
$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
File: D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft (raw, json)
Hash identifier: qTenJOcTXcrZwFG12Wwyx2CnpuiuqAW0LJhmDCmCZIA=
Subject key identifier: F5:36:03:B8:44:91:1F:45:7B:D7:42:6D:92:B6:76:32:53:71:5A:E3
Authority key identifier: D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B
Certificate issuer: /CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
Certificate serial: 32FCAF7D95C59445B9B31099D00AB1558CF14C9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
Manifest number: 57
Signing time: Wed 13 May 2026 12:11:52 +0000
Manifest this update: Wed 13 May 2026 12:06:52 +0000
Manifest next update: Thu 14 May 2026 15:44:52 +0000
Files and hashes: 1: 323830343a346434633a3a2f33322d313238203d3e20323637343232.roa (hash: b2zwvRk6CLJXeep0vRY9NQiaidnBTToB/MBRW8j7PoI=)
2: 34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa (hash: MhCZsK/qFboRps/9bWWgwEuEZuqpIW8pZCmtMIt/4PY=)
3: D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl (hash: MCAynSjMZtYZPcyIikdT2KFKZGBMCj2lVU+/JDLJdkM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl
rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 15:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fc:af:7d:95:c5:94:45:b9:b3:10:99:d0:0a:b1:55:8c:f1:4c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
Validity
Not Before: May 13 12:06:52 2026 GMT
Not After : May 14 15:44:52 2026 GMT
Subject: CN=F53603B844911F457BD7426D92B6763253715AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:5c:57:3a:e9:54:2f:50:38:52:23:c2:15:
e9:ac:1f:0e:94:54:c7:76:f7:19:d3:87:97:61:02:
a6:ce:e8:b1:c9:9d:f8:30:1c:f4:60:24:99:b6:98:
78:34:0b:e2:6b:e6:c0:13:e5:01:fd:88:70:ca:ab:
96:6b:b8:39:f5:11:fa:d7:c2:16:c2:32:a4:18:07:
e8:82:d4:be:e8:44:4d:9f:dd:d9:24:f2:d5:e4:1d:
15:94:90:8f:85:62:f1:43:3f:e4:f8:a7:1c:4a:12:
59:42:a8:f4:cd:d3:14:e7:53:96:6a:0a:81:2a:28:
55:36:da:4b:02:2d:a7:9f:4a:33:90:2a:5e:e8:d3:
77:68:67:08:23:a1:a4:f1:1e:30:83:48:ef:bb:55:
72:e9:9e:46:f0:6e:b4:dc:33:f5:e4:60:8d:53:14:
17:d7:92:e0:0f:6e:14:bd:77:0f:0b:af:74:5e:c4:
fa:49:a2:75:e1:75:ba:15:7b:bd:f4:d1:10:08:23:
71:27:75:51:43:ec:52:ce:1d:44:c5:e0:f3:54:29:
3b:30:5b:a7:37:81:29:ce:ba:30:0e:c4:d0:44:ff:
0b:dc:5a:45:7f:b2:87:04:d2:8a:50:29:b5:b6:31:
b2:6f:34:35:d7:e1:44:16:d1:8a:bf:54:62:db:b0:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:03:B8:44:91:1F:45:7B:D7:42:6D:92:B6:76:32:53:71:5A:E3
X509v3 Authority Key Identifier:
keyid:D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8d:c4:61:2b:ce:55:dc:6c:7b:ef:4e:6c:09:e1:ea:fd:a0:
02:7b:68:85:e4:4b:e5:cb:28:69:9d:7d:8c:32:a1:e1:df:4e:
bb:7a:68:43:ea:80:aa:0b:a3:b4:9b:fc:0f:75:70:f0:57:86:
03:d1:80:72:7c:84:09:04:a4:00:36:bb:95:20:f1:8a:4b:17:
14:2d:8c:f5:22:f4:d6:00:c6:77:2a:b4:ed:09:01:23:fc:fc:
46:d8:7f:95:7d:72:7a:83:cf:f9:79:8b:a5:43:bc:d7:26:0e:
f5:9c:28:b7:4c:52:1c:8b:7a:d2:b9:1d:47:79:2b:41:c1:22:
fc:c9:f0:68:9a:23:a3:a7:42:45:76:01:36:b9:9f:c8:01:b7:
fa:e9:30:39:2c:3c:88:3a:65:9c:6f:b6:f1:ec:58:4e:f7:38:
3d:56:a5:c2:54:13:d4:32:32:28:0a:04:0a:3e:11:22:8a:ac:
bf:e3:03:56:e9:68:2d:a6:79:cc:55:7b:6a:a9:6c:45:23:1f:
fc:3b:6c:69:38:b1:82:2a:fe:5f:dc:f3:a9:53:0c:6d:ef:8b:
15:89:81:68:87:2e:c1:f1:3f:9d:58:00:f4:cd:53:86:f5:43:
0d:93:4c:8e:85:bb:45:23:dd:d8:94:f8:62:59:73:42:87:3a:
cf:0e:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:04:38 2026 by rpki-client