
$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.mft
File: EF945D3089B26045153874D31CF2D92589258BB1.mft (raw, json)
Hash identifier: r5efy4lvXWAizEpUGvL90JBhELWVnTaJt0+o3/OLV5Q=
Subject key identifier: 87:21:58:B3:E1:37:13:39:5F:92:72:93:C0:BC:61:64:EA:85:51:74
Authority key identifier: EF:94:5D:30:89:B2:60:45:15:38:74:D3:1C:F2:D9:25:89:25:8B:B1
Certificate issuer: /CN=EF945D3089B26045153874D31CF2D92589258BB1
Certificate serial: 5692465CB6B0C58FCF98EC6CD83836E885529CC0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.mft
Manifest number: 03CE
Signing time: Tue 07 Apr 2026 17:10:36 +0000
Manifest this update: Tue 07 Apr 2026 17:05:36 +0000
Manifest next update: Wed 08 Apr 2026 20:00:36 +0000
Files and hashes: 1: 323830343a333839633a3a2f33322d3430203d3e20323636343839.roa (hash: mNfJHfOcPaAIBsqOvuWzf8kT6Rv8l+xDBhoic1MMk8Q=)
2: 3137302e3234342e32342e302f32322d3234203d3e20323636343839.roa (hash: buaXyaZKJKppUwY3xGKzzq/a0qKGaEmuxrH2L1whB9k=)
3: EF945D3089B26045153874D31CF2D92589258BB1.crl (hash: kiOC5xeBkeSaqoh3cLAbNDq322gxj2BhNURLCXmeQUs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.crl
rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:92:46:5c:b6:b0:c5:8f:cf:98:ec:6c:d8:38:36:e8:85:52:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF945D3089B26045153874D31CF2D92589258BB1
Validity
Not Before: Apr 7 17:05:36 2026 GMT
Not After : Apr 8 20:00:36 2026 GMT
Subject: CN=872158B3E13713395F927293C0BC6164EA855174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:c7:b1:5d:f5:ae:2b:5c:36:4f:df:af:a3:
7d:88:b3:fa:6b:b4:3e:5c:8b:03:95:69:8e:9f:72:
8d:b3:67:5f:92:17:87:ce:0a:93:7b:eb:29:dc:11:
41:b9:3c:47:e5:8e:80:c5:b9:3a:a9:14:76:90:f6:
78:26:26:2f:14:55:95:5b:5b:8f:c5:6d:de:bd:bf:
e3:39:b0:0d:44:74:75:3c:fd:ca:6f:65:ae:d7:30:
8d:b9:93:4a:db:ff:39:a4:4c:ad:f6:9b:c3:40:41:
0c:a9:49:64:79:4f:e6:d2:ce:49:37:b8:0b:3d:3e:
04:05:70:49:39:f5:0c:9b:e9:65:d3:3f:a5:c4:80:
81:bc:76:b8:a8:27:90:a1:6b:69:57:1d:48:f8:db:
22:c2:20:96:b8:12:ff:9c:5c:30:38:d1:e0:73:31:
0e:0b:a4:14:6c:63:5b:6d:9e:ea:c9:2f:6a:b6:0a:
22:16:9b:0d:67:df:22:2b:80:29:26:92:40:c3:1d:
43:c3:b1:3d:d2:7f:d3:26:2b:4a:bb:74:f8:7d:e2:
08:26:d7:08:1f:d8:03:bd:56:b1:0e:77:db:67:f6:
85:a3:40:b6:42:ff:11:cd:31:ba:49:c0:cb:7e:eb:
b3:10:85:99:16:a7:3a:f2:ec:57:fe:1d:35:fb:bf:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:58:B3:E1:37:13:39:5F:92:72:93:C0:BC:61:64:EA:85:51:74
X509v3 Authority Key Identifier:
keyid:EF:94:5D:30:89:B2:60:45:15:38:74:D3:1C:F2:D9:25:89:25:8B:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:7b:9a:47:96:d1:c3:02:5e:da:1e:b4:2b:c5:c7:80:85:
2b:97:13:48:91:76:c0:5d:be:b9:67:e1:c1:b4:5c:64:5e:dc:
a0:1f:78:d4:09:1d:78:1d:c4:d1:b0:2f:fc:78:66:45:e1:d9:
47:1b:bd:ab:93:70:38:4a:a8:82:f3:6e:83:76:4c:c9:2f:a7:
da:7a:81:97:98:47:93:54:1a:de:4f:82:b3:28:f7:5c:a0:e3:
dc:9f:32:ba:50:16:23:fa:bb:df:e0:e0:41:d4:f3:cf:c5:51:
93:6e:cb:b4:0b:f9:1b:4f:b3:82:c2:c2:de:af:26:e3:75:11:
03:de:9d:3c:10:9a:5d:94:4e:03:d0:62:2d:d6:1e:c8:a3:3f:
1e:24:be:1f:16:d1:1c:86:d4:a5:78:7f:ce:0e:1e:f6:ea:ab:
af:67:2b:e5:bf:5a:87:7e:4b:4c:76:7f:b4:bd:e1:2d:ce:aa:
15:be:75:f5:37:59:e1:78:5f:32:31:5b:90:2b:25:7d:01:25:
b1:15:bf:01:d2:1a:6c:45:8d:9d:02:53:a9:10:8b:19:e6:78:
dd:fc:d2:5d:16:93:c8:ba:23:cb:5e:f1:4b:37:c6:6f:f7:2a:
6a:10:fa:f1:d4:c5:9a:28:cb:62:d0:d1:9e:7a:86:1e:6e:22:
72:86:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:23:31 2026 by rpki-client