
$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json)
Hash identifier: EtvK0y5t5h49BSTunjgkiLwuExvtIqgyJ1ZktOv7eGA=
Subject key identifier: 1C:42:F8:74:9E:23:2C:11:B8:15:0E:D6:59:15:CD:F9:1B:67:F4:A9
Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Certificate serial: 4C8E22422A896B965240F4E0953871BBC882F0C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
Manifest number: 03A7
Signing time: Thu 26 Mar 2026 06:22:51 +0000
Manifest this update: Thu 26 Mar 2026 06:17:51 +0000
Manifest next update: Fri 27 Mar 2026 08:41:51 +0000
Files and hashes: 1: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: p4cAtbv/PHmUkEifJ/rwR4mtlpDRU9K1dowz5oiiCBA=)
2: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: n1WfTF/69k+pEm38xUTBsvz2MS47ihd3zEekd1/O7ZY=)
3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: HhuJluM4nYK24Tc4tYGLjGkrvHzMKI7PN1TuD9//pC4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 08:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8e:22:42:2a:89:6b:96:52:40:f4:e0:95:38:71:bb:c8:82:f0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Validity
Not Before: Mar 26 06:17:51 2026 GMT
Not After : Mar 27 08:41:51 2026 GMT
Subject: CN=1C42F8749E232C11B8150ED65915CDF91B67F4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:b3:a6:c3:13:e9:10:00:5a:18:2c:34:95:
a1:b1:cc:fa:23:d3:70:a2:ef:33:4c:cb:a1:9c:52:
1e:a6:da:55:25:2d:1e:d1:35:9c:a7:03:56:53:60:
4d:a6:d4:da:95:76:ca:5f:be:0c:b1:f8:6a:89:80:
42:8a:51:50:a0:40:51:40:a4:2c:f1:89:e4:58:f9:
5d:26:f8:d0:40:c8:df:2a:c2:fe:7d:e8:f8:d9:39:
df:44:ce:c5:23:b6:3a:62:5c:ae:05:63:44:be:9e:
1f:ce:b6:41:be:cc:ac:39:10:05:c1:ab:55:00:b7:
6c:1d:aa:c0:06:12:7f:78:0e:42:d4:d6:5f:f6:95:
da:4e:a3:39:11:34:70:f3:94:ff:28:00:8a:6e:b3:
3e:5c:de:76:d4:c8:3e:77:f6:60:64:5a:cd:61:25:
e8:af:6b:1a:7a:80:8f:f5:5c:a4:e9:54:1a:e2:15:
2c:77:89:c6:78:4a:8d:5c:21:34:5b:06:22:c9:da:
57:0f:b3:04:74:72:66:66:40:35:48:99:43:f7:f5:
79:ca:c3:13:50:ce:c0:16:e1:e8:c3:08:10:84:7f:
4f:e1:ef:f2:11:f8:d8:1a:58:53:24:a0:b7:18:e4:
71:34:80:cb:17:aa:78:eb:c8:98:4d:a8:6c:6e:c6:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:42:F8:74:9E:23:2C:11:B8:15:0E:D6:59:15:CD:F9:1B:67:F4:A9
X509v3 Authority Key Identifier:
keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6f:d3:af:2a:ff:f7:0c:07:9c:38:55:ed:11:b8:3b:98:ff:
40:02:08:1f:5f:36:ac:8c:e6:fa:ef:99:0a:db:59:9d:83:bc:
f6:54:09:c4:46:a0:75:e5:98:72:e8:0b:28:5f:34:8b:e6:40:
a6:d5:e7:af:41:1d:05:ca:c8:9c:9a:7e:75:5a:1e:16:48:ba:
f4:78:c7:25:96:ed:2a:c3:f4:93:5e:20:32:78:1f:43:ca:5b:
1a:34:9d:d5:12:2d:e1:0f:fe:d6:ef:45:1a:66:51:80:b4:0b:
89:e5:1e:ff:cb:af:04:fd:c2:84:79:7d:32:fd:2c:83:8b:e9:
cc:d9:87:d9:ce:99:58:3e:24:8e:20:67:5b:bd:9c:c0:96:b7:
06:23:d0:40:d5:d2:1a:2f:f6:71:5c:7c:55:4f:e2:98:6e:ec:
c3:1c:fd:f8:a9:e3:ae:34:13:73:f2:38:aa:0a:49:29:0a:73:
e4:dd:e7:4e:eb:0a:7b:bd:4a:2e:93:da:ca:b5:6b:97:b2:f2:
bc:78:77:33:b9:86:9f:15:77:5f:84:e5:da:c8:68:26:c2:a4:
a2:31:6f:cf:02:9f:5c:63:cd:2f:ea:8c:97:10:27:70:43:08:
d5:4b:27:42:98:3b:e2:64:23:f8:40:e2:50:13:17:62:9e:b3:
24:49:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:19:05 2026 by rpki-client