
$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
File: C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft (raw, json)
Hash identifier: JJn+sCampm2ts+EXOk8vy/c/w3kKdzj9tVPBj8Wc0iE=
Subject key identifier: 5C:AA:0A:0B:D9:66:88:73:AF:90:7C:D4:FE:48:2C:42:D2:13:F2:45
Authority key identifier: C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E
Certificate issuer: /CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E
Certificate serial: 16B8C2F313702AAF133E4298DC22169C82E81C8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
Manifest number: DC
Signing time: Thu 26 Mar 2026 11:53:32 +0000
Manifest this update: Thu 26 Mar 2026 11:48:32 +0000
Manifest next update: Fri 27 Mar 2026 14:08:32 +0000
Files and hashes: 1: 3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (hash: 0frBI2dIgpCDX/qFwaP8qZ1qNv9qMBMaetM+/AXzJz4=)
2: 323830343a316134383a3a2f33322d3430203d3e203631383530.roa (hash: hGp3W6CCDaRQVPbWgz13luBmF5rIMQM69JgWAiwIbVw=)
3: C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl (hash: IoZlQGADl+RJ7/RPgcT2fqo3fgsIc5e54cNF9dOBde4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl
rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b8:c2:f3:13:70:2a:af:13:3e:42:98:dc:22:16:9c:82:e8:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E
Validity
Not Before: Mar 26 11:48:32 2026 GMT
Not After : Mar 27 14:08:32 2026 GMT
Subject: CN=5CAA0A0BD9668873AF907CD4FE482C42D213F245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:6a:40:ff:38:9f:67:a8:7a:c4:5d:cc:c4:
e3:e5:12:8a:68:e9:2a:6a:9a:b3:76:3d:ae:ba:39:
37:f5:64:35:1c:15:83:3f:4c:08:e9:83:90:a2:dd:
bc:0b:65:9c:2c:f7:0a:94:38:31:67:b7:de:1e:c1:
b4:67:04:a2:80:03:fe:40:9e:7c:70:da:e2:d1:d4:
db:61:a2:4c:02:0f:d5:74:57:cf:75:94:e1:cd:d1:
05:1a:72:c6:d7:a6:d2:7b:01:f8:0b:27:e3:68:eb:
41:43:d8:8d:17:de:c8:c7:47:18:1a:09:e5:71:87:
e8:ca:60:bc:02:be:3a:93:d3:f0:f8:4a:a4:13:30:
f6:ca:62:43:75:aa:3a:26:a3:c0:de:59:49:4a:d5:
fe:ad:24:ae:05:d5:56:32:3f:dc:66:e4:be:48:11:
0e:b1:11:e7:d2:9d:48:55:f3:16:66:95:e7:3a:e7:
47:e8:3a:d6:e0:65:81:4b:f3:ed:1d:4c:b9:a7:ea:
74:8e:84:ec:5f:d3:9f:b6:39:55:39:cf:54:55:33:
9e:83:8f:ed:f4:d3:88:94:13:7d:c7:f7:22:30:74:
d6:9b:02:ff:a7:fc:aa:ab:47:4a:ec:68:8d:2d:f5:
2c:82:a1:64:15:88:34:21:fa:40:9b:83:f7:e7:54:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:0A:0B:D9:66:88:73:AF:90:7C:D4:FE:48:2C:42:D2:13:F2:45
X509v3 Authority Key Identifier:
keyid:C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:39:70:a8:68:de:ef:fa:37:f7:c5:c8:f7:50:74:e0:05:
39:e4:57:8d:b9:e7:e5:72:48:6e:f8:be:91:9c:c0:bb:33:75:
54:90:5c:c3:fa:85:ec:16:0d:eb:1d:8c:6a:b6:cb:00:07:13:
10:cf:50:08:5b:46:bf:e6:26:59:ae:52:f5:03:9e:89:2e:6e:
ee:a4:ab:5b:a7:6a:d8:09:f4:de:ae:b3:1b:6d:c5:32:82:b0:
78:86:05:8c:0a:1a:2e:61:80:3a:d2:f1:6f:ec:8c:36:11:7c:
24:c9:95:66:b6:85:79:4d:75:99:2c:8e:1a:fb:7b:34:6d:18:
ea:95:a3:0c:f6:72:79:b1:4f:45:e4:90:e8:ec:e1:31:01:d5:
97:e2:d0:1b:96:36:03:3d:3e:de:ed:2d:9a:a4:8b:d7:fd:02:
69:39:45:40:6c:4e:83:af:ab:5f:12:76:96:5d:18:3d:af:0a:
b3:ce:ac:b7:f4:65:15:1e:aa:f8:80:38:dc:97:fb:f9:1c:05:
8e:14:15:f2:4e:49:65:75:ff:0a:ff:8a:20:dd:9b:06:49:5a:
05:d9:cb:47:c1:fe:15:85:8c:3f:54:27:57:b7:fe:e8:bd:b7:
c8:a8:b7:78:af:20:2a:7f:04:27:39:2b:d9:85:8d:c1:27:c1:
48:b4:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:27 2026 by rpki-client