
$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json)
Hash identifier: GnHFvD7Mr0IUzDRmQCSP2B7J9Me97iWg+/F9ld3JqCs=
Subject key identifier: 85:B5:20:98:C6:F3:0F:42:96:DC:B1:CA:EE:03:07:70:46:4B:47:DF
Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B
Certificate serial: 0F301F3F6A8B777A8B0CD5F75833046A26A950EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
Manifest number: 0149
Signing time: Sun 22 Feb 2026 15:08:14 +0000
Manifest this update: Sun 22 Feb 2026 15:03:14 +0000
Manifest next update: Mon 23 Feb 2026 16:52:14 +0000
Files and hashes: 1: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=)
2: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=)
3: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: HSpTGMVyRuJR1ZzfRLnDbXpmqqr5MzUpz7ZPpW9PKyI=)
4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 16:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:30:1f:3f:6a:8b:77:7a:8b:0c:d5:f7:58:33:04:6a:26:a9:50:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B
Validity
Not Before: Feb 22 15:03:14 2026 GMT
Not After : Feb 23 16:52:14 2026 GMT
Subject: CN=85B52098C6F30F4296DCB1CAEE030770464B47DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:90:f4:e5:62:25:23:4a:89:ed:93:13:78:
d9:0f:8a:fb:87:07:93:46:a6:c5:68:47:30:62:2a:
c0:7b:5f:06:de:bf:6b:da:e3:64:68:9d:ca:e0:e5:
86:50:e1:c1:ee:95:a0:0d:f9:c5:3b:ee:ba:27:29:
5e:10:ea:00:af:d9:c6:03:5c:1d:d6:02:95:b0:18:
41:d8:14:5c:12:af:c2:5c:8c:f2:fb:11:d7:5e:fd:
1c:d2:cd:ac:3a:9b:9a:04:2d:86:db:50:af:05:2f:
54:1f:1c:34:a3:85:75:cb:61:5d:8d:02:36:25:eb:
3c:e3:5c:b9:17:b4:55:78:7a:47:25:27:c3:43:98:
12:8d:ee:d4:b3:a7:a2:f7:5a:a1:88:23:e5:e6:cb:
9d:3a:bb:86:b4:17:20:c6:fd:aa:8a:5a:26:51:f4:
64:91:15:ec:99:39:a8:c0:64:a2:fa:4a:c1:81:ee:
e6:a8:db:23:c6:68:be:4b:1c:07:a5:19:6f:73:fb:
37:1d:94:43:5a:49:a3:bd:31:7d:97:4b:45:f2:c7:
0e:fc:c6:66:ad:bf:11:f3:f5:43:00:af:4e:3b:27:
0b:c0:69:b6:50:e1:c0:fa:9f:bf:f3:0a:f5:1a:6b:
59:ba:84:6e:cd:40:4f:f6:03:eb:99:46:07:5f:73:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:20:98:C6:F3:0F:42:96:DC:B1:CA:EE:03:07:70:46:4B:47:DF
X509v3 Authority Key Identifier:
keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:68:51:16:43:87:95:c6:0e:d7:d5:72:64:ad:90:8a:12:c0:
e6:4f:11:47:0b:9c:c9:6d:94:0f:cd:fe:90:d8:dd:6f:a7:b8:
b9:cc:43:6c:d2:e1:b8:3a:38:b4:5c:11:ad:b5:5a:b6:28:fe:
35:fd:08:74:8b:bf:80:f9:73:fb:ba:4b:f9:ba:63:11:c1:75:
c5:52:6e:da:1a:81:d0:e9:6e:28:63:77:46:ed:5b:1b:fe:78:
70:60:1a:0e:f4:1a:f5:3c:2e:89:20:75:e2:3b:fd:4e:b7:23:
b7:8c:f0:18:b3:47:74:4b:92:67:3d:39:47:56:43:74:bd:34:
99:ee:cf:96:d2:a3:55:a9:a2:81:52:6a:a3:c0:f4:43:d6:4b:
54:02:6d:fa:f9:ac:d4:85:14:fc:76:b6:d4:ef:8d:32:da:19:
53:98:0e:23:71:b3:8b:3e:d2:4d:d1:b6:91:e7:02:ac:6a:2d:
9c:6c:16:d5:93:b3:d6:52:bd:19:00:15:59:44:ed:b8:b9:76:
82:0b:c3:45:e2:72:45:5b:d2:c7:b1:56:a1:a2:dc:f9:f2:da:
6d:d0:0d:29:4d:2a:c7:29:72:65:37:d9:f5:37:d2:8c:81:52:
cb:7d:19:e9:93:a5:d6:e7:27:95:de:74:f5:f8:c0:24:bb:3b:
fe:7f:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:20 2026 by rpki-client