
$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft
File: CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft (raw, json)
Hash identifier: DuZb4rNbKYWcgja5WL2WeKYAVoLJ7Kqq+F8dWsXPx2Q=
Subject key identifier: E9:A3:A4:3B:93:6B:00:BB:CC:DC:11:EC:ED:34:E7:66:63:85:54:37
Authority key identifier: CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA
Certificate issuer: /CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
Certificate serial: 68846E5E5D3C5CC91983ECA9F48D48A95488AB54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft
Manifest number: 0F
Signing time: Wed 25 Mar 2026 05:56:42 +0000
Manifest this update: Wed 25 Mar 2026 05:51:42 +0000
Manifest next update: Thu 26 Mar 2026 08:36:42 +0000
Files and hashes: 1: 3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa (hash: o6UFYCTWUcf06Eo1Wqa4ht1GUTKj0fO6vCDSz5pcR9M=)
2: 3139302e3138352e39382e302f32342d3234203d3e20323731363931.roa (hash: cSXHV++55pOWnLocacSMqoR1rcihU+1DWWrX4RmBSlY=)
3: 323830343a376637633a3a2f33322d313238203d3e20323731363931.roa (hash: Hd7HhQuamXVrukiRm+/lXJac4uYMPYmuZ+kH8R4jMic=)
4: CD5F7E7DD50663318415A698EE3C1D9FA70014AA.crl (hash: 2NLmQ6h2SwWKAwDkg7vw+e02uC8PcPRqpWqfWEOLBsk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.crl
rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 08:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:84:6e:5e:5d:3c:5c:c9:19:83:ec:a9:f4:8d:48:a9:54:88:ab:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
Validity
Not Before: Mar 25 05:51:42 2026 GMT
Not After : Mar 26 08:36:42 2026 GMT
Subject: CN=E9A3A43B936B00BBCCDC11ECED34E76663855437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:82:82:af:9d:9c:be:5a:24:a9:d8:b7:df:
3e:57:be:74:33:9b:87:37:45:a4:d6:86:7a:fb:bb:
5d:4d:5f:91:27:7c:5d:77:20:49:d8:39:e3:5e:ed:
36:a4:a0:0c:b2:f2:cd:09:03:1e:35:a0:60:8c:6f:
01:c1:43:81:9b:8c:f6:de:29:60:39:3a:db:b4:ef:
c3:56:50:7c:bf:ce:ab:3b:8b:b0:24:dc:78:b7:eb:
cc:de:d7:2f:ad:d3:ec:31:30:9e:30:50:09:87:e4:
56:a0:94:e8:ee:70:93:20:88:f4:47:dc:22:a7:64:
6d:f9:8c:91:de:e7:bf:13:c4:20:35:69:8c:aa:50:
1a:16:39:95:b4:eb:f2:9e:1e:e1:e6:69:f7:30:61:
7f:8f:ff:41:34:6e:12:e6:cf:b6:b8:68:41:f6:bc:
9c:17:58:a6:60:d7:be:b5:4c:56:7f:4a:24:00:e3:
0e:ed:64:2a:b8:7b:b7:21:85:50:ab:08:3f:dc:f0:
c8:25:1d:05:35:29:31:90:c1:d2:c8:c3:de:0f:26:
9d:ec:ce:51:bb:7d:73:cc:f7:5c:ec:84:c8:73:82:
a3:b6:b9:84:2b:75:21:e5:ba:b9:f0:e9:0b:46:2e:
31:4b:13:dd:ef:11:c6:c0:ce:3d:7b:d6:14:13:1c:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:A4:3B:93:6B:00:BB:CC:DC:11:EC:ED:34:E7:66:63:85:54:37
X509v3 Authority Key Identifier:
keyid:CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bb:39:55:16:10:c0:d2:33:dc:e1:6d:29:64:e5:72:41:2c:
1d:1d:48:3c:f9:ce:de:06:61:1d:05:ad:8b:4e:29:f1:1c:e1:
e9:fb:fc:9d:c3:85:c4:bb:d3:cb:c4:16:46:ba:de:c4:ac:6c:
7b:24:65:ad:64:73:17:5e:07:18:c5:48:5c:ca:e8:f6:fd:e2:
35:57:08:53:ef:4d:45:c2:05:38:fa:51:68:d1:8c:20:29:4d:
20:7f:df:9c:91:6a:f1:5a:20:f5:4b:5b:ea:6d:63:d8:47:7b:
5f:16:3c:63:15:63:70:fe:6a:ef:3f:45:16:23:d3:78:b5:e3:
82:ec:7b:15:71:31:e8:e1:39:38:d5:42:b3:82:29:d0:79:ec:
c3:d0:15:ef:96:42:b0:3e:66:db:10:a4:78:c2:89:56:e4:07:
2f:e5:54:72:4c:bd:2f:6f:9f:e0:7d:4f:d7:45:ff:91:7b:c7:
04:1c:57:4e:29:86:4a:c3:22:81:0f:e9:ae:00:dd:a3:e1:56:
ea:30:b0:e0:01:b1:e1:e5:c6:9f:20:69:cb:79:17:e8:40:aa:
b6:82:e4:76:9a:7b:87:86:fa:9b:3b:e6:07:65:f4:db:42:2d:
e9:6e:6b:4d:56:7e:c9:f3:fa:23:fe:8a:31:f0:74:58:d1:ad:
85:f2:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:14:53 2026 by rpki-client