
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier: CtEoc8/Koz3aFnuYWKu7lMkHAhwOfQw0pvwypu7Dwxw=
Subject key identifier: BC:51:06:80:C1:EA:60:EA:FE:A2:C5:D5:DD:D0:76:60:ED:E8:9E:86
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial: 66F4639CBBBE31C0CFBCBECB1A325F089183E157
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number: 0279
Signing time: Wed 08 Apr 2026 05:06:59 +0000
Manifest this update: Wed 08 Apr 2026 05:01:59 +0000
Manifest next update: Thu 09 Apr 2026 05:45:59 +0000
Files and hashes: 1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=)
2: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: p7/H+vaj1iVWI1f5LlUQcef4LEytRWouYOuIXCvzVpc=)
3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 05:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f4:63:9c:bb:be:31:c0:cf:bc:be:cb:1a:32:5f:08:91:83:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Validity
Not Before: Apr 8 05:01:59 2026 GMT
Not After : Apr 9 05:45:59 2026 GMT
Subject: CN=BC510680C1EA60EAFEA2C5D5DDD07660EDE89E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:2a:34:e4:65:55:5e:a8:1d:31:b5:c9:76:
56:41:ce:c2:e1:c8:21:6d:3c:e5:e6:b5:98:9e:23:
01:67:f3:f7:53:fe:41:06:70:18:96:10:bb:0b:bb:
e5:33:24:3a:1b:8c:eb:c3:5f:0b:90:94:49:4f:2e:
ab:3f:02:aa:9b:55:f3:2f:22:e0:45:f7:c5:09:a0:
4e:5a:dc:13:e0:f3:dd:e0:d4:8a:32:27:30:3f:15:
75:39:30:ef:d0:90:f6:15:ac:d4:70:05:33:e6:52:
40:59:a0:a9:0b:48:b3:5f:ca:ea:9a:23:7c:29:c1:
fe:34:c4:cf:05:42:8e:7a:c6:c8:94:c3:57:ed:ed:
64:90:ab:52:3b:10:b6:65:9b:d1:8a:74:fa:96:1c:
cc:56:e0:9f:f9:64:8b:fa:14:80:24:bd:a2:6b:91:
bb:3b:ff:0e:08:cb:82:79:29:e2:99:f8:a6:a5:8f:
75:6a:2d:58:df:07:af:e2:22:e3:5a:ab:11:a9:68:
3d:93:94:b1:b6:66:06:83:df:2a:a0:79:c3:91:73:
e3:df:29:1c:7c:45:95:8c:61:54:c0:22:3d:c5:30:
ed:a7:29:19:c8:71:0b:3f:b2:3e:6c:08:f8:97:54:
75:86:24:fb:2c:21:8d:a7:73:1e:1c:65:7f:1f:20:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:06:80:C1:EA:60:EA:FE:A2:C5:D5:DD:D0:76:60:ED:E8:9E:86
X509v3 Authority Key Identifier:
keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:ff:34:97:4c:a9:e0:7e:9a:d1:1d:b1:27:d9:45:d5:e4:
80:df:c9:49:3c:a8:2b:c9:06:c0:a5:45:f2:84:08:82:53:78:
5d:cf:22:eb:e6:f7:73:3d:f1:0e:25:5a:28:05:b9:47:29:05:
50:46:ed:ac:e6:f1:34:0a:6d:cb:d9:f8:73:20:18:93:bc:21:
f2:1f:42:ff:18:db:5b:92:c7:7d:b2:ba:dd:18:ab:f5:3c:de:
dc:5a:da:7e:e1:5c:1b:4a:b1:c2:4d:03:f2:ad:9f:67:b9:9e:
5d:51:13:ae:c2:0b:61:51:3b:f9:6f:01:5e:ef:b7:05:7b:d1:
cd:20:a7:68:0f:ff:7d:9d:1b:3f:3e:d3:dc:28:b2:01:80:12:
fe:8d:b9:ee:aa:8c:cb:9d:64:15:76:61:01:99:67:6a:2f:98:
6b:6f:9f:3a:e4:14:ab:12:b7:9b:07:18:8d:37:d8:04:ba:8a:
d2:99:a0:c4:69:79:14:c6:e6:c2:17:da:4e:d5:81:96:1d:4b:
8e:51:4c:68:ff:49:ec:b7:49:4e:1e:70:0a:c9:e4:15:29:97:
f8:13:81:3b:d4:6c:b9:7d:fb:b7:98:37:90:a6:b9:b0:15:ea:
64:2a:c8:d8:2b:f8:c6:8c:94:32:5a:70:13:ab:0c:47:44:5e:
87:d1:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:49:40 2026 by rpki-client