
$ rpki-client -vvf rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
File: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft (raw, json)
Hash identifier: updja5+pEuJclbu3R6SVbI+YLEFtmFwN+Yp5Yv9eh34=
Subject key identifier: 6F:85:35:D7:AD:68:7C:0A:C7:1A:69:27:26:B4:EE:E2:F9:A1:C1:30
Authority key identifier: 1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89
Certificate issuer: /CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889
Certificate serial: 72CC46C81E908B5BB94B98C8302788E1019F985B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
Manifest number: D2
Signing time: Wed 08 Jul 2026 04:45:56 +0000
Manifest this update: Wed 08 Jul 2026 04:40:56 +0000
Manifest next update: Thu 09 Jul 2026 07:31:56 +0000
Files and hashes: 1: 323830343a346233383a3a2f33322d313238203d3e20323637323931.roa (hash: 4n9+0Z63anC+VM9VWNJX02OgNdWS2iW2pYD7o/HJaVw=)
2: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl (hash: 23OZaK0TpYKHvQMLh/UosDkhColax5VMrw4T311mbjE=)
3: 34352e3233332e33362e302f32322d3332203d3e20323637323931.roa (hash: KM+2VaoAciWWLq6WMSLxT0EyCBWagrzP3/WlqQVL/lU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl
rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 07:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cc:46:c8:1e:90:8b:5b:b9:4b:98:c8:30:27:88:e1:01:9f:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889
Validity
Not Before: Jul 8 04:40:56 2026 GMT
Not After : Jul 9 07:31:56 2026 GMT
Subject: CN=6F8535D7AD687C0AC71A692726B4EEE2F9A1C130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:f2:67:2e:0c:db:71:f5:46:64:9a:e6:39:
9f:b2:59:11:65:0e:75:e4:75:a4:c2:58:48:f6:09:
57:d5:08:c8:8c:18:13:d8:90:7b:90:be:7f:f5:eb:
17:94:05:08:27:3e:a3:fb:88:a1:fe:11:98:37:6f:
0b:0e:30:41:e6:04:61:0a:0e:a7:cb:a7:78:0b:fa:
c6:8c:3e:2d:44:9b:f8:75:14:e1:8a:35:35:a3:b0:
c8:80:5b:ff:b8:13:f3:79:ea:87:b4:37:88:5d:94:
a1:44:63:73:ca:c0:07:f6:6d:13:40:28:cb:96:de:
a6:d0:e8:81:8e:10:be:5a:69:68:3d:f8:be:29:c1:
3c:69:03:f2:f1:e0:29:8d:09:a7:ce:b7:c0:5d:76:
fc:28:2d:4f:01:6e:9f:e1:41:5d:c7:c7:04:51:d3:
74:be:1a:fa:55:9a:8c:0a:43:69:3c:41:96:c0:2a:
ef:d5:e5:54:47:67:58:02:7f:1a:02:70:f0:2c:1a:
b6:39:5a:2d:f3:63:4f:56:fc:6b:06:2a:f6:ba:c6:
86:e1:fb:78:06:f7:5f:5b:4b:05:a9:cf:ec:77:a9:
1e:0b:a6:62:4b:2b:ab:79:5b:e4:60:45:e7:b3:31:
b4:52:a6:8a:ca:52:93:7f:0a:28:a3:e3:3c:f3:65:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:35:D7:AD:68:7C:0A:C7:1A:69:27:26:B4:EE:E2:F9:A1:C1:30
X509v3 Authority Key Identifier:
keyid:1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:01:15:ed:17:b2:ba:02:62:2c:cc:23:78:f5:a8:11:a2:d9:
62:1e:1a:e4:17:c2:1d:c8:03:6b:f2:4a:8c:22:8e:32:ca:43:
b7:9e:ea:64:a4:71:5c:3f:c1:0a:ce:27:f3:6a:7d:e4:61:d3:
8d:bf:c5:b8:82:90:d2:b4:d5:79:3b:59:73:a2:e5:d0:9c:af:
b5:cc:7f:8e:cc:22:47:90:ea:ea:3b:8c:a3:9b:05:eb:8a:8f:
04:b6:f9:67:f4:db:99:b9:5d:f0:7a:9c:64:49:14:e5:59:28:
06:c2:a3:00:6d:15:cd:bf:0b:b3:a7:ee:53:0f:f5:54:6f:6b:
7a:dc:db:c3:ee:4a:a6:22:c9:57:5d:5b:38:ea:75:60:3c:9c:
ac:89:62:62:5a:60:b7:9c:73:85:33:8d:e4:1c:58:d4:c7:c3:
a4:7c:db:f4:fe:48:34:2d:bb:dd:1e:6d:c3:6c:b6:d0:c7:7e:
6a:a9:58:7f:a9:c6:4b:8d:20:c2:3e:72:e4:e5:51:2d:68:af:
d0:3a:29:61:ea:51:71:dd:18:ba:a2:45:2f:4a:22:dc:60:ff:
01:50:56:ad:37:93:47:9a:59:60:50:16:7b:c7:72:f4:b2:08:
b8:d3:05:fe:af:c9:36:13:cb:e1:8a:5c:f4:a9:63:52:11:28:
62:a3:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:08:37 2026 by rpki-client