
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft
File: 60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft (raw, json)
Hash identifier: 8Zmqi7yaQvnWFApL1Wqo9inOIsqci9A/BI5Ukpi8c3w=
Subject key identifier: 87:D0:0E:B6:78:2B:1A:FA:A6:4F:3B:ED:85:49:FE:81:28:78:34:DE
Authority key identifier: 60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9
Certificate issuer: /CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9
Certificate serial: 41066AEFB799317CD7591469C9C683D74EA44FBE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft
Manifest number: AC
Signing time: Wed 25 Mar 2026 12:39:31 +0000
Manifest this update: Wed 25 Mar 2026 12:34:31 +0000
Manifest next update: Thu 26 Mar 2026 14:26:31 +0000
Files and hashes: 1: 323830343a6463303a3a2f33322d3335203d3e203238363130.roa (hash: yVMXcpj3FL4Fa7Aq4HNq2UIHGBLMikLQmBP0T36N1bg=)
2: 60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl (hash: UwVm6UybFRnQYf4qBQmmkUofI/VFzmGBqvb1BeGOAtI=)
3: 3138362e3230392e38382e302f32322d3234203d3e203238363130.roa (hash: Jhfb7/e/5nY5GHcQrZ0hViKV3qlJ5Mu42D3e1gOHxq8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl
rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 14:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:06:6a:ef:b7:99:31:7c:d7:59:14:69:c9:c6:83:d7:4e:a4:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9
Validity
Not Before: Mar 25 12:34:31 2026 GMT
Not After : Mar 26 14:26:31 2026 GMT
Subject: CN=87D00EB6782B1AFAA64F3BED8549FE81287834DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:ea:4f:9b:c0:76:9e:fc:ee:ea:e2:21:93:
f8:a8:96:50:1f:7c:85:a0:77:ce:c8:3a:aa:6a:1d:
a6:39:9e:a3:98:0a:d1:61:df:76:b8:8f:ff:54:42:
1d:c1:57:92:73:05:7b:1a:cf:b9:6f:0f:a2:56:9f:
28:cd:91:ec:ac:82:c1:4a:b4:e6:14:67:18:8e:0a:
05:c6:f3:23:b0:89:0b:b7:79:4e:67:ad:19:21:66:
7b:08:ed:e7:8c:d8:7a:8d:77:0f:39:fd:87:67:e9:
0c:f7:f1:3c:07:4e:14:6b:95:fa:2b:84:08:2e:d2:
6b:78:27:2f:23:5c:e6:84:b1:f8:47:4a:17:e3:84:
c0:37:6d:6b:a7:67:c8:46:27:7a:fa:d9:56:d5:03:
14:05:52:8d:53:c3:fb:2c:50:9b:3c:82:2a:66:7e:
be:01:5c:ff:ee:54:eb:0a:84:c0:99:9e:85:11:47:
cc:dc:dc:e7:27:e3:d8:4e:0d:7b:8f:3c:ef:e8:89:
96:ba:59:bf:0c:b3:85:7b:96:40:79:c3:17:24:2f:
48:a0:c2:07:53:3b:14:c2:f4:da:b5:9c:9c:ee:58:
29:97:42:32:9d:e2:b0:a7:99:9f:df:89:30:3e:0f:
f4:ec:5e:f2:b4:6d:8c:16:ff:57:c0:cb:5a:ec:95:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:0E:B6:78:2B:1A:FA:A6:4F:3B:ED:85:49:FE:81:28:78:34:DE
X509v3 Authority Key Identifier:
keyid:60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:15:1e:ab:d1:40:95:f7:03:c8:9a:a6:af:aa:9b:2f:7c:bd:
68:7d:63:65:0b:20:1d:d3:d1:84:eb:22:fa:ec:4c:4d:46:4a:
59:93:33:3e:b5:91:72:04:21:4d:ec:60:41:18:89:8a:a3:bf:
de:86:f2:d3:15:4c:87:db:5a:29:17:07:41:0a:ce:01:05:96:
49:b1:80:db:66:39:0e:66:54:06:85:b4:d8:29:8f:df:36:00:
a1:99:28:6b:a1:a5:51:2f:69:6c:56:c9:45:8f:29:6f:f0:2f:
91:12:cd:73:1a:51:bd:87:91:1c:b3:f9:e0:0e:ac:5e:6d:f1:
b0:76:ef:e1:f6:2b:19:8d:d4:db:d6:89:c4:bf:b9:9f:8d:e1:
89:02:a8:0f:f9:9c:6f:7a:8f:62:13:5f:2f:c4:93:f8:07:b0:
f7:cb:33:be:f9:c2:b7:3d:b7:d1:72:4b:42:7f:08:26:b6:ef:
e2:08:21:dc:d5:2a:9e:58:74:28:a5:77:2d:d8:fa:73:d5:22:
06:fb:6c:e2:8b:31:d2:1f:8f:6c:4e:cd:bd:12:8a:09:28:7b:
9f:45:1f:a3:f7:81:a3:48:9a:d9:b0:64:99:a6:9c:ee:9a:d5:
46:ca:21:70:cf:bb:5e:a0:f4:bd:85:0b:b1:aa:7a:24:5a:b6:
0e:b7:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:41 2026 by rpki-client