
$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.mft
File: 17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.mft (raw, json)
Hash identifier: 7yMHBqVcmgs/MBWw4S0yTTRa5fV8V6uds2DFWT1/oNg=
Subject key identifier: 3D:4A:F0:FA:4C:20:A2:A0:F1:4D:9D:91:E4:CD:25:8A:E4:11:1C:B0
Authority key identifier: 17:DF:2A:67:C0:8F:7D:BF:2F:0A:69:7A:C3:AE:4D:54:51:03:53:CD
Certificate issuer: /CN=17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD
Certificate serial: 3A29580C9CA2805DA98794AF2ABAD0E746869010
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.mft
Manifest number: 16
Signing time: Wed 13 May 2026 08:24:03 +0000
Manifest this update: Wed 13 May 2026 08:19:03 +0000
Manifest next update: Thu 14 May 2026 09:58:03 +0000
Files and hashes: 1: 323830343a363231633a3a2f33322d3332203d3e20323639323736.roa (hash: PDn1G43BKzn48lxxoJM4+5hg8+Ul2U4bhjnHu3leDWo=)
2: 34352e3138322e38382e302f32332d3233203d3e20323639323736.roa (hash: m0Rv9tFks9KcKPd1RPVoyWgfdyImz57ajJuw0sNIMQE=)
3: 17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.crl (hash: 6/mY5qELtWUbBxLjouvyaVbHNsgGTRnk72mQocJIwFE=)
4: 34352e3138322e39312e302f32342d3234203d3e20323639323736.roa (hash: gN5NzNQETL/WBvmeVqFkf2wJzsrsZXwX9syt6t+4HaA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.crl
rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 09:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:29:58:0c:9c:a2:80:5d:a9:87:94:af:2a:ba:d0:e7:46:86:90:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD
Validity
Not Before: May 13 08:19:03 2026 GMT
Not After : May 14 09:58:03 2026 GMT
Subject: CN=3D4AF0FA4C20A2A0F14D9D91E4CD258AE4111CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:56:a8:74:2c:a5:f8:0e:1f:00:f9:38:39:
4f:1b:e4:a4:29:44:ec:97:bc:43:cc:72:e1:4a:e4:
d3:86:11:8f:bc:c8:6b:0a:2c:bb:ed:80:c4:76:fd:
6b:16:7b:ad:b4:0c:59:d3:9c:b6:ac:04:9f:d6:2d:
91:7b:36:7a:27:85:80:c3:6e:32:ad:89:b3:a9:49:
48:cb:d6:ee:04:05:a2:4e:70:b9:2f:0b:f4:02:06:
e7:d0:f4:4f:45:c4:fb:c7:04:3d:f8:7e:b7:48:75:
70:0d:9c:81:b8:22:9f:72:8c:b3:7e:e0:60:e6:8d:
4b:fb:f0:b7:83:50:09:82:d8:57:56:81:6e:fd:3e:
d8:71:40:b8:9e:e0:0b:9d:7a:68:37:14:95:07:86:
99:2c:73:8e:70:c8:7f:8a:d5:25:bd:f3:e0:44:ac:
62:e3:a8:05:34:5b:e7:52:c6:86:27:52:2e:55:1a:
d6:44:b7:0d:bd:1a:d8:15:b4:45:dc:6f:a9:32:c3:
89:30:8d:b8:88:6f:41:1f:2f:02:d8:2c:1e:01:07:
dc:e0:8e:1d:0c:a8:7f:0b:fe:4e:30:f1:b5:f6:e7:
43:b3:39:8c:a3:4b:80:90:be:4a:5a:3a:81:86:7f:
41:2a:0a:a0:d1:3e:56:04:91:66:3a:d3:b8:12:e2:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:F0:FA:4C:20:A2:A0:F1:4D:9D:91:E4:CD:25:8A:E4:11:1C:B0
X509v3 Authority Key Identifier:
keyid:17:DF:2A:67:C0:8F:7D:BF:2F:0A:69:7A:C3:AE:4D:54:51:03:53:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/17DF2A67C08F7DBF2F0A697AC3AE4D54510353CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d6:f8:94:be:f3:60:51:fc:1a:b1:8e:18:72:1a:94:cd:2f:
11:fe:88:a7:b9:3a:6c:6f:eb:e5:11:3a:8b:26:38:af:13:2f:
f7:53:63:bd:58:2e:f9:57:85:de:74:40:73:15:24:a7:d7:7f:
56:6a:8a:9a:ec:18:c6:6d:e5:b5:8a:0e:5a:9d:d7:23:e5:7d:
80:4f:98:69:60:c7:56:24:5e:a3:db:27:4e:e1:16:8b:23:5e:
30:f3:d1:c0:98:03:dd:cd:71:6e:57:27:49:05:7c:fc:98:19:
b9:2e:21:66:c9:c7:9c:ba:d5:ea:c7:57:47:b5:e3:23:ff:fd:
48:02:85:0b:3c:eb:22:00:ad:3f:d6:2f:bc:17:3b:c7:d6:d7:
a3:3b:62:89:d9:02:a1:21:6b:32:0e:d8:d1:89:fe:63:66:b9:
37:dc:37:0f:dc:67:a4:53:b0:a5:ec:14:e4:5c:55:33:8f:4c:
91:a4:04:66:b9:4a:dc:31:ee:e2:98:e2:89:ce:30:bb:9b:7e:
ba:81:c9:d7:0b:29:9a:0f:cb:6a:c6:b9:a9:61:d0:b0:33:69:
ca:67:9e:ae:9b:69:13:1b:5a:0c:ee:d7:30:21:55:37:81:72:
ee:a6:68:59:f6:0d:53:92:16:7b:f4:86:7e:61:b5:ff:3a:2d:
dc:73:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:21:04 2026 by rpki-client