
$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.mft
File: 8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.mft (raw, json)
Hash identifier: BR31d2QPSoBeQwu0PKgdUCeDqKYPxpPH/94J054/Zrc=
Subject key identifier: DA:67:DD:50:40:4C:BF:93:93:34:E4:A0:73:3B:07:AA:24:61:13:CD
Authority key identifier: 8D:70:ED:A6:3A:00:03:00:CA:62:54:AF:B9:3B:7C:E5:A0:E8:23:A1
Certificate issuer: /CN=8D70EDA63A000300CA6254AFB93B7CE5A0E823A1
Certificate serial: 4BCD97C1C87BD029E3027242E80971F441D521EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.mft
Manifest number: 29
Signing time: Wed 13 May 2026 10:55:36 +0000
Manifest this update: Wed 13 May 2026 10:50:36 +0000
Manifest next update: Thu 14 May 2026 10:58:36 +0000
Files and hashes: 1: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: 1sLzQ0uPX+Iih+VBujJywvJoXbO4ml7PkLF+tCMLFQM=)
2: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: Lpdwlgspp8EmTC0aUYWxE1dD+Gz7cM1iHdH6473Odjw=)
3: 323830343a323566633a3a2f33322d3332203d3e20323634333136.roa (hash: njSsgydwYcqPrWfrusayrXBamn3JgBIqsakaHO5Te8w=)
4: 8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.crl (hash: Za3G/QLPdUWngzWVrnyDoI/xhT/UkFtJRWLhgmbv3WI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.crl
rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 10:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:cd:97:c1:c8:7b:d0:29:e3:02:72:42:e8:09:71:f4:41:d5:21:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D70EDA63A000300CA6254AFB93B7CE5A0E823A1
Validity
Not Before: May 13 10:50:36 2026 GMT
Not After : May 14 10:58:36 2026 GMT
Subject: CN=DA67DD50404CBF939334E4A0733B07AA246113CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:b1:10:f3:9e:22:7a:80:62:21:48:f4:d8:
ce:3d:ed:87:5c:6f:36:73:65:38:7c:36:7d:65:ee:
46:6d:a4:b8:3a:0c:0e:9c:8f:d1:73:f5:e8:6e:cb:
3a:ab:4c:42:19:b7:15:4a:57:86:dd:83:79:13:e1:
6f:bc:cb:72:f5:07:ee:12:d1:f7:d0:13:31:76:10:
89:f1:7e:30:cb:e9:ed:0a:f8:dc:5c:c8:0e:15:6c:
8d:9d:93:84:e6:04:de:46:ec:7c:62:76:6d:9f:79:
ce:b3:97:59:fd:bb:d3:21:c7:5f:18:df:03:58:e4:
95:ad:81:68:7f:1b:bf:cc:d3:30:cf:52:a4:d3:8b:
92:a9:59:44:75:06:8b:f8:f3:22:ba:cf:a7:0d:06:
3b:ce:32:21:6b:24:b5:8b:75:bd:86:e3:30:4d:6d:
05:5e:82:05:f4:e2:bf:05:a8:59:a2:d9:c4:ee:fb:
d6:c3:94:56:64:93:fb:71:38:97:1a:c1:df:c4:94:
6a:b0:9e:ec:4e:1f:27:36:3b:b6:07:65:6a:37:69:
c3:1a:58:42:93:bd:bf:41:10:0c:ed:31:df:5a:bc:
ea:f6:80:8a:43:e1:7a:15:cb:d9:a9:c1:3a:44:8c:
6a:3b:9d:2f:cf:d7:8f:5a:be:52:46:fd:d0:07:b1:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:DD:50:40:4C:BF:93:93:34:E4:A0:73:3B:07:AA:24:61:13:CD
X509v3 Authority Key Identifier:
keyid:8D:70:ED:A6:3A:00:03:00:CA:62:54:AF:B9:3B:7C:E5:A0:E8:23:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:27:99:8e:33:65:b0:16:18:2f:46:9a:04:84:32:83:97:
60:26:e7:88:23:14:24:47:5b:c6:6a:ba:a8:8e:7c:b2:a9:72:
04:42:28:be:3a:ba:19:6d:7f:b8:b1:69:b3:18:24:3c:84:06:
86:67:dd:af:99:b0:5c:7d:bd:64:03:9f:5d:03:34:d1:f9:c1:
08:cb:b7:a2:c5:44:67:7f:c2:85:dc:d5:9f:a3:ef:2e:5c:97:
d0:ff:0a:72:13:19:ed:e4:a5:ce:c6:d6:30:c5:da:42:69:63:
ee:16:42:70:d3:6d:8d:b2:2b:bb:99:5f:0f:3d:86:fb:11:76:
0d:70:1b:40:df:4d:a2:c7:4f:91:11:f7:91:6a:19:f8:5c:2e:
93:1a:c4:83:a5:95:40:c2:34:05:19:8a:09:0f:93:64:a6:c6:
91:8f:4a:7d:2f:d9:e8:7b:6e:8f:b3:be:2d:62:b9:99:16:04:
94:f6:ee:92:e5:6c:e2:7e:8f:ac:b1:5e:58:26:77:aa:5b:93:
2a:61:d2:ab:4a:df:f5:3a:27:65:0b:78:30:75:d7:a4:88:95:
5c:12:c7:c2:12:fe:98:3d:85:87:2d:2c:26:7a:79:a5:e0:19:
91:9f:11:21:7b:dc:ee:dc:ce:f7:51:19:73:40:73:19:c0:02:
fa:b2:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:53 2026 by rpki-client