
$ rpki-client -vvvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft
File: D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft (raw, json)
Hash identifier: BcnGye4oKy26breUnQDl07wHCGQkCUofCo2KgCsBy/A=
Subject key identifier: 8D:3B:C9:5A:49:3C:79:60:FF:7B:64:42:25:48:98:B5:3E:DA:D1:9A
Authority key identifier: D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2
Certificate issuer: /CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2
Certificate serial: 7E6CD3042CCEC8E2DF7941EF31BD27122E5AF06C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft
Manifest number: 68
Signing time: Mon 12 Oct 2026 13:33:06 +0000
Manifest this update: Mon 12 Oct 2026 13:28:06 +0000
Manifest next update: Tue 13 Oct 2026 16:33:06 +0000
Files and hashes: 1: 3136382e3232372e3230382e302f32322d3234203d3e203631363134.roa (hash: y2YnGIAHhKYB4H1A2rpS7hGYzgKTdoPCtYTXg81+ImI=)
2: D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl (hash: mYQjnEIv4uZBAktOJLpPFixbnyKxoucnWnuir6zTz5Q=)
3: 34352e3233322e3231322e302f32322d3234203d3e203631363134.roa (hash: ceMoQRZPDcXDPodBBze2MMW8XyE0sAOnFLURfQk3+So=)
4: 323830343a346166633a3a2f33322d3438203d3e203631363134.roa (hash: Wr33nJVtlp/bOx5kpyjwz1oYBTkcrmJhGJBHcpNj/BI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl
rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 16:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6c:d3:04:2c:ce:c8:e2:df:79:41:ef:31:bd:27:12:2e:5a:f0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2
Validity
Not Before: Oct 12 13:28:06 2026 GMT
Not After : Oct 13 16:33:06 2026 GMT
Subject: CN=8D3BC95A493C7960FF7B6442254898B53EDAD19A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:5e:ca:80:3f:de:47:19:16:0a:2d:e3:34:
eb:c7:dc:b2:9d:b0:df:9f:7c:f9:b8:2e:02:a1:e1:
3b:17:b0:31:b9:ba:14:11:f0:8b:4e:4b:08:02:cc:
a2:44:64:a1:1e:db:5e:4e:89:42:45:51:ef:3d:6e:
57:dd:2f:d8:2c:46:8c:74:fb:da:b5:31:32:e7:f5:
43:38:1b:11:2e:bf:bf:08:27:59:ae:1c:71:82:cd:
ac:5d:77:13:af:bf:7c:bb:f1:91:d5:b1:33:c4:5e:
86:71:89:6d:53:ac:ba:1c:27:33:c5:1f:2e:50:1b:
ee:e9:4b:37:ed:f5:59:7a:86:78:c3:c2:05:78:11:
31:6c:44:ca:2f:3d:c6:cd:b5:91:60:26:95:89:af:
83:d4:fc:08:74:7a:d5:1f:4c:46:76:be:18:cd:ca:
e8:40:4d:1c:e0:4e:fd:54:1f:8a:df:fd:45:28:ff:
78:d1:6d:33:08:e0:a0:21:6b:22:6a:a4:3d:05:53:
4f:2f:52:86:59:f7:c7:ba:61:09:f9:6e:26:18:63:
88:da:54:8b:6a:cc:1c:00:d6:97:8f:94:e6:12:2d:
26:2c:6a:95:86:9d:b3:c7:1d:9d:68:29:ec:0e:af:
a2:94:40:c0:f4:5a:22:79:a8:36:32:f5:ae:31:12:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:C9:5A:49:3C:79:60:FF:7B:64:42:25:48:98:B5:3E:DA:D1:9A
X509v3 Authority Key Identifier:
keyid:D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:84:63:62:ad:16:57:49:6a:78:e9:c9:b3:28:0e:63:ac:48:
68:b9:ff:70:e6:9e:29:4f:6e:65:c2:d6:b7:a9:e5:9b:58:35:
6b:38:10:18:0b:39:2f:e2:fb:d5:6c:60:57:46:36:51:38:17:
91:f5:2e:86:1c:b3:05:e2:5b:4d:04:7a:86:c7:4f:f5:79:14:
da:fa:0d:d2:57:57:84:8c:8a:2d:d8:89:e0:46:33:38:7f:12:
e5:6e:36:3e:e8:2b:cb:48:c8:0d:fd:8f:e0:25:45:d1:cb:54:
63:9b:f4:2d:f6:60:73:3f:27:ac:5d:21:de:90:39:d6:d0:55:
a9:31:8f:c0:d4:75:f0:ce:09:4f:86:0d:42:50:8d:50:f8:5f:
07:62:9b:c8:ed:2f:bf:ef:b8:fa:49:62:dc:dd:82:99:f7:0b:
68:47:2b:a7:1c:51:3f:32:a2:54:aa:88:8d:e4:ec:8d:51:bc:
c0:5b:cc:85:81:be:d0:ee:30:1f:19:dc:60:a0:08:34:12:55:
71:78:1a:e6:2a:d2:79:f2:ab:80:9d:1a:d8:46:ba:85:d3:09:
17:a1:e4:e2:1d:ca:1b:02:f2:2c:7a:52:86:7a:06:51:44:ee:
7f:4f:fa:c6:d5:41:69:1a:78:ea:d3:3e:40:0a:47:ea:bc:9c:
e2:95:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:32:34 2026 by rpki-client