
$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier: I7aoZFEVCvb2J5XnsHxm65YFhIMNG3LyykAAO6Ln2sM=
Subject key identifier: CE:5B:B2:BA:F5:AC:45:5E:A1:3B:96:10:ED:F3:51:A1:10:AE:61:14
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial: 327DF132EEEDBEA699015C46F3660D4A19BA899C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number: 0286
Signing time: Fri 24 Jul 2026 00:45:36 +0000
Manifest this update: Fri 24 Jul 2026 00:40:36 +0000
Manifest next update: Sat 25 Jul 2026 04:18:36 +0000
Files and hashes: 1: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: xWjFkUUH3xOUgkG4v7wi/q2SB8ChAo5GzZN4HLrLRT8=)
2: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: EI4qd+UKlcWT5W1otLpzlkKFQpJ5wwBw8Avb4ZIbpEk=)
3: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: n4fGAg6AMweCu7vUIWYp8q8obiKdibCGWpsEM9+ZQpI=)
4: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: I3sxbsBwAiUED16/mXKof6uIS0NEHhkcBxrZPc1GObo=)
5: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: 6T/V2lMHFc+9zFV5vfsLqnfbbHISu9BQ5EkK8GHCRfk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 04:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7d:f1:32:ee:ed:be:a6:99:01:5c:46:f3:66:0d:4a:19:ba:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Validity
Not Before: Jul 24 00:40:36 2026 GMT
Not After : Jul 25 04:18:36 2026 GMT
Subject: CN=CE5BB2BAF5AC455EA13B9610EDF351A110AE6114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:83:5e:06:01:9b:29:49:2c:35:39:b6:5e:
88:64:6e:53:a9:b1:69:c3:8f:18:ec:a9:f9:89:c1:
65:f6:c3:7e:5d:75:14:63:0b:c9:f5:6f:e0:0d:d9:
02:27:23:30:21:cd:61:19:23:95:47:c6:51:6f:1d:
94:67:c3:e2:50:4b:ce:a3:4a:80:b9:08:c3:fa:c6:
36:a3:54:c5:8c:55:30:2e:17:a5:30:51:f8:39:3a:
da:7f:86:26:ae:f4:0b:0b:44:0c:48:45:e0:94:45:
07:af:43:14:6d:12:32:01:d5:51:68:6e:02:b5:6d:
72:55:92:71:63:3e:0a:5a:b4:92:ed:5b:96:ff:27:
b0:5a:6a:1f:62:93:fa:fc:4a:05:3a:bd:15:d0:d5:
5d:f6:c6:1d:56:07:c7:de:10:c0:d7:3e:83:d3:eb:
47:c5:9a:dd:dd:4f:7f:a2:98:e1:4a:47:1c:da:f4:
e1:c0:cc:0c:e6:7f:7d:9d:e9:4c:27:9a:16:50:78:
7b:1a:d4:6b:7c:84:6f:c7:8d:df:39:a4:8a:1c:fe:
51:bf:21:89:b3:a8:32:16:71:03:29:15:62:d6:92:
9e:5a:d6:f8:13:c1:5c:3c:49:63:61:38:c7:cb:8b:
cd:8b:d1:40:a7:16:9d:51:48:11:1d:26:5b:73:76:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:B2:BA:F5:AC:45:5E:A1:3B:96:10:ED:F3:51:A1:10:AE:61:14
X509v3 Authority Key Identifier:
keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8f:61:ef:e9:d1:42:d3:d1:b8:ea:a7:2f:ee:b6:cc:e3:90:
a1:7d:4c:71:fb:3e:0b:32:91:3f:ac:6d:c9:8c:af:e4:fa:9a:
52:40:9b:87:a5:ca:83:c8:21:22:7a:fb:a9:1b:6e:02:58:8f:
9b:0b:c3:94:b6:dd:a0:30:60:62:6e:c7:4b:34:5b:36:46:1e:
11:1e:07:9d:90:c0:e5:25:30:4b:b9:95:f6:09:f7:1e:48:7b:
2c:77:2c:2e:1b:4d:0a:0a:44:88:af:b7:3d:64:9a:58:c7:c3:
8f:a8:c4:ca:ec:db:8d:62:a9:52:6c:52:08:16:6a:bd:23:e4:
99:71:84:57:6c:a7:6c:50:10:9d:c8:46:bf:c9:fe:19:c6:e7:
6f:6d:c2:a7:ae:27:c2:08:f4:22:f0:a3:8a:16:31:a7:16:dc:
ac:40:e8:7d:1b:79:0c:3d:2f:c5:bd:fa:e8:04:6b:fb:5a:85:
a7:6d:1e:55:89:68:3f:dc:2c:9f:de:67:2a:f3:f1:cd:58:ad:
ba:11:83:7a:24:77:bd:8e:15:f6:58:bd:d2:bd:41:d9:82:6c:
b8:72:fd:90:63:33:a3:70:e9:e7:31:e9:3d:01:cd:27:8e:b1:
8b:06:91:72:4a:b6:35:f5:7b:33:94:52:1c:9c:fe:27:73:03:
e4:39:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:14:26 2026 by rpki-client