
$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
File: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft (raw, json)
Hash identifier: /mI4ioG6mWynI8yTKYcZzenjgQyxeN8s0waxeXfx7Bc=
Subject key identifier: D3:F4:0D:46:61:23:42:94:F5:5E:35:F1:AA:4E:18:D8:AC:E5:2C:28
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Certificate issuer: /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial: 688100130C6089BA4975E604166C974AB14BCD31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
Manifest number: 0438
Signing time: Fri 24 Jul 2026 08:13:14 +0000
Manifest this update: Fri 24 Jul 2026 08:08:14 +0000
Manifest next update: Sat 25 Jul 2026 11:25:14 +0000
Files and hashes: 1: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl (hash: QiY8GRLj0pI0CkIG6SQoMJYe2KT9bFGCL07kj3v4kAE=)
2: 34352e362e3137362e302f32322d3234203d3e20323636313730.roa (hash: u6Qidk+dRJmAVIClo38LWMEpvi2huJ9R7RSbffvo+sI=)
3: 323830343a336263383a3a2f33322d3438203d3e20323636313730.roa (hash: ucXbh/u1zPDU79FmgBycIt4MKYcl4AplXJNxCK2uUe4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 11:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:81:00:13:0c:60:89:ba:49:75:e6:04:16:6c:97:4a:b1:4b:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Validity
Not Before: Jul 24 08:08:14 2026 GMT
Not After : Jul 25 11:25:14 2026 GMT
Subject: CN=D3F40D4661234294F55E35F1AA4E18D8ACE52C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:b9:b8:e5:0b:a5:6d:6a:cc:4e:43:bc:4f:
19:37:11:b9:15:a4:97:98:79:b9:07:58:6b:44:f7:
f4:d6:0f:8d:82:05:15:a6:a1:5d:11:da:b0:1f:70:
d6:77:d4:cc:72:a6:9e:28:5c:b0:81:9b:50:67:a1:
19:b8:d4:fe:c3:40:fe:05:b3:a0:d6:85:df:53:69:
fa:77:30:a9:51:93:c7:cf:b9:22:b8:a5:6a:7b:68:
cf:92:39:34:ff:03:11:f6:1f:35:54:59:06:ba:4d:
65:2a:8a:c8:e2:b2:f0:83:9f:b2:92:66:92:57:90:
b2:52:f0:2d:07:0f:48:7c:ed:bb:c5:26:81:3d:53:
89:af:b2:61:3f:ca:56:e8:6c:13:89:65:6b:cc:72:
04:98:bc:79:c8:a0:ae:bb:bc:5f:6c:99:6d:01:55:
b5:da:29:f4:26:11:74:ea:42:f8:18:30:93:33:a8:
48:59:e7:8a:e8:22:73:84:b8:c4:22:44:3a:0c:67:
c4:6b:8d:64:81:17:20:b6:03:40:cf:eb:6e:be:d1:
0f:10:af:83:3c:5d:c5:2d:22:05:e4:db:05:b2:23:
d0:cc:eb:b2:a8:c5:c2:34:d0:9a:6b:c7:87:c0:6f:
7e:64:e3:76:ee:e8:8a:44:fc:69:7b:11:ce:04:51:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:0D:46:61:23:42:94:F5:5E:35:F1:AA:4E:18:D8:AC:E5:2C:28
X509v3 Authority Key Identifier:
keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:fa:01:9a:f4:25:77:95:87:e0:2c:bf:ed:87:06:e8:6c:
1a:23:62:83:a9:e4:25:55:95:08:f7:25:35:91:ce:39:49:63:
0e:6a:1f:fb:c3:f1:5c:01:71:eb:d0:8f:ac:95:f4:e1:09:49:
1e:8d:0c:c6:fd:19:ee:f7:51:da:f2:f4:37:98:68:9a:dd:0a:
1f:fa:ca:03:0a:87:70:22:20:f3:f6:0f:8d:c7:1d:51:a7:06:
a3:73:9f:6e:6d:fa:4b:c4:d6:dd:18:26:50:02:58:95:b8:67:
73:ae:7d:06:75:79:1b:97:b1:6f:8f:b8:0c:87:7d:b5:cb:20:
cb:95:04:21:74:40:f5:ad:97:02:7e:e5:ce:19:04:57:69:8b:
20:a0:53:ad:40:c2:3d:a5:22:e6:f1:20:8d:b2:8a:68:d4:1e:
5e:7a:c7:52:35:ef:d9:2e:3d:20:02:76:31:2f:7e:20:c6:6f:
09:15:05:80:21:84:7a:99:ff:61:a8:d5:77:9f:19:1b:06:3f:
22:38:63:2f:3f:63:08:8e:be:9c:14:ea:27:ff:0b:0e:a9:ed:
f0:a5:1e:1a:8e:84:98:1f:d5:59:1d:28:f4:ca:28:f7:33:56:
b6:14:5a:0d:93:a9:9f:fb:fc:63:87:a8:bb:f6:a2:b0:89:59:
cc:6f:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:32:16 2026 by rpki-client