
$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json)
Hash identifier: 6XMeJMztn7rRkVS4/qlohWeEjoFreudGiDmfvHBFbR8=
Subject key identifier: 34:C3:77:8B:D0:82:5D:C4:9A:4D:D3:AC:B5:66:1B:18:B6:F3:4C:AD
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial: 10EA7DB93AE19DA7B0B8CCE7B5EA7D51FC281E2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
Manifest number: 03FD
Signing time: Tue 12 May 2026 23:42:33 +0000
Manifest this update: Tue 12 May 2026 23:37:33 +0000
Manifest next update: Wed 13 May 2026 23:44:33 +0000
Files and hashes: 1: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: lQMvzGKTexKr11ZtKxbyzWnk1sR3ocinG38SpRXYKuU=)
2: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: ew5NkdN8Fi3KObAuy97z4lSLJTedaWh5168q9DGgY3w=)
3: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: 2/k30oZGThRlt9LTlBBQw8jDgJXYoD7mVMwyqbAmgE4=)
4: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: wOOB4o7vIgPKPMxhgj52s0DYqn7UcJh+r6LIBZUHAog=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 13 May 2026 23:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ea:7d:b9:3a:e1:9d:a7:b0:b8:cc:e7:b5:ea:7d:51:fc:28:1e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Validity
Not Before: May 12 23:37:33 2026 GMT
Not After : May 13 23:44:33 2026 GMT
Subject: CN=34C3778BD0825DC49A4DD3ACB5661B18B6F34CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:33:ea:f5:a9:c9:33:52:4d:f7:2e:6b:39:
3f:e6:18:61:73:46:9b:43:02:4e:ea:e5:47:d5:f6:
eb:b3:ce:ed:f9:98:42:33:6c:8f:32:89:0a:76:58:
0d:c3:f7:67:d8:3f:af:93:83:34:78:b3:53:71:59:
8a:6a:41:86:1a:5f:38:61:35:69:8b:e1:b0:a4:09:
7c:25:80:d6:10:7b:1a:be:20:4f:44:b4:f6:92:ad:
31:6d:45:b6:d3:36:be:4e:b2:42:ca:dc:ed:0c:f1:
9e:f8:8a:59:3d:0e:25:95:77:1a:1e:16:a2:89:6b:
cc:18:35:64:4b:94:ae:2b:60:a1:4d:55:89:57:37:
3a:83:0d:a9:0c:2b:6a:ef:18:50:9f:a3:ae:c8:0c:
22:46:11:50:41:ce:d5:cf:3e:b1:94:98:fd:90:6d:
a4:18:87:c5:d6:28:44:1b:37:d8:d5:5e:f6:ac:f2:
c8:34:6a:79:2e:5c:e0:e8:7e:b4:2a:de:79:2f:1b:
1c:80:7a:62:fe:84:8a:e9:df:c2:aa:51:d0:6c:8b:
fa:29:76:4f:c9:37:f8:fd:b5:90:7d:ab:3f:75:4a:
6f:e6:1c:3e:cb:8a:6e:a7:b9:5a:ed:f4:ad:b5:38:
92:20:ec:b7:3b:ea:28:43:8e:1e:27:68:5f:e1:f6:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:77:8B:D0:82:5D:C4:9A:4D:D3:AC:B5:66:1B:18:B6:F3:4C:AD
X509v3 Authority Key Identifier:
keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d6:68:e6:8c:8b:c1:d2:ad:6f:a9:88:8e:2b:c7:98:89:78:
40:bb:18:94:f8:3c:71:80:19:0d:4d:ec:9a:83:be:0e:36:d2:
d1:9b:06:93:d1:42:8a:46:89:42:eb:2e:ac:a8:90:e1:6c:6b:
c6:40:9f:e2:4c:61:69:2d:8b:77:b2:3d:f0:05:e7:f5:11:29:
7b:8f:e2:52:1e:0b:a9:56:9b:30:74:dd:54:a3:5c:84:7a:88:
77:5e:ff:44:e8:ef:de:02:a6:90:fb:a5:ae:b4:b8:11:8d:01:
98:48:92:de:73:3f:13:82:bf:84:ce:6a:57:39:b3:34:73:10:
ca:22:bb:e7:a7:fd:90:47:5f:ea:07:44:67:8b:d4:c3:20:bc:
33:66:92:5c:a2:38:a9:ad:8a:f6:c8:d2:e8:3e:37:e9:5d:96:
ff:0e:a8:52:9b:1b:0a:71:35:8d:d9:aa:6b:39:56:2a:06:7c:
e5:c1:13:16:9a:ab:8e:58:6e:84:d4:71:a6:cf:70:29:21:b5:
5e:8e:f1:5b:82:4d:2f:c4:c1:c5:8a:f1:fe:c4:e4:01:d7:aa:
d1:22:fc:88:7c:7e:c3:07:ce:28:c0:54:57:47:5a:c5:dd:4b:
1c:fe:1e:4b:24:c8:23:dd:84:a1:29:23:73:06:31:f0:f1:12:
bd:3f:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:18:49 2026 by rpki-client