:22:83:72:c9:aa:55:cd:14:90:b8:c5:22:08:a8:
ab:33:f6:18:e7:c0:34:da:53:2b:b4:6a:69:8a:5a:
fb:13:39:62:3b:52:72:96:d1:e2:9e:4d:cb:3d:ea:
e9:fb:52:6c:42:05:b4:f4:66:80:ed:56:03:4c:db:
06:c2:e9:f3:fa:e9:ff:02:e7:d7:02:0a:e9:92:db:
92:a6:99:26:e0:d2:0c:26:c3:aa:85:a2:74:6a:60:
9a:4a:d5:06:22:03:34:10:17:e8:ab:7c:b0:aa:c8:
c9:b8:3a:ca:cd:2b:d6:ab:0c:25:64:e5:26:42:40:
89:75:84:fe:be:bb:a6:74:1f:5e:4e:f9:38:5e:a2:
7c:d8:c6:cc:fd:6b:e1:70:01:1a:a1:58:45:d9:d4:
39:23:2b:d8:50:45:31:09:b2:c7:da:f3:fe:3f:21:
68:57:32:e9:36:f8:f9:72:49:7e:1a:d8:01:4f:d2:
36:fd:05:d6:38:83:61:39:4c:3d:45:33:d6:e4:10:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:E6:A9:EC:56:E6:C9:39:7C:3D:BE:C6:66:BD:2A:8C:3E:95:63
X509v3 Authority Key Identifier:
keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:92:bd:8a:51:8b:32:d0:e8:60:8f:22:7e:da:21:03:df:
cc:1c:50:ba:92:39:e9:40:c1:c3:13:5e:7a:61:02:40:24:97:
44:b6:72:56:40:91:85:fd:c5:6e:dc:73:f8:b9:8b:c5:6a:6d:
78:96:75:0d:3f:51:7d:44:5b:ec:2b:1f:d7:52:c0:60:5d:42:
b3:ca:c9:91:89:28:1a:ec:a1:44:7c:34:32:cc:d3:21:dc:4c:
7a:a9:7f:3e:e2:0d:4e:6e:13:c4:96:c2:f4:7e:9e:5c:9d:33:
0e:42:e6:32:48:48:7b:60:b5:aa:2b:93:18:ae:8c:c9:0c:53:
bd:de:bc:c4:47:64:52:80:33:d2:85:d4:85:eb:05:20:16:90:
a9:2a:97:b3:e3:47:b6:32:49:cc:61:2a:da:dc:9d:25:88:b5:
fc:ad:36:d1:34:f2:63:7c:7b:18:a8:44:49:e5:c1:b2:af:6a:
93:39:2b:77:15:fa:34:04:1b:5b:cd:d1:06:67:76:6f:7a:06:
c3:b5:a6:69:ea:0b:88:e8:ac:f9:b6:89:ab:2e:66:79:ec:04:
e8:3f:ac:b8:2f:08:7b:1f:7f:16:ab:96:3c:52:44:df:d8:d8:
77:1e:7c:f5:53:5d:4b:1a:e0:52:24:03:42:4b:5d:4b:7a:c2:
8e:6c:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:12:18 2026 by rpki-client