
$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
File: 117560A27F42885C52E66148007C2989B0339DAD.mft (raw, json)
Hash identifier: 4ja5fuKa2u1RqAzorm6o2qhUkKtpyu2MvHlGQLkYSIw=
Subject key identifier: CB:88:45:04:05:7A:B0:34:FB:72:3C:68:F6:BE:86:CC:11:5F:94:4D
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Certificate issuer: /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial: 33E1F88339C34A5B7C741764CC98E676919E5221
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
Manifest number: 023E
Signing time: Thu 26 Mar 2026 15:20:23 +0000
Manifest this update: Thu 26 Mar 2026 15:15:23 +0000
Manifest next update: Fri 27 Mar 2026 19:03:23 +0000
Files and hashes: 1: 117560A27F42885C52E66148007C2989B0339DAD.crl (hash: U/k/vkhVMg5NkSxTvwDYalYKm4Zn6BFOtqepWQKxWd8=)
2: 323830343a316363383a3a2f33322d313238203d3e203631363735.roa (hash: lGt0r3mjw0bF0sbVize3jhnrBFJO2nWiHj7MQtSMACQ=)
3: 3133312e3130382e3136302e302f32322d3332203d3e203631363735.roa (hash: h5Dt5n6tDsdYIQbUKXm3OpZL6ja0L6HKsFqcCmdoUx8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 19:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e1:f8:83:39:c3:4a:5b:7c:74:17:64:cc:98:e6:76:91:9e:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
Validity
Not Before: Mar 26 15:15:23 2026 GMT
Not After : Mar 27 19:03:23 2026 GMT
Subject: CN=CB884504057AB034FB723C68F6BE86CC115F944D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:10:61:4d:df:03:2a:bc:7b:6b:b3:88:ef:
df:11:e9:ee:46:79:d8:e3:17:cb:6a:68:62:b7:31:
0b:09:d6:be:65:f8:8c:1c:26:0f:1f:5b:ce:e8:21:
2c:1f:5a:0c:3d:ca:82:db:39:25:32:ec:b6:27:31:
a2:cf:8b:74:62:59:95:db:5f:ea:dd:51:c4:93:36:
2f:f4:f4:3e:15:9b:26:98:6b:58:eb:7d:aa:68:f8:
29:05:63:56:ad:6f:2f:a9:df:9a:70:fc:b7:1f:02:
69:21:c9:40:b5:0f:cb:ea:2c:c7:ae:14:21:12:6c:
8d:09:c3:b2:6d:2d:6c:fb:8a:0f:dd:c0:6e:c7:7c:
62:bd:fa:a1:bd:45:74:76:2e:82:e7:27:98:b0:1c:
d0:3a:04:cf:e5:7e:67:0d:21:4a:36:f1:2a:5c:2f:
70:9c:79:72:03:83:4f:f7:c7:e6:53:b8:ee:28:4d:
56:9a:19:a9:9d:21:b9:bc:6f:c1:fd:be:76:65:e7:
1f:e9:9f:ec:cf:25:0d:6c:da:4d:81:92:11:74:6a:
51:51:3e:5a:99:1e:70:64:1c:5a:39:e8:23:27:3c:
ab:2b:1b:ef:fc:d6:9c:d4:e2:4c:9e:ec:e8:a7:c3:
06:32:b6:17:0d:87:98:c7:de:fb:5f:8f:e9:66:29:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:45:04:05:7A:B0:34:FB:72:3C:68:F6:BE:86:CC:11:5F:94:4D
X509v3 Authority Key Identifier:
keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:5e:6a:a1:fc:fc:91:95:86:17:71:32:36:99:42:88:65:
b6:d6:49:92:94:ce:01:62:8a:da:e5:a8:ce:b6:d9:43:c5:25:
e0:1c:bb:d1:09:b0:91:d5:ad:84:47:b2:53:3e:24:36:2b:e7:
87:97:0d:5a:2e:b5:1b:31:52:f0:28:dd:07:9a:2a:ab:be:db:
7f:b4:ad:02:11:ed:82:12:71:8f:bb:df:e4:69:fe:52:09:ab:
c2:11:dd:d6:ec:c6:e6:60:1c:5f:7f:f9:76:62:3c:35:78:76:
e5:24:16:ae:58:d4:7c:42:a5:3f:a8:c9:06:35:d6:48:a9:0c:
e0:eb:cf:5b:d2:65:22:4b:6e:49:1f:60:eb:c1:4b:52:65:65:
27:fa:12:8d:7a:15:0d:65:74:4b:d7:f5:f7:e2:97:9b:e7:61:
a0:76:3f:85:4d:9a:6c:6c:eb:0c:73:5a:31:ab:c8:4a:ae:e2:
53:84:53:88:42:3f:ad:02:1c:f3:27:94:78:c1:3a:4a:3f:3b:
78:ac:89:8a:84:6e:f9:2f:44:66:67:37:62:6f:83:b4:24:cc:
21:0c:42:2d:81:8a:79:69:b5:65:dd:d3:98:fb:f9:75:5f:80:
bf:2e:95:79:4c:e2:47:33:9d:eb:85:56:fa:07:2b:0f:4d:68:
66:20:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:59:23 2026 by rpki-client