
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier: cjTLChNtyaZ4CwEL1XriCUnTtjPE9/q3vkFlEMzMve0=
Subject key identifier: 15:F7:F6:87:95:6B:AA:2E:E1:B8:44:E8:C2:C6:1F:25:D3:56:92:40
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer: /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial: 238C980266703EB4900E7C361FA9E36A728AFA4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number: 03C0
Signing time: Thu 26 Mar 2026 21:12:48 +0000
Manifest this update: Thu 26 Mar 2026 21:07:48 +0000
Manifest next update: Fri 27 Mar 2026 22:04:48 +0000
Files and hashes: 1: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: bSDVCipNO7c+1o6O5GHztBEGKAJMv2cVHcR+M0oJCuM=)
2: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: S/nNd1G6+J/8rlCcm4xt0OI2yIfl4mEogaDpqk8hUec=)
3: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: 2NdMAE99KOzHg8W+wgGQ4pPl2zL4bkkneMZ8RkY6y1c=)
4: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: C7LlMSOX3EmZTherQ248oTM0k7XqTLQAhZLhl4hPH7E=)
5: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: kDiuJqxM0moizLuVKY/OENxGLx3jlP0sDfgG8k4zVmE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8c:98:02:66:70:3e:b4:90:0e:7c:36:1f:a9:e3:6a:72:8a:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Validity
Not Before: Mar 26 21:07:48 2026 GMT
Not After : Mar 27 22:04:48 2026 GMT
Subject: CN=15F7F687956BAA2EE1B844E8C2C61F25D3569240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:5e:c8:36:5a:5e:30:5c:86:15:69:91:df:
e6:b7:24:4b:3f:c7:eb:47:00:cf:80:54:85:ff:40:
14:f1:73:d9:e9:ab:1c:17:bc:62:20:79:41:00:d9:
5b:55:74:f9:2f:8a:dc:87:93:c9:16:18:21:fb:02:
54:fe:7c:a0:cd:e8:f3:6a:a2:74:59:c9:5b:3e:5e:
c9:a1:d8:7b:fd:0d:f9:c0:75:5f:de:1a:24:d0:ec:
2d:5b:39:03:b9:11:20:99:8d:c6:94:cb:12:34:d2:
18:e9:2b:6a:66:f1:8c:60:40:f5:d4:fc:00:02:6a:
44:0c:17:1c:ee:88:91:3f:cc:27:d9:16:98:f1:4c:
48:f5:da:30:c5:63:d8:7f:73:91:ae:c5:5d:ee:e1:
6c:15:dc:f7:fb:bf:72:94:5b:1f:ae:d4:5a:38:ee:
a3:89:e4:4c:82:e0:0f:14:fb:27:fa:ac:da:f3:ba:
3e:f7:27:63:51:2e:00:0d:c5:cf:b8:ab:2f:f2:ad:
f7:38:5e:d0:3b:2f:ed:7b:57:4b:7f:cc:4d:52:90:
fa:ca:a8:90:06:32:04:70:a7:8c:a7:15:74:26:ac:
ef:9d:c5:c2:ef:a4:49:ff:b2:69:75:bc:ab:8a:8f:
43:60:40:97:9e:9c:7c:56:74:60:7b:f8:81:95:c2:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:F6:87:95:6B:AA:2E:E1:B8:44:E8:C2:C6:1F:25:D3:56:92:40
X509v3 Authority Key Identifier:
keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:15:94:9f:49:07:82:e1:7f:d7:a8:17:7e:e4:6d:87:7f:
8e:e4:86:6b:a2:42:59:0f:6b:c6:b7:60:14:6c:69:1c:26:db:
9c:31:a6:5c:83:41:87:59:42:6a:d7:e8:d8:d0:8e:b9:f6:2a:
14:86:68:38:ee:49:8c:4f:68:dd:6e:7f:45:77:98:a4:4e:5b:
67:88:58:e0:2a:77:32:71:44:9d:a5:25:82:b3:33:2a:ae:90:
b7:6b:b9:86:00:b6:bd:e4:ab:95:8d:ab:38:d3:94:62:04:2e:
c7:28:f3:4c:c5:81:76:89:74:59:64:e4:07:0d:7d:d8:1a:90:
1e:be:7c:e4:d6:2f:6c:bf:d5:d6:47:7b:71:b6:f3:5b:97:02:
06:2c:2a:42:b0:e4:76:b0:3b:1d:03:9d:4b:ac:b2:ed:c2:12:
8f:c2:7a:2e:ad:c8:92:a9:03:c4:7b:41:92:69:4b:82:a8:91:
d1:aa:7a:78:00:ba:97:2a:aa:27:80:0d:7e:86:2c:a0:65:89:
67:e9:f2:92:bc:c7:93:e3:e5:5c:fb:b7:c0:2f:b3:2f:c7:30:
d5:2f:04:08:8f:72:67:42:e8:0d:b0:bf:a1:08:f8:84:b5:d8:
5d:2e:b9:41:4c:07:04:ed:e1:57:ee:f1:17:df:09:ec:f1:63:
92:58:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:37:58 2026 by rpki-client