
$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
File: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft (raw, json)
Hash identifier: tMBwRnu644d/XrJ76PPmj2Yb5ZEUa/xkP/ECV0HtMBE=
Subject key identifier: F5:4C:50:B0:00:D5:74:45:FB:F8:BD:FB:86:9F:FF:95:76:A2:EC:A3
Authority key identifier: D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB
Certificate issuer: /CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
Certificate serial: 7E835DEA5B7ADC0841BB3A7D0A91729428A29C2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
Manifest number: 01B7
Signing time: Wed 08 Apr 2026 13:30:42 +0000
Manifest this update: Wed 08 Apr 2026 13:25:42 +0000
Manifest next update: Thu 09 Apr 2026 17:23:42 +0000
Files and hashes: 1: AS28343.roa (hash: 38oCwk7agpN74oJb3YDJeiQoYXWYFqwuFuOq7AnXNJI=)
2: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl (hash: h5JB26rC7ayN0sSA8nspR1sye9Y2mtzmCBEgSdANnrM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl
rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 17:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:83:5d:ea:5b:7a:dc:08:41:bb:3a:7d:0a:91:72:94:28:a2:9c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
Validity
Not Before: Apr 8 13:25:42 2026 GMT
Not After : Apr 9 17:23:42 2026 GMT
Subject: CN=F54C50B000D57445FBF8BDFB869FFF9576A2ECA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:68:d3:f7:c7:42:9c:5a:b5:44:65:8f:09:
49:d1:64:66:a4:ca:36:85:1f:66:40:8d:eb:d7:87:
16:d3:98:44:2b:96:42:fe:98:7c:13:15:82:96:25:
7b:20:da:15:48:b8:c6:e7:bd:e5:3b:93:90:2f:a2:
b5:25:11:35:6e:2d:f0:db:ba:cc:8d:1a:bc:bd:9f:
75:b5:1b:fe:5c:25:76:59:65:6a:27:d7:2c:bf:49:
e5:a3:d2:04:ce:04:7b:4a:4e:e3:29:d7:98:b1:94:
b9:3b:9e:58:27:18:e4:40:37:cc:ea:62:b0:78:cd:
9d:52:a2:be:8b:59:08:28:d6:d6:fa:d6:d3:52:94:
16:ba:1b:a1:ab:11:db:9b:a7:ac:95:3d:47:4d:c4:
e9:96:fd:c5:04:c6:97:86:3b:ad:76:c0:46:b5:05:
7d:48:8a:c3:11:61:09:41:fa:f3:46:49:7a:eb:7e:
b8:8d:87:1a:26:63:08:00:80:ee:45:82:86:4f:2d:
69:9b:b4:e7:f5:67:86:61:ee:d3:0b:01:49:b0:c7:
1a:7a:c5:95:b8:fb:78:2b:09:8a:80:1f:36:5d:fc:
f9:11:c0:16:7b:2e:36:a9:4f:8d:a7:74:f3:2b:ff:
a2:5f:0d:74:e5:ee:73:3b:88:c1:a5:01:c3:7c:f4:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4C:50:B0:00:D5:74:45:FB:F8:BD:FB:86:9F:FF:95:76:A2:EC:A3
X509v3 Authority Key Identifier:
keyid:D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:86:3e:c6:77:80:1f:c4:c7:41:7f:07:c9:69:02:1d:0c:c7:
41:35:17:eb:5b:d1:95:d1:b3:07:61:19:00:da:40:d6:7a:1d:
14:38:12:d6:85:5c:a7:9e:a9:54:a4:c2:36:6e:23:1e:45:f2:
ed:61:21:49:e0:fa:4e:63:73:e0:51:51:f0:32:81:0d:1c:5e:
5e:5a:3c:f2:75:fd:98:ba:f7:2f:cf:fd:f5:13:1c:3f:37:bb:
12:e2:cd:7a:8b:f9:fd:f5:af:48:67:94:db:d8:ad:78:4e:51:
5e:c2:4b:fd:c5:70:37:33:fb:18:88:98:ab:ab:b7:77:38:ba:
c3:cb:cf:e8:ed:d2:a2:73:e8:4e:1b:a4:c5:63:54:41:a1:34:
c8:cc:59:56:70:4c:d7:2a:aa:d4:fd:e4:4b:91:36:d5:f3:ec:
42:40:08:32:49:06:c8:ec:19:00:db:54:09:fd:a9:eb:78:57:
74:1e:21:69:0b:f8:ed:a6:18:50:21:ff:d3:24:b9:98:3c:61:
63:ae:32:a7:d5:92:87:55:c3:49:c3:3a:1f:a4:1f:19:0b:6b:
23:ef:41:c1:8a:f1:54:8e:c3:09:50:1d:09:27:f2:ae:e0:8c:
0c:a7:ff:6f:f3:b5:90:bf:af:c6:0d:b0:2b:ec:e7:ae:68:a6:
93:ce:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 00:27:13 2026 by rpki-client