
$ rpki-client -vvvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json)
Hash identifier: jk/GXN8FEegrupa2REDgdv/i/0Wyj29Vo1IhPBM3vFg=
Subject key identifier: 58:C1:0B:97:0E:BA:75:DB:A5:2D:CE:0D:D5:56:70:BC:5E:B0:31:91
Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Certificate serial: 25449A8A6325BD29D22FC5BF815ED440EBB42EC2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
Manifest number: 01EC
Signing time: Mon 24 Aug 2026 19:28:19 +0000
Manifest this update: Mon 24 Aug 2026 19:23:19 +0000
Manifest next update: Tue 25 Aug 2026 22:57:19 +0000
Files and hashes: 1: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: IxHMccrsdSdyFK3lNMQxcnuTVk+maZruMTwC9nvBcuE=)
2: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: dufzx5C/MUIhq0a4kwePlh544fsUMy1r5kATXaxTxo0=)
3: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: +ofBSaFjksYoFmqDhiPdgz7zjSxhH4q1BBCNS7SNk9E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 22:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:44:9a:8a:63:25:bd:29:d2:2f:c5:bf:81:5e:d4:40:eb:b4:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Validity
Not Before: Aug 24 19:23:19 2026 GMT
Not After : Aug 25 22:57:19 2026 GMT
Subject: CN=58C10B970EBA75DBA52DCE0DD55670BC5EB03191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:92:9c:36:3d:58:06:25:a4:06:0c:e8:94:
9d:46:a2:e0:ac:58:6b:81:01:f4:58:12:fa:53:5d:
d8:f6:5d:20:f7:d9:79:66:2d:50:1d:2d:6e:7c:bc:
d1:ae:df:26:86:e0:84:b2:6e:44:a5:50:bb:71:fd:
0a:67:7e:ea:52:18:21:24:90:80:db:14:55:1d:d6:
f2:3f:df:7b:ec:50:e1:c1:ce:aa:e4:c8:49:da:fc:
3d:f2:a8:e0:dd:c1:f9:66:75:70:2c:1d:46:64:84:
11:f5:22:34:01:a6:de:ab:a5:84:85:44:44:b1:4b:
08:59:60:4d:63:0a:a2:12:f2:92:13:68:7e:09:2a:
2c:cb:21:cf:5c:99:c1:f6:40:9a:5a:f9:51:92:6f:
12:d2:c5:ab:02:22:8d:dd:92:c7:6f:f7:eb:4e:b6:
cf:9d:77:b6:20:02:02:31:2a:4a:00:98:64:c5:69:
92:b2:ae:4f:dd:8e:c0:0f:b3:f8:f9:84:27:b4:db:
5e:08:6d:58:68:a2:c8:3a:35:5d:ac:ab:4f:17:90:
9f:08:be:40:f3:e6:f3:75:18:de:e9:62:45:27:74:
5c:62:8e:c1:b6:89:7b:e9:aa:2c:0c:e7:db:c5:c7:
01:4a:06:dc:45:c1:45:68:5b:09:e3:fc:44:b0:4e:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:0B:97:0E:BA:75:DB:A5:2D:CE:0D:D5:56:70:BC:5E:B0:31:91
X509v3 Authority Key Identifier:
keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8c:12:f7:f6:de:aa:e1:30:0b:84:71:d8:49:59:28:62:80:
e3:4f:ed:68:fc:05:e0:f5:34:52:e5:cf:b8:19:60:d8:36:14:
dc:3f:06:77:e9:29:0e:5e:b7:c7:93:8a:fb:97:aa:50:01:a2:
e9:11:24:19:7c:25:b2:df:5e:d9:b8:16:a5:58:a2:04:51:2a:
0b:1f:37:3f:e0:4a:ff:47:e0:da:46:3e:8d:81:f5:6f:55:dd:
a0:86:df:dd:38:09:f7:99:5f:cc:a7:7f:c8:17:c1:bf:6c:aa:
18:46:8c:93:0b:be:08:02:6c:04:67:7d:7d:65:f5:29:3c:96:
67:9c:d7:f5:d0:6d:e9:d3:b4:fa:c3:09:52:a7:79:0a:4e:aa:
85:a8:d6:3d:d4:af:95:ab:94:21:b2:ae:39:01:02:44:c7:0d:
e8:88:e2:8a:48:05:30:b0:75:1f:dd:cf:51:36:8a:69:a7:b1:
40:2a:92:e2:1a:95:64:90:cc:a4:33:7d:34:60:02:20:aa:85:
9a:c8:dd:90:4a:46:fb:19:20:6d:e8:a2:4e:5b:df:90:13:ab:
00:fc:50:fc:3c:c8:4d:27:18:87:d8:53:e2:31:ea:7b:02:04:
b8:7a:ff:cc:a3:f0:f7:29:94:3b:d7:2c:05:24:f1:84:2e:89:
c1:37:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:05:04 2026 by rpki-client