
$ rpki-client -vvf rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
File: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft (raw, json)
Hash identifier: 9f6ZAbnj/zV1EfsUnFOadlNJe356syEAinBxV39faew=
Subject key identifier: AD:2C:A6:37:7F:8D:EF:98:EA:98:48:EA:E4:68:C9:83:2C:97:A0:1B
Authority key identifier: 1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89
Certificate issuer: /CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889
Certificate serial: 7BF564D5CF1A4C5DCFBA567F7D69EBDF86E148E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
Manifest number: 59
Signing time: Thu 09 Apr 2026 00:20:33 +0000
Manifest this update: Thu 09 Apr 2026 00:15:33 +0000
Manifest next update: Fri 10 Apr 2026 03:42:33 +0000
Files and hashes: 1: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl (hash: eo3o6maThnxYVsvsLXuUSk8Cdtrl76y/Fbm1zlEkkws=)
2: 323830343a346233383a3a2f33322d313238203d3e20323637323931.roa (hash: 4n9+0Z63anC+VM9VWNJX02OgNdWS2iW2pYD7o/HJaVw=)
3: 34352e3233332e33362e302f32322d3332203d3e20323637323931.roa (hash: KM+2VaoAciWWLq6WMSLxT0EyCBWagrzP3/WlqQVL/lU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl
rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 03:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f5:64:d5:cf:1a:4c:5d:cf:ba:56:7f:7d:69:eb:df:86:e1:48:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889
Validity
Not Before: Apr 9 00:15:33 2026 GMT
Not After : Apr 10 03:42:33 2026 GMT
Subject: CN=AD2CA6377F8DEF98EA9848EAE468C9832C97A01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:8b:be:14:76:2e:fb:40:69:52:a1:7b:f0:
3f:92:0b:f4:85:9b:e5:2a:9b:1d:41:2f:7a:9e:47:
9e:ea:f7:09:fb:f1:21:aa:09:42:58:3f:94:f9:99:
e0:4a:9d:1c:2f:40:62:cc:f4:ef:b6:c0:75:b3:08:
7f:f2:11:47:11:56:ef:85:f1:b3:6d:49:02:78:7a:
30:07:f5:99:0e:4c:0b:59:97:aa:07:89:33:f6:67:
63:61:48:de:70:66:28:11:88:a3:bf:eb:df:e7:cb:
1e:05:7d:ef:57:88:b6:47:dd:46:97:33:58:58:09:
bd:75:1c:46:bf:dc:88:c8:af:48:e9:07:b9:6e:e3:
aa:01:08:94:67:1c:71:5a:e3:8b:43:a9:9c:65:30:
82:ed:94:e6:e1:2f:48:7f:4d:9b:11:d2:44:23:c7:
aa:89:53:07:06:9a:15:14:a8:e5:ea:93:ef:98:c1:
81:17:c5:ff:aa:1f:ad:cc:54:22:6f:2f:c4:c5:1f:
0b:a0:05:67:d1:af:0b:30:a3:cf:80:2a:58:0f:d3:
28:10:4c:f9:74:53:8d:f5:9b:38:b9:95:08:9c:ea:
a2:75:11:de:f3:e8:9b:6a:ae:43:74:a3:02:40:d4:
38:be:0b:e1:d6:43:34:4d:6e:bb:79:00:69:b0:34:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:A6:37:7F:8D:EF:98:EA:98:48:EA:E4:68:C9:83:2C:97:A0:1B
X509v3 Authority Key Identifier:
keyid:1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f1:aa:20:46:61:4c:07:08:1a:a2:43:31:fc:34:4a:50:d5:
a7:0a:4a:29:98:d2:0e:e7:db:4e:79:6e:ad:43:f3:32:99:96:
65:69:f7:4d:18:4e:95:35:5a:7e:b9:14:a3:d7:3e:e6:98:f9:
4d:74:14:02:fa:32:ef:f7:ae:b3:99:71:50:ad:c8:dd:00:d1:
f3:fe:bd:af:68:86:52:f0:13:da:aa:ab:42:9f:05:d5:47:7c:
53:67:78:44:7b:e0:17:33:cb:55:25:ad:e2:5f:14:29:4c:4c:
ba:5f:45:6a:7c:92:46:45:81:b7:9e:ef:8c:89:69:db:2c:0d:
e4:a4:60:d8:b8:95:33:f2:3d:22:d7:55:93:31:cb:5f:ad:ac:
2b:e1:a0:76:f5:c9:49:b3:98:37:9b:bc:0d:a7:ab:98:6a:72:
1c:c4:7c:51:3c:a5:5c:01:88:b5:e8:1e:c8:7b:92:13:99:e8:
b8:c7:0d:19:f3:65:62:31:3d:5c:21:0f:5b:f2:68:72:93:da:
3d:bc:62:c7:4c:8c:8e:66:79:46:49:44:03:ef:b1:e9:56:f2:
38:dd:b8:b4:fe:9e:a6:4d:94:b0:3e:fa:f4:84:dd:6f:7a:66:
75:8c:23:5d:c5:33:cc:97:74:92:41:57:4f:28:f0:ea:e8:df:
b2:e4:33:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:59:11 2026 by rpki-client