
$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json)
Hash identifier: T8vS32lGUsvURn10Kr+aFd1YYM61lH4Qg95uEemGmeI=
Subject key identifier: BD:99:B2:FE:66:73:29:7D:52:9D:7B:E4:C5:09:B5:28:82:03:60:2F
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial: 6F0224E5DF92447F0C3A1D7D2816DC44DD81C4B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
Manifest number: 02BC
Signing time: Fri 24 Jul 2026 19:11:00 +0000
Manifest this update: Fri 24 Jul 2026 19:06:00 +0000
Manifest next update: Sat 25 Jul 2026 21:51:00 +0000
Files and hashes: 1: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: CpJuHDvAI+/wiKeDtSMafBkRDb76lm4oyzY5Bieg4T4=)
2: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: E0joDVbK7d76B68vuV8WXolFT2AAlH6oKz3TDd96iqs=)
3: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: nJHKWcaMdxBbjOC5bhFit9A5idnCknzOdY01So/X9KM=)
4: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: 47lN56Pz1WOUO8K25yGbK6hfimF1U3/CgRqFeRARLrQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 21:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:02:24:e5:df:92:44:7f:0c:3a:1d:7d:28:16:dc:44:dd:81:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Validity
Not Before: Jul 24 19:06:00 2026 GMT
Not After : Jul 25 21:51:00 2026 GMT
Subject: CN=BD99B2FE6673297D529D7BE4C509B5288203602F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:8f:fc:bb:da:de:d8:d1:d9:fd:3f:2a:41:
2a:06:a6:88:d1:4b:19:9d:c4:e1:c2:09:0d:ec:54:
3e:53:90:60:86:13:f0:48:4a:cf:08:2a:c3:01:6a:
ad:19:7e:c0:cd:3c:fa:2e:f1:28:57:50:a6:27:98:
3a:39:d8:e9:a1:ef:11:8f:bb:f4:98:ff:6d:59:50:
2f:1a:f1:74:f3:6e:80:e7:5f:ff:3d:65:94:5c:bb:
4d:ba:7c:f8:f8:7c:db:47:13:af:a4:c7:29:1b:ca:
6a:6f:ef:80:de:27:3e:5e:e7:d8:08:90:b4:62:f0:
2c:83:44:64:ce:bf:dc:5f:f5:c6:94:9e:61:15:7b:
5c:94:b6:29:11:6a:9a:89:5c:51:60:6b:86:ab:96:
23:a7:94:81:21:bb:ad:9a:c9:26:53:0c:c5:c2:0c:
a0:31:06:ca:44:4d:65:5d:71:06:94:e6:82:28:47:
42:ad:ec:a3:0a:0d:6d:10:5a:ee:47:1b:73:c6:83:
55:9b:d0:45:43:f9:d8:fd:7d:f8:5e:70:e6:f6:70:
7a:24:37:dc:49:f9:45:4a:44:f1:26:6a:6a:99:1f:
d7:f4:46:61:4c:84:cf:d9:d7:c9:88:04:48:f0:be:
d3:7d:35:ba:9b:67:b1:83:c0:10:a1:3b:04:ce:0e:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:B2:FE:66:73:29:7D:52:9D:7B:E4:C5:09:B5:28:82:03:60:2F
X509v3 Authority Key Identifier:
keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:c0:fa:38:7c:f9:a4:5d:36:f3:97:66:93:3b:b8:aa:7e:
c5:39:d3:07:d5:38:a5:94:56:5b:92:07:5c:1d:ec:0e:b6:78:
e0:b3:37:7a:a2:5d:72:24:1d:e0:77:34:0b:56:0f:4a:4c:3c:
4d:1f:91:f8:52:de:9c:f4:35:94:76:28:3f:6c:56:c2:ab:be:
44:99:90:87:28:3d:fe:e1:15:f8:c1:14:e0:8e:67:89:5a:11:
37:81:56:a4:4e:b5:3d:47:94:52:1d:53:24:f5:d1:24:80:35:
c3:01:81:72:84:f7:bb:17:f1:32:16:c2:64:87:40:92:62:96:
87:ae:e6:4c:09:51:2a:33:c4:1f:3b:c6:90:c7:7c:13:0c:ef:
0e:80:35:be:0e:0c:d8:8d:b1:38:55:05:41:4b:37:65:38:3f:
c9:ea:da:c2:fc:3f:fc:bd:9e:5d:ad:d3:42:ba:42:ab:08:19:
a4:39:e7:e5:8d:8e:5b:e7:ee:92:bb:c7:50:85:76:62:07:c6:
02:e7:65:fc:fe:53:cb:65:b2:ab:ae:72:20:b6:16:5e:37:3b:
a5:bb:98:44:74:8d:33:53:0b:bc:1f:c6:1a:24:48:3a:e5:5d:
e3:22:26:c5:d0:a1:d9:c6:43:a9:ef:81:83:77:7c:43:1b:8d:
b0:86:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:36:46 2026 by rpki-client