
$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft
File: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft (raw, json)
Hash identifier: DoPYLnLzH79ynPJ1AlvhxlON1iFQzGhpnDtNqTljI5U=
Subject key identifier: F2:82:BF:60:A6:A9:23:20:7D:D1:89:25:58:62:5E:45:27:7D:4B:EF
Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99
Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99
Certificate serial: 3F2E34C121070CB63CE62A244F63465CA32E5912
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft
Manifest number: 7D
Signing time: Mon 02 Mar 2026 00:56:34 +0000
Manifest this update: Mon 02 Mar 2026 00:51:34 +0000
Manifest next update: Tue 03 Mar 2026 03:29:34 +0000
Files and hashes: 1: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl (hash: hBIBuukhw/Q646+DwVI++nPkBtDsnhRo2Y/jQzuKSA8=)
2: 3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa (hash: qSXhpi5jkfldkXQrU+AHOgUe+NMXk4NMgOqJ4pWavt0=)
3: 3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (hash: RtiMjhc0R/xV0KBiKmXsvSv0eYHtVfNyftSRhy117C8=)
4: 3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa (hash: F4YhNoG7E6IcIRGjcBNDY1sB2guTnHkDoaPo1f5RKJk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl
rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 03:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2e:34:c1:21:07:0c:b6:3c:e6:2a:24:4f:63:46:5c:a3:2e:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99
Validity
Not Before: Mar 2 00:51:34 2026 GMT
Not After : Mar 3 03:29:34 2026 GMT
Subject: CN=F282BF60A6A923207DD1892558625E45277D4BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:03:a3:b2:22:7c:ab:b0:ab:53:7b:77:c7:
41:8d:17:3e:ea:31:9d:03:cc:c6:e4:83:71:b6:da:
af:ca:0d:61:74:f9:63:d2:f3:9c:e7:8a:f3:8d:5a:
76:61:10:f3:27:b6:a1:65:5f:44:0c:c1:0b:55:72:
44:e0:9b:39:4e:ea:3e:91:6f:16:2b:c5:91:3f:9a:
40:d7:d4:86:53:a5:e1:59:8d:f6:ed:de:2c:a6:fc:
af:38:95:14:9a:e7:0e:9b:40:42:a3:ca:8c:bb:b7:
df:16:3b:55:6a:a3:a5:c8:75:33:96:7e:a8:10:4d:
01:09:63:22:35:77:cb:5c:0b:be:19:2e:68:2f:16:
73:37:56:c6:a5:12:49:28:a9:b2:42:73:0f:9d:30:
7a:10:50:fe:d6:e3:3d:a9:54:d4:8e:dc:68:6d:72:
1e:df:a4:d0:2f:2c:4d:94:2d:b8:22:03:25:e9:59:
9c:64:31:06:83:be:53:0d:f4:e5:ed:cf:ba:2e:ad:
4f:53:c0:96:e5:b7:46:e1:dd:06:00:2b:08:c6:ec:
23:73:ae:a3:fa:ca:56:c6:7f:01:04:03:3d:84:88:
62:40:ad:7b:a4:e4:2a:9e:c0:36:e0:74:e7:38:17:
47:6d:e8:13:2d:61:db:c4:be:49:41:3e:b0:0b:97:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:BF:60:A6:A9:23:20:7D:D1:89:25:58:62:5E:45:27:7D:4B:EF
X509v3 Authority Key Identifier:
keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:ee:b4:16:b5:cb:7d:2a:9c:d8:9a:d1:23:09:85:c5:a2:
12:8f:79:38:43:8b:aa:92:4e:5a:77:70:28:f9:c5:4a:53:6c:
79:18:aa:46:c1:32:1c:e9:b8:e3:c6:c0:a8:01:00:27:b5:54:
0f:c8:31:64:ef:f1:a8:60:ec:9e:87:b2:53:32:76:b8:42:71:
19:a1:c3:04:37:22:2c:83:8e:e2:0f:05:48:bf:4f:d7:68:aa:
5e:4a:d6:10:a2:cb:62:c6:28:72:ba:28:2c:23:6d:4d:db:92:
df:09:f3:9f:84:ca:9a:12:62:13:99:ab:62:bf:d6:0b:8e:4b:
d0:f8:e0:90:dc:d7:65:d2:9e:8a:a1:eb:61:c3:0e:c2:24:d0:
9d:96:1b:c4:93:56:90:97:86:47:99:f0:c6:8b:15:6c:b8:f8:
94:1e:fb:e2:d5:49:48:39:eb:d8:98:6f:05:f9:c9:75:a9:5b:
51:bf:65:59:e8:91:75:a1:a2:8a:f4:28:1e:57:9b:75:1f:ce:
d6:67:53:72:e1:00:61:d8:8e:f6:5d:f6:26:c4:7d:c3:df:e4:
48:c2:84:ee:e0:43:45:72:90:3e:6a:aa:a9:3b:8c:1e:91:64:
98:d0:8b:e3:6c:bf:c3:b7:6a:bc:65:cb:cf:73:a2:32:d5:24:
40:22:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:33 2026 by rpki-client