
$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
File: 5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft (raw, json)
Hash identifier: 91b+VmsgBzdJmT/BQqNMI3L/jOlTDcmgZ8vyttDD5Qk=
Subject key identifier: 75:9C:14:12:28:BB:A3:60:A9:C6:17:CC:EF:9E:C6:F2:0A:97:A0:DB
Authority key identifier: 5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
Certificate issuer: /CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
Certificate serial: 5DEEECD76413F3B43CA740E7CE84C6E2F92DBD09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
Manifest number: BA
Signing time: Wed 25 Mar 2026 16:57:57 +0000
Manifest this update: Wed 25 Mar 2026 16:52:57 +0000
Manifest next update: Thu 26 Mar 2026 18:52:57 +0000
Files and hashes: 1: 323830343a353863383a3a2f33322d313238203d3e20323638313439.roa (hash: FfX++mMThMyA5Phf+j3yBrq+Yb9+v6+7rFQbrQ23iVY=)
2: 5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl (hash: tILawtzUqTFlGkEnyq5W0sfBhh1sf9fr46OEO+GsMZs=)
3: 34352e3137302e39322e302f32322d3332203d3e20323638313439.roa (hash: ABcV00bsmj4p/EAXwK9p2+WcufB6flOhojnHHzFZ/Ic=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl
rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 18:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ee:ec:d7:64:13:f3:b4:3c:a7:40:e7:ce:84:c6:e2:f9:2d:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
Validity
Not Before: Mar 25 16:52:57 2026 GMT
Not After : Mar 26 18:52:57 2026 GMT
Subject: CN=759C141228BBA360A9C617CCEF9EC6F20A97A0DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:35:7c:aa:d5:48:79:80:bd:91:6b:b7:e0:
11:be:a8:ed:0e:ac:e8:e2:80:1f:42:ba:ce:9e:ec:
63:22:aa:08:d3:c9:c9:1a:09:2e:c0:4c:81:ef:8d:
1a:c0:3a:e9:2b:9b:29:39:73:a5:4c:21:4f:6d:ee:
82:37:2d:2e:13:08:3b:eb:b2:70:17:57:37:41:34:
f9:7e:06:35:e4:7d:c7:d7:78:6f:3f:09:90:08:c5:
4d:91:d0:d7:fc:76:9a:94:bd:df:24:0e:f1:e5:f3:
48:8e:60:b4:45:18:0c:f3:24:3a:8c:b1:99:26:a2:
66:1e:77:a4:d7:3f:c3:75:90:3d:87:b2:1d:70:e5:
34:cf:51:54:b2:b7:55:27:34:99:84:65:3f:7c:96:
51:54:30:0f:a3:b6:94:5e:9e:fa:de:d6:4b:30:a8:
29:b1:03:e9:7f:8b:be:c3:6d:b4:ea:28:c7:ef:42:
87:d7:2b:e7:a9:cd:5f:7c:1a:35:f8:a0:9b:aa:57:
59:3c:b3:03:86:f3:ef:4d:fe:6a:46:5c:94:22:c4:
16:fa:0e:0a:2d:bf:f0:23:9b:5b:31:07:a9:2d:ba:
9a:25:6c:25:b2:a6:85:ed:ac:5a:86:6b:cc:e7:4b:
03:33:84:54:d3:5c:31:ae:9c:ab:ae:2f:5b:cd:8c:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:14:12:28:BB:A3:60:A9:C6:17:CC:EF:9E:C6:F2:0A:97:A0:DB
X509v3 Authority Key Identifier:
keyid:5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:28:bd:c2:79:a4:3c:78:a0:69:af:b5:c3:45:93:3d:d7:14:
49:3a:a6:77:2e:5f:6a:91:47:f1:6b:f7:42:5a:09:15:9b:4e:
f6:5f:cd:88:5c:b4:f3:50:14:e4:84:e0:d7:af:cb:48:67:9c:
5b:13:56:dc:1d:44:38:bf:41:a7:99:42:db:59:61:f1:6f:0e:
f9:83:d6:e5:00:ff:23:5a:ef:cb:7d:49:f1:47:48:39:42:fe:
ab:22:2b:b9:6b:c5:37:69:17:bd:fc:82:45:0f:8b:97:fa:fc:
53:97:cc:4d:51:50:e4:31:a1:fe:bc:4a:87:59:53:4a:2a:c2:
7d:2c:59:5a:09:a3:28:d7:1b:6b:80:e9:28:8b:21:af:95:f1:
fe:5b:3f:5b:74:87:8a:b0:ff:a3:35:63:5f:40:f0:d1:51:92:
04:42:23:07:ef:12:9b:58:11:b4:49:92:d2:fa:9a:30:ba:58:
da:2d:bd:c2:19:c1:74:be:f5:c6:6b:62:07:1a:22:86:de:e5:
fa:b7:e7:18:bd:b4:cc:26:b6:4e:b0:04:1a:50:18:30:ac:85:
8f:65:2b:6f:82:0e:5c:7f:14:f4:e5:c4:dc:05:7b:f2:ff:02:
22:19:fc:2c:ae:3c:1f:0c:4b:0c:9a:47:3e:8a:a2:0e:40:bf:
d9:58:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:22 2026 by rpki-client