
$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json)
Hash identifier: 8fgRN16J1LSf+nDJHRdW5hdyseUdqqp9GYxZRkhP5oc=
Subject key identifier: E3:7C:5F:D0:06:3C:35:A7:6E:07:0A:4C:C6:F4:A3:B3:21:6E:09:7B
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial: 5924294AE72FC6B2344F344F670B911F768B1AF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
Manifest number: 0228
Signing time: Fri 24 Jul 2026 05:35:44 +0000
Manifest this update: Fri 24 Jul 2026 05:30:44 +0000
Manifest next update: Sat 25 Jul 2026 06:48:44 +0000
Files and hashes: 1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: ARu+HiBlwjs5SJVY+5C32MR/FZIMOGcccntV0yboejc=)
2: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: j6Sr6d3fjNbUZ686Rg0aIWOcSl91cx1OmSxCAoBaQP8=)
3: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: cuvly3KsCe7VbHLKJipwwgzR8tpUXrjpdQpOoF48wMI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 06:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:24:29:4a:e7:2f:c6:b2:34:4f:34:4f:67:0b:91:1f:76:8b:1a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Validity
Not Before: Jul 24 05:30:44 2026 GMT
Not After : Jul 25 06:48:44 2026 GMT
Subject: CN=E37C5FD0063C35A76E070A4CC6F4A3B3216E097B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:d9:73:2d:30:4e:22:f2:00:e0:e8:ff:5a:
5e:7c:9e:72:5a:fb:d8:30:74:e7:36:70:82:c2:e7:
61:da:2d:46:9c:43:23:59:1d:b0:1f:c0:e3:17:59:
e0:cb:60:53:d5:18:40:80:a5:32:53:49:0e:25:23:
bd:60:10:7b:0a:e5:ed:f8:22:7d:3a:80:32:d0:c8:
07:ee:56:ee:86:b8:d7:19:f8:1b:2b:1d:2e:0b:89:
67:35:73:bb:f8:c3:8b:1e:39:b1:23:60:0d:66:7d:
f5:b3:5e:e5:1b:ca:a0:f2:a2:97:1c:63:4a:f6:35:
86:89:5c:54:96:83:c7:a6:3f:3b:64:fc:9c:b5:69:
1e:fb:1a:bf:28:e2:01:75:22:8f:39:9c:89:83:c5:
45:80:16:65:7c:01:08:f0:ae:79:96:27:4d:9e:d1:
6f:26:71:9d:1f:27:68:81:7e:4b:a7:fc:5e:70:25:
10:65:d8:ec:d6:83:28:90:1b:05:42:ad:3a:1b:4a:
35:e1:b4:d5:12:c3:97:97:eb:d9:2d:ba:f8:7a:8c:
71:7e:fa:d9:5d:2d:78:c1:eb:a8:d3:17:fc:06:7a:
79:d0:1c:8b:00:88:df:14:bd:1f:fb:66:b3:29:62:
02:6e:48:55:b1:1b:82:62:eb:5c:8c:ff:db:b0:cc:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:5F:D0:06:3C:35:A7:6E:07:0A:4C:C6:F4:A3:B3:21:6E:09:7B
X509v3 Authority Key Identifier:
keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:89:7a:ed:45:b9:68:97:99:9b:a2:88:55:b5:c0:a9:8f:5f:
02:0d:6b:b7:f1:58:b2:18:de:20:6d:bb:01:75:54:bb:87:ba:
d4:9f:e4:79:3a:8e:de:6b:eb:d7:e8:90:0d:b8:7c:07:8f:50:
4c:15:a1:59:bc:12:8b:81:5d:02:fa:76:8b:09:53:a7:c1:a7:
e2:82:5a:5b:20:07:70:4a:52:96:59:7e:fb:f6:fd:fa:4c:09:
44:6b:53:93:07:74:56:f0:bf:26:b3:19:ce:62:68:06:de:53:
6b:6f:51:65:cf:7f:4f:69:11:e5:db:74:2f:f9:3f:81:95:94:
bc:ab:a2:c6:19:e5:27:a9:a7:4b:d3:a2:2b:7f:3b:76:a5:51:
e1:c7:3c:ce:a2:84:f6:79:26:96:bc:51:57:d4:44:63:db:97:
8d:fa:02:75:6e:94:99:c5:84:d8:74:24:f5:cd:29:c0:38:d3:
25:66:7f:61:5e:a1:1c:8b:83:29:6e:fe:c1:8a:92:66:ab:9d:
22:62:37:c4:03:2b:80:49:cd:95:15:c8:fd:ed:b7:9d:5e:41:
98:71:2f:e4:d8:4c:4d:22:b0:ba:c0:cb:eb:97:dd:1a:1b:7b:
97:cd:9c:9b:67:91:6f:52:0c:29:94:79:ae:8d:1c:d0:1f:ea:
75:b1:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:02:14 2026 by rpki-client