
$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
File: 17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft (raw, json)
Hash identifier: hDgh15g2GgjzeYuMqLim2pbjPAkl2r51mqL/MopYjew=
Subject key identifier: 6C:EA:DE:96:8A:52:9D:28:44:31:AD:07:60:8E:3D:6A:EE:F5:39:6F
Authority key identifier: 17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA
Certificate issuer: /CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA
Certificate serial: 62D10DE6E7B725FBD2B3880916992B9493AF6975
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
Manifest number: A9
Signing time: Wed 25 Mar 2026 08:08:12 +0000
Manifest this update: Wed 25 Mar 2026 08:03:12 +0000
Manifest next update: Thu 26 Mar 2026 11:13:12 +0000
Files and hashes: 1: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: B4gsqalww0dlIMwP17NQDWnEssmAF5DwJk52DCBpJFg=)
2: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: jXI+rnnGScFRIoLsTqtkiZ6Ij3SjhmDHR0OsRnyshww=)
3: 17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl (hash: 0dGYpn09ZeW75WKS0KqbBum3GcbIpoauMN1ut11CqwA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl
rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 11:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d1:0d:e6:e7:b7:25:fb:d2:b3:88:09:16:99:2b:94:93:af:69:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA
Validity
Not Before: Mar 25 08:03:12 2026 GMT
Not After : Mar 26 11:13:12 2026 GMT
Subject: CN=6CEADE968A529D284431AD07608E3D6AEEF5396F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:ee:12:e1:b6:65:5d:75:4b:38:bf:f9:b1:
5b:a4:7c:77:cc:1a:a9:07:5a:e6:c2:9a:47:75:b8:
ea:90:22:53:81:c7:8e:85:1e:bf:76:5a:b3:76:64:
c6:a0:8a:b4:bb:26:54:de:e5:11:49:8e:96:fb:a5:
d1:38:d3:fe:3c:8c:dd:7a:54:31:cc:6e:a8:7a:0e:
54:30:6c:02:05:be:08:62:e2:5d:7f:1c:ff:dc:31:
5a:4e:1d:2e:44:83:a8:61:42:17:a5:4c:71:24:84:
a3:60:26:ce:36:61:ac:62:1a:c2:a1:27:e4:d9:28:
87:4a:2b:9e:58:cd:5d:b1:4a:38:66:bf:e5:2e:e0:
53:85:5d:f4:b7:6a:25:eb:b7:12:ba:eb:31:83:58:
fc:28:d9:e4:e2:c2:88:cb:9e:09:c8:20:4c:93:d3:
13:6e:be:f3:ce:c2:63:5b:18:1b:a1:41:f9:a1:0f:
d3:9e:6b:92:bb:c3:18:23:92:5b:e2:de:3b:48:b6:
35:ac:fc:2b:7d:8d:e9:5a:8d:46:92:f8:37:1c:65:
b9:10:19:65:15:7c:f2:1e:10:40:7d:59:98:da:ec:
e7:26:e6:ee:e6:ab:e7:cc:dd:7b:6d:8e:8b:9d:c7:
22:05:b6:2a:a6:35:5c:39:fe:1f:68:ce:c5:c6:ea:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EA:DE:96:8A:52:9D:28:44:31:AD:07:60:8E:3D:6A:EE:F5:39:6F
X509v3 Authority Key Identifier:
keyid:17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1d:06:63:09:7a:ed:53:79:69:b5:f3:8a:b0:ad:fd:04:9f:
13:1f:92:15:5b:d6:a1:97:6f:fa:b2:5d:be:8b:33:e6:f5:55:
c9:ef:51:ea:cd:df:d7:6f:b0:a2:45:d9:02:b2:5d:1f:d7:96:
5b:8e:41:6c:80:b7:0d:de:d5:17:1b:bb:55:5a:c3:34:48:08:
49:cd:bb:81:58:e6:6a:d1:6a:fc:9b:3a:d0:bc:c1:79:fa:34:
8f:11:27:25:1b:b8:ba:5f:4e:f1:54:1b:a9:cb:6e:f2:33:c5:
79:d6:dd:83:a7:89:0a:e3:68:02:7f:86:e4:07:0e:af:b2:4d:
b4:05:e9:88:a7:5d:a2:d1:6f:dd:4a:1d:3a:7f:04:fe:2b:05:
f8:9a:d3:9a:67:47:3a:5e:7b:64:91:0b:7c:a9:46:8b:3c:6e:
96:98:a7:c1:04:34:c8:c5:d4:21:f9:3f:b3:91:e4:44:1f:a4:
69:c1:f3:54:4e:18:1f:50:98:0a:e1:b7:c1:5a:cd:1a:67:6b:
26:0c:86:59:a9:ae:79:6d:0c:8e:60:64:fa:6c:b9:79:e0:58:
2f:a2:85:b6:79:fb:b4:2f:79:ce:41:18:c4:bb:4c:ed:64:05:
47:71:c8:3b:36:1c:e7:98:a5:52:89:00:54:61:8a:b0:43:dc:
04:2a:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:16:26 2026 by rpki-client