
$ rpki-client -vvvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json)
Hash identifier: fhbbmiNd+rj66CWauhrnwLqrbVhsb4QUhy6eYhTRMTs=
Subject key identifier: 71:92:F6:E8:56:A0:3B:A6:09:97:9D:59:04:3C:3A:FA:87:AC:CB:4A
Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Certificate serial: 3185F74E3FC4F5AD877ACF4B5D9F96D2D85539D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
Manifest number: 0345
Signing time: Mon 19 Oct 2026 23:11:41 +0000
Manifest this update: Mon 19 Oct 2026 23:06:41 +0000
Manifest next update: Wed 21 Oct 2026 02:28:41 +0000
Files and hashes: 1: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: LHBtjY0XXi3hc1Nb8dMZLSDd9CuVyVGLDTfZkz2vOWw=)
2: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: Lu59e3jUNiiOQ9F+EtTbk1qu0VZilWwZjrU87LehZSM=)
3: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: Jd7AWHDQvWBmpnWo7hy4TbQeVudSYz+uhVMOP+RfrPE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 21 Oct 2026 01:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:85:f7:4e:3f:c4:f5:ad:87:7a:cf:4b:5d:9f:96:d2:d8:55:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Validity
Not Before: Oct 19 23:06:41 2026 GMT
Not After : Oct 21 02:28:41 2026 GMT
Subject: CN=7192F6E856A03BA609979D59043C3AFA87ACCB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:cc:33:40:c3:f7:b4:26:3f:86:44:92:81:
95:65:e0:b4:1e:04:10:ff:4d:22:b8:22:01:02:ae:
0e:c2:9f:f6:d8:df:f0:67:10:ba:a2:cc:1b:e3:09:
3f:3d:5a:31:aa:ad:3a:ca:05:a2:d8:65:30:d2:be:
62:66:8a:49:ab:05:c6:ed:a2:15:3c:ed:0f:65:4d:
d2:aa:5b:61:20:51:3a:8f:87:88:c7:99:c8:a6:e5:
b6:bb:c6:71:57:0d:61:e0:15:50:f8:ba:74:02:64:
e0:c0:6e:f7:ac:69:5d:74:64:47:87:3a:52:55:6e:
bd:02:be:53:f8:a9:6e:ab:ee:69:71:6d:f9:b9:16:
05:11:06:b7:79:6b:b9:0a:57:d2:e6:e0:55:47:6a:
e2:eb:58:39:ae:2b:f6:b8:08:bb:1a:09:ed:db:c5:
2a:60:92:6c:7f:fa:e3:08:06:2a:e3:75:ec:d7:5d:
08:9a:3d:4e:f3:58:70:74:5e:fc:a5:f4:02:ca:1c:
cf:95:d9:30:e5:b0:c6:a2:b4:50:b8:d5:bb:d6:e3:
51:be:f9:4d:26:02:40:61:7b:56:10:cb:5c:6b:7a:
89:c5:ca:1d:44:d1:e1:55:ba:79:86:b9:35:3e:86:
cf:9f:d7:93:e1:98:bd:0e:8b:d4:bf:77:ff:8a:b8:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:F6:E8:56:A0:3B:A6:09:97:9D:59:04:3C:3A:FA:87:AC:CB:4A
X509v3 Authority Key Identifier:
keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:05:37:51:06:91:3c:50:9d:2b:f9:ef:23:86:68:d3:86:40:
80:22:e3:b9:dc:7b:b6:32:cf:a9:17:a6:24:e9:b7:7e:e8:c2:
58:94:67:3e:f2:90:51:f8:b8:a0:51:f5:ba:19:3a:dc:0c:d2:
be:b8:6b:2b:04:3a:a8:f7:9f:db:df:c3:d5:fe:7e:3b:72:d4:
67:13:6e:ac:47:29:b8:8e:d2:8e:cf:d2:70:69:37:fb:da:6a:
c1:2f:a0:14:a1:00:68:b0:e8:3f:9c:c2:23:9e:6f:96:a0:0c:
a3:7a:93:f9:af:7f:65:60:e8:15:3c:73:b0:9a:81:72:c0:14:
da:a0:5d:36:39:0b:69:bd:12:6c:c4:f1:b5:45:7e:20:f4:70:
00:8f:ce:b5:10:b8:e1:b3:29:0b:57:e0:8e:7d:78:47:0e:75:
aa:4b:9f:d6:8d:9f:21:9b:e2:09:d6:e0:dc:4e:13:83:ed:eb:
eb:3a:bc:36:81:34:db:c0:85:b9:e7:16:ca:5c:d4:e9:5e:8d:
0f:be:8c:0e:12:4c:ca:72:50:74:74:be:45:3e:b5:15:b4:60:
2e:1a:8f:3d:e3:69:6d:c9:06:0e:c6:7e:88:72:8b:c8:db:90:
97:a8:c8:fc:36:7a:5e:41:a3:d4:96:f2:5d:6f:a3:89:4b:3a:
26:37:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:01:08 2026 by rpki-client