
$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
File: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft (raw, json)
Hash identifier: Fl3a3DamSuLd9yMKcUdDGKCMW3tdAJ3+koQ8vpuYk3c=
Subject key identifier: 12:7D:97:D8:BE:34:AA:9A:94:27:FD:46:C2:55:3A:B5:BB:C5:34:37
Authority key identifier: 28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F
Certificate issuer: /CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
Certificate serial: 5AF2504EE03E29E195DC1CEDBB5E06B5E93EF6BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
Manifest number: 03D6
Signing time: Tue 07 Apr 2026 23:20:45 +0000
Manifest this update: Tue 07 Apr 2026 23:15:45 +0000
Manifest next update: Thu 09 Apr 2026 02:07:45 +0000
Files and hashes: 1: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl (hash: wZ2QvVTEuBX3GtSwtpggYxsWBboexZT67PH+wXQs3Aw=)
2: 3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa (hash: uFJA11K9DsZG59LUmGLcZHMrhaSsH6EDHRlqpBqdTeY=)
3: 323830343a316331633a3a2f33322d313238203d3e203631363338.roa (hash: VTLyDvTmi6Hrn0S6nW28ns085Cr/31mSReCxTewbpFU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl
rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 02:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f2:50:4e:e0:3e:29:e1:95:dc:1c:ed:bb:5e:06:b5:e9:3e:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
Validity
Not Before: Apr 7 23:15:45 2026 GMT
Not After : Apr 9 02:07:45 2026 GMT
Subject: CN=127D97D8BE34AA9A9427FD46C2553AB5BBC53437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:34:c9:75:66:fe:30:19:e9:13:d0:9f:a6:
ee:ed:cf:cf:a9:35:16:9e:49:32:6b:0c:f6:11:f4:
6f:54:7e:ce:e7:91:9e:85:3e:83:66:22:32:da:97:
8a:e2:42:86:a9:f2:50:08:d9:2d:e0:b6:7f:37:d6:
83:57:b9:5b:95:aa:5d:33:22:8a:34:2a:ab:f7:cb:
a4:c1:f0:13:cb:0e:4c:11:50:a8:6b:6d:0f:0b:11:
79:1b:17:1d:ab:c8:ec:77:c0:fb:09:f1:23:1e:17:
6c:f6:c7:bb:e3:f3:c4:66:2e:fd:cc:c9:b4:f0:25:
95:bd:68:a2:73:1f:5c:a0:35:5c:8b:d8:16:56:74:
60:99:06:dd:0a:f5:b9:d9:a1:69:98:0e:cc:4d:1a:
ab:79:ec:9f:1a:eb:c0:31:e7:6e:fc:da:4f:20:f4:
2f:1b:12:84:52:4a:02:56:e0:7a:ba:b9:81:15:bb:
5e:f0:b3:5c:fe:fe:d2:3c:4d:5e:1b:1d:34:0e:6f:
ab:67:10:e8:57:b7:2a:2c:b2:e0:e7:a9:21:71:78:
19:a4:6d:43:d1:71:83:b1:0f:67:68:48:f9:d4:db:
cf:0f:c2:0d:27:f3:09:b1:b6:d2:9a:89:af:44:63:
fb:ca:b3:dc:65:2e:18:e2:65:d4:89:9c:80:d5:5e:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:97:D8:BE:34:AA:9A:94:27:FD:46:C2:55:3A:B5:BB:C5:34:37
X509v3 Authority Key Identifier:
keyid:28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7c:ea:b0:c5:7c:e0:d7:15:58:08:50:59:ca:e8:86:b8:a1:
4b:df:ad:d9:47:1b:ed:1a:af:cd:1f:ee:2f:d7:53:a8:6b:60:
9f:4a:dd:e7:7d:ff:e1:5d:bd:43:0c:0d:2b:aa:0b:30:cc:99:
72:76:a3:25:e3:ae:dd:0c:d1:2d:9b:67:1e:5d:fd:ef:00:16:
09:55:fc:9b:81:4c:19:df:ba:8e:a7:40:8a:da:09:ee:ec:59:
a7:b6:ee:b4:08:2f:92:67:7d:0a:0f:31:25:02:1b:99:24:af:
5c:dc:7c:be:0e:66:f3:3e:1c:96:17:4a:67:96:51:bc:58:5d:
27:c2:cf:71:df:16:46:ab:39:23:2c:d9:c2:f4:5d:91:b1:1e:
c8:e7:e1:4f:c5:85:d3:ff:3c:0b:fa:f8:a5:d5:c6:74:49:04:
3f:28:44:c6:5b:9c:03:45:51:a4:fd:17:0a:c0:fd:5e:3d:03:
5c:c0:70:70:16:eb:ea:44:3a:2c:14:1a:9a:96:40:5f:d9:1f:
7f:68:03:fd:ea:12:0c:1f:7e:c4:55:92:91:ce:f9:62:b5:87:
66:27:81:e8:0e:5e:47:89:a2:56:5e:7a:df:3a:85:94:fc:d5:
59:2a:dd:4c:52:24:b1:cd:cd:77:e6:6f:f5:fb:93:2a:09:e3:
58:79:ff:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:49:36 2026 by rpki-client