
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier: h2d5zeep9Tdo4hUpYG/X+hzgT/gL840FpybB2ueVhBs=
Subject key identifier: 93:48:1B:20:01:C2:A7:26:DB:BD:2C:BA:1A:42:25:37:1C:38:C9:EB
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer: /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial: 27D32CC00BBC110C84A8FA67B41F6938C7AE922C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number: 03D0
Signing time: Tue 07 Apr 2026 19:36:55 +0000
Manifest this update: Tue 07 Apr 2026 19:31:55 +0000
Manifest next update: Wed 08 Apr 2026 22:15:55 +0000
Files and hashes: 1: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: bSDVCipNO7c+1o6O5GHztBEGKAJMv2cVHcR+M0oJCuM=)
2: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: C7LlMSOX3EmZTherQ248oTM0k7XqTLQAhZLhl4hPH7E=)
3: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: kDiuJqxM0moizLuVKY/OENxGLx3jlP0sDfgG8k4zVmE=)
4: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: 2NdMAE99KOzHg8W+wgGQ4pPl2zL4bkkneMZ8RkY6y1c=)
5: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: 7loH6gaz7NMzO+IecVd8CM3R0Rfiz81nFGEjeuvZzpo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 22:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:2c:c0:0b:bc:11:0c:84:a8:fa:67:b4:1f:69:38:c7:ae:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Validity
Not Before: Apr 7 19:31:55 2026 GMT
Not After : Apr 8 22:15:55 2026 GMT
Subject: CN=93481B2001C2A726DBBD2CBA1A4225371C38C9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:42:7a:29:f3:76:f2:16:46:f7:c3:30:1e:
3f:90:d1:4d:29:00:09:d3:66:a3:82:3b:b5:49:d0:
35:52:29:4a:bd:93:ec:06:9e:4a:ec:0d:d6:2c:28:
0e:66:64:f4:09:d6:15:6e:36:e0:f4:a7:d7:5c:d3:
65:2d:d6:14:82:89:61:41:fe:a4:f4:01:5f:45:38:
63:67:cb:2d:50:b4:9e:b1:80:86:cd:9c:aa:48:34:
c3:c0:d9:60:82:17:19:bc:47:ac:73:7c:f5:d9:01:
b7:fa:a7:65:de:f1:b5:5f:d2:8e:52:c2:69:88:e3:
84:58:83:91:e2:2b:7e:90:f7:0c:ca:88:23:1a:09:
d0:ed:ad:20:6b:89:b8:5a:8c:51:9a:b3:c6:e4:12:
d8:df:56:f2:ad:a8:48:ee:04:72:1d:3d:1b:1f:61:
1a:69:e7:cc:0b:9d:e6:f6:d9:00:4a:ee:74:41:ba:
a0:12:33:66:2e:48:18:e9:e9:f6:58:e8:bd:c0:fb:
fe:db:0e:66:10:1d:a7:a7:4c:bb:cb:86:1f:a7:d9:
f0:90:71:0d:3c:34:61:3e:cf:8b:4a:b0:17:6b:9c:
3d:ca:f2:7c:cc:7b:2e:b6:a9:8a:f4:62:70:1e:23:
dd:d2:78:6a:a8:f6:99:02:8f:85:e2:e9:35:64:6d:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:1B:20:01:C2:A7:26:DB:BD:2C:BA:1A:42:25:37:1C:38:C9:EB
X509v3 Authority Key Identifier:
keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:03:50:c4:c3:b0:73:53:29:cc:20:83:23:00:e1:f1:f4:d8:
aa:73:dc:7c:32:a1:4a:e3:7f:7f:b7:2d:94:72:5d:99:04:ba:
21:15:c9:50:dc:70:53:14:b4:aa:d1:1c:88:53:31:15:85:e4:
ed:cb:e6:b2:37:b9:72:90:2d:8d:49:17:10:ff:d6:18:d3:20:
56:11:b5:7f:e9:d7:c8:71:25:23:dd:ee:64:fe:be:b4:ad:ec:
e7:c4:ce:39:9c:38:4c:c3:be:ac:6a:68:3a:7f:1a:33:b5:ea:
48:30:b5:a9:08:bd:d4:48:87:66:55:fd:1e:08:23:77:04:e7:
13:d3:5d:75:2b:43:92:23:d7:12:14:d6:3d:5c:63:dd:e3:10:
c2:f0:c9:ee:1d:e9:73:67:64:bd:a9:e2:2a:19:9f:b5:20:f8:
e9:63:d2:6f:10:40:c0:6f:02:f6:1a:a6:35:36:8d:f6:f0:20:
ee:d3:af:a6:c3:22:4f:c7:89:94:1d:68:42:6f:cc:bd:5d:00:
5c:44:dd:30:6a:fd:bb:cc:a5:8b:d8:25:9a:0f:26:04:26:35:
c6:48:93:13:e0:88:35:c9:1c:e5:0c:4f:e0:aa:54:50:79:b4:
75:de:e6:81:3b:e0:ae:29:e3:ea:10:9a:85:43:d9:b6:3c:de:
df:47:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:46:01 2026 by rpki-client