
$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
File: CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json)
Hash identifier: oHh1tseVMJyQJY7tF2IAzzjNEnLZapEK1oPojMb+znI=
Subject key identifier: AB:D8:D7:1C:70:B5:40:42:A9:AC:59:EC:82:55:4D:BC:63:E9:0B:DE
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial: 115D4E223FB7F7AAE99D62814E040C27078ACD8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
Manifest number: 03BD
Signing time: Thu 26 Mar 2026 07:09:02 +0000
Manifest this update: Thu 26 Mar 2026 07:04:02 +0000
Manifest next update: Fri 27 Mar 2026 09:42:02 +0000
Files and hashes: 1: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: lP2dF6eLkAR5W4EKDMYSPnrha/aIhYWGq5RKYXV3V3w=)
2: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: czqqdKYw/T3S7I+qPanjw9tcRKia55RK5R2i0HPfX90=)
3: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: 3n2Tk0TLHKbeyvSR9gueX0c6nwA0R++H9heS7l364Ks=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 09:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5d:4e:22:3f:b7:f7:aa:e9:9d:62:81:4e:04:0c:27:07:8a:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Validity
Not Before: Mar 26 07:04:02 2026 GMT
Not After : Mar 27 09:42:02 2026 GMT
Subject: CN=ABD8D71C70B54042A9AC59EC82554DBC63E90BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:1f:2c:22:bc:c8:5f:a2:95:62:22:82:d0:
62:d1:d0:c0:b4:c8:d5:e6:3c:92:87:f9:f8:7e:72:
03:39:85:8a:26:40:17:27:86:86:e2:40:74:d5:9b:
75:8b:4c:f2:68:21:56:48:53:da:83:4a:af:e3:d4:
e5:9d:7b:eb:dd:ec:0b:00:4c:d0:5e:ee:f5:4f:1f:
21:a4:4b:15:0d:e5:b7:62:61:28:63:91:1d:86:61:
51:c9:5e:a4:2f:fb:f1:47:9b:ae:c9:03:2e:2d:cc:
99:83:de:f0:da:72:79:7a:25:ac:5a:da:da:99:d2:
f9:43:4e:63:15:a7:1d:d1:2d:f7:dc:45:a1:be:b8:
0f:c6:bc:68:1d:ce:b2:e2:01:16:c7:d0:e9:a9:8c:
d8:d9:80:ef:d9:a0:82:07:9b:79:b2:38:34:e2:37:
8f:cd:ec:b1:7b:7b:1e:9a:74:76:1f:d2:66:cd:8f:
ed:f9:60:ea:5c:47:1a:45:42:38:0c:b4:f5:c6:c6:
af:9b:7f:09:ad:9e:ac:a8:e9:30:5e:92:e0:e4:4c:
ae:8b:95:e1:9b:84:00:1e:c0:96:84:b2:39:95:0b:
a4:bf:32:60:41:b9:c6:ee:57:59:40:aa:fb:3e:08:
e8:69:98:83:ab:de:be:10:f2:bc:ad:87:54:a2:63:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:D7:1C:70:B5:40:42:A9:AC:59:EC:82:55:4D:BC:63:E9:0B:DE
X509v3 Authority Key Identifier:
keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dd:4e:07:d3:32:ba:4f:c4:ea:3d:15:80:26:e7:81:21:06:
b6:9e:4c:4e:95:22:bf:b0:3d:da:68:1f:fd:93:6b:6a:b3:69:
ce:74:4f:08:2e:ce:22:6c:7c:83:49:53:fb:63:c3:0f:0c:e0:
a6:f3:53:39:2e:14:43:f1:62:bc:a4:1d:5a:16:e9:0d:ba:cb:
3b:62:07:15:c8:ad:f4:46:d2:de:a2:33:d0:bf:db:39:b6:b9:
d8:ec:38:61:46:eb:ca:1f:01:2b:23:2c:60:7c:22:da:6d:6a:
c0:18:31:83:e2:40:da:d7:2b:a3:5d:72:94:c6:5d:25:3a:ad:
56:40:40:d1:18:e7:42:ef:16:e8:b0:85:50:df:9b:8b:76:5c:
52:d6:01:3a:90:75:30:41:75:48:ed:74:02:bf:ae:18:67:15:
32:01:05:e3:c5:78:3f:98:3b:9d:5e:1a:2a:9f:24:bd:74:70:
bf:16:15:07:b9:72:88:90:1c:57:21:bf:d3:4b:15:ba:b5:72:
53:a1:22:e3:c0:35:d6:e5:8c:9a:2e:61:71:48:98:65:e2:5c:
4f:d9:91:e2:4f:5d:1c:3e:42:7a:ab:51:28:00:47:a4:76:b2:
b3:af:ca:88:f0:86:0a:bb:46:67:fc:6c:8b:65:30:b5:18:bd:
d6:c0:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:45 2026 by rpki-client