
$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json)
Hash identifier: QTmkRLcM1Z5ojGafVZTcIosDkLC8NsWDk4TFl2MOXUo=
Subject key identifier: 3E:82:A3:40:E8:F4:56:57:06:C9:13:58:3B:A9:CA:87:C6:25:AA:4A
Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Certificate serial: 7ADC28678745121C1EAF1E7436B7948B4BCDE525
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
Manifest number: 0248
Signing time: Wed 13 May 2026 07:23:31 +0000
Manifest this update: Wed 13 May 2026 07:18:31 +0000
Manifest next update: Thu 14 May 2026 12:40:31 +0000
Files and hashes: 1: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: vZzw6Vu+KlrPQg+VqWP1cDs7B7o7kaFzQDyNu4S6F6I=)
2: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: LHBtjY0XXi3hc1Nb8dMZLSDd9CuVyVGLDTfZkz2vOWw=)
3: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: Lu59e3jUNiiOQ9F+EtTbk1qu0VZilWwZjrU87LehZSM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:dc:28:67:87:45:12:1c:1e:af:1e:74:36:b7:94:8b:4b:cd:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Validity
Not Before: May 13 07:18:31 2026 GMT
Not After : May 14 12:40:31 2026 GMT
Subject: CN=3E82A340E8F4565706C913583BA9CA87C625AA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:c1:4c:c3:e5:4d:1b:b5:7d:8e:b6:51:87:
d7:53:4d:ad:7b:41:2d:63:64:fa:87:5f:51:3a:de:
7c:d6:0d:6a:f6:21:85:ff:70:8c:9d:cc:06:0e:65:
16:17:86:32:51:c1:d1:12:fc:37:f9:63:37:a4:0f:
af:9a:00:ba:03:ff:33:d2:46:6b:7e:f4:da:64:2b:
5e:41:15:3a:3b:7c:03:ff:d7:b2:e5:04:12:fc:69:
4a:e5:de:08:77:95:f9:df:aa:5c:df:66:a1:bb:b4:
d8:e5:f5:f9:4a:19:8b:d0:95:1a:5c:1a:97:31:3e:
dc:0d:af:6f:1b:fa:7b:b4:bf:3c:03:61:ac:6f:d4:
a5:72:92:b3:7d:9d:c3:36:a5:1f:a9:c7:19:00:8c:
b9:bf:e2:e0:7b:9e:ed:7e:ef:71:b6:ee:68:d2:39:
08:90:02:19:45:66:50:fc:17:84:cb:9b:98:4b:7e:
f9:76:5f:2e:d0:b3:f7:34:ea:0a:96:90:16:2f:03:
c8:24:06:59:ee:1c:36:e5:a1:82:66:0e:de:d1:56:
b2:ee:66:db:aa:3a:8a:25:83:4c:0c:2a:af:51:86:
1b:c6:79:35:f0:3a:79:1a:78:9f:6f:35:28:0e:ea:
21:38:5a:b1:c3:2e:4d:99:b7:0a:c4:dd:fd:8f:45:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:82:A3:40:E8:F4:56:57:06:C9:13:58:3B:A9:CA:87:C6:25:AA:4A
X509v3 Authority Key Identifier:
keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:58:3e:f7:34:c0:1f:56:86:67:4d:46:68:4c:3d:f5:7a:74:
f0:2d:a5:0b:66:96:cb:ed:6a:07:94:1c:a8:6e:91:2e:cb:fa:
da:93:b1:e1:ee:44:64:d2:26:9c:24:06:fe:0c:f1:cd:b8:ee:
3a:5b:6f:b3:fd:6f:a9:1e:6f:8c:5a:67:9c:65:ac:a9:63:7a:
66:2b:2b:9b:cb:ed:90:5a:29:64:1d:d3:86:ae:d2:03:fb:99:
29:7d:9d:81:d8:89:61:33:2c:9c:b4:c4:01:6b:e7:b5:8e:dd:
3d:de:07:de:14:e9:42:2d:00:97:83:13:09:f5:6c:3c:d5:86:
a6:a6:e2:fe:cd:5d:a0:e1:a1:bf:41:ae:28:20:fd:13:28:e1:
7f:2e:d9:57:37:51:32:3b:d0:92:21:1a:5b:6f:7e:19:eb:aa:
85:21:03:9b:8e:05:7b:24:f5:2b:65:52:37:a2:27:d0:6a:33:
23:76:7a:32:d2:02:fc:e8:ed:fd:d8:a5:c0:cb:d3:41:a4:bd:
f7:2c:f3:e8:0c:c1:0e:87:8e:69:f2:b0:dd:a4:79:12:6e:5c:
50:62:68:07:77:a5:d7:80:50:0f:38:5d:fb:02:71:7a:eb:0c:
f5:bd:86:2a:c4:aa:9c:e5:bc:ce:cc:ea:38:ba:bf:32:8f:1b:
8b:f0:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:11 2026 by rpki-client