
$ rpki-client -vvf rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
File: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft (raw, json)
Hash identifier: +zVCTVHvujpsArhK36/Rxw+gS48EMivqJePSCod1Q3g=
Subject key identifier: B9:CE:66:EF:A2:57:27:BF:B8:0D:2A:78:58:06:83:68:54:3E:22:C5
Authority key identifier: CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20
Certificate issuer: /CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
Certificate serial: 52B865C6738373A1AD08F1E100DBAAA352337AD7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
Manifest number: 85
Signing time: Thu 26 Mar 2026 14:48:31 +0000
Manifest this update: Thu 26 Mar 2026 14:43:31 +0000
Manifest next update: Fri 27 Mar 2026 16:09:31 +0000
Files and hashes: 1: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl (hash: 2f2zCwRewqABOdPF5gTOmwy+FtvUFNlciy+6fay2jWw=)
2: 323830343a393732633a3a2f33322d313238203d3e20323734333839.roa (hash: kTr6CKpzTKUFfgoDsLlDzKHFTQvHPRxo2ersppPwDCk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl
rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b8:65:c6:73:83:73:a1:ad:08:f1:e1:00:db:aa:a3:52:33:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
Validity
Not Before: Mar 26 14:43:31 2026 GMT
Not After : Mar 27 16:09:31 2026 GMT
Subject: CN=B9CE66EFA25727BFB80D2A7858068368543E22C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:84:f7:5b:54:ff:48:94:9f:3a:18:6d:7b:
7f:c2:98:fa:37:ce:76:ac:1c:b1:05:f7:a3:5a:62:
a2:fa:c2:60:b3:10:67:07:9a:c5:77:9c:a3:f0:86:
60:cf:1e:81:e7:aa:9e:73:25:7a:21:b9:a3:4d:76:
a0:1f:21:42:41:8f:43:52:90:42:96:c8:3b:0d:bf:
56:9f:73:53:2c:72:71:0d:0b:f8:c5:bc:3b:6d:3b:
dc:e2:c6:8c:33:75:2d:aa:e0:d6:97:95:32:93:9b:
cb:00:bb:39:0f:fe:30:9a:8e:0d:8c:62:c2:11:d2:
bc:d7:16:73:63:b2:41:33:4c:f5:ae:8b:90:1f:29:
42:fc:60:7b:21:23:cf:c0:da:29:cf:97:03:14:5f:
0b:a3:d7:ac:f2:2e:bf:ab:3b:b6:99:64:2c:bb:ef:
98:c7:13:e3:25:60:39:78:d4:2f:80:db:17:ec:2b:
50:a3:62:e1:68:a9:2f:41:4b:30:d8:24:53:31:3e:
e8:33:fc:bd:c8:7f:a3:0c:1b:fb:cd:85:6e:c5:f1:
ec:24:05:28:ad:c0:bb:70:6b:72:ba:81:15:72:74:
16:11:36:10:49:ec:e2:29:71:17:50:9d:27:43:a2:
f8:05:6c:73:56:dc:3e:5a:6e:77:af:61:d8:ee:91:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:66:EF:A2:57:27:BF:B8:0D:2A:78:58:06:83:68:54:3E:22:C5
X509v3 Authority Key Identifier:
keyid:CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:19:9e:25:d7:5c:55:ce:2e:65:72:27:01:a8:7b:e2:8a:
f8:2d:be:b4:36:18:5c:65:bf:e3:26:11:a5:8c:42:cf:d9:04:
89:d8:dc:6d:bc:a0:0b:b6:2f:57:f5:6b:06:07:61:95:18:bc:
9a:6c:fb:8b:21:0f:f0:fb:18:3d:61:a2:fb:2b:c2:c4:d0:ee:
2d:97:bc:f8:cc:a7:5d:b0:a5:34:d5:d3:b2:0a:27:91:6f:a1:
5e:a9:7a:77:af:36:14:6a:af:9e:7f:a1:85:ab:e3:10:e5:96:
13:8e:e8:72:da:10:34:ed:66:df:db:f4:0f:ff:27:ba:0a:99:
5f:9c:fc:b0:7d:a6:a8:a2:fb:bc:61:13:66:0a:7c:83:35:12:
8b:02:ce:11:13:03:f8:3c:46:34:d7:94:87:8c:f0:b3:b0:ba:
2c:3f:c6:b8:18:b1:20:27:aa:2e:d8:dc:2b:93:3c:24:5d:23:
95:b6:f1:90:c6:26:c5:a8:fb:0f:82:f5:cf:34:db:6d:55:6c:
f7:31:ec:4f:b2:5e:92:4f:c2:1d:ce:1a:43:8b:78:2f:0f:47:
10:24:0b:49:d5:c2:b1:d1:18:67:76:9d:aa:32:48:d1:7e:39:
c6:da:3f:26:3e:9e:22:09:a5:46:b6:20:5d:88:a6:ea:bf:79:
7b:75:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:25:43 2026 by rpki-client