
$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
File: 9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft (raw, json)
Hash identifier: yU2RAevfBPL7JznFyzWS/G0MsytGAeMEy9mjtbOwEG8=
Subject key identifier: 8C:28:8C:C2:5D:A8:48:15:C7:D4:FF:4E:0E:A1:D2:2E:AC:02:D3:87
Authority key identifier: 9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
Certificate issuer: /CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
Certificate serial: 5B87BEEEF5B0B0BE65A05576166621F4F94DAF57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
Manifest number: 5C
Signing time: Thu 26 Mar 2026 10:47:58 +0000
Manifest this update: Thu 26 Mar 2026 10:42:58 +0000
Manifest next update: Fri 27 Mar 2026 13:51:58 +0000
Files and hashes: 1: 323830343a326466383a3a2f33322d3438203d3e20323635333135.roa (hash: Ii24evX3krHRMKAE5J/HgutcQ94oYXsgcfCCpd4oVWY=)
2: 3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa (hash: ej1bquQYsS2bNscIvx/U/bIicK/70cAMW+ATxHQxljw=)
3: 9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl (hash: ez1GI3oivqy2esJyfCxYUTgjy4Lzft6lE8iAPtyeSE0=)
4: 3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa (hash: OqIeDc+l9G4nk6Gswf30OejkNhYPr9wz9fk+SLUM1jQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl
rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 13:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:87:be:ee:f5:b0:b0:be:65:a0:55:76:16:66:21:f4:f9:4d:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6
Validity
Not Before: Mar 26 10:42:58 2026 GMT
Not After : Mar 27 13:51:58 2026 GMT
Subject: CN=8C288CC25DA84815C7D4FF4E0EA1D22EAC02D387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:ef:34:90:93:53:56:81:b8:1f:5d:7f:9f:
c5:34:df:0b:83:b8:f0:2f:dd:9d:1f:95:e3:89:ce:
36:26:e6:ba:a4:8b:6c:00:dc:4c:e1:7e:2d:cf:4a:
94:9f:1a:a2:07:0d:4b:4e:0e:97:c1:2b:8d:e5:bc:
97:36:fc:3d:fb:bc:b5:b7:01:1e:7b:ea:c5:55:db:
87:5d:ef:05:22:d9:40:ba:7f:76:5a:6e:ca:51:87:
bf:83:cc:10:14:4f:c6:69:b7:7c:a5:4c:63:ab:a1:
07:a7:5f:17:08:ad:d2:39:6d:d7:3b:66:dc:89:56:
fc:fa:86:70:50:c8:04:cd:55:f1:81:b1:7d:33:0f:
27:d3:3e:cc:0e:40:cb:07:e6:ba:8b:ab:13:bb:89:
6f:02:74:f3:01:de:a6:0a:a4:11:6e:da:12:94:c8:
a2:60:41:5d:15:29:84:dd:d4:79:73:17:24:cc:0e:
9a:6f:c9:63:b3:a7:59:65:d9:3d:37:6e:ee:48:6f:
b9:82:6d:72:3f:20:02:c0:6f:1d:75:82:6e:a0:fa:
9e:f0:23:77:29:d0:2d:03:cb:7d:72:fb:83:88:bb:
c5:ef:58:79:e5:28:7e:b5:2d:75:e2:f0:7f:2d:7c:
05:e4:46:18:9c:c2:e6:6c:1f:f3:ad:7a:27:a2:6b:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:8C:C2:5D:A8:48:15:C7:D4:FF:4E:0E:A1:D2:2E:AC:02:D3:87
X509v3 Authority Key Identifier:
keyid:9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:cf:40:1e:99:b3:ab:52:30:3c:08:b2:c2:82:a4:3d:fb:
8c:e2:c2:e3:8c:c3:d5:67:d7:89:49:63:8e:0d:29:2e:c9:50:
be:b8:ec:82:f9:52:0a:25:72:57:45:6e:0e:54:fd:b1:9a:e5:
ae:6f:b4:51:1f:dd:03:36:cb:ca:62:47:f5:fa:59:d7:ee:e6:
0c:de:fe:cb:61:e5:5e:02:3f:b6:79:51:ee:9f:80:c2:ab:be:
a5:42:19:0d:36:89:8a:c3:c0:10:65:93:b5:7a:cd:11:ec:b9:
86:4b:1c:b7:a6:9c:29:66:9e:0f:00:a7:cc:43:63:68:95:83:
2a:59:8a:49:26:44:5a:ee:25:f3:35:ee:56:75:a7:23:be:a5:
be:9a:6b:50:cb:2a:71:7c:40:54:01:14:a5:4e:a3:3d:1d:88:
9f:1b:f9:97:0e:14:8d:0e:f7:19:06:de:8f:2d:3b:f6:3e:84:
44:df:47:3c:3e:6e:23:4b:10:ab:a6:74:6f:01:de:0c:4a:e2:
bd:70:67:2f:36:50:ca:db:15:3b:54:51:fa:04:fb:5f:7e:5d:
b3:dc:45:a3:36:32:9d:52:80:db:a2:d7:dd:fc:c2:b6:e5:de:
8f:43:e9:9b:fd:e2:97:bb:26:5d:75:6e:56:d2:f7:6f:64:b1:
a7:7f:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:57:11 2026 by rpki-client