
$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
File: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft (raw, json)
Hash identifier: knb3H22lAUgdj8Yc5aKabEyS3zrYlcsQ471nXhx/B6o=
Subject key identifier: 97:21:A8:C9:BE:E0:68:F7:B6:50:34:BD:48:09:3A:B9:83:CA:70:2A
Authority key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8
Certificate issuer: /CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8
Certificate serial: 5D0014FF8212F3E0AEA34F56F708B9806B1D3F7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
Manifest number: 0129
Signing time: Wed 13 May 2026 10:45:36 +0000
Manifest this update: Wed 13 May 2026 10:40:36 +0000
Manifest next update: Thu 14 May 2026 12:51:36 +0000
Files and hashes: 1: 3137372e3135322e38302e302f32312d3234203d3e203532353237.roa (hash: HjfMgQmsO4AQ827f7sOlQn0eZw55emR1ZUO2VzusW4U=)
2: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl (hash: Z5vOTEdWhFu3gMNo7VsKjaT4ZKIHCtNNV4/9024BQ6o=)
3: 323830343a6465633a3a2f33322d3438203d3e203532353237.roa (hash: bFpFaity00rv0Rl3Fw0iKd35mwwPylywks1Ijj4od3E=)
4: 3230302e3135302e3235322e302f32322d3234203d3e203532353237.roa (hash: OCwyX5YTdu8LfAlkRFFy9NK7vnPWDipnn8CmclsKB5s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl
rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:00:14:ff:82:12:f3:e0:ae:a3:4f:56:f7:08:b9:80:6b:1d:3f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8
Validity
Not Before: May 13 10:40:36 2026 GMT
Not After : May 14 12:51:36 2026 GMT
Subject: CN=9721A8C9BEE068F7B65034BD48093AB983CA702A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:e5:06:98:4c:b0:ed:ac:8b:2b:a2:2e:a3:
42:c7:ff:60:1f:a0:cd:a1:fc:ca:a2:99:a9:35:a4:
aa:98:a7:87:4c:98:42:46:f9:eb:da:ca:9c:5a:32:
7b:bb:88:ca:59:6f:fb:d1:20:92:7e:84:d8:95:14:
a2:61:4e:21:08:84:70:fc:37:81:d2:9c:7c:25:f2:
3a:69:42:ec:cc:d2:e3:a0:4b:26:95:f8:1f:45:16:
42:b2:94:45:a8:f3:52:e5:6b:80:76:4c:16:2b:c0:
d5:b1:f0:8c:67:6c:b5:8e:d0:d5:38:74:88:68:cc:
6f:ae:ac:ce:a3:cb:1a:8c:5e:7f:88:19:50:ac:66:
6a:65:6c:c1:0a:c3:6e:ef:b0:7f:3d:e1:72:ef:51:
3c:eb:d0:1f:a0:78:97:67:b2:39:82:4c:bc:5f:84:
41:dc:2b:47:21:c8:16:49:ce:45:00:4b:96:d1:9b:
a1:36:06:b1:6c:74:94:39:4c:e3:a9:0f:b2:de:f1:
5b:73:f0:7d:ac:e2:e4:71:d8:b0:f4:d9:08:6b:8f:
34:8f:b0:9e:37:d7:c1:9f:29:99:49:86:c8:c0:73:
9c:a3:08:3e:00:29:63:70:35:87:72:bb:50:2e:e2:
75:46:6a:f1:d5:95:bb:da:a5:ae:8f:1d:a1:40:15:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:A8:C9:BE:E0:68:F7:B6:50:34:BD:48:09:3A:B9:83:CA:70:2A
X509v3 Authority Key Identifier:
keyid:35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e9:d1:7b:69:53:79:3b:f9:ba:06:ac:5e:eb:77:8b:2a:3a:
5e:12:6f:1b:cb:dd:75:04:2b:df:59:24:47:ba:10:94:98:33:
12:6a:47:05:25:05:25:99:09:cb:9f:b7:53:51:0f:74:2b:25:
20:48:71:dd:70:6a:49:3d:38:d5:ef:35:41:f6:dd:5b:f4:bf:
ac:ad:6b:2d:6a:26:66:13:7a:27:12:d0:7c:ab:8d:0c:76:f3:
59:c9:b0:14:c9:28:8d:bc:9b:d0:68:1b:41:cf:ba:07:15:f1:
a8:a8:97:8b:d2:b8:0c:ad:74:08:29:b0:8d:d6:74:7b:e0:ee:
51:15:05:ba:17:77:31:11:f5:e5:58:d4:55:c4:4b:c8:55:38:
b4:54:92:07:fd:b9:50:51:73:07:77:45:aa:36:18:f4:c9:54:
3f:a4:b7:74:e7:28:06:bb:72:88:4a:0f:03:cf:06:53:53:76:
31:59:1c:bd:af:4b:1c:8e:d7:0a:7b:ac:a8:3c:68:8c:a7:dc:
16:1a:85:4c:f3:13:34:e4:65:a0:11:17:c8:b8:f1:41:82:81:
a3:b7:0e:8b:18:ff:f5:cd:66:fc:04:29:af:3b:df:00:08:c1:
02:cb:94:08:53:90:2f:7e:af:d1:19:07:35:cc:64:3f:1d:10:
54:b0:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:51:38 2026 by rpki-client