
$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
File: CDD7619BD4F71987C247C8670D9064F291B3E36F.mft (raw, json)
Hash identifier: Q8Vb4GqkGQr7vk5qg3Lt3A78Jw9e3A6JVhyHmFNntyQ=
Subject key identifier: 73:32:61:0E:E6:FA:0A:A7:F8:FD:11:F5:BE:6E:D0:D5:94:12:17:A8
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Certificate issuer: /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial: 2F4A9E49E439DAB0A744CD63DBD1CF0DFB66FBF4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
Manifest number: EA
Signing time: Sun 22 Feb 2026 09:58:22 +0000
Manifest this update: Sun 22 Feb 2026 09:53:22 +0000
Manifest next update: Mon 23 Feb 2026 13:08:22 +0000
Files and hashes: 1: 323830343a393537633a3a2f33342d3334203d3e20323734353138.roa (hash: Wc2TzbM6iSZdak9WvaJANTvB62PhLpJCW7LSAbW5tsA=)
2: 34352e362e3131392e302f32342d3234203d3e20323734353138.roa (hash: u49m43X6DK4A6wPfWeHoDfOnrEotXCa0jx043Jsqo6Y=)
3: 323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa (hash: L5n4ex8pE5gfPKDduuMFd0GMuURcKIBeSu7tDIDGTFY=)
4: 323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa (hash: mKtBkzh6XG4sTlhoPWFLc5Pd7DgaZ6VR/rArRM9AyYs=)
5: CDD7619BD4F71987C247C8670D9064F291B3E36F.crl (hash: /vnq+2m2zTmCWqTwFTlIePFHmMMbUBSKGuXDuibgN18=)
6: 323830343a393537633a3a2f33322d3332203d3e20323734353138.roa (hash: g+bfErnC5Q3MshvfTRGFVmz3DrgAhMm+FVSXUSNdGrU=)
7: 323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa (hash: 36hHf/D4ukU8mAlHpeyW/xW6TzW1Wdrh0++mjKsFN7A=)
8: 323830343a393537633a3a2f33332d3333203d3e20323734353138.roa (hash: PF5brDyVR1cmEjB6iFotsFSX3QnhYTrcdVyGy4WP2OY=)
9: 323830343a393537633a633030303a3a2f33342d3334203d3e20323734353138.roa (hash: TVfyxkvcDydRQKBsatQmjUgY75O6YdchTD42+Bc59u4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 13:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4a:9e:49:e4:39:da:b0:a7:44:cd:63:db:d1:cf:0d:fb:66:fb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Validity
Not Before: Feb 22 09:53:22 2026 GMT
Not After : Feb 23 13:08:22 2026 GMT
Subject: CN=7332610EE6FA0AA7F8FD11F5BE6ED0D5941217A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:98:a5:7f:84:28:82:4a:61:4f:aa:f7:91:
93:51:e1:8b:86:3d:42:52:76:a8:5a:07:ff:b5:e6:
ea:4c:88:c4:f2:43:05:7a:36:e4:02:59:d1:f5:a8:
da:07:48:74:7e:1c:ea:84:0b:f3:e7:c0:9c:2b:b9:
66:a8:e8:66:0c:69:5f:f4:71:95:ea:46:85:c9:93:
68:f8:d9:f2:93:f4:2b:85:e0:06:bd:d5:94:bd:9e:
f3:0d:47:de:e2:59:45:c3:00:8c:21:cc:70:dc:03:
ce:70:4e:1f:9c:c9:79:1a:d1:c2:ee:30:05:6b:0f:
a8:fa:1a:ab:ba:26:24:35:3d:b8:eb:9c:0f:39:76:
ff:af:4e:1c:c6:02:10:7e:47:4d:6b:c4:47:07:9a:
c8:8c:bb:1a:a2:69:7a:fb:03:db:82:82:5a:25:be:
3c:0b:e7:60:12:cb:8c:81:a4:3f:6c:81:dc:37:ec:
36:ed:e1:6f:8a:ad:9a:7b:7d:69:f9:60:b2:22:b3:
85:d2:f5:d5:91:87:b6:b9:a5:ae:c6:71:d8:7c:40:
3f:77:d5:79:01:fd:da:e6:5b:56:31:aa:01:54:eb:
16:56:89:22:ae:21:a1:81:59:69:42:bc:d8:82:6b:
3f:8f:03:b2:cf:92:0e:a5:ba:d8:03:dc:eb:45:c4:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:61:0E:E6:FA:0A:A7:F8:FD:11:F5:BE:6E:D0:D5:94:12:17:A8
X509v3 Authority Key Identifier:
keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:56:4f:a7:c9:c6:be:b8:38:fd:f4:c9:75:36:cd:d8:51:
75:18:df:9f:74:f7:55:e3:dc:2c:0f:ab:a5:8e:2d:75:f0:45:
dc:c2:4e:37:13:b1:59:f5:85:f5:37:e5:78:3f:32:e6:60:c9:
55:f5:f5:be:a4:6b:0f:04:2d:5e:2a:0e:20:31:fa:d8:ae:f7:
8b:9f:98:fb:22:96:41:d1:ae:19:1b:6b:87:7b:2c:f8:de:48:
fe:c6:ee:bc:85:ec:83:68:1f:83:e1:74:dd:75:c7:bd:25:15:
69:70:06:59:0d:66:06:83:68:57:f1:71:96:11:a2:13:a8:4e:
99:8b:46:9b:e4:74:95:2f:90:45:5b:bb:67:e6:81:03:cc:88:
8d:ec:24:ad:3e:d5:80:ff:74:3c:8b:c7:45:05:ad:be:3e:36:
49:f0:6f:9d:61:40:00:e5:2b:5d:1d:8e:e9:49:d3:a0:6c:f9:
c2:13:61:e4:1e:ed:09:84:87:1a:f2:a3:4a:b1:c0:18:97:7f:
99:c4:7d:9d:7b:4f:de:be:0e:55:ec:2c:e5:67:16:f3:1a:a2:
16:d3:ff:3c:2c:f5:f9:58:8c:00:eb:2c:bf:a9:c6:6b:c8:66:
7c:83:5a:85:e0:a7:3c:59:74:0f:0e:7f:09:19:ab:dd:d0:ab:
ba:42:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:23 2026 by rpki-client